This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: 2syvGpBDRzAWEhKVZ0zvilwSHjZMhC+8WBTIYiRfLFw= Subject key identifier: BA:59:32:E0:3B:04:E6:DD:19:66:43:52:3E:65:31:D4:32:A6:8C:B0 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 6077390AF7F0618296326C92E15F87628A71A84E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: FD Signing time: Sat 31 Jan 2026 01:00:39 +0000 Manifest this update: Sat 31 Jan 2026 00:55:39 +0000 Manifest next update: Tue 03 Feb 2026 11:11:39 +0000 Files and hashes: 1: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 2: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) 3: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 4: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: fhrYbIGs1NxL/w3QCO725eoC2FPfJgf+zibicpCNMlU=) 5: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 6: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 7: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:77:39:0a:f7:f0:61:82:96:32:6c:92:e1:5f:87:62:8a:71:a8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jan 31 00:55:39 2026 GMT Not After : Feb 3 11:11:39 2026 GMT Subject: CN=BA5932E03B04E6DD196643523E6531D432A68CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:b2:ac:c6:d4:ee:43:3a:5f:f6:d8:6f:73: c3:5d:d0:cf:5a:15:28:e2:47:f4:c1:d3:31:36:8b: 1f:de:18:39:07:ae:e6:8e:be:ed:18:11:73:70:ea: fa:cd:a2:27:ad:d3:95:4e:93:2f:f4:e6:10:83:5a: 3e:8b:02:32:b8:65:a6:f9:02:f2:e8:35:4a:f5:ee: 76:b3:19:91:d9:3a:6f:b5:64:fc:0c:0c:81:32:3d: 60:19:5e:d7:54:b9:15:c8:d8:cc:2d:64:7f:36:6f: ac:35:2c:f0:20:37:a7:b0:0d:be:b9:f5:8e:9c:20: c2:3f:8a:4e:8e:66:07:da:e4:0c:9f:35:e4:31:4a: cd:86:10:55:24:5e:7e:56:a6:5c:f9:dc:7c:30:a1: dc:61:5a:d8:dd:72:92:bd:98:56:ff:35:75:70:bb: ed:1d:a4:ed:66:6a:f5:e7:7d:99:7c:62:82:75:d2: 66:93:88:a7:7d:d7:1f:b1:ef:c9:91:29:e1:e5:7b: 03:a9:8a:88:3b:98:9f:aa:8a:f5:08:a4:cc:8a:82: 84:b6:f3:06:5d:2d:a0:d9:77:c8:33:a4:40:7e:57: 74:d2:56:4f:ae:96:fa:18:c9:d2:e9:bf:7f:3e:7c: 65:0a:9a:08:59:23:99:8b:90:79:5d:68:00:ba:69: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:32:E0:3B:04:E6:DD:19:66:43:52:3E:65:31:D4:32:A6:8C:B0 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4e:79:15:70:d4:64:3c:a8:ba:41:ea:f3:42:31:60:15:66: f8:39:d7:b9:f3:58:6f:83:c8:58:12:49:56:8e:2b:04:d2:91: 79:3c:72:b2:c8:e1:18:fe:6a:44:d2:de:86:03:2d:c8:1e:04: 4f:05:7e:99:60:d6:08:0f:b4:1e:22:36:16:88:f9:78:29:13: 09:c4:6d:c0:67:1f:32:6e:66:b7:64:5f:ae:18:c8:9d:36:b5: eb:56:5d:ee:3d:8a:f4:b9:3d:48:9f:04:87:28:d9:3a:40:ea: 3c:b3:f7:5c:f3:9c:0b:11:3a:6f:5c:0b:fe:65:d4:48:4d:29: c6:27:40:42:21:f8:ea:91:0b:a8:35:7d:e6:86:3e:e3:0a:aa: 65:f1:f6:aa:c5:e7:0c:31:eb:93:ea:ce:48:dd:1e:23:ba:59: 24:a4:73:0a:26:b7:04:f4:fa:b7:c9:8b:35:47:e2:b9:cb:c4: 21:03:56:3e:12:f1:38:e1:38:20:e3:3a:3f:91:ed:90:d8:29: 9e:ec:ed:67:aa:1b:b5:ea:62:84:00:54:b6:6d:d1:7d:61:1b: 4a:62:b0:6a:ef:be:d1:45:6b:05:c6:d3:37:03:9c:07:a9:be: 63:53:a8:a5:d5:4d:69:7f:fc:72:f8:5e:6c:62:9b:0b:a9:46: df:f9:10:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHc5CvfwYYKWMmyS4V+HYopxqE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNjAxMzEwMDU1MzlaFw0yNjAyMDMxMTExMzlaMDMxMTAvBgNV BAMTKEJBNTkzMkUwM0IwNEU2REQxOTY2NDM1MjNFNjUzMUQ0MzJBNjhDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx97KsxtTuQzpf9thvc8Nd0M9a FSjiR/TB0zE2ix/eGDkHruaOvu0YEXNw6vrNoiet05VOky/05hCDWj6LAjK4Zab5 AvLoNUr17nazGZHZOm+1ZPwMDIEyPWAZXtdUuRXI2MwtZH82b6w1LPAgN6ewDb65 9Y6cIMI/ik6OZgfa5AyfNeQxSs2GEFUkXn5Wplz53HwwodxhWtjdcpK9mFb/NXVw u+0dpO1mavXnfZl8YoJ10maTiKd91x+x78mRKeHlewOpiog7mJ+qivUIpMyKgoS2 8wZdLaDZd8gzpEB+V3TSVk+ulvoYydLpv38+fGUKmghZI5mLkHldaAC6aSJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulky4DsE5t0ZZkNSPmUx1DKmjLAwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdOeRVw1GQ8qLpB6vNCMWAVZvg517nzWG+D yFgSSVaOKwTSkXk8crLI4Rj+akTS3oYDLcgeBE8Ffplg1ggPtB4iNhaI+XgpEwnE bcBnHzJuZrdkX64YyJ02tetWXe49ivS5PUifBIco2TpA6jyz91zznAsROm9cC/5l 1EhNKcYnQEIh+OqRC6g1feaGPuMKqmXx9qrF5wwx65PqzkjdHiO6WSSkcwomtwT0 +rfJizVH4rnLxCEDVj4S8TjhOCDjOj+R7ZDYKZ7s7WeqG7XqYoQAVLZt0X1hG0pi sGrvvtFFawXG0zcDnAepvmNTqKXVTWl//HL4XmximwupRt/5EMA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:19 2026 by rpki-client