This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft File: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft (raw, json) Hash identifier: SKGMEvd4YoYMsJgtwuI7sRrI9l/fOWe2Bog0hDIiQUk= Subject key identifier: E9:73:2A:04:C9:24:65:7B:88:D1:82:56:0D:C4:B0:C5:7B:63:68:7B Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Certificate serial: 6672B5B38F8F786D5C317C99973FC67DDE6587AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 17:41:52 +0000 Manifest this update: Sun 25 Jan 2026 17:36:52 +0000 Manifest next update: Wed 28 Jan 2026 18:42:52 +0000 Files and hashes: 1: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: gtw/aKJ5GQlzn7U5EpxJJq4TSnweNLDzm5xumuJJptE=) 2: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl (hash: t5fkB+EmMszLb58pLKvNtTSQIjTSC6hSkzPJP2o+rmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:b5:b3:8f:8f:78:6d:5c:31:7c:99:97:3f:c6:7d:de:65:87:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Validity Not Before: Jan 25 17:36:52 2026 GMT Not After : Jan 28 18:42:52 2026 GMT Subject: CN=E9732A04C924657B88D182560DC4B0C57B63687B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:fb:c0:cd:81:ca:3a:6a:e2:b3:4b:1e:df: 2e:ce:56:48:19:95:8f:b8:32:f9:4d:75:8b:77:c8: b0:0a:41:c5:1e:df:82:04:72:88:3a:03:45:b2:d9: c1:24:70:24:66:c8:ca:49:47:7b:ac:96:6e:4a:38: 28:0b:e1:cf:12:4a:67:34:99:52:8e:88:cf:33:f7: cf:db:58:33:00:e0:c4:ed:16:a9:f7:3d:4f:76:d6: 5a:d3:3d:67:1a:50:57:60:a6:ba:7a:55:6b:a1:f1: ba:3f:e7:f9:4e:2d:88:e5:29:3a:e4:e9:00:c0:43: 56:c0:f8:8f:38:b1:04:39:ce:01:a4:76:e9:cb:62: 4c:dd:b6:13:ae:16:7e:be:84:0b:07:7e:71:60:5a: 8d:f3:9a:14:5c:c9:e1:dd:8d:62:06:2f:48:49:32: 03:d1:e6:7a:4e:a9:d4:1f:a1:e8:8d:7a:02:6f:45: 89:c7:f0:a9:89:a0:63:e4:5d:52:97:fd:32:9c:e7: 58:a2:50:06:be:e8:de:99:2a:4f:8c:93:0d:3b:1c: ec:07:f4:0c:28:95:16:bf:10:de:85:4c:37:db:6c: ad:02:be:12:2b:ed:fb:65:21:29:b3:3a:c3:f5:f0: f5:f0:d3:f7:c8:1c:dd:1f:1c:41:41:7f:22:f5:2d: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:73:2A:04:C9:24:65:7B:88:D1:82:56:0D:C4:B0:C5:7B:63:68:7B X509v3 Authority Key Identifier: keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:22:7c:20:eb:8b:82:6f:2b:0a:3e:e3:ce:f3:7e:38:dd:5f: f2:8e:cf:41:e3:a7:9e:68:9e:7b:28:aa:60:aa:65:8b:0c:49: a5:c1:3a:13:37:1c:d2:3a:59:3c:3a:7d:02:36:4c:a1:70:30: 9c:d4:4a:14:ca:a5:f9:46:77:cf:af:27:20:f3:8b:f7:13:33: ef:2d:a2:06:76:3a:6a:90:33:10:17:92:53:1a:bc:82:d6:35: d7:45:e9:41:99:4c:97:28:bb:9e:52:21:35:ce:5e:22:02:5a: bc:71:3e:17:e4:3a:45:de:01:8e:f4:e8:5f:a3:cb:83:00:b6: 32:32:b6:60:79:cd:d6:7e:99:8d:2c:43:5f:39:df:ed:f1:04: af:8c:55:34:40:2d:94:dd:eb:0a:9b:b0:0d:48:ac:bd:1d:89: bd:db:36:f6:b5:8e:0e:14:fd:45:13:fc:ac:0a:ec:48:f6:dd: 52:cf:cb:43:c1:c4:47:60:13:5a:17:86:52:77:f0:47:a2:69: 71:b1:2e:cc:13:71:2d:2f:2c:63:df:db:4f:0b:1c:75:e9:d0: e0:f3:ea:16:11:52:bc:7f:a3:85:eb:ca:83:4a:28:f6:1a:51: 18:77:89:fa:50:d6:ff:f7:7b:2d:bf:8f:62:cf:9e:7d:d3:45: 84:1f:73:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnK1s4+PeG1cMXyZlz/Gfd5lh60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG NDZDOEE4NTAeFw0yNjAxMjUxNzM2NTJaFw0yNjAxMjgxODQyNTJaMDMxMTAvBgNV BAMTKEU5NzMyQTA0QzkyNDY1N0I4OEQxODI1NjBEQzRCMEM1N0I2MzY4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Y/vAzYHKOmris0se3y7OVkgZ lY+4MvlNdYt3yLAKQcUe34IEcog6A0Wy2cEkcCRmyMpJR3uslm5KOCgL4c8SSmc0 mVKOiM8z98/bWDMA4MTtFqn3PU921lrTPWcaUFdgprp6VWuh8bo/5/lOLYjlKTrk 6QDAQ1bA+I84sQQ5zgGkdunLYkzdthOuFn6+hAsHfnFgWo3zmhRcyeHdjWIGL0hJ MgPR5npOqdQfoeiNegJvRYnH8KmJoGPkXVKX/TKc51iiUAa+6N6ZKk+Mkw07HOwH 9AwolRa/EN6FTDfbbK0CvhIr7ftlISmzOsP18PXw0/fIHN0fHEFBfyL1LVvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XMqBMkkZXuI0YJWDcSwxXtjaHswHwYDVR0j BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD OEE4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTkwMjM0ZmUtYTcxNS00M2U1LThh YTQtZDk3OWNkMzU3ZDM5LzAvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4 QUZGNDZDOEE4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEifCDri4JvKwo+487zfjjdX/KOz0Hjp55o nnsoqmCqZYsMSaXBOhM3HNI6WTw6fQI2TKFwMJzUShTKpflGd8+vJyDzi/cTM+8t ogZ2OmqQMxAXklMavILWNddF6UGZTJcou55SITXOXiICWrxxPhfkOkXeAY706F+j y4MAtjIytmB5zdZ+mY0sQ1853+3xBK+MVTRALZTd6wqbsA1IrL0dib3bNva1jg4U /UUT/KwK7Ej23VLPy0PBxEdgE1oXhlJ38EeiaXGxLswTcS0vLGPf208LHHXp0ODz 6hYRUrx/o4XryoNKKPYaURh3ifpQ1v/3ey2/j2LPnn3TRYQfc+w= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:47 2026 by rpki-client