This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: xP1jLtocestnS42YnNGWUnboDQo1JGv7JgwLCsovjfo= Subject key identifier: 05:D5:E2:15:69:00:D6:62:E2:C9:F8:ED:3A:77:CE:85:67:30:AE:9B Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 3E27D3057B0A2CE28EDB833A6FF1661BC4A2C80F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0247 Signing time: Sat 24 Jan 2026 23:20:43 +0000 Manifest this update: Sat 24 Jan 2026 23:15:43 +0000 Manifest next update: Wed 28 Jan 2026 06:59:43 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 2: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: uwBrj+2B0UvHPIHEQQ0uWJyOGoFwSqCBX9smla3KM3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:27:d3:05:7b:0a:2c:e2:8e:db:83:3a:6f:f1:66:1b:c4:a2:c8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Jan 24 23:15:43 2026 GMT Not After : Jan 28 06:59:43 2026 GMT Subject: CN=05D5E2156900D662E2C9F8ED3A77CE856730AE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:3c:0e:55:8e:37:c5:31:19:9a:ba:5b:ea: 4d:70:0a:c8:c5:49:de:3d:46:8e:38:79:ad:e6:2d: 8e:95:cf:18:74:92:55:27:9d:db:1c:ab:ff:8a:e2: fe:81:5a:a9:d6:ea:0a:a6:a1:21:ea:f0:07:02:ca: 59:5d:75:39:2b:49:33:fd:4e:25:a0:9a:bf:29:b3: be:e4:04:a8:97:7b:ef:ba:2a:07:ae:e0:29:64:58: 0e:c9:8c:da:cc:ea:43:de:7e:3a:00:5e:fc:59:c3: 75:ae:44:4a:e9:39:cd:c9:3c:d9:08:0f:a8:a8:59: de:a2:73:24:68:3b:58:fb:25:64:81:d4:45:f2:20: a1:a7:c9:25:3a:a4:27:e5:5e:d6:d7:c7:d8:a0:8f: 97:ed:23:60:3e:a3:ce:7f:c5:17:51:a4:e7:60:6c: e3:06:26:15:63:c5:9c:c1:81:2c:59:ec:30:78:79: f1:4f:65:d0:c0:d3:7e:29:ff:c6:d7:99:df:76:9a: bb:5c:d9:31:d9:07:bc:ce:a5:37:66:84:7f:19:37: ba:ef:ef:dd:9b:41:23:d8:b4:4d:6b:23:25:03:12: 1a:2d:67:c6:04:a8:ba:70:99:09:1f:7b:26:93:39: b1:89:24:4c:d9:0c:cc:ef:8b:47:1d:50:9c:ec:9c: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D5:E2:15:69:00:D6:62:E2:C9:F8:ED:3A:77:CE:85:67:30:AE:9B X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a1:98:fc:0c:01:ad:3d:3c:e4:f3:64:d1:7e:44:b4:16:af: 44:48:3c:d0:50:44:18:38:ff:8a:51:f0:cc:ed:b2:48:66:23: c4:a0:d0:da:af:ee:a3:b5:f5:13:9c:07:23:c6:a6:63:ea:98: 0f:31:00:c6:fc:e3:58:2d:04:22:ab:ef:a4:af:e3:b7:b0:ff: 76:dc:8c:3d:65:f6:7f:95:7b:07:de:5f:55:53:7d:e0:4c:4d: 09:2d:92:7d:83:12:8b:ca:5f:ef:ca:49:cf:b5:ec:22:4c:bd: 0d:5a:25:d8:6a:84:23:59:b9:e6:5c:88:f6:cb:d5:cc:5c:f5: a4:05:a6:42:36:57:3d:c1:07:29:5e:9f:fb:c6:13:18:5e:12: 2e:74:98:da:c0:e0:c7:c5:72:02:5c:9e:7e:11:3b:b1:ed:b6: dc:6a:d6:fd:e5:7b:48:58:90:6c:e2:15:33:e2:b5:4e:9b:6f: 37:f1:27:69:d9:37:8c:9c:86:86:6d:ae:7b:93:ae:ca:b2:42: 3f:b6:43:6e:e6:25:ed:d4:7f:86:94:6a:76:63:4a:37:24:2e: ee:76:ce:dd:fd:48:87:31:8e:f5:b7:be:b5:b2:7c:f6:5c:32: 31:ad:7f:c4:2c:69:5c:5d:7b:cf:ed:0e:f0:dc:80:5d:cd:9c: 32:e4:5c:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPifTBXsKLOKO24M6b/FmG8SiyA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNjAxMjQyMzE1NDNaFw0yNjAxMjgwNjU5NDNaMDMxMTAvBgNV BAMTKDA1RDVFMjE1NjkwMEQ2NjJFMkM5RjhFRDNBNzdDRTg1NjczMEFFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHzwOVY43xTEZmrpb6k1wCsjF Sd49Ro44ea3mLY6Vzxh0klUnndscq/+K4v6BWqnW6gqmoSHq8AcCyllddTkrSTP9 TiWgmr8ps77kBKiXe++6Kgeu4ClkWA7JjNrM6kPefjoAXvxZw3WuRErpOc3JPNkI D6ioWd6icyRoO1j7JWSB1EXyIKGnySU6pCflXtbXx9igj5ftI2A+o85/xRdRpOdg bOMGJhVjxZzBgSxZ7DB4efFPZdDA034p/8bXmd92mrtc2THZB7zOpTdmhH8ZN7rv 792bQSPYtE1rIyUDEhotZ8YEqLpwmQkfeyaTObGJJEzZDMzvi0cdUJzsnLilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdXiFWkA1mLiyfjtOnfOhWcwrpswHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEihmPwMAa09POTzZNF+RLQWr0RIPNBQRBg4 /4pR8MztskhmI8Sg0Nqv7qO19ROcByPGpmPqmA8xAMb841gtBCKr76Sv47ew/3bc jD1l9n+VewfeX1VTfeBMTQktkn2DEovKX+/KSc+17CJMvQ1aJdhqhCNZueZciPbL 1cxc9aQFpkI2Vz3BBylen/vGExheEi50mNrA4MfFcgJcnn4RO7Htttxq1v3le0hY kGziFTPitU6bbzfxJ2nZN4ychoZtrnuTrsqyQj+2Q27mJe3Uf4aUanZjSjckLu52 zt39SIcxjvW3vrWyfPZcMjGtf8QsaVxde8/tDvDcgF3NnDLkXAg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:04 2026 by rpki-client