This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: Ks8mgiZwRs/X0SA6cE/ZOdkeiXKFJBQ+dbUQJNWWjpU= Subject key identifier: 6F:36:F7:31:50:38:8F:51:01:DC:73:90:75:89:88:10:6D:6D:AB:84 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 3FA78433922B7ECD0BC8B0D3F29F460A8A89DAAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: E0 Signing time: Sun 25 Jan 2026 10:11:34 +0000 Manifest this update: Sun 25 Jan 2026 10:06:34 +0000 Manifest next update: Wed 28 Jan 2026 19:24:34 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) 2: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 3: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) 4: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: vi1SZlChzKKc5RSq3S7wgRiYP+hNkrxO679vxDYXoF8=) 5: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 7: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a7:84:33:92:2b:7e:cd:0b:c8:b0:d3:f2:9f:46:0a:8a:89:da:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Jan 25 10:06:34 2026 GMT Not After : Jan 28 19:24:34 2026 GMT Subject: CN=6F36F73150388F5101DC7390758988106D6DAB84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:9e:41:d3:04:52:7c:8f:ba:6c:91:a9:84: 94:8c:75:fe:59:e3:03:99:07:73:ae:f5:a1:29:34: da:dc:e4:a9:34:40:cc:c4:43:ab:bb:47:f1:dc:07: da:fd:16:9e:d1:0a:56:ad:e6:08:8c:ae:4d:d3:a9: 75:ab:d2:99:64:aa:8c:93:a1:4b:2b:ad:44:10:fa: 1b:22:09:ee:bd:a9:4c:84:f3:d8:8a:40:7f:82:ff: 2b:19:7a:24:d8:a1:e3:74:ea:5d:a1:5d:1d:4a:f3: 59:c8:8d:1e:c5:fd:5f:65:94:38:d4:1e:5f:a5:09: 78:c9:1c:f8:75:f3:c6:34:37:e2:de:a2:18:ca:95: 05:91:5c:3b:a2:51:06:7a:64:f0:87:c2:64:b5:75: b9:1c:01:68:0e:12:ef:6b:8e:e6:f0:e0:6a:20:f0: 23:39:23:f3:2e:9b:89:88:c3:2a:b1:35:76:73:ad: be:11:94:b2:57:c2:87:51:75:a3:9a:d9:8e:9d:2e: 0c:66:f5:66:35:78:28:d9:22:de:65:4d:59:6c:05: 8f:a0:5c:50:0f:5b:1e:c9:a5:e5:34:ba:be:49:0d: 84:0b:90:4c:e6:c4:b6:26:ce:35:83:fd:88:dc:e7: ec:9a:90:9e:c7:cc:b2:83:06:00:ae:63:33:43:d8: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:36:F7:31:50:38:8F:51:01:DC:73:90:75:89:88:10:6D:6D:AB:84 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c1:d1:06:a7:52:39:c7:a4:49:a7:5d:30:2e:4d:cd:d2:80: 37:22:b9:e5:47:07:77:4a:0a:74:21:7c:df:66:37:a5:28:04: 18:34:2a:eb:40:85:fd:5e:b2:ba:16:20:7a:37:f2:10:66:c8: fa:69:d5:42:da:e0:a4:3c:18:cc:eb:17:bd:cf:e7:df:33:ec: 92:73:44:d4:22:e8:d1:ac:65:fb:9e:28:44:a5:16:e0:dd:0a: fa:0b:13:18:5f:d3:ec:ad:8d:3a:c0:39:c8:cb:9a:9e:7e:69: 3f:f6:7b:3e:05:4b:19:f0:d9:6b:bf:38:45:f2:c9:c8:5d:40: 8f:b7:d4:86:1a:30:89:0f:53:04:85:e9:d4:84:b9:5e:86:0d: 87:98:e3:70:39:bc:82:a8:3e:8d:8d:a0:51:3b:fa:b5:f9:33: 69:bc:2e:41:b2:fc:71:32:7f:ff:76:ff:5a:3d:0c:a3:e5:81: db:a6:e2:2a:b8:ca:25:db:8a:97:b9:5b:2d:49:9e:f7:6f:97: f3:07:54:ac:0b:9a:1f:98:a1:ba:f4:b9:5d:1c:a3:c8:b5:1f: e6:a5:90:cf:d8:6b:d6:14:10:ea:62:10:91:d0:34:97:f0:ab: d3:c8:37:51:86:84:fc:b0:e2:77:ba:5b:17:82:a8:a3:78:da: b1:db:a1:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6eEM5Irfs0LyLDT8p9GCoqJ2qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNjAxMjUxMDA2MzRaFw0yNjAxMjgxOTI0MzRaMDMxMTAvBgNV BAMTKDZGMzZGNzMxNTAzODhGNTEwMURDNzM5MDc1ODk4ODEwNkQ2REFCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jp5B0wRSfI+6bJGphJSMdf5Z 4wOZB3Ou9aEpNNrc5Kk0QMzEQ6u7R/HcB9r9Fp7RClat5giMrk3TqXWr0plkqoyT oUsrrUQQ+hsiCe69qUyE89iKQH+C/ysZeiTYoeN06l2hXR1K81nIjR7F/V9llDjU Hl+lCXjJHPh188Y0N+LeohjKlQWRXDuiUQZ6ZPCHwmS1dbkcAWgOEu9rjubw4Gog 8CM5I/Mum4mIwyqxNXZzrb4RlLJXwodRdaOa2Y6dLgxm9WY1eCjZIt5lTVlsBY+g XFAPWx7JpeU0ur5JDYQLkEzmxLYmzjWD/Yjc5+yakJ7HzLKDBgCuYzND2NJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbzb3MVA4j1EB3HOQdYmIEG1tq4QwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/B0QanUjnHpEmnXTAuTc3SgDciueVHB3dK CnQhfN9mN6UoBBg0KutAhf1esroWIHo38hBmyPpp1ULa4KQ8GMzrF73P598z7JJz RNQi6NGsZfueKESlFuDdCvoLExhf0+ytjTrAOcjLmp5+aT/2ez4FSxnw2Wu/OEXy ychdQI+31IYaMIkPUwSF6dSEuV6GDYeY43A5vIKoPo2NoFE7+rX5M2m8LkGy/HEy f/92/1o9DKPlgdum4iq4yiXbipe5Wy1Jnvdvl/MHVKwLmh+Yobr0uV0co8i1H+al kM/Ya9YUEOpiEJHQNJfwq9PIN1GGhPyw4ne6WxeCqKN42rHboSA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:50 2026 by rpki-client