This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: /gf2fmxUlIc14ovm01k6fWRqHxWNcic3T9GKqbrzje4= Subject key identifier: 59:A1:D2:A5:51:A1:E7:C5:5C:A4:C0:C8:E3:D5:32:EB:2A:2B:6F:09 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 0D2CB9213D321F25C0154A6159A436803FE78501 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01F6 Signing time: Sun 25 Jan 2026 18:51:26 +0000 Manifest this update: Sun 25 Jan 2026 18:46:26 +0000 Manifest next update: Wed 28 Jan 2026 22:53:26 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) 2: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 5: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: OYXNmlzyL/91W4cuDYXDaCEm6L00bC8zPCkclTU2dyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2c:b9:21:3d:32:1f:25:c0:15:4a:61:59:a4:36:80:3f:e7:85:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Jan 25 18:46:26 2026 GMT Not After : Jan 28 22:53:26 2026 GMT Subject: CN=59A1D2A551A1E7C55CA4C0C8E3D532EB2A2B6F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b5:e7:b2:f3:f2:b9:21:b8:ec:3a:ce:cc:6e: 6d:07:b8:d8:83:43:c4:7e:af:66:1f:0c:9b:f5:8f: 2b:c2:83:b0:37:99:56:b3:30:48:51:f3:75:ef:34: be:0c:cc:80:40:24:f3:a2:ac:64:c8:54:ba:e9:41: 8f:5c:25:f3:de:8c:06:ca:20:e5:a5:55:3b:f3:9e: c8:db:2b:20:65:92:de:a7:60:73:fd:e2:63:60:1e: c8:19:e4:29:fb:4b:b3:e5:27:88:8d:74:8f:40:8d: fb:d0:6b:65:c7:83:2e:ae:69:69:85:53:5d:0f:1a: a1:cd:6a:7e:48:4f:12:2a:42:7b:93:44:b3:5c:93: ea:7f:32:9b:c1:1d:bd:f4:3e:2c:b9:16:78:e5:f4: 2c:a9:df:03:e3:e0:99:fc:a8:4f:fc:c2:72:f9:ef: ca:6e:d3:7c:8a:68:82:f1:6b:5a:dc:df:a8:ce:ad: 6d:88:93:ad:9a:fe:f9:c7:e8:5f:04:6d:e7:4c:75: f0:bc:d0:ea:93:c7:f7:1b:ad:c0:b7:4f:62:d8:63: 16:b6:15:d3:96:40:01:90:db:50:58:99:a0:d1:be: d1:fb:0f:f5:f9:b6:81:66:a6:b9:1c:44:1f:5a:70: 10:fd:9a:52:87:6d:92:40:b3:2b:b1:dd:e5:9f:d5: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A1:D2:A5:51:A1:E7:C5:5C:A4:C0:C8:E3:D5:32:EB:2A:2B:6F:09 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:91:01:d0:ac:d1:71:30:ec:fa:2d:dd:b8:5e:db:4b:44:68: 34:4c:c7:04:eb:fb:b8:c3:72:28:1b:86:b9:d1:69:9a:0f:e8: de:4c:26:99:9b:dc:ed:a9:a3:d2:2a:2c:6e:be:bb:53:cb:cb: 35:ec:ca:7e:a3:9d:3a:6d:53:32:30:5c:71:b8:a1:0e:f9:a6: 87:6e:de:94:d2:8b:75:96:69:d5:d0:b5:14:0c:d7:91:8e:cf: 6a:26:b4:1b:84:99:94:da:b0:2f:6e:4a:5a:03:c2:04:54:4e: 05:58:4e:5a:d9:2e:81:bc:c9:44:1a:67:59:52:5d:29:7b:a5: 50:11:69:43:b3:97:5c:a7:d2:c9:37:07:da:47:37:03:ff:e1: c8:9f:6c:d5:52:a4:1a:c7:8e:2a:01:93:c4:6b:5e:cb:8a:4e: e0:76:71:9d:d3:72:42:90:eb:c2:92:8d:c0:f2:f5:fc:46:2b: ee:6a:6a:38:53:ad:86:0b:06:76:9c:f7:f4:cb:d3:e5:b4:8f: 05:69:57:1b:29:73:40:8f:07:c1:b7:0e:11:1d:bb:82:f2:db: b5:95:43:ea:ea:b8:f3:b7:b5:87:ad:0b:f2:c8:39:3e:f2:f2: 65:de:7c:69:f5:f6:28:68:2c:d7:82:21:22:b3:14:77:d1:1a: 77:cc:6e:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSy5IT0yHyXAFUphWaQ2gD/nhQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNjAxMjUxODQ2MjZaFw0yNjAxMjgyMjUzMjZaMDMxMTAvBgNV BAMTKDU5QTFEMkE1NTFBMUU3QzU1Q0E0QzBDOEUzRDUzMkVCMkEyQjZGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPteey8/K5IbjsOs7Mbm0HuNiD Q8R+r2YfDJv1jyvCg7A3mVazMEhR83XvNL4MzIBAJPOirGTIVLrpQY9cJfPejAbK IOWlVTvznsjbKyBlkt6nYHP94mNgHsgZ5Cn7S7PlJ4iNdI9AjfvQa2XHgy6uaWmF U10PGqHNan5ITxIqQnuTRLNck+p/MpvBHb30Piy5Fnjl9Cyp3wPj4Jn8qE/8wnL5 78pu03yKaILxa1rc36jOrW2Ik62a/vnH6F8EbedMdfC80OqTx/cbrcC3T2LYYxa2 FdOWQAGQ21BYmaDRvtH7D/X5toFmprkcRB9acBD9mlKHbZJAsyux3eWf1e2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWaHSpVGh58VcpMDI49Uy6yorbwkwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaRAdCs0XEw7Pot3bhe20tEaDRMxwTr+7jD cigbhrnRaZoP6N5MJpmb3O2po9IqLG6+u1PLyzXsyn6jnTptUzIwXHG4oQ75podu 3pTSi3WWadXQtRQM15GOz2omtBuEmZTasC9uSloDwgRUTgVYTlrZLoG8yUQaZ1lS XSl7pVARaUOzl1yn0sk3B9pHNwP/4cifbNVSpBrHjioBk8RrXsuKTuB2cZ3TckKQ 68KSjcDy9fxGK+5qajhTrYYLBnac9/TL0+W0jwVpVxspc0CPB8G3DhEdu4Ly27WV Q+rquPO3tYetC/LIOT7y8mXefGn19ihoLNeCISKzFHfRGnfMbg8= -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:07 2026 by rpki-client