This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: p4q7pSE8iQDpM3GvSBvhiE6sJAiRjSv5d2qYf+39WTI= Subject key identifier: 5E:35:EE:89:11:89:02:28:C8:3F:FC:5D:70:B5:4A:CE:65:0F:94:D6 Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 65C519CCD87825CEAE0C2BD2B5326C56219C4295 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 01CA Signing time: Wed 21 Jan 2026 11:01:48 +0000 Manifest this update: Wed 21 Jan 2026 10:56:48 +0000 Manifest next update: Sat 24 Jan 2026 19:55:48 +0000 Files and hashes: 1: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: Qe1lIzeiYsY5bgt6whfcVXBOffpd8fNyE4oADwVEVU0=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: Er3SZg2wUj/P2Phj94Rs/pKQreK157hBoR/0FApk3DI=) 3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: NgiCiwYgDeYQaPatps9fGhPQzocYHvig3vWSvQTITq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c5:19:cc:d8:78:25:ce:ae:0c:2b:d2:b5:32:6c:56:21:9c:42:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Jan 21 10:56:48 2026 GMT Not After : Jan 24 19:55:48 2026 GMT Subject: CN=5E35EE8911890228C83FFC5D70B54ACE650F94D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:21:36:88:cf:a9:a7:52:24:ed:ee:a0:19: 45:70:bc:21:1a:89:52:60:fb:d3:5b:ca:09:11:0f: 94:e3:e4:fc:14:87:e3:de:1e:ed:ba:65:67:67:c8: d3:ab:38:ef:ea:56:b5:dc:f1:79:96:39:33:7c:a0: 5f:a4:4d:34:65:47:fb:0a:5b:e7:95:9c:74:e5:9b: f3:bf:34:16:d0:6b:0a:d6:56:a1:d8:da:7d:a1:a7: 89:af:12:ce:5c:b4:2f:ba:49:f3:03:b6:54:3d:8b: 55:33:c6:79:eb:4a:87:2d:7d:3a:33:ac:36:9d:cc: 49:aa:59:ba:b0:61:d2:82:2c:b9:c3:58:e6:98:80: a0:31:13:36:74:a7:3e:a4:72:9a:44:fe:e6:8d:8e: e1:ff:be:4f:81:83:0a:8d:ef:5f:93:d4:c5:ae:21: b0:41:c4:61:42:7a:1d:ff:b7:e7:6b:03:9c:5b:81: 83:ba:da:0e:d7:8f:65:1f:de:a1:d4:ba:c0:cf:4c: 61:e1:cc:95:35:ec:3e:c7:78:04:b9:91:f2:d0:5c: d5:4f:be:5f:a9:50:28:af:f6:a5:83:c7:a0:b2:ad: 85:cf:33:d2:fd:7e:16:2f:67:04:28:f1:36:86:47: 1e:b4:28:4b:72:d2:39:6b:2d:a5:6a:81:be:5a:79: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:EE:89:11:89:02:28:C8:3F:FC:5D:70:B5:4A:CE:65:0F:94:D6 X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:26:1a:3a:6e:ff:ef:72:1c:ca:b1:73:1b:d2:40:ae:94:58: 50:5d:70:cc:3b:0a:de:bb:21:53:8f:2c:7b:fc:8d:e1:f9:ed: 48:a5:79:aa:74:00:a2:70:e4:8e:b9:81:6f:08:cb:a8:d1:80: a8:b2:fa:be:e3:dc:0e:69:9e:70:22:dc:30:5c:55:77:34:65: 8b:85:9a:eb:74:6b:f3:fe:2a:4c:d7:3c:65:86:23:2e:b0:32: 51:67:80:8c:b4:b8:64:b2:81:bc:2c:b4:da:38:15:67:34:ff: 6b:20:88:f8:5e:c9:0f:6c:8d:b3:a0:65:3f:8d:c3:10:35:48: 11:2c:42:51:a9:81:15:15:53:12:e3:3d:d1:de:75:f8:13:ec: 2b:64:ab:f9:3c:8d:36:63:f9:4d:d2:ea:ba:d2:8b:ca:3b:00: 78:9d:c2:72:9c:b2:9c:4f:e1:ea:f5:7e:de:a0:a7:b8:f6:ef: 24:68:47:35:9c:ef:51:2f:f2:e9:4e:1c:b6:27:cc:a1:45:26: fd:ad:33:46:ba:32:f2:71:05:e2:9a:c5:92:5c:be:fa:f9:80: de:b7:47:03:ed:43:f1:e6:75:d0:d7:39:3d:30:60:cb:67:1d: 59:c9:9f:b8:37:0d:f0:36:f4:6d:4c:3b:e8:d2:d6:e0:4c:45: d1:83:22:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcUZzNh4Jc6uDCvStTJsViGcQpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNjAxMjExMDU2NDhaFw0yNjAxMjQxOTU1NDhaMDMxMTAvBgNV BAMTKDVFMzVFRTg5MTE4OTAyMjhDODNGRkM1RDcwQjU0QUNFNjUwRjk0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2iE2iM+pp1Ik7e6gGUVwvCEa iVJg+9NbygkRD5Tj5PwUh+PeHu26ZWdnyNOrOO/qVrXc8XmWOTN8oF+kTTRlR/sK W+eVnHTlm/O/NBbQawrWVqHY2n2hp4mvEs5ctC+6SfMDtlQ9i1UzxnnrSoctfToz rDadzEmqWbqwYdKCLLnDWOaYgKAxEzZ0pz6kcppE/uaNjuH/vk+BgwqN71+T1MWu IbBBxGFCeh3/t+drA5xbgYO62g7Xj2Uf3qHUusDPTGHhzJU17D7HeAS5kfLQXNVP vl+pUCiv9qWDx6CyrYXPM9L9fhYvZwQo8TaGRx60KEty0jlrLaVqgb5aeRvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXjXuiRGJAijIP/xdcLVKzmUPlNYwHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkmGjpu/+9yHMqxcxvSQK6UWFBdcMw7Ct67 IVOPLHv8jeH57Uileap0AKJw5I65gW8Iy6jRgKiy+r7j3A5pnnAi3DBcVXc0ZYuF mut0a/P+KkzXPGWGIy6wMlFngIy0uGSygbwstNo4FWc0/2sgiPheyQ9sjbOgZT+N wxA1SBEsQlGpgRUVUxLjPdHedfgT7Ctkq/k8jTZj+U3S6rrSi8o7AHidwnKcspxP 4er1ft6gp7j27yRoRzWc71Ev8ulOHLYnzKFFJv2tM0a6MvJxBeKaxZJcvvr5gN63 RwPtQ/HmddDXOT0wYMtnHVnJn7g3DfA29G1MO+jS1uBMRdGDIkc= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:54 2026 by rpki-client