This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: wTkTp97/Kw4altx9qxC7UvDJR5gzUMJHA/gdduH//to= Subject key identifier: D6:2D:C2:E9:C0:50:E7:45:5E:C2:76:2D:48:36:32:D9:FF:1A:47:07 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 548768B8289AE146BAA336FCC237D473813A4FAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: 0166 Signing time: Sun 25 Jan 2026 11:31:29 +0000 Manifest this update: Sun 25 Jan 2026 11:26:29 +0000 Manifest next update: Wed 28 Jan 2026 14:15:29 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: xozAiF19qdvD8L8pC2OGg0/fqZR+yELFs8DYCAlXKWU=) 2: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: nu95xE2AlpyfWfx+jfkA8/1P0h3wPdS+nQrtHb2Y+ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:87:68:b8:28:9a:e1:46:ba:a3:36:fc:c2:37:d4:73:81:3a:4f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Jan 25 11:26:29 2026 GMT Not After : Jan 28 14:15:29 2026 GMT Subject: CN=D62DC2E9C050E7455EC2762D483632D9FF1A4707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:d5:e1:75:04:6f:40:7b:27:3d:25:29:8e: 24:90:3f:38:62:07:5c:5e:df:00:8a:a4:e5:26:a5: 2b:4f:db:ed:72:84:25:38:1a:8e:ba:fc:41:4f:31: ef:f4:be:2c:00:21:bc:a0:2d:f0:cc:4f:8d:db:9b: 32:b9:9c:be:b0:cf:54:18:03:26:ca:5a:22:7c:70: d7:3e:38:37:5e:2b:f3:f6:19:eb:aa:e9:f4:88:15: 48:08:e4:60:cb:fd:92:ad:65:5c:6b:83:18:27:d8: 45:b7:a2:33:79:56:46:7a:0b:1f:ab:48:aa:e8:53: ef:c5:d7:88:f8:06:b9:21:c6:b0:49:78:d8:5d:92: 64:5b:29:88:90:b6:5c:c1:bf:35:5a:ad:8f:6b:ca: 79:c9:65:c8:70:8a:a3:83:dd:c9:06:10:ca:5e:73: 4f:4f:ef:81:5d:72:88:47:0b:06:07:e6:d1:8a:7a: 4e:a7:7a:24:e5:61:28:df:f7:70:63:14:90:7c:51: 51:4b:2b:96:fa:d8:10:73:cc:54:87:fb:b4:da:ee: 69:09:31:aa:00:aa:fd:c7:d4:43:8d:e8:87:d0:6e: 62:3c:9e:f2:55:a7:b4:4d:06:1b:5c:ad:a4:39:9a: ce:45:65:84:24:b6:75:be:73:54:39:f6:b1:b2:06: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2D:C2:E9:C0:50:E7:45:5E:C2:76:2D:48:36:32:D9:FF:1A:47:07 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:38:a1:6a:60:f0:a7:ef:47:e0:1d:31:1b:1d:a0:07:19:e8: de:80:7c:32:ed:14:41:7f:21:1c:89:f4:ba:43:dd:ed:dc:74: 77:06:dd:d9:0d:c2:93:00:6c:c8:5e:17:2a:ba:a9:65:66:96: 63:0e:7b:71:74:7a:28:06:db:64:17:e9:20:35:cb:41:81:b3: 36:8b:4e:64:1d:b4:20:c9:45:62:25:04:93:ff:17:00:61:ac: 13:d3:a0:01:8e:16:10:ac:72:54:47:72:8d:c2:83:c1:da:16: b6:22:52:fe:51:12:8a:72:74:e2:34:03:53:f2:5f:dd:be:69: 38:0a:a9:a6:7f:e4:1e:6f:84:92:66:e6:e0:c4:d6:c6:a0:95: f0:1c:08:9d:ab:e1:3a:56:aa:8c:30:3b:b0:f0:61:9b:65:1d: 2b:42:81:b8:e2:0f:0c:99:5f:42:4d:db:87:66:93:66:25:2f: 6b:e0:1d:f5:0b:98:b9:0f:e9:b1:1b:01:5f:11:bf:4d:15:0f: bc:9d:cf:34:70:91:6a:5a:01:50:e4:6d:16:d0:ae:c0:82:48: 92:20:3a:df:5e:98:72:1d:b5:d3:a3:ee:ef:bf:7b:31:7a:e7: f6:95:f2:c3:9f:8b:b0:4e:ae:f4:84:70:1c:86:b0:9a:a3:76: 52:35:04:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIdouCia4Ua6ozb8wjfUc4E6T68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNjAxMjUxMTI2MjlaFw0yNjAxMjgxNDE1MjlaMDMxMTAvBgNV BAMTKEQ2MkRDMkU5QzA1MEU3NDU1RUMyNzYyRDQ4MzYzMkQ5RkYxQTQ3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52dXhdQRvQHsnPSUpjiSQPzhi B1xe3wCKpOUmpStP2+1yhCU4Go66/EFPMe/0viwAIbygLfDMT43bmzK5nL6wz1QY AybKWiJ8cNc+ODdeK/P2Geuq6fSIFUgI5GDL/ZKtZVxrgxgn2EW3ojN5VkZ6Cx+r SKroU+/F14j4BrkhxrBJeNhdkmRbKYiQtlzBvzVarY9rynnJZchwiqOD3ckGEMpe c09P74FdcohHCwYH5tGKek6neiTlYSjf93BjFJB8UVFLK5b62BBzzFSH+7Ta7mkJ MaoAqv3H1EON6IfQbmI8nvJVp7RNBhtcraQ5ms5FZYQktnW+c1Q59rGyBuiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1i3C6cBQ50VewnYtSDYy2f8aRwcwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc4oWpg8KfvR+AdMRsdoAcZ6N6AfDLtFEF/ IRyJ9LpD3e3cdHcG3dkNwpMAbMheFyq6qWVmlmMOe3F0eigG22QX6SA1y0GBszaL TmQdtCDJRWIlBJP/FwBhrBPToAGOFhCsclRHco3Cg8HaFrYiUv5REopydOI0A1Py X92+aTgKqaZ/5B5vhJJm5uDE1saglfAcCJ2r4TpWqowwO7DwYZtlHStCgbjiDwyZ X0JN24dmk2YlL2vgHfULmLkP6bEbAV8Rv00VD7ydzzRwkWpaAVDkbRbQrsCCSJIg Ot9emHIdtdOj7u+/ezF65/aV8sOfi7BOrvSEcByGsJqjdlI1BBg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:18:17 2026 by rpki-client