This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: HdfPZEO3g1U3drOaD3pW7aEs2mPxwJYQdoZCYj3Ecp4= Subject key identifier: C0:68:EF:9F:96:3F:5E:AB:97:64:88:2C:87:6E:93:FF:C4:F4:EB:43 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 6E0D235A7CEF27A939FA99791FF36EFF2B0F17C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 053E Signing time: Sun 18 Jan 2026 23:31:47 +0000 Manifest this update: Sun 18 Jan 2026 23:26:47 +0000 Manifest next update: Thu 22 Jan 2026 06:14:47 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 3: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: dIHrxKYzUrrTTI25h4yiYtsBEf9BtKqJH6ItojdUDb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 06:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0d:23:5a:7c:ef:27:a9:39:fa:99:79:1f:f3:6e:ff:2b:0f:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Jan 18 23:26:47 2026 GMT Not After : Jan 22 06:14:47 2026 GMT Subject: CN=C068EF9F963F5EAB9764882C876E93FFC4F4EB43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:d3:d3:fd:f9:b6:4e:36:07:4e:2b:a5:50: 3e:0c:0a:1f:ec:cc:fc:a4:0f:bc:ae:7c:45:4c:e8: 8b:1a:32:24:71:61:4e:bb:34:3d:ca:15:20:6f:03: 9a:8f:5f:2c:ac:95:2c:87:15:1b:3b:5e:a3:3c:5e: 2c:62:07:08:ac:7f:8e:84:70:8c:4b:68:08:b9:d7: 13:fd:65:c8:8d:ec:f9:1e:cf:77:c5:53:dd:28:8d: 46:08:70:5d:67:12:6d:64:ab:e7:7d:f8:5e:bc:7d: 24:4c:8c:03:c3:d7:73:44:8a:14:e7:fc:ac:e3:8c: db:97:91:2c:16:f6:e4:f6:5d:68:2d:9a:9b:1a:9a: 2f:e7:1a:15:70:60:f1:7c:97:c9:95:bb:37:86:70: 27:3e:4c:41:60:90:79:7d:9e:17:c5:49:4a:7d:fa: 86:e4:30:3d:4b:bf:ed:a3:0c:41:53:ad:60:9a:29: fa:0e:36:ea:4b:37:e1:d8:a5:9c:37:35:2d:bd:59: 9d:4f:a2:55:7a:2c:a4:5a:b8:82:03:fd:e7:c2:39: f8:bf:50:6d:a9:6e:44:51:ce:cf:16:45:b6:f6:1d: a2:b8:47:3a:71:c3:ec:d3:e0:3d:f5:cd:4e:4a:9b: cf:e0:e8:aa:4c:8f:1b:4b:60:22:ee:73:22:24:69: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:68:EF:9F:96:3F:5E:AB:97:64:88:2C:87:6E:93:FF:C4:F4:EB:43 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a0:ba:5c:8e:1d:63:70:cd:77:47:05:8f:51:b0:9a:76:24: 56:c6:cb:8a:af:11:29:c7:61:8a:fe:a6:9e:d9:7c:32:41:9f: 1e:98:f3:a5:d4:24:44:92:a2:10:5c:44:3f:53:5c:db:fd:7f: 84:c8:fe:9c:e4:50:28:7c:3a:f9:a7:c3:4f:67:be:ca:14:ce: cb:b2:7b:f8:d2:c7:36:2d:fd:f9:cf:ae:ac:a7:0b:bf:60:16: 89:cb:24:16:98:e0:b3:88:5e:84:46:98:9f:2e:29:95:f7:5f: 1b:fc:b5:92:c4:40:3b:0d:eb:b2:ff:a1:4f:d2:e7:82:4d:1f: 73:47:5b:3b:24:74:95:5b:91:20:5b:48:16:89:76:ab:2e:ea: 20:48:19:94:f2:98:7a:c0:a4:58:d1:41:82:4c:fc:8c:67:09: fd:94:af:55:b4:0f:54:70:5c:25:33:05:4c:9d:53:95:a7:74: 7c:1c:00:19:44:38:e7:59:d3:9d:cf:16:3a:6e:a2:fc:5a:84: 62:38:d4:9b:da:14:6b:35:88:40:90:84:63:c8:57:f3:ce:93: d6:c2:04:35:c8:2b:66:d8:c9:7e:32:26:4e:88:02:7f:0c:cd: 05:68:aa:ab:b9:a2:c4:c7:27:e4:fc:5d:ad:7f:5a:27:2d:74: be:84:1d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbg0jWnzvJ6k5+pl5H/Nu/ysPF8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNjAxMTgyMzI2NDdaFw0yNjAxMjIwNjE0NDdaMDMxMTAvBgNV BAMTKEMwNjhFRjlGOTYzRjVFQUI5NzY0ODgyQzg3NkU5M0ZGQzRGNEVCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25NPT/fm2TjYHTiulUD4MCh/s zPykD7yufEVM6IsaMiRxYU67ND3KFSBvA5qPXyyslSyHFRs7XqM8XixiBwisf46E cIxLaAi51xP9ZciN7Pkez3fFU90ojUYIcF1nEm1kq+d9+F68fSRMjAPD13NEihTn /KzjjNuXkSwW9uT2XWgtmpsami/nGhVwYPF8l8mVuzeGcCc+TEFgkHl9nhfFSUp9 +obkMD1Lv+2jDEFTrWCaKfoONupLN+HYpZw3NS29WZ1PolV6LKRauIID/efCOfi/ UG2pbkRRzs8WRbb2HaK4Rzpxw+zT4D31zU5Km8/g6KpMjxtLYCLucyIkadpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGjvn5Y/XquXZIgsh26T/8T060MwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFegulyOHWNwzXdHBY9RsJp2JFbGy4qvESnH YYr+pp7ZfDJBnx6Y86XUJESSohBcRD9TXNv9f4TI/pzkUCh8Ovmnw09nvsoUzsuy e/jSxzYt/fnPrqynC79gFonLJBaY4LOIXoRGmJ8uKZX3Xxv8tZLEQDsN67L/oU/S 54JNH3NHWzskdJVbkSBbSBaJdqsu6iBIGZTymHrApFjRQYJM/IxnCf2Ur1W0D1Rw XCUzBUydU5WndHwcABlEOOdZ053PFjpuovxahGI41JvaFGs1iECQhGPIV/POk9bC BDXIK2bYyX4yJk6IAn8MzQVoqqu5osTHJ+T8Xa1/WictdL6EHQc= -----END CERTIFICATE-----Generated at Mon Jan 19 20:03:06 2026 by rpki-client