This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: SRhdeKXZFAhoMZla0URbscnh0MTewGagWWOZKIwR1Uo= Subject key identifier: D8:45:49:DE:07:BD:89:FB:65:24:40:06:DC:BF:D2:47:9B:83:EC:52 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 333C200213F304916025899A3E34BF79D0CBD5F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 0125 Signing time: Sat 24 Jan 2026 14:31:49 +0000 Manifest this update: Sat 24 Jan 2026 14:26:49 +0000 Manifest next update: Tue 27 Jan 2026 18:02:49 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: gEMhu2XQsl7vW45Wv6SGiBp429LRbHYd4upkXyJT6RY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3c:20:02:13:f3:04:91:60:25:89:9a:3e:34:bf:79:d0:cb:d5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Jan 24 14:26:49 2026 GMT Not After : Jan 27 18:02:49 2026 GMT Subject: CN=D84549DE07BD89FB65244006DCBFD2479B83EC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:74:9c:45:ad:00:78:19:f6:94:1e:b3:01: 1e:c1:fd:c3:a8:73:bc:9b:6e:5a:6d:d8:de:69:89: 22:7d:a6:01:7c:f7:ed:2c:60:68:45:59:6f:c7:f3: 21:b4:b0:be:49:3d:e2:81:07:97:c3:96:c0:b1:89: c3:36:01:bd:ac:9c:97:cb:5e:cc:59:ad:1a:59:9a: a4:0f:6c:a5:b6:5b:eb:49:b8:dd:1f:88:63:b1:ea: 0c:3f:8e:e8:db:5a:21:de:48:22:e3:41:2c:a4:d6: 62:bc:92:44:95:e5:e6:9f:6b:be:14:b5:e2:16:43: 76:f6:bf:3b:c2:3c:e2:21:d8:17:f4:d7:55:3f:92: 57:88:0e:ea:d9:08:19:c9:18:b9:1a:a5:73:d4:ff: c4:1d:38:44:6c:cd:8e:e5:a0:9d:dc:de:85:66:9b: 1d:d1:33:79:9d:bd:f4:fc:40:b9:3a:14:7a:85:3a: a4:b2:d6:5c:31:ca:f5:65:63:08:ed:0e:c7:25:db: 70:20:a4:d6:1a:ec:f4:be:78:61:45:4f:7b:7f:8e: 35:e4:87:e0:9e:b0:fa:39:7b:19:ac:18:f3:91:8b: 21:34:87:5f:bc:03:f3:6b:40:a5:c5:3b:e5:62:e6: 20:bd:76:c9:15:a4:43:10:28:b4:6a:59:f4:cb:26: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:45:49:DE:07:BD:89:FB:65:24:40:06:DC:BF:D2:47:9B:83:EC:52 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a1:b0:6b:c5:45:a2:22:ec:4d:a7:87:a8:bb:8d:28:17:78: 7b:cc:17:6a:7b:5d:8d:d1:2b:4b:09:4a:b4:41:b0:3b:c0:ad: 7e:db:f7:7f:58:8e:9f:28:83:46:43:e6:c1:1e:45:d1:90:32: 62:b4:70:36:d7:3f:a6:96:7e:a6:9d:8b:87:a0:32:c5:2c:26: 99:d0:5e:2a:68:fb:73:30:f3:bc:e8:9d:79:2a:4d:8a:73:4b: f1:1c:10:e6:fa:4f:61:07:a0:ef:4f:bc:67:2d:08:0f:60:1b: 39:75:36:8b:ae:39:a1:86:11:cb:70:4d:7b:d4:0b:aa:88:45: c6:03:c3:91:dd:19:fd:d5:76:3a:8f:55:e9:33:39:3b:c7:31: 3b:7a:ac:bd:dc:81:16:de:7f:cf:96:61:c0:bb:a1:60:46:66: f6:57:ef:48:20:df:1b:10:11:13:05:67:7d:27:b3:91:eb:78: d3:71:ec:0a:5a:02:70:fa:66:58:82:ec:a9:11:51:d4:25:c6: 98:56:ce:d3:1d:35:c2:df:cd:ab:8c:dc:a7:ad:d7:b1:89:48: c0:bc:30:80:7c:19:8a:64:79:0b:70:9b:55:a5:b1:c6:73:e3: 95:2a:01:ff:4f:dc:96:fe:88:c6:0e:ea:3a:59:ea:f7:b3:be: a7:38:75:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzwgAhPzBJFgJYmaPjS/edDL1fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNjAxMjQxNDI2NDlaFw0yNjAxMjcxODAyNDlaMDMxMTAvBgNV BAMTKEQ4NDU0OURFMDdCRDg5RkI2NTI0NDAwNkRDQkZEMjQ3OUI4M0VDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2nScRa0AeBn2lB6zAR7B/cOo c7ybblpt2N5piSJ9pgF89+0sYGhFWW/H8yG0sL5JPeKBB5fDlsCxicM2Ab2snJfL XsxZrRpZmqQPbKW2W+tJuN0fiGOx6gw/jujbWiHeSCLjQSyk1mK8kkSV5eafa74U teIWQ3b2vzvCPOIh2Bf011U/kleIDurZCBnJGLkapXPU/8QdOERszY7loJ3c3oVm mx3RM3mdvfT8QLk6FHqFOqSy1lwxyvVlYwjtDscl23AgpNYa7PS+eGFFT3t/jjXk h+CesPo5exmsGPORiyE0h1+8A/NrQKXFO+Vi5iC9dskVpEMQKLRqWfTLJj6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2EVJ3ge9iftlJEAG3L/SR5uD7FIwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6hsGvFRaIi7E2nh6i7jSgXeHvMF2p7XY3R K0sJSrRBsDvArX7b939Yjp8og0ZD5sEeRdGQMmK0cDbXP6aWfqadi4egMsUsJpnQ Xipo+3Mw87zonXkqTYpzS/EcEOb6T2EHoO9PvGctCA9gGzl1NouuOaGGEctwTXvU C6qIRcYDw5HdGf3VdjqPVekzOTvHMTt6rL3cgRbef8+WYcC7oWBGZvZX70gg3xsQ ERMFZ30ns5HreNNx7ApaAnD6ZliC7KkRUdQlxphWztMdNcLfzauM3Ket17GJSMC8 MIB8GYpkeQtwm1WlscZz45UqAf9P3Jb+iMYO6jpZ6vezvqc4daM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:02 2026 by rpki-client