This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: v1a2aLN2Cpuz7QZS/EIn3B4MDCdpEq95l4sh3Qu4Qoo= Subject key identifier: 29:0E:17:11:4C:EC:EC:AD:47:53:B8:EF:A1:7B:97:0D:F2:8F:88:7E Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 66D05AAC4E55467BD999F69713D24BD9E23616A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: D0 Signing time: Tue 20 Jan 2026 04:02:30 +0000 Manifest this update: Tue 20 Jan 2026 03:57:30 +0000 Manifest next update: Fri 23 Jan 2026 14:26:30 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) 2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: xKsfxIEo4gswKywibIyIfrULMMHDsJuIoNICuRhhufI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 14:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d0:5a:ac:4e:55:46:7b:d9:99:f6:97:13:d2:4b:d9:e2:36:16:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Jan 20 03:57:30 2026 GMT Not After : Jan 23 14:26:30 2026 GMT Subject: CN=290E17114CECECAD4753B8EFA17B970DF28F887E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:96:d9:02:37:c2:ef:4d:f0:27:a0:c4:c7: 30:46:f4:b9:c5:e9:bf:df:72:16:19:50:67:18:86: 55:57:8a:16:d4:73:db:4e:80:0e:37:61:5d:ef:b4: 15:66:5e:54:48:7f:c2:f8:b7:0a:c1:01:57:5b:42: a6:d6:11:d2:0f:8d:49:56:a4:3e:d6:1b:b4:73:80: cf:5c:f8:fc:35:bc:73:55:77:39:19:cc:5c:fe:84: a8:ec:b5:3d:ff:b3:fa:07:46:c4:41:21:9b:32:24: b2:61:a4:4c:1a:52:c7:45:24:1a:e2:da:16:7c:d1: 32:92:96:63:e0:d7:6a:b0:3b:59:5b:25:68:07:0e: d5:22:82:a4:80:f8:ef:43:06:76:74:ff:b8:85:fe: e2:7f:84:d6:57:9b:68:9e:a5:33:4f:3b:ba:16:d8: 7b:b2:ed:8b:1f:7d:ee:48:dc:2d:d8:09:ec:52:54: 82:85:f1:3a:33:cb:b2:62:74:05:9c:cb:ec:76:0d: 1a:1a:c6:28:38:b6:30:c4:09:ec:ca:0e:88:74:57: 2d:52:67:f8:ab:e1:1c:be:dd:6d:61:e0:94:f7:e3: a5:95:ec:ae:ce:a7:dc:d3:3e:dc:33:d5:15:0a:3f: c2:94:27:f6:6b:d6:4c:25:89:04:6f:82:c3:d8:f9: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:17:11:4C:EC:EC:AD:47:53:B8:EF:A1:7B:97:0D:F2:8F:88:7E X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1b:dd:30:94:da:4a:8b:97:fa:4b:04:6b:34:70:b2:a3:e6: 21:93:39:af:57:1a:cb:4f:a9:8e:e8:d5:4c:38:39:96:72:d7: f2:b4:56:65:0d:bd:bc:84:a2:35:1c:ea:0c:c6:ae:3b:84:3a: bc:77:7f:6f:9e:24:bd:15:ce:3f:48:3d:d8:a0:4c:4e:18:f6: 27:b5:26:28:57:15:fd:85:88:9e:c2:e8:e0:3c:ac:12:c6:d4: e7:e1:78:01:9a:04:9e:66:e9:6b:36:b3:f3:3c:78:2c:e5:cf: c8:d1:d8:d9:ae:26:2f:ad:4a:2f:87:8a:f8:96:e0:07:09:0e: ee:f4:38:18:85:07:e3:b6:f5:c9:52:1c:8d:75:0c:2a:f1:a4: 6b:7a:08:31:76:2c:d9:0a:f3:9b:c3:a1:0c:2a:6e:e8:10:4b: 34:c2:99:1d:44:f7:d5:4f:68:a4:97:54:f2:64:c7:22:6a:d5: ea:92:3b:73:b0:cd:86:49:03:5c:1e:b6:61:f5:a8:2b:03:bf: 89:54:18:c9:fa:91:1e:15:80:50:2b:28:b9:37:42:6c:57:40: 22:b5:61:0f:be:1e:13:44:0c:14:01:9e:21:1f:b6:f5:9d:6e: b3:3c:81:e4:5b:d4:47:18:c0:82:63:23:b3:18:8c:06:5a:4c: 9d:cf:54:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtBarE5VRnvZmfaXE9JL2eI2FqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNjAxMjAwMzU3MzBaFw0yNjAxMjMxNDI2MzBaMDMxMTAvBgNV BAMTKDI5MEUxNzExNENFQ0VDQUQ0NzUzQjhFRkExN0I5NzBERjI4Rjg4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6npbZAjfC703wJ6DExzBG9LnF 6b/fchYZUGcYhlVXihbUc9tOgA43YV3vtBVmXlRIf8L4twrBAVdbQqbWEdIPjUlW pD7WG7RzgM9c+Pw1vHNVdzkZzFz+hKjstT3/s/oHRsRBIZsyJLJhpEwaUsdFJBri 2hZ80TKSlmPg12qwO1lbJWgHDtUigqSA+O9DBnZ0/7iF/uJ/hNZXm2iepTNPO7oW 2Huy7Ysffe5I3C3YCexSVIKF8Tozy7JidAWcy+x2DRoaxig4tjDECezKDoh0Vy1S Z/ir4Ry+3W1h4JT346WV7K7Op9zTPtwz1RUKP8KUJ/Zr1kwliQRvgsPY+fLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQ4XEUzs7K1HU7jvoXuXDfKPiH4wHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMb3TCU2kqLl/pLBGs0cLKj5iGTOa9XGstP qY7o1Uw4OZZy1/K0VmUNvbyEojUc6gzGrjuEOrx3f2+eJL0Vzj9IPdigTE4Y9ie1 JihXFf2FiJ7C6OA8rBLG1OfheAGaBJ5m6Ws2s/M8eCzlz8jR2NmuJi+tSi+HiviW 4AcJDu70OBiFB+O29clSHI11DCrxpGt6CDF2LNkK85vDoQwqbugQSzTCmR1E99VP aKSXVPJkxyJq1eqSO3OwzYZJA1wetmH1qCsDv4lUGMn6kR4VgFArKLk3QmxXQCK1 YQ++HhNEDBQBniEftvWdbrM8geRb1EcYwIJjI7MYjAZaTJ3PVMM= -----END CERTIFICATE-----Generated at Wed Jan 21 17:54:49 2026 by rpki-client