This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: ehSaO71+G2LhKIZlmHltJdKCzy+gfqrx2LIuhbkvHpM= Subject key identifier: AD:53:1F:4C:2B:DF:81:D0:1B:EF:1B:76:27:FA:8C:FC:B6:00:D6:B5 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 39C855F2216BC2273723CBDCABC8138CA53DFD89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01CB Signing time: Wed 07 Jan 2026 13:31:24 +0000 Manifest this update: Wed 07 Jan 2026 13:26:24 +0000 Manifest next update: Sat 10 Jan 2026 19:21:24 +0000 Files and hashes: 1: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: NkV3vLBKpMJB+eUZFb2itNZZOcbzVrjzmWuWBF1kn7c=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: bYL3syFx6NGhqMU1M8OANCcKtX9aZc4njVRqY9dr5o8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 19:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c8:55:f2:21:6b:c2:27:37:23:cb:dc:ab:c8:13:8c:a5:3d:fd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Jan 7 13:26:24 2026 GMT Not After : Jan 10 19:21:24 2026 GMT Subject: CN=AD531F4C2BDF81D01BEF1B7627FA8CFCB600D6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:b4:6f:f8:c1:aa:54:cd:88:9a:e4:ae:9c: 3d:61:5c:f1:36:27:ed:d3:f6:78:ff:0a:84:bd:38: 51:1b:3c:f0:f8:09:d9:5f:73:5e:40:34:0b:2a:70: 7d:1e:89:29:e2:63:35:e9:65:90:97:dd:f5:86:7b: 81:28:6f:ac:d6:48:52:a1:07:95:6f:b0:93:10:51: 8c:ee:84:c8:69:b1:d5:fb:01:b6:b2:75:ed:5d:b5: 82:f1:a3:a7:c5:e9:28:4b:07:2f:0e:de:3e:e6:75: f4:29:15:d9:26:32:0f:ef:0e:db:c5:89:b1:df:9f: 3a:02:65:d9:51:fe:69:95:ce:f3:a8:ce:05:8d:95: c7:4b:5c:ea:a6:a6:af:e1:02:47:b9:27:eb:9c:4a: 64:ea:f9:a1:86:1b:90:8f:a1:3b:f1:90:fa:07:bd: 54:f6:3c:77:cb:91:5b:a7:9a:a3:1f:9f:06:2b:e4: ae:f8:e4:09:a8:0c:1e:30:00:fa:6e:01:ed:37:34: 6e:f0:d6:95:b7:db:3f:9a:31:bb:cb:c5:6b:67:73: fd:8e:1a:db:c5:76:45:b2:3b:16:34:c6:43:2f:88: c0:b3:88:53:4d:6e:96:78:29:27:5e:99:7d:3d:88: 82:8b:80:57:60:83:56:3f:72:2d:3c:d9:81:38:92: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:53:1F:4C:2B:DF:81:D0:1B:EF:1B:76:27:FA:8C:FC:B6:00:D6:B5 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a3:9f:ca:cd:08:06:50:c2:15:f8:9f:af:bd:ab:82:91:4d: b0:ee:a8:c2:14:d9:02:84:9e:19:5a:e1:5d:59:cc:6d:5c:5a: 25:53:1d:81:f6:cc:70:e8:4b:f1:7d:fe:e9:dc:7e:b3:d1:37: 6e:dd:ea:0f:2e:8a:2f:6e:d4:a9:54:22:5d:95:52:ce:10:60: ca:45:7d:d2:16:96:24:25:25:07:9a:08:4a:43:ee:74:02:fd: de:38:68:c0:ae:07:66:a8:86:b5:d1:fe:a6:43:49:a7:d0:a4: 25:96:5d:98:31:f8:85:18:db:ec:b9:d9:13:df:7e:13:db:30: c9:85:bb:db:d8:49:e7:a0:40:7a:aa:1f:e6:25:d2:10:d2:a2: 43:36:56:42:55:e4:9d:4f:bd:b0:76:6b:71:94:f2:3f:b1:50: dc:19:c0:f1:69:a1:07:62:c6:93:19:fc:bf:7a:79:1c:6e:97: aa:94:67:69:21:4b:e4:08:9f:84:06:fe:5a:a5:82:d1:b5:e7: 06:12:ba:2e:16:3d:a4:f3:58:c9:f3:b9:a2:18:cf:ef:0c:c1: ab:83:c8:7e:f1:53:e3:ff:e1:65:4b:3f:b4:33:89:b3:4c:f1: 99:36:b4:3b:71:76:84:55:e2:ce:48:9a:2a:4d:cb:f7:c1:89: 3d:a4:4a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOchV8iFrwic3I8vcq8gTjKU9/YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNjAxMDcxMzI2MjRaFw0yNjAxMTAxOTIxMjRaMDMxMTAvBgNV BAMTKEFENTMxRjRDMkJERjgxRDAxQkVGMUI3NjI3RkE4Q0ZDQjYwMEQ2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZrRv+MGqVM2ImuSunD1hXPE2 J+3T9nj/CoS9OFEbPPD4Cdlfc15ANAsqcH0eiSniYzXpZZCX3fWGe4Eob6zWSFKh B5VvsJMQUYzuhMhpsdX7Abayde1dtYLxo6fF6ShLBy8O3j7mdfQpFdkmMg/vDtvF ibHfnzoCZdlR/mmVzvOozgWNlcdLXOqmpq/hAke5J+ucSmTq+aGGG5CPoTvxkPoH vVT2PHfLkVunmqMfnwYr5K745AmoDB4wAPpuAe03NG7w1pW32z+aMbvLxWtnc/2O GtvFdkWyOxY0xkMviMCziFNNbpZ4KSdemX09iIKLgFdgg1Y/ci082YE4krVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVMfTCvfgdAb7xt2J/qM/LYA1rUwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2jn8rNCAZQwhX4n6+9q4KRTbDuqMIU2QKE nhla4V1ZzG1cWiVTHYH2zHDoS/F9/uncfrPRN27d6g8uii9u1KlUIl2VUs4QYMpF fdIWliQlJQeaCEpD7nQC/d44aMCuB2aohrXR/qZDSafQpCWWXZgx+IUY2+y52RPf fhPbMMmFu9vYSeegQHqqH+Yl0hDSokM2VkJV5J1PvbB2a3GU8j+xUNwZwPFpoQdi xpMZ/L96eRxul6qUZ2khS+QIn4QG/lqlgtG15wYSui4WPaTzWMnzuaIYz+8MwauD yH7xU+P/4WVLP7QzibNM8Zk2tDtxdoRV4s5ImipNy/fBiT2kSic= -----END CERTIFICATE-----Generated at Fri Jan 9 18:35:17 2026 by rpki-client