This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: K67VB0dlqxLBorqIgQ0P+cIMCmO+M4gGqU0C1VsQnjc= Subject key identifier: BC:F1:63:5D:AC:28:C5:76:FF:8F:E9:2B:0A:23:C8:08:6C:40:70:CF Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 02611D8A2696D64774330A812E7E0C7F0C8DFBFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 021A Signing time: Sun 25 Jan 2026 05:41:49 +0000 Manifest this update: Sun 25 Jan 2026 05:36:49 +0000 Manifest next update: Wed 28 Jan 2026 15:52:49 +0000 Files and hashes: 1: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: vHKGcz15tVcfMZn7Fgvu9i6ALysNuni/y5ZRMe+KqN0=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:61:1d:8a:26:96:d6:47:74:33:0a:81:2e:7e:0c:7f:0c:8d:fb:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Jan 25 05:36:49 2026 GMT Not After : Jan 28 15:52:49 2026 GMT Subject: CN=BCF1635DAC28C576FF8FE92B0A23C8086C4070CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:c0:c6:ea:d1:ef:b7:48:2c:e4:ad:6b:29: aa:77:cb:36:d1:af:51:c0:b1:9f:af:27:38:7a:02: 75:58:3e:04:8d:07:24:94:48:5d:62:7c:ff:77:31: b8:c6:ae:69:1d:0b:9d:eb:3b:d2:42:b5:34:23:01: 9b:d5:81:7b:a3:ab:a3:8e:54:d8:c5:5f:86:35:e8: cc:88:cc:3d:eb:1c:41:09:3c:6d:8f:ff:33:d7:e8: 2a:63:91:b0:e8:e0:a2:30:c8:30:df:4d:80:8c:52: 0a:bc:a5:38:f1:99:ea:0b:f3:2a:be:6d:28:ab:26: e5:a7:aa:b4:1b:34:34:f4:ab:d3:e2:66:b2:72:d3: d2:81:5f:26:68:7f:3f:92:3b:31:db:a0:f5:28:b0: fd:2c:ce:15:68:51:88:ed:c5:4c:5a:43:19:eb:2c: 58:aa:00:f8:2f:9c:12:60:73:6c:3c:f9:c4:7d:cd: a8:ca:55:44:8f:cf:f2:de:ba:25:5c:ac:16:e5:2f: 85:03:92:9c:a8:c5:89:e4:33:88:22:99:0f:a1:8f: dd:eb:f6:fa:f2:b2:69:30:85:e9:b2:38:ef:79:7e: ff:9b:0f:d0:09:3d:f2:ef:56:be:94:07:48:b3:5d: 82:5f:fa:71:36:94:7a:2a:00:70:e1:c8:8d:ca:cb: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F1:63:5D:AC:28:C5:76:FF:8F:E9:2B:0A:23:C8:08:6C:40:70:CF X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:36:ab:44:b7:b4:d2:6f:cd:ae:4f:e8:e6:e1:0d:e0:54: 01:df:a0:80:f9:cd:aa:17:37:e1:a6:4b:5c:b3:af:cc:26:05: 56:57:dc:8b:ec:e0:01:df:58:c5:8e:b3:a0:97:37:8a:61:48: be:c6:60:52:f3:04:ce:23:75:cf:52:4a:db:ec:b0:da:d9:07: eb:f0:8f:06:6a:75:66:6b:45:9f:c5:0e:14:00:b8:b8:ff:e9: 31:c9:49:15:e0:71:34:2b:7e:b3:e2:ca:8f:fa:10:41:ea:44: 20:ac:93:c4:3c:f3:6a:a7:a8:a8:7f:25:de:11:aa:66:e3:63: 90:10:c2:bd:35:88:34:1b:29:97:5e:fc:72:bc:aa:82:72:7e: 65:95:14:97:5c:a5:bb:f2:4e:c2:f2:82:32:42:35:04:e3:15: 75:ec:d5:3e:b4:37:f2:32:ce:67:03:46:85:de:e4:5c:39:0d: 74:67:c3:b7:58:69:73:a5:da:25:76:a2:87:bb:c2:15:36:7f: 1a:01:19:c1:f6:fb:27:b2:7a:db:90:1d:d4:b1:a1:36:6a:c8: 7d:6d:d0:5c:ca:aa:54:39:cd:c8:63:c2:ba:b1:92:b9:e5:8a: 26:43:53:ac:d6:9e:ca:7b:3e:53:99:85:c0:a9:69:23:75:f4: e2:3f:81:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmEdiiaW1kd0MwqBLn4MfwyN+/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjAxMjUwNTM2NDlaFw0yNjAxMjgxNTUyNDlaMDMxMTAvBgNV BAMTKEJDRjE2MzVEQUMyOEM1NzZGRjhGRTkyQjBBMjNDODA4NkM0MDcwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMMDG6tHvt0gs5K1rKap3yzbR r1HAsZ+vJzh6AnVYPgSNBySUSF1ifP93MbjGrmkdC53rO9JCtTQjAZvVgXujq6OO VNjFX4Y16MyIzD3rHEEJPG2P/zPX6CpjkbDo4KIwyDDfTYCMUgq8pTjxmeoL8yq+ bSirJuWnqrQbNDT0q9PiZrJy09KBXyZofz+SOzHboPUosP0szhVoUYjtxUxaQxnr LFiqAPgvnBJgc2w8+cR9zajKVUSPz/LeuiVcrBblL4UDkpyoxYnkM4gimQ+hj93r 9vrysmkwhemyOO95fv+bD9AJPfLvVr6UB0izXYJf+nE2lHoqAHDhyI3Ky/cLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPFjXawoxXb/j+krCiPICGxAcM8wHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn3NqtEt7TSb82uT+jm4Q3gVAHfoID5zaoX N+GmS1yzr8wmBVZX3Ivs4AHfWMWOs6CXN4phSL7GYFLzBM4jdc9SStvssNrZB+vw jwZqdWZrRZ/FDhQAuLj/6THJSRXgcTQrfrPiyo/6EEHqRCCsk8Q882qnqKh/Jd4R qmbjY5AQwr01iDQbKZde/HK8qoJyfmWVFJdcpbvyTsLygjJCNQTjFXXs1T60N/Iy zmcDRoXe5Fw5DXRnw7dYaXOl2iV2ooe7whU2fxoBGcH2+yeyetuQHdSxoTZqyH1t 0FzKqlQ5zchjwrqxkrnliiZDU6zWnsp7PlOZhcCpaSN19OI/gR0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:49 2026 by rpki-client