This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: c/ZUwjSjyUTfu9lutHOJ96jkn1AGLHKer4B9URT8qH8= Subject key identifier: 43:7A:C6:1F:FF:97:AE:6F:DB:02:C2:35:72:B3:89:0C:A1:63:10:22 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 338E4F63C922BC9854AF3EAFF0B593645F3137F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 026A Signing time: Sat 24 Jan 2026 16:40:49 +0000 Manifest this update: Sat 24 Jan 2026 16:35:49 +0000 Manifest next update: Wed 28 Jan 2026 01:02:49 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: TA1eUafUeiJYILhH4HYViFTtOG1Yb421QDz2gzPo4kU=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: 7nPvWmy0QVM91O1OaZMT+RPksZHf1FPfLf9EFlaxDAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8e:4f:63:c9:22:bc:98:54:af:3e:af:f0:b5:93:64:5f:31:37:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Jan 24 16:35:49 2026 GMT Not After : Jan 28 01:02:49 2026 GMT Subject: CN=437AC61FFF97AE6FDB02C23572B3890CA1631022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:2b:34:03:cc:53:2a:51:c8:c7:0e:ad:e7: c6:d1:82:26:dd:60:e7:fb:e1:02:36:10:ef:db:45: ae:6e:ba:54:62:dc:8e:d4:67:35:38:a2:a5:f8:c3: a6:a7:78:94:17:10:35:73:ae:04:23:7a:3c:59:e4: de:ae:bc:4a:da:1a:79:05:54:02:e4:c4:1f:9a:99: 4c:a0:4c:4f:4b:41:86:6f:9b:92:5d:81:37:77:99: b8:b6:3c:10:ed:e2:84:e3:b7:5f:e1:97:fe:ee:e6: 2e:49:fa:e7:9c:fa:67:be:de:ab:ff:f6:bb:e8:c2: ba:db:cf:34:28:ee:7e:aa:f4:72:51:6d:30:49:91: a0:ad:10:af:fe:94:a7:38:42:00:2b:3d:c5:26:24: 21:cf:ae:19:74:07:2f:b0:61:e9:4c:aa:06:eb:7c: 32:f6:53:0d:92:0d:a1:a7:ee:02:b6:1a:d9:90:29: 5b:4f:a4:05:5b:da:82:a6:52:e2:f8:fd:56:97:07: 7c:69:6c:67:54:32:42:9c:7b:a9:69:8a:26:a0:b1: 35:b7:7e:a2:a9:52:02:ad:40:9d:19:95:28:70:60: 51:e0:b7:eb:dc:3c:d6:32:e2:4b:cf:9a:3c:7d:ea: 67:c4:71:5a:ac:94:a4:ae:70:18:58:9b:5f:66:e7: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:C6:1F:FF:97:AE:6F:DB:02:C2:35:72:B3:89:0C:A1:63:10:22 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c9:50:c0:88:ec:35:63:1f:20:ad:b1:ff:78:76:fb:2f:ee: 43:14:18:2a:7c:ca:3a:39:2b:de:03:96:44:2c:dd:7a:70:69: 83:a4:71:e3:64:33:77:cf:1d:3e:bc:8f:c1:36:ba:a9:9d:d9: 70:30:01:2e:9f:41:05:af:af:36:7c:9c:56:17:27:4b:04:6e: e5:22:40:f0:55:25:9f:3b:cd:4f:cd:b0:86:77:67:bd:7a:29: 50:b5:71:7f:a5:f3:cd:f4:74:25:db:05:17:82:4d:37:82:0d: ef:b1:e3:ba:9f:e9:76:75:8d:7c:44:d1:a5:76:c3:b5:f5:44: f2:2b:8a:b6:f4:c6:98:b2:28:4f:3a:d9:a5:b3:70:d0:f6:da: b0:6e:1b:3e:a5:71:4e:74:f7:41:6b:c4:2a:d8:b6:31:2f:62: 78:48:8f:6a:29:f5:20:ff:f8:99:fa:d9:59:57:d0:a6:09:22: 07:48:6f:12:fc:e3:b7:fc:9c:18:f6:94:ff:0b:3c:92:80:4d: 48:96:8e:e5:49:bb:8f:b3:b8:29:93:0d:f1:0c:65:d4:d2:22: 17:ff:7c:b4:41:ab:8e:ec:5e:86:e4:cf:dd:49:35:a8:36:7d: fe:c1:db:11:23:ad:ee:21:a5:6f:0c:19:07:4a:d8:6e:cf:85: 24:a2:90:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM45PY8kivJhUrz6v8LWTZF8xN/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNjAxMjQxNjM1NDlaFw0yNjAxMjgwMTAyNDlaMDMxMTAvBgNV BAMTKDQzN0FDNjFGRkY5N0FFNkZEQjAyQzIzNTcyQjM4OTBDQTE2MzEwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/Ss0A8xTKlHIxw6t58bRgibd YOf74QI2EO/bRa5uulRi3I7UZzU4oqX4w6aneJQXEDVzrgQjejxZ5N6uvEraGnkF VALkxB+amUygTE9LQYZvm5JdgTd3mbi2PBDt4oTjt1/hl/7u5i5J+uec+me+3qv/ 9rvowrrbzzQo7n6q9HJRbTBJkaCtEK/+lKc4QgArPcUmJCHPrhl0By+wYelMqgbr fDL2Uw2SDaGn7gK2GtmQKVtPpAVb2oKmUuL4/VaXB3xpbGdUMkKce6lpiiagsTW3 fqKpUgKtQJ0ZlShwYFHgt+vcPNYy4kvPmjx96mfEcVqslKSucBhYm19m5w7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3rGH/+Xrm/bAsI1crOJDKFjECIwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLJUMCI7DVjHyCtsf94dvsv7kMUGCp8yjo5 K94DlkQs3XpwaYOkceNkM3fPHT68j8E2uqmd2XAwAS6fQQWvrzZ8nFYXJ0sEbuUi QPBVJZ87zU/NsIZ3Z716KVC1cX+l8830dCXbBReCTTeCDe+x47qf6XZ1jXxE0aV2 w7X1RPIrirb0xpiyKE862aWzcND22rBuGz6lcU5090FrxCrYtjEvYnhIj2op9SD/ +Jn62VlX0KYJIgdIbxL847f8nBj2lP8LPJKATUiWjuVJu4+zuCmTDfEMZdTSIhf/ fLRBq47sXobkz91JNag2ff7B2xEjre4hpW8MGQdK2G7PhSSikHM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:33 2026 by rpki-client