This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: Pl/QTQWtP/2jcgMLK4rqjIXmtUGHESRPluEJXro3AXc= Subject key identifier: EC:BB:C9:DF:70:16:EF:0F:C8:CA:7B:39:2A:98:40:1D:BC:50:F8:F2 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 52DA968037831217169D97C290DDC22A23B82677 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 0156 Signing time: Fri 23 Jan 2026 20:10:00 +0000 Manifest this update: Fri 23 Jan 2026 20:05:00 +0000 Manifest next update: Tue 27 Jan 2026 08:05:00 +0000 Files and hashes: 1: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: lL/e24dVg9Hy+lCRswubNYIC0OGhp3oac5kFsqWnEd8=) 2: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:da:96:80:37:83:12:17:16:9d:97:c2:90:dd:c2:2a:23:b8:26:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Jan 23 20:05:00 2026 GMT Not After : Jan 27 08:05:00 2026 GMT Subject: CN=ECBBC9DF7016EF0FC8CA7B392A98401DBC50F8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:6f:60:bb:70:9c:1e:4e:3e:1d:a3:cf:1f: 42:7b:b2:84:08:95:8e:05:94:80:72:a8:33:16:d1: 53:a5:df:69:68:94:2e:a2:5e:aa:cc:51:f7:2c:ae: 53:ca:af:f1:fc:cf:52:74:80:4d:52:17:7a:27:96: 97:8f:12:23:ea:32:74:bb:cf:dc:2e:54:3d:fb:bb: f0:c2:5f:89:fb:f1:58:2e:5b:60:44:dd:7b:24:59: d2:33:4a:ec:e6:e8:6b:b0:01:04:f0:53:05:f6:76: ca:f3:e9:31:8d:02:28:3d:17:b0:36:23:78:1a:a4: ac:ec:69:29:54:1c:fc:27:6a:e8:af:a8:cb:1a:d1: 94:0b:c1:b9:43:8e:fe:0b:c6:3b:c1:88:04:7e:8d: 75:79:d0:5e:d4:6b:d6:6e:3f:34:c8:12:02:ab:c5: b7:e6:b1:55:89:37:3e:5a:b5:05:b2:22:b2:64:45: fd:e7:81:72:b9:7a:d3:c5:28:21:25:70:8f:1b:b4: 8b:1d:30:c5:c7:76:c6:04:98:ef:01:91:2c:58:50: ad:cf:79:e8:76:b7:d4:7f:37:f9:6c:37:ae:42:e6: e5:f4:2b:d3:98:5a:52:dd:6b:23:6f:f6:cd:34:68: 62:cb:6f:bf:a2:68:04:e5:b9:03:98:52:85:2b:cf: 70:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BB:C9:DF:70:16:EF:0F:C8:CA:7B:39:2A:98:40:1D:BC:50:F8:F2 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:d7:46:e7:77:be:bb:b1:9b:a9:cb:4c:27:79:6f:fb:2e: 7a:5e:e7:9f:03:e3:e0:4a:fe:07:0f:d0:10:3c:01:6e:f1:07: 7a:b2:cb:e8:25:d9:d9:99:1b:52:1a:cb:74:65:fa:42:40:b0: b8:dd:1f:e3:58:3b:70:a7:b0:ae:03:bf:06:61:32:fb:9a:23: aa:6c:6a:99:21:8c:8b:32:b8:56:21:1d:05:2a:8c:a2:96:a7: de:cb:78:35:fe:6e:9e:10:7a:24:05:70:75:b0:6b:dc:d0:1d: e1:57:63:cf:98:cf:7a:af:6e:ea:48:f3:17:66:f3:b3:f4:57: fc:19:89:34:6a:8d:e2:b8:ce:8d:d1:06:e3:14:d0:67:bb:06: 69:b6:74:f7:b3:1e:d2:6a:36:4c:e2:c0:e5:1d:54:08:75:76: cb:05:0e:7f:d5:6b:59:66:91:49:f6:7f:f6:b3:44:cc:ba:61: de:64:80:81:61:4a:73:28:52:41:e1:e8:4b:35:80:c8:9a:f0: fe:05:b7:91:4b:46:5b:8e:cd:d3:9b:60:af:10:41:05:56:5d: b6:9b:68:13:6b:0e:d4:4d:4b:3b:66:2e:bc:0e:09:ad:95:c1: 9e:bd:59:43:a7:f6:8b:59:0e:ef:20:db:3c:04:e7:da:18:80: 2b:61:b6:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtqWgDeDEhcWnZfCkN3CKiO4JncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNjAxMjMyMDA1MDBaFw0yNjAxMjcwODA1MDBaMDMxMTAvBgNV BAMTKEVDQkJDOURGNzAxNkVGMEZDOENBN0IzOTJBOTg0MDFEQkM1MEY4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dm9gu3CcHk4+HaPPH0J7soQI lY4FlIByqDMW0VOl32lolC6iXqrMUfcsrlPKr/H8z1J0gE1SF3onlpePEiPqMnS7 z9wuVD37u/DCX4n78VguW2BE3XskWdIzSuzm6GuwAQTwUwX2dsrz6TGNAig9F7A2 I3gapKzsaSlUHPwnauivqMsa0ZQLwblDjv4LxjvBiAR+jXV50F7Ua9ZuPzTIEgKr xbfmsVWJNz5atQWyIrJkRf3ngXK5etPFKCElcI8btIsdMMXHdsYEmO8BkSxYUK3P eeh2t9R/N/lsN65C5uX0K9OYWlLdayNv9s00aGLLb7+iaATluQOYUoUrz3DrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LvJ33AW7w/Iyns5KphAHbxQ+PIwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdo10bnd767sZupy0wneW/7Lnpe558D4+BK /gcP0BA8AW7xB3qyy+gl2dmZG1Iay3Rl+kJAsLjdH+NYO3CnsK4DvwZhMvuaI6ps apkhjIsyuFYhHQUqjKKWp97LeDX+bp4QeiQFcHWwa9zQHeFXY8+Yz3qvbupI8xdm 87P0V/wZiTRqjeK4zo3RBuMU0Ge7Bmm2dPezHtJqNkziwOUdVAh1dssFDn/Va1lm kUn2f/azRMy6Yd5kgIFhSnMoUkHh6Es1gMia8P4Ft5FLRluOzdObYK8QQQVWXbab aBNrDtRNSztmLrwOCa2VwZ69WUOn9otZDu8g2zwE59oYgCthtp4= -----END CERTIFICATE-----Generated at Mon Jan 26 04:03:45 2026 by rpki-client