This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft File: 1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json) Hash identifier: YMPFW9VWRYFnsZf278mLygAtAkEg9d5/+Qf8LOVA3ns= Subject key identifier: 72:54:E2:48:82:3C:3D:69:6F:F3:EA:00:51:E9:74:8E:25:3E:D2:48 Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D Certificate issuer: /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Certificate serial: 2F50A6D7AE7E8254920A8184CA22FC004176EC51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft Manifest number: 0544 Signing time: Sun 25 Jan 2026 12:02:08 +0000 Manifest this update: Sun 25 Jan 2026 11:57:08 +0000 Manifest next update: Wed 28 Jan 2026 19:15:08 +0000 Files and hashes: 1: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: q1jYn7Xb50WmP2uCHt9tAsO6LxmkwzEXjSuX+S7nEvI=) 2: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: jaMeHeY1slcLOtoPKp4fzdWb7muIxoixDfF2/PT8Prg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:50:a6:d7:ae:7e:82:54:92:0a:81:84:ca:22:fc:00:41:76:ec:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D Validity Not Before: Jan 25 11:57:08 2026 GMT Not After : Jan 28 19:15:08 2026 GMT Subject: CN=7254E248823C3D696FF3EA0051E9748E253ED248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:1c:57:7b:f2:00:7c:55:58:0a:ef:79:0b: d5:f1:21:96:5a:fc:75:ab:b5:c8:6d:73:b8:54:cc: c0:4c:5b:37:3c:26:8d:41:1a:00:70:bb:68:6b:24: b8:bf:cc:9f:7d:db:f2:49:78:d5:cf:31:d2:ab:46: 6d:cd:6f:2e:91:6e:50:2d:c5:94:03:b5:f5:be:3d: 02:a9:ae:49:b1:53:d6:14:ea:bb:40:43:de:5d:b9: 2f:fd:54:f3:ec:46:cc:0c:68:69:77:62:3e:72:b0: fe:9f:c2:3f:5a:df:ff:5c:2d:32:b5:a0:41:2e:f0: 4e:fe:d0:f3:63:7b:71:d3:e4:64:77:37:fd:51:74: 9b:5f:5b:bf:6b:5e:24:69:23:5b:18:47:f2:77:67: a6:61:53:5e:e8:97:e9:3d:b2:90:7f:71:13:34:6b: 87:02:2a:66:4a:5b:95:c0:28:24:1b:86:33:7b:bd: 4e:64:b1:18:ae:9a:b5:e5:68:5c:f1:0c:f1:9c:41: 53:bb:f5:51:5a:7f:53:f8:92:b8:44:8c:63:7e:27: 7c:9d:c2:e2:ae:24:bb:14:04:8d:b4:aa:a4:96:5e: 60:da:e6:c7:b5:cb:a0:1e:7e:33:89:85:90:b0:9b: 18:69:ac:68:bd:8b:8a:fa:fc:f3:f2:48:a0:21:24: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:E2:48:82:3C:3D:69:6F:F3:EA:00:51:E9:74:8E:25:3E:D2:48 X509v3 Authority Key Identifier: keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cf:1f:88:57:4f:4f:c7:9e:72:f7:a6:30:fc:42:ba:7f:b6: 0b:c8:32:40:a6:69:5b:a1:50:fb:2e:73:b9:fb:17:eb:4a:0d: 2c:c4:f4:bb:72:c5:9b:99:b6:ca:03:ca:f4:5d:17:fa:28:90: 9b:04:8a:52:9e:fa:6b:f1:f4:9f:b3:e2:f4:37:2f:06:82:de: cd:bb:77:51:75:e5:24:5e:6e:df:ad:9c:c2:80:bd:bb:5c:06: f5:14:10:c0:f7:e5:49:c0:19:8e:26:83:fb:26:ab:da:c2:b5: aa:15:15:5c:58:19:06:04:ec:28:34:d0:18:eb:dc:14:f7:bb: c7:40:43:dd:92:48:ba:85:26:ce:54:7c:b6:7d:59:99:6e:fe: 0e:00:a0:c5:28:28:5a:aa:de:14:a0:ae:28:66:09:2e:23:26: 26:a4:a9:dd:8d:61:db:d4:4f:d8:02:2e:9b:7d:9d:60:93:94: 24:13:e7:fc:fc:e5:76:a1:25:c6:59:46:ec:e0:0f:2f:5c:1f: 24:e6:25:5f:54:7c:d5:f5:0b:f3:dd:1a:9c:28:90:9a:21:69: d8:4c:24:fc:ca:e8:4e:f4:a9:7e:ea:1d:ee:76:10:4e:85:ab: b8:9e:33:eb:d8:a1:33:ca:8e:39:31:33:72:2a:76:ab:0c:0a: 77:7a:29:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1Cm165+glSSCoGEyiL8AEF27FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1 MDQyNDQ2RDAeFw0yNjAxMjUxMTU3MDhaFw0yNjAxMjgxOTE1MDhaMDMxMTAvBgNV BAMTKDcyNTRFMjQ4ODIzQzNENjk2RkYzRUEwMDUxRTk3NDhFMjUzRUQyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22xxXe/IAfFVYCu95C9XxIZZa /HWrtchtc7hUzMBMWzc8Jo1BGgBwu2hrJLi/zJ992/JJeNXPMdKrRm3Nby6RblAt xZQDtfW+PQKprkmxU9YU6rtAQ95duS/9VPPsRswMaGl3Yj5ysP6fwj9a3/9cLTK1 oEEu8E7+0PNje3HT5GR3N/1RdJtfW79rXiRpI1sYR/J3Z6ZhU17ol+k9spB/cRM0 a4cCKmZKW5XAKCQbhjN7vU5ksRiumrXlaFzxDPGcQVO79VFaf1P4krhEjGN+J3yd wuKuJLsUBI20qqSWXmDa5se1y6AefjOJhZCwmxhprGi9i4r6/PPySKAhJBtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUclTiSII8PWlv8+oAUel0jiU+0kgwHwYDVR0j BBgwFoAUGg/EaVRm8ANP3HvTXZe/k1BCRG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODdhZWU3Zi1kNjViLTQ2ZWMtYTc4MS03Y2JlZjVhYWViODAvMC8xQTBGQzQ2OTU0 NjZGMDAzNEZEQzdCRDM1RDk3QkY5MzUwNDI0NDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JGOTM1MDQy NDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3YWVlN2YtZDY1Yi00NmVjLWE3 ODEtN2NiZWY1YWFlYjgwLzAvMUEwRkM0Njk1NDY2RjAwMzRGREM3QkQzNUQ5N0JG OTM1MDQyNDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPPH4hXT0/HnnL3pjD8Qrp/tgvIMkCmaVuh UPsuc7n7F+tKDSzE9LtyxZuZtsoDyvRdF/ookJsEilKe+mvx9J+z4vQ3LwaC3s27 d1F15SRebt+tnMKAvbtcBvUUEMD35UnAGY4mg/smq9rCtaoVFVxYGQYE7Cg00Bjr 3BT3u8dAQ92SSLqFJs5UfLZ9WZlu/g4AoMUoKFqq3hSgrihmCS4jJiakqd2NYdvU T9gCLpt9nWCTlCQT5/z85XahJcZZRuzgDy9cHyTmJV9UfNX1C/PdGpwokJohadhM JPzK6E70qX7qHe52EE6Fq7ieM+vYoTPKjjkxM3IqdqsMCnd6KeU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:08 2026 by rpki-client