This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: 2XWYGfthzaDyrbJaa2M8Z7kcK3g8TcW0lp6TXy21ZNA= Subject key identifier: B6:F8:34:51:F9:6E:F8:74:47:5C:D5:B8:D4:00:78:38:36:3E:56:14 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 31937918F168A3ED9DC2892F18D11F26AFB76E1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 0240 Signing time: Sat 24 Jan 2026 08:11:19 +0000 Manifest this update: Sat 24 Jan 2026 08:06:19 +0000 Manifest next update: Tue 27 Jan 2026 12:17:19 +0000 Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: zSupMw/l62TN0DnXmT0RbxzUGB4n/P7ht2cqQl16x5M=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:93:79:18:f1:68:a3:ed:9d:c2:89:2f:18:d1:1f:26:af:b7:6e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Jan 24 08:06:19 2026 GMT Not After : Jan 27 12:17:19 2026 GMT Subject: CN=B6F83451F96EF874475CD5B8D4007838363E5614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:51:c6:da:96:22:91:b5:20:21:dd:bf:70: 65:54:b5:e7:b6:6b:49:9b:ba:eb:e4:bd:ea:49:89: 2f:d9:24:df:f2:ef:3e:f2:b3:19:a4:48:7a:be:c1: 6d:e4:a8:65:0a:6e:97:4c:be:0f:53:64:01:5b:70: 08:03:0b:d3:b6:fa:80:d9:d4:16:81:f6:7d:12:9b: 87:f2:3c:4e:41:e3:af:d6:67:5d:7f:01:61:ee:15: 51:01:5f:c6:3f:ed:1a:cd:b0:b2:c0:8f:a4:98:d2: 72:14:c9:33:9f:f9:a8:43:97:b1:a2:29:f4:df:31: 79:4c:bc:4b:e1:8e:a0:4d:2d:33:b0:12:2a:f0:8f: 99:79:a1:a7:a4:5b:5f:ea:26:5d:c5:1c:bf:44:78: b1:89:4b:28:fd:3c:bc:b1:f2:01:96:a0:5d:03:df: 79:c0:31:8d:e3:b9:85:3f:94:5e:1e:01:f7:c3:0e: 0f:6d:d0:1e:65:7e:f5:d0:02:c7:63:12:6f:ff:f1: af:b5:a1:c7:db:fc:df:e4:ec:c4:96:76:36:5d:9b: 00:56:87:26:83:51:1d:47:40:1f:c3:01:9b:02:6f: b8:53:61:e5:51:79:16:ef:34:e7:ec:1f:e6:3d:d5: c2:f1:84:7b:9c:8a:b7:4f:ad:29:6c:dd:27:d2:cb: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F8:34:51:F9:6E:F8:74:47:5C:D5:B8:D4:00:78:38:36:3E:56:14 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:18:60:b5:26:60:4d:48:4e:26:68:7f:9f:de:dd:a8:9d: f7:1b:ab:72:eb:ad:6f:3a:31:b4:78:95:57:d0:f2:14:e3:f2: 05:b4:58:3d:f4:28:62:8f:76:94:95:22:fc:90:05:a1:39:56: d2:f1:ba:e3:23:07:a6:f9:4b:55:3c:8d:d3:54:7a:5d:a4:1f: 2d:72:05:ee:d5:94:74:be:e1:17:3d:a4:78:b9:9c:fa:01:fa: c4:f3:57:f4:83:8f:9a:85:2f:d0:2c:b0:bd:c5:e5:74:77:a4: 42:3f:ab:39:f0:2b:19:f3:ac:d0:a1:e0:a7:ad:21:36:51:30: 5b:aa:6d:4e:89:b0:08:dd:5e:1a:50:35:39:f2:ed:9b:bb:9e: 52:0f:e1:8b:19:0d:ce:7c:71:c2:f1:b9:64:3d:a3:99:38:aa: 42:6b:dd:02:95:d9:5b:d8:39:fd:16:c3:d6:92:0b:36:1d:3f: 75:df:a2:d1:4a:64:02:bf:85:c9:42:51:71:89:8a:73:18:d1: 8a:38:05:f6:97:a5:37:14:80:f2:b3:f2:eb:94:88:c9:e9:ba: 41:99:3d:20:29:cb:67:15:4c:4c:29:ed:6e:71:b1:24:44:e3: 0d:97:a8:7b:a5:f1:76:48:11:7b:36:08:bf:6e:f1:bd:8d:5e: 2b:e6:cd:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZN5GPFoo+2dwokvGNEfJq+3bh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNjAxMjQwODA2MTlaFw0yNjAxMjcxMjE3MTlaMDMxMTAvBgNV BAMTKEI2RjgzNDUxRjk2RUY4NzQ0NzVDRDVCOEQ0MDA3ODM4MzYzRTU2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4VHG2pYikbUgId2/cGVUtee2 a0mbuuvkvepJiS/ZJN/y7z7ysxmkSHq+wW3kqGUKbpdMvg9TZAFbcAgDC9O2+oDZ 1BaB9n0Sm4fyPE5B46/WZ11/AWHuFVEBX8Y/7RrNsLLAj6SY0nIUyTOf+ahDl7Gi KfTfMXlMvEvhjqBNLTOwEirwj5l5oaekW1/qJl3FHL9EeLGJSyj9PLyx8gGWoF0D 33nAMY3juYU/lF4eAffDDg9t0B5lfvXQAsdjEm//8a+1ocfb/N/k7MSWdjZdmwBW hyaDUR1HQB/DAZsCb7hTYeVReRbvNOfsH+Y91cLxhHucirdPrSls3SfSy/GpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtvg0Uflu+HRHXNW41AB4ODY+VhQwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIYGGC1JmBNSE4maH+f3t2onfcbq3LrrW86 MbR4lVfQ8hTj8gW0WD30KGKPdpSVIvyQBaE5VtLxuuMjB6b5S1U8jdNUel2kHy1y Be7VlHS+4Rc9pHi5nPoB+sTzV/SDj5qFL9AssL3F5XR3pEI/qznwKxnzrNCh4Ket ITZRMFuqbU6JsAjdXhpQNTny7Zu7nlIP4YsZDc58ccLxuWQ9o5k4qkJr3QKV2VvY Of0Ww9aSCzYdP3XfotFKZAK/hclCUXGJinMY0Yo4BfaXpTcUgPKz8uuUiMnpukGZ PSApy2cVTEwp7W5xsSRE4w2XqHul8XZIEXs2CL9u8b2NXivmzbI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:25 2026 by rpki-client