This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: hdejF6ABO4IdPVlX6PB82JIBfWGvE9oy6CeqSea5Vz4= Subject key identifier: ED:AE:AD:29:7C:37:66:2E:47:5F:F8:EA:B5:C9:0D:79:1D:F2:30:42 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 1A036ED7168967C26A50B5749E5FFCD57F9B08FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: 0110 Signing time: Mon 19 Jan 2026 13:01:55 +0000 Manifest this update: Mon 19 Jan 2026 12:56:55 +0000 Manifest next update: Thu 22 Jan 2026 16:35:55 +0000 Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: cmh/ytZhBhT4551f2Av3g/21pP0GL4NGtKrpiXu9VzM=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 16:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:03:6e:d7:16:89:67:c2:6a:50:b5:74:9e:5f:fc:d5:7f:9b:08:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Jan 19 12:56:55 2026 GMT Not After : Jan 22 16:35:55 2026 GMT Subject: CN=EDAEAD297C37662E475FF8EAB5C90D791DF23042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:21:bb:02:e8:da:6c:44:5a:2e:09:37:80: 80:f2:15:30:4a:b3:08:2d:57:3d:7f:c5:7c:3d:ab: 3a:f4:9f:3d:2d:19:fc:d0:60:88:34:5e:4a:e1:c9: a3:13:e6:f0:87:12:a3:ea:94:58:f5:68:5a:97:7f: 8e:31:77:0f:48:be:23:24:19:3e:7e:47:0c:13:29: bd:ee:90:26:79:bd:69:92:72:cd:cb:8f:b6:00:4b: 39:36:8b:2c:69:55:df:96:6f:9a:54:f4:d9:9e:36: f1:13:3d:43:fb:2d:41:53:98:a9:1b:42:55:8b:d5: cd:f3:ac:6e:2b:08:6a:59:64:19:60:24:52:91:44: 63:be:42:69:f0:f3:f2:cf:66:ed:37:ea:16:4a:39: eb:5c:ea:51:eb:34:39:92:32:08:b4:90:91:de:c1: f3:35:fa:91:5a:4d:a2:9d:4c:6b:cc:62:25:11:ba: 02:40:cc:37:b3:26:46:11:c6:dd:fb:c0:70:63:f8: 45:6a:97:00:14:61:0a:3f:31:3f:16:e9:7b:62:ad: 5c:1b:be:dd:c4:b1:3d:c5:87:bf:83:b9:90:56:90: 61:25:8c:eb:f9:f9:42:3d:35:b2:31:3a:2c:43:7e: 3a:11:e5:53:db:3e:99:23:d7:dd:9c:06:7b:fc:e5: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AE:AD:29:7C:37:66:2E:47:5F:F8:EA:B5:C9:0D:79:1D:F2:30:42 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a1:e6:e8:cf:52:36:76:29:4f:68:8c:d7:92:1e:07:1e:04: e9:01:7d:22:1d:60:55:33:1f:37:13:7a:fe:3d:56:8c:7e:88: 6a:7d:4d:fd:59:36:e9:38:dd:0d:e8:b1:f1:19:f4:4c:9e:06: 9b:81:d7:15:da:52:c4:9a:69:b7:b6:5e:e9:0f:a0:db:de:be: 7f:45:0b:c2:7b:b3:b5:86:f7:08:d9:36:60:53:b7:c9:ac:9f: c8:e3:ae:6a:56:33:7a:89:56:86:04:4d:aa:7e:8e:cc:d8:66: 31:81:d5:fe:53:a6:74:7e:09:e8:0d:81:75:28:5f:c8:ea:58: ae:e4:c8:88:c3:0e:57:ea:5c:8f:c8:b2:cb:19:35:70:ae:8a: 67:d4:3d:db:8d:3b:02:24:df:e5:d4:89:ac:fc:55:41:d8:b4: c0:1e:a0:d0:c8:ca:33:1a:dd:f0:fa:87:76:9a:fd:cd:71:78: 7e:a6:c9:ed:a8:1f:da:2f:92:1d:e6:5d:2b:d8:a9:d3:72:b9: 7b:d3:e7:e1:6e:22:3e:b8:1f:0d:4a:30:b5:57:24:b7:28:47: 8d:42:4c:f8:c0:94:10:c8:ee:53:2f:4b:ba:84:67:8d:f3:de: 51:9d:f9:43:2f:43:30:c2:bf:90:1d:d1:db:c5:f7:e8:3d:89: 27:45:81:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgNu1xaJZ8JqULV0nl/81X+bCPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNjAxMTkxMjU2NTVaFw0yNjAxMjIxNjM1NTVaMDMxMTAvBgNV BAMTKEVEQUVBRDI5N0MzNzY2MkU0NzVGRjhFQUI1QzkwRDc5MURGMjMwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgSG7AujabERaLgk3gIDyFTBK swgtVz1/xXw9qzr0nz0tGfzQYIg0XkrhyaMT5vCHEqPqlFj1aFqXf44xdw9IviMk GT5+RwwTKb3ukCZ5vWmScs3Lj7YASzk2iyxpVd+Wb5pU9NmeNvETPUP7LUFTmKkb QlWL1c3zrG4rCGpZZBlgJFKRRGO+Qmnw8/LPZu036hZKOetc6lHrNDmSMgi0kJHe wfM1+pFaTaKdTGvMYiURugJAzDezJkYRxt37wHBj+EVqlwAUYQo/MT8W6XtirVwb vt3EsT3Fh7+DuZBWkGEljOv5+UI9NbIxOixDfjoR5VPbPpkj192cBnv85f4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7a6tKXw3Zi5HX/jqtckNeR3yMEIwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGh5ujPUjZ2KU9ojNeSHgceBOkBfSIdYFUz HzcTev49Vox+iGp9Tf1ZNuk43Q3osfEZ9EyeBpuB1xXaUsSaabe2XukPoNvevn9F C8J7s7WG9wjZNmBTt8msn8jjrmpWM3qJVoYETap+jszYZjGB1f5TpnR+CegNgXUo X8jqWK7kyIjDDlfqXI/IsssZNXCuimfUPduNOwIk3+XUiaz8VUHYtMAeoNDIyjMa 3fD6h3aa/c1xeH6mye2oH9ovkh3mXSvYqdNyuXvT5+FuIj64Hw1KMLVXJLcoR41C TPjAlBDI7lMvS7qEZ43z3lGd+UMvQzDCv5Ad0dvF9+g9iSdFgfY= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:31 2026 by rpki-client