This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: jASYdl19ki7Q/eJJdkBPNTvEMH4FT0ACNT21LD3xUck= Subject key identifier: 14:CA:3D:BE:DB:7D:74:23:FB:CA:E6:8A:47:1A:7F:F6:61:6A:23:D9 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 3D94C064AE53963B2C0A7F0AD9A853ECD442CB14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 0365 Signing time: Mon 26 Jan 2026 07:31:27 +0000 Manifest this update: Mon 26 Jan 2026 07:26:27 +0000 Manifest next update: Thu 29 Jan 2026 13:33:27 +0000 Files and hashes: 1: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=) 2: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 3: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: 7EcdY/TG3urPoatGIP0m/QmNgKKjhG4BeeOie4545HI=) 4: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 13:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:94:c0:64:ae:53:96:3b:2c:0a:7f:0a:d9:a8:53:ec:d4:42:cb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Jan 26 07:26:27 2026 GMT Not After : Jan 29 13:33:27 2026 GMT Subject: CN=14CA3DBEDB7D7423FBCAE68A471A7FF6616A23D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:d8:c9:fa:ce:d5:3d:91:34:b3:48:82:69: e1:3b:dc:a0:0b:8a:35:9e:65:5b:99:6b:50:ef:d6: 6a:a2:a7:e9:e2:38:e9:91:f0:f4:95:db:1d:52:12: d4:bb:11:5f:f3:e0:1b:54:dd:2e:5a:e9:82:a9:1c: fe:6d:a5:29:84:46:cc:79:ae:9a:88:12:13:5d:02: 2e:ae:46:bb:78:53:75:e2:ee:3d:5d:fe:30:15:ec: 5f:1b:f9:04:85:5a:a8:10:e7:75:bf:7f:af:da:3a: a9:18:bb:56:b0:75:c9:b9:fc:f3:ec:51:5f:f8:d5: c0:58:10:2f:96:b7:b9:23:5d:32:8e:e9:f7:7b:ea: 53:77:76:a0:95:23:20:e6:46:cb:d1:93:af:97:11: 30:75:7f:ab:58:1a:ef:d7:37:76:9b:bc:a1:65:b8: 2f:57:1d:d4:d3:a6:f7:bf:29:e3:6e:57:df:af:a2: 98:71:95:94:f1:04:7e:05:6e:95:44:ca:a8:2a:18: 42:dc:f5:52:69:5f:96:b8:8e:24:7d:2b:a1:58:be: 99:44:2e:b5:58:ef:ff:cd:19:3f:01:dd:82:c9:de: e1:47:95:30:bd:c7:2a:bc:f3:3c:67:fa:45:6e:f4: a8:36:36:8f:c4:da:89:7d:26:dc:ad:0a:ba:46:21: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:3D:BE:DB:7D:74:23:FB:CA:E6:8A:47:1A:7F:F6:61:6A:23:D9 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b3:fb:73:88:d6:15:dd:b2:ab:79:e2:34:c6:51:59:37:5e: 16:f1:89:c7:29:f4:17:b4:40:2a:74:e3:b6:ac:34:c9:7e:1e: 19:20:46:08:49:58:4f:ed:fb:dd:45:af:e1:72:6c:96:9a:ec: 9a:80:7f:00:27:b1:67:1a:a9:47:52:62:db:26:83:33:10:ca: a6:26:15:f1:fd:2e:54:9e:f0:13:5c:38:b7:e7:e8:b7:fc:e7: fd:bd:a8:2e:a3:0e:3a:e4:92:d9:cc:86:a4:bc:55:76:d6:69: 59:77:0a:76:8c:12:70:56:5d:76:2a:a2:34:99:39:9f:00:61: a2:2e:32:a7:13:3e:f6:fb:c7:98:cc:91:6a:e4:ee:c6:40:b1: b0:f3:fb:06:e6:ec:c5:c3:6e:69:36:5b:0b:8f:49:db:78:03: bc:3b:25:cc:05:63:08:df:7f:23:21:58:23:9e:40:7d:ea:aa: 8d:26:40:1c:1d:91:13:75:f4:1d:8c:8d:30:62:10:a9:7c:39: 14:9c:9b:a2:f2:3f:ef:16:5c:e8:92:db:99:57:71:0b:7b:1f: 91:e9:9f:8b:c7:8c:20:48:dc:dd:c3:08:8f:7b:48:3a:17:52: 77:98:17:4e:8a:40:76:7f:31:7f:7c:43:c0:d9:5e:ba:46:bd: 80:aa:c3:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZTAZK5TljssCn8K2ahT7NRCyxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNjAxMjYwNzI2MjdaFw0yNjAxMjkxMzMzMjdaMDMxMTAvBgNV BAMTKDE0Q0EzREJFREI3RDc0MjNGQkNBRTY4QTQ3MUE3RkY2NjE2QTIzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFR9jJ+s7VPZE0s0iCaeE73KAL ijWeZVuZa1Dv1mqip+niOOmR8PSV2x1SEtS7EV/z4BtU3S5a6YKpHP5tpSmERsx5 rpqIEhNdAi6uRrt4U3Xi7j1d/jAV7F8b+QSFWqgQ53W/f6/aOqkYu1awdcm5/PPs UV/41cBYEC+Wt7kjXTKO6fd76lN3dqCVIyDmRsvRk6+XETB1f6tYGu/XN3abvKFl uC9XHdTTpve/KeNuV9+vophxlZTxBH4FbpVEyqgqGELc9VJpX5a4jiR9K6FYvplE LrVY7//NGT8B3YLJ3uFHlTC9xyq88zxn+kVu9Kg2No/E2ol9JtytCrpGIUfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFMo9vtt9dCP7yuaKRxp/9mFqI9kwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiz+3OI1hXdsqt54jTGUVk3Xhbxiccp9Be0 QCp047asNMl+HhkgRghJWE/t+91Fr+FybJaa7JqAfwAnsWcaqUdSYtsmgzMQyqYm FfH9LlSe8BNcOLfn6Lf85/29qC6jDjrkktnMhqS8VXbWaVl3CnaMEnBWXXYqojSZ OZ8AYaIuMqcTPvb7x5jMkWrk7sZAsbDz+wbm7MXDbmk2WwuPSdt4A7w7JcwFYwjf fyMhWCOeQH3qqo0mQBwdkRN19B2MjTBiEKl8ORScm6LyP+8WXOiS25lXcQt7H5Hp n4vHjCBI3N3DCI97SDoXUneYF06KQHZ/MX98Q8DZXrpGvYCqwy8= -----END CERTIFICATE-----Generated at Tue Jan 27 14:58:35 2026 by rpki-client