This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: JEEEZh8uqqRCTk/H+KvgGQTUrUtguFKy1RKzAtOdZ1k= Subject key identifier: 20:9D:DC:13:63:55:54:CA:BD:A5:8E:83:EA:7B:44:13:B9:9D:F4:E7 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 0604017B6052B80ED5D29B0F670A23A548D02BD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 0216 Signing time: Sun 25 Jan 2026 02:12:35 +0000 Manifest this update: Sun 25 Jan 2026 02:07:35 +0000 Manifest next update: Wed 28 Jan 2026 12:52:35 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: CGo2QeSLvVYIpIW07iIDBwKUXQOE2ie6O77sM854qvk=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:04:01:7b:60:52:b8:0e:d5:d2:9b:0f:67:0a:23:a5:48:d0:2b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Jan 25 02:07:35 2026 GMT Not After : Jan 28 12:52:35 2026 GMT Subject: CN=209DDC13635554CABDA58E83EA7B4413B99DF4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:64:11:de:1d:f3:01:67:f4:59:b9:2d:57: 35:11:d8:1c:0a:20:f7:10:8a:c6:d6:24:c4:0a:f9: f3:84:23:3d:ca:07:b1:01:de:20:0c:ff:16:08:59: e7:d4:1e:a6:1d:1c:4b:5e:73:89:f1:6c:ed:c7:c0: 01:e7:37:75:08:a6:03:d6:94:0b:94:4e:18:dd:a6: 8f:c7:4f:7f:62:05:20:af:f3:8a:d4:f6:f6:a1:dd: a6:2c:df:f0:55:b0:a4:36:ac:8a:3b:a2:46:29:9a: 9b:c8:ec:82:1b:31:7c:64:5e:72:90:4e:28:49:b4: 3e:3a:78:ba:f0:ca:a2:f9:42:1d:93:0d:e7:c8:37: 34:fe:d0:05:b1:91:36:72:45:0f:66:94:26:1d:54: 4f:46:01:04:ad:83:8c:e0:11:cf:36:ac:2a:f7:0d: ed:7a:c5:a7:6d:b5:54:62:05:0d:95:fb:e4:6d:10: 0a:e4:30:13:df:b5:5e:bd:7c:02:7b:73:64:15:81: ba:00:b2:2f:e7:61:49:0b:49:e9:d6:19:3c:f8:3f: 7a:19:63:18:64:61:88:e1:1b:2d:d9:45:67:9b:89: 1f:de:3c:56:45:ac:ba:85:e9:8d:7b:8c:2c:41:18: 38:cc:8a:a3:71:3b:ff:ea:bd:63:a4:cb:ed:b8:fb: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:DC:13:63:55:54:CA:BD:A5:8E:83:EA:7B:44:13:B9:9D:F4:E7 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6c:dc:1e:14:95:08:31:78:aa:8e:95:da:b7:e7:e7:e8:b2: e8:e6:7a:05:67:34:ef:d8:91:e0:60:2c:47:12:30:77:16:79: 9e:b8:a7:9d:98:98:96:9d:d9:e3:f0:b8:1e:dc:4e:fd:57:e5: 31:3c:84:62:09:ae:57:6c:ca:01:b4:5e:e5:0b:dc:1d:e1:40: 2b:c8:db:2d:d8:19:52:16:b8:71:1c:cb:8b:5f:5b:93:a4:4b: a2:cc:aa:e7:a2:65:15:77:6d:69:30:d0:6f:93:66:ec:ce:1b: 1e:a7:7f:27:91:da:a7:c2:e5:90:8e:09:00:80:12:bb:4b:b7: 08:ed:e9:59:9e:4a:85:cc:0d:75:39:d5:33:ab:2f:14:ea:db: 44:52:01:5f:7a:b1:4f:ea:a9:90:70:44:e0:aa:cc:28:af:81: 97:23:7c:78:ee:f3:dd:5c:a6:a5:26:5b:86:7c:a0:02:16:0a: 45:41:3a:ea:42:f8:f6:9f:7b:55:0b:c2:fa:f0:c0:41:d6:41: 4e:47:5b:91:8a:2c:62:f8:14:a8:e7:14:75:c0:fe:f8:50:90: 77:f0:25:80:3d:1d:53:0e:29:c1:c3:ca:b8:ad:fa:1e:e1:20: ad:3a:ad:77:f2:ce:a2:ff:44:44:b1:6b:5e:70:68:0f:21:46: c7:0f:be:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgQBe2BSuA7V0psPZwojpUjQK9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNjAxMjUwMjA3MzVaFw0yNjAxMjgxMjUyMzVaMDMxMTAvBgNV BAMTKDIwOUREQzEzNjM1NTU0Q0FCREE1OEU4M0VBN0I0NDEzQjk5REY0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOWQR3h3zAWf0WbktVzUR2BwK IPcQisbWJMQK+fOEIz3KB7EB3iAM/xYIWefUHqYdHEtec4nxbO3HwAHnN3UIpgPW lAuUThjdpo/HT39iBSCv84rU9vah3aYs3/BVsKQ2rIo7okYpmpvI7IIbMXxkXnKQ TihJtD46eLrwyqL5Qh2TDefINzT+0AWxkTZyRQ9mlCYdVE9GAQStg4zgEc82rCr3 De16xadttVRiBQ2V++RtEArkMBPftV69fAJ7c2QVgboAsi/nYUkLSenWGTz4P3oZ YxhkYYjhGy3ZRWebiR/ePFZFrLqF6Y17jCxBGDjMiqNxO//qvWOky+24+8GlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJ3cE2NVVMq9pY6D6ntEE7md9OcwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJs3B4UlQgxeKqOldq35+fosujmegVnNO/Y keBgLEcSMHcWeZ64p52YmJad2ePwuB7cTv1X5TE8hGIJrldsygG0XuUL3B3hQCvI 2y3YGVIWuHEcy4tfW5OkS6LMqueiZRV3bWkw0G+TZuzOGx6nfyeR2qfC5ZCOCQCA ErtLtwjt6VmeSoXMDXU51TOrLxTq20RSAV96sU/qqZBwROCqzCivgZcjfHju891c pqUmW4Z8oAIWCkVBOupC+Pafe1ULwvrwwEHWQU5HW5GKLGL4FKjnFHXA/vhQkHfw JYA9HVMOKcHDyrit+h7hIK06rXfyzqL/RESxa15waA8hRscPvn8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:18:07 2026 by rpki-client