This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: P2lXU5FAwnu9wovH2xlRo6mCAxpcVrqql+HFwGfeooU= Subject key identifier: 17:6F:0B:5A:E7:E4:E0:34:C9:18:C2:E9:24:AB:49:C0:A5:17:02:F8 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 5B5A1B44196D522F883B354D8A20CF5E015D165C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 0162 Signing time: Sun 25 Jan 2026 10:42:26 +0000 Manifest this update: Sun 25 Jan 2026 10:37:26 +0000 Manifest next update: Wed 28 Jan 2026 17:30:26 +0000 Files and hashes: 1: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) 3: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: UP8v43m4KOxpgdm0+habTyzb9xjYGufReQ++Uac/Doo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5a:1b:44:19:6d:52:2f:88:3b:35:4d:8a:20:cf:5e:01:5d:16:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Jan 25 10:37:26 2026 GMT Not After : Jan 28 17:30:26 2026 GMT Subject: CN=176F0B5AE7E4E034C918C2E924AB49C0A51702F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:06:14:1c:e7:05:49:f8:6b:cb:fb:3c:38: 33:44:22:f9:f9:24:33:c6:b1:76:6f:9e:d1:c8:15: 28:ec:85:1e:77:68:a3:61:a3:55:ef:f2:93:55:5f: 4d:db:ca:d6:28:dd:da:15:64:73:0d:07:b8:65:e9: f8:f4:2a:94:57:b5:42:00:d7:60:17:10:e4:63:dd: 25:a1:cd:05:62:68:23:11:8c:d9:e8:2a:93:a6:4d: 34:43:84:4e:06:ba:6d:d8:08:5f:95:ef:f1:19:70: d7:50:b9:76:c5:aa:d8:0a:89:70:a6:f9:20:8a:f4: bc:37:9d:bb:72:99:65:12:89:3f:db:0e:42:c3:88: 3e:8d:1b:c8:55:d3:4d:ed:86:a8:34:f0:a9:73:0a: 5a:e5:47:c6:45:74:e4:3b:4c:18:da:a8:90:e1:3c: 2a:b6:2b:6d:15:19:f6:fc:50:5b:55:2f:3a:c8:ed: 25:7c:58:d0:1f:cc:f0:b3:d9:8a:5a:b6:3d:2e:4c: a1:d0:ac:29:0f:12:78:4a:03:a6:4d:78:1d:60:f0: a0:0e:5c:29:89:53:06:71:6a:47:fa:2d:5d:b4:a8: b8:43:10:e4:ca:81:c5:a1:a6:23:8b:8a:5b:2b:dc: 3e:fe:5e:c9:a5:6d:c4:3c:24:9c:72:d6:8d:ae:f7: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6F:0B:5A:E7:E4:E0:34:C9:18:C2:E9:24:AB:49:C0:A5:17:02:F8 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1a:86:9d:74:bf:db:c5:48:a5:ee:49:80:a6:55:77:9f:bb: d7:dc:80:54:dc:77:4c:a0:f5:07:ae:dd:78:0b:1a:af:9e:c0: 76:fa:cc:21:2a:86:80:05:72:ed:4b:ef:c9:6f:f2:76:05:3f: 6b:9a:f2:65:6e:b2:16:53:35:56:d3:a3:0c:88:30:97:09:b4: 20:da:a6:8d:b9:c6:66:b7:f9:2b:6b:2d:9e:4d:14:ad:dc:f0: 36:a8:72:ee:ab:78:e2:38:b6:2f:d8:57:53:c5:aa:6d:66:81: 1d:96:16:c7:c2:e8:56:3b:f6:2c:b0:20:4a:39:ec:70:d0:61: e5:e7:d4:e5:d0:d7:19:e5:42:90:6f:58:ca:be:ad:58:89:77: dd:3f:1b:48:b2:63:c2:13:8c:5e:89:69:9b:c3:41:3b:1c:57: 98:b2:ed:d9:17:63:50:a0:ce:50:23:73:c3:ba:a0:a2:08:02: 65:a1:e0:94:de:a8:9a:af:ed:c9:8d:cb:ea:e9:25:19:c7:fd: ec:36:2c:18:c0:61:fd:4c:a9:90:d3:63:62:fb:0b:03:bd:57: d1:96:e4:b3:0c:dc:e2:91:f3:34:61:65:09:e1:6d:54:2a:19: 1a:37:37:e0:ca:dd:0b:88:16:94:1f:f1:7c:4f:94:05:5a:2c: 65:2e:97:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1obRBltUi+IOzVNiiDPXgFdFlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNjAxMjUxMDM3MjZaFw0yNjAxMjgxNzMwMjZaMDMxMTAvBgNV BAMTKDE3NkYwQjVBRTdFNEUwMzRDOTE4QzJFOTI0QUI0OUMwQTUxNzAyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPgYUHOcFSfhry/s8ODNEIvn5 JDPGsXZvntHIFSjshR53aKNho1Xv8pNVX03bytYo3doVZHMNB7hl6fj0KpRXtUIA 12AXEORj3SWhzQViaCMRjNnoKpOmTTRDhE4Gum3YCF+V7/EZcNdQuXbFqtgKiXCm +SCK9Lw3nbtymWUSiT/bDkLDiD6NG8hV003thqg08KlzClrlR8ZFdOQ7TBjaqJDh PCq2K20VGfb8UFtVLzrI7SV8WNAfzPCz2Ypatj0uTKHQrCkPEnhKA6ZNeB1g8KAO XCmJUwZxakf6LV20qLhDEOTKgcWhpiOLilsr3D7+XsmlbcQ8JJxy1o2u99/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF28LWufk4DTJGMLpJKtJwKUXAvgwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcahp10v9vFSKXuSYCmVXefu9fcgFTcd0yg 9Qeu3XgLGq+ewHb6zCEqhoAFcu1L78lv8nYFP2ua8mVushZTNVbTowyIMJcJtCDa po25xma3+StrLZ5NFK3c8Daocu6reOI4ti/YV1PFqm1mgR2WFsfC6FY79iywIEo5 7HDQYeXn1OXQ1xnlQpBvWMq+rViJd90/G0iyY8ITjF6JaZvDQTscV5iy7dkXY1Cg zlAjc8O6oKIIAmWh4JTeqJqv7cmNy+rpJRnH/ew2LBjAYf1MqZDTY2L7CwO9V9GW 5LMM3OKR8zRhZQnhbVQqGRo3N+DK3QuIFpQf8XxPlAVaLGUulyQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:10:56 2026 by rpki-client