This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: Ed82r42JNFSddLdNnC2UHlZmEHMTIh9dM7a83cuzmA8= Subject key identifier: 1E:4E:59:2F:F9:A5:27:64:B1:72:3D:38:C3:78:5A:A6:05:25:28:A0 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 1B03504DE2EF6A4F735D4AD089B7054A7B5C6BB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0249 Signing time: Thu 08 Jan 2026 14:40:52 +0000 Manifest this update: Thu 08 Jan 2026 14:35:52 +0000 Manifest next update: Mon 12 Jan 2026 01:26:52 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: fR+mCtvpLj2cBVwMBDAR70MB2oIk5JUCWyyd01bwCK4=) 3: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 4: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 5: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 01:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:03:50:4d:e2:ef:6a:4f:73:5d:4a:d0:89:b7:05:4a:7b:5c:6b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Jan 8 14:35:52 2026 GMT Not After : Jan 12 01:26:52 2026 GMT Subject: CN=1E4E592FF9A52764B1723D38C3785AA6052528A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:80:5d:af:c1:60:2a:12:3f:bf:33:02:b5: 66:5a:72:2a:94:5a:cc:26:fd:fb:dc:fd:5c:42:9a: 46:f3:c0:ce:4d:8a:42:ad:3d:15:aa:db:7d:d4:d0: 66:5d:82:92:f0:ba:80:65:a2:bf:a4:ae:c8:0f:b5: 1a:99:40:72:d6:48:b5:dd:92:c9:6c:c7:4f:1c:21: ef:8e:1e:d6:e0:81:ba:92:91:68:57:b7:f2:0f:4a: 1e:18:4a:7a:72:7a:b9:7e:4a:81:00:96:2d:a2:44: cc:6c:68:ce:22:d9:0f:cd:db:1e:96:0c:ac:29:99: 59:a9:f7:5d:e7:04:f4:8d:14:0c:fa:91:62:c3:89: 50:5c:9a:dd:63:5b:f3:e7:66:06:74:b7:3a:24:d9: 9e:bf:0d:d8:20:f7:c4:05:db:3b:c2:23:35:05:d6: 2b:6f:39:ac:18:ac:71:65:9a:c5:d3:a0:69:84:10: d6:5d:ae:92:70:e7:21:de:39:5b:d0:41:db:c6:2f: 1b:8d:af:52:a6:d9:02:32:44:01:26:88:f0:06:ad: da:d7:bd:42:85:20:df:94:ce:4e:11:c8:4a:df:06: 10:95:e1:3b:e2:53:ef:4f:5d:24:5a:9a:1f:30:f1: cf:3f:77:8e:e3:4c:66:d2:7b:64:be:b5:40:5f:d7: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4E:59:2F:F9:A5:27:64:B1:72:3D:38:C3:78:5A:A6:05:25:28:A0 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:fa:4a:a0:9a:7a:95:34:4c:cc:8b:9d:8b:eb:c2:e6:88: 03:06:c8:7b:b7:30:a6:f5:5c:79:fe:45:5c:10:28:17:25:66: 0c:58:02:1d:b3:2a:d2:1f:84:bd:40:4b:00:d3:15:e7:08:01: 1a:df:55:cd:05:ab:41:34:6a:63:83:f4:37:0d:7e:fe:15:68: 85:60:5f:1e:41:74:90:fa:c8:6b:1a:78:06:9a:00:5c:85:cc: 31:b4:88:d3:1f:00:a1:bb:c2:21:5c:98:2a:3c:54:38:86:39: fc:df:09:ae:06:9d:05:95:5f:fc:04:85:04:4c:e9:31:67:39: dc:f0:f2:d6:8e:58:02:1e:5d:00:ae:0e:31:8e:1c:24:58:45: d3:84:a7:22:c7:9b:bd:ee:2c:09:fc:95:70:67:af:fd:ca:d4: 94:43:cb:42:52:06:5d:d5:87:59:db:3d:e7:b4:1c:c7:a7:fe: 08:cd:d2:ea:ff:99:d9:c5:a7:7a:77:a0:67:5d:c8:95:6b:22: 87:e5:77:98:e1:39:2d:b1:63:c9:92:c4:c5:01:54:79:64:d2: 83:b3:c4:f4:f2:6c:c9:f8:45:9c:0e:4b:6b:f7:32:7f:de:c1: b6:40:1c:a7:1e:bd:d1:df:26:4c:4a:87:e6:eb:cc:e1:fd:c2: 09:70:7a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwNQTeLvak9zXUrQibcFSntca7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNjAxMDgxNDM1NTJaFw0yNjAxMTIwMTI2NTJaMDMxMTAvBgNV BAMTKDFFNEU1OTJGRjlBNTI3NjRCMTcyM0QzOEMzNzg1QUE2MDUyNTI4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIp4Bdr8FgKhI/vzMCtWZaciqU Wswm/fvc/VxCmkbzwM5NikKtPRWq233U0GZdgpLwuoBlor+krsgPtRqZQHLWSLXd kslsx08cIe+OHtbggbqSkWhXt/IPSh4YSnpyerl+SoEAli2iRMxsaM4i2Q/N2x6W DKwpmVmp913nBPSNFAz6kWLDiVBcmt1jW/PnZgZ0tzok2Z6/Ddgg98QF2zvCIzUF 1itvOawYrHFlmsXToGmEENZdrpJw5yHeOVvQQdvGLxuNr1Km2QIyRAEmiPAGrdrX vUKFIN+Uzk4RyErfBhCV4TviU+9PXSRamh8w8c8/d47jTGbSe2S+tUBf103HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHk5ZL/mlJ2Sxcj04w3hapgUlKKAwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvH+kqgmnqVNEzMi52L68LmiAMGyHu3MKb1 XHn+RVwQKBclZgxYAh2zKtIfhL1ASwDTFecIARrfVc0Fq0E0amOD9DcNfv4VaIVg Xx5BdJD6yGsaeAaaAFyFzDG0iNMfAKG7wiFcmCo8VDiGOfzfCa4GnQWVX/wEhQRM 6TFnOdzw8taOWAIeXQCuDjGOHCRYRdOEpyLHm73uLAn8lXBnr/3K1JRDy0JSBl3V h1nbPee0HMen/gjN0ur/mdnFp3p3oGddyJVrIofld5jhOS2xY8mSxMUBVHlk0oOz xPTybMn4RZwOS2v3Mn/ewbZAHKcevdHfJkxKh+brzOH9wglwei8= -----END CERTIFICATE-----Generated at Fri Jan 9 18:32:54 2026 by rpki-client