This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: q3bLi/OeBWWzxDxAv/DgKyPmtskoUj4jrh71a892zgY= Subject key identifier: 31:72:80:C9:60:43:0C:AF:60:69:6B:52:8B:CC:88:C2:3C:E9:B5:1D Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 72395B7A53CDD58B43B40F77ECB10A58044EE2F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 0548 Signing time: Sat 31 Jan 2026 06:01:38 +0000 Manifest this update: Sat 31 Jan 2026 05:56:38 +0000 Manifest next update: Tue 03 Feb 2026 08:59:38 +0000 Files and hashes: 1: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) 2: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) 3: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: e/68VZtKi/cryK6iq9RqkrXmwvjArmWpbmbmughqKtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:39:5b:7a:53:cd:d5:8b:43:b4:0f:77:ec:b1:0a:58:04:4e:e2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Jan 31 05:56:38 2026 GMT Not After : Feb 3 08:59:38 2026 GMT Subject: CN=317280C960430CAF60696B528BCC88C23CE9B51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:de:4c:21:53:46:00:e3:88:26:a5:b1:a1: fc:45:99:ad:2d:26:bc:16:5a:6d:0e:5a:15:25:8e: 20:01:f4:64:42:60:2d:e1:e3:cb:d7:59:ef:5d:77: c9:6e:a8:51:f4:a7:21:9f:eb:53:22:c1:ac:7b:00: b5:1d:bf:dc:ca:37:31:a6:4b:fc:8f:4c:f9:70:fe: de:ff:7b:e4:54:2e:a1:38:46:b4:b8:54:ea:c7:d8: 1f:29:51:66:da:ca:c6:2e:b6:a9:a0:56:64:67:2d: c7:b4:84:2e:f3:68:87:a4:2b:ac:d5:cb:cc:1c:74: 20:cd:22:c4:7e:11:fc:89:38:09:37:de:c5:25:04: 96:6e:e7:1d:d9:29:1a:86:2c:c2:39:6d:e5:23:5a: 64:6e:e6:3c:99:22:8e:d2:94:8e:e4:89:e9:a1:05: be:db:83:83:12:be:74:f2:a1:4a:c4:45:e3:2b:53: e9:8a:52:c3:4c:a7:1e:3c:43:3d:5d:0b:7d:ba:aa: a0:98:4b:5b:c2:4f:fc:a5:6e:3a:78:e3:59:df:5b: 7f:75:7a:a9:f4:bd:4b:12:f1:d2:7e:dc:04:5a:a1: 40:16:78:9c:34:84:e1:a7:06:16:e2:24:e2:c3:a3: ac:ea:93:fa:bc:30:c5:a7:f5:e0:c1:7c:93:68:8d: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:80:C9:60:43:0C:AF:60:69:6B:52:8B:CC:88:C2:3C:E9:B5:1D X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e8:18:31:dd:99:58:cd:22:31:d8:e9:0d:ca:e5:4a:86:96: 10:49:d7:e4:54:eb:0f:79:8f:6b:93:0e:fc:e3:1b:15:bb:d2: 27:1c:44:45:3c:88:79:a5:0c:8d:d4:56:35:3f:d7:94:5b:4d: 30:39:c7:6e:46:b5:01:92:d0:bd:cf:55:74:d7:77:4f:43:44: 41:57:ab:d9:65:dc:0a:57:eb:12:29:42:5f:54:35:ef:40:92: d7:58:8c:85:b0:77:ac:5f:72:32:a4:a0:13:8f:d6:77:41:db: 50:25:91:37:62:d2:6c:cb:b2:7b:72:3b:38:19:d1:61:39:4a: 81:09:60:1c:b8:04:24:be:92:45:88:55:29:db:60:3e:db:67: 8f:e9:e7:0d:7e:c7:93:3c:2a:fc:f9:95:e7:fd:c5:5e:58:53: cd:93:42:da:11:5a:f9:02:ae:c3:19:91:27:29:c1:17:6c:d0: 9c:b5:af:af:58:1c:0a:dc:e1:4d:a3:88:85:21:70:80:94:f5: ac:ed:15:32:fb:2a:a5:ec:75:54:c5:41:a1:c4:23:9b:12:42: ab:a2:91:40:e5:17:7f:09:33:7a:61:7f:d0:90:b2:f1:76:dd: 26:a1:a5:d8:01:55:c2:4a:6f:8e:0d:93:5c:57:28:52:74:57: ff:ff:b6:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjlbelPN1YtDtA937LEKWARO4vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNjAxMzEwNTU2MzhaFw0yNjAyMDMwODU5MzhaMDMxMTAvBgNV BAMTKDMxNzI4MEM5NjA0MzBDQUY2MDY5NkI1MjhCQ0M4OEMyM0NFOUI1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRlN5MIVNGAOOIJqWxofxFma0t JrwWWm0OWhUljiAB9GRCYC3h48vXWe9dd8luqFH0pyGf61Miwax7ALUdv9zKNzGm S/yPTPlw/t7/e+RULqE4RrS4VOrH2B8pUWbaysYutqmgVmRnLce0hC7zaIekK6zV y8wcdCDNIsR+EfyJOAk33sUlBJZu5x3ZKRqGLMI5beUjWmRu5jyZIo7SlI7kiemh Bb7bg4MSvnTyoUrEReMrU+mKUsNMpx48Qz1dC326qqCYS1vCT/ylbjp441nfW391 eqn0vUsS8dJ+3ARaoUAWeJw0hOGnBhbiJOLDo6zqk/q8MMWn9eDBfJNojeSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMXKAyWBDDK9gaWtSi8yIwjzptR0wHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvoGDHdmVjNIjHY6Q3K5UqGlhBJ1+RU6w95 j2uTDvzjGxW70iccREU8iHmlDI3UVjU/15RbTTA5x25GtQGS0L3PVXTXd09DREFX q9ll3ApX6xIpQl9UNe9AktdYjIWwd6xfcjKkoBOP1ndB21AlkTdi0mzLsntyOzgZ 0WE5SoEJYBy4BCS+kkWIVSnbYD7bZ4/p5w1+x5M8Kvz5lef9xV5YU82TQtoRWvkC rsMZkScpwRds0Jy1r69YHArc4U2jiIUhcICU9aztFTL7KqXsdVTFQaHEI5sSQqui kUDlF38JM3phf9CQsvF23SahpdgBVcJKb44Nk1xXKFJ0V///ttE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:17 2026 by rpki-client