This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: yHCop26rnX+Y5emQcuwcXYNi5xgez9MF7nk7iV19d54= Subject key identifier: F4:FE:BD:28:B6:A7:86:A0:DF:73:90:1E:F0:F7:F8:24:D6:4A:37:72 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 2575EA0E8B7A11C376070B15FA83FBFAF1C4D29C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 014D Signing time: Tue 20 Jan 2026 03:31:48 +0000 Manifest this update: Tue 20 Jan 2026 03:26:48 +0000 Manifest next update: Fri 23 Jan 2026 14:31:48 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: FlzX4TNGWxp5+MnuceE049yTuDzoZmzrchCOmv+62WQ=) 3: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 14:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:75:ea:0e:8b:7a:11:c3:76:07:0b:15:fa:83:fb:fa:f1:c4:d2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Jan 20 03:26:48 2026 GMT Not After : Jan 23 14:31:48 2026 GMT Subject: CN=F4FEBD28B6A786A0DF73901EF0F7F824D64A3772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:6d:82:e1:55:44:84:f3:1a:f5:f8:5a:47: 99:2a:5d:ce:3e:8a:4a:39:90:5a:bf:b3:50:c8:93: 13:06:23:3d:cc:c7:57:6c:12:5e:9c:8d:ac:32:f0: 9b:02:90:81:eb:88:06:05:6b:c8:9a:f7:79:1c:3c: 61:7d:a0:32:5f:b1:d0:37:a3:18:b4:d9:a6:06:5d: f7:7c:52:8c:6e:86:4e:e9:80:a0:ab:1a:a0:0a:86: 31:4a:fb:a7:58:57:d5:99:b8:09:5f:44:e7:2d:bb: ba:51:e8:52:a4:99:c8:92:a0:34:13:6d:fd:22:e7: 7f:68:b4:68:6b:35:e2:fb:6c:ea:78:66:c7:25:d5: 49:a7:a0:8b:1c:6e:b3:2d:f8:34:e7:a0:0b:a5:60: 16:56:82:c9:24:9d:a5:eb:5d:9d:b9:2b:0c:8a:ab: 74:e0:ef:98:f4:b8:f7:48:32:22:f8:02:4f:da:fc: d2:f6:bc:fb:f5:bc:db:d3:61:85:bd:98:ff:88:65: c5:de:16:94:b6:86:38:02:5b:54:08:4a:e3:7e:34: 7b:7a:36:da:3a:a4:34:72:2b:50:75:c7:6b:b7:9b: 44:20:a6:09:e4:54:25:af:97:4b:d3:9f:ce:66:5f: 44:3a:69:fa:11:99:e5:38:f0:e3:cf:a3:bb:1c:48: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FE:BD:28:B6:A7:86:A0:DF:73:90:1E:F0:F7:F8:24:D6:4A:37:72 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ec:23:77:a4:1f:09:23:ef:c1:95:29:1f:71:0b:fa:c2:2d: 57:f0:5e:fc:13:3d:d4:4f:09:a8:9d:51:72:6e:1a:25:db:54: 89:30:0f:ca:39:d6:2d:1d:d2:fa:8e:44:2f:e8:59:a3:49:df: 24:0c:d1:8d:e0:22:51:8f:2a:ed:9c:13:3e:81:dc:04:91:01: 9a:8e:30:1f:a6:43:fd:d7:dc:37:de:3e:fb:dc:ec:70:3f:9e: 85:8b:16:0c:97:7d:9f:45:d0:ff:23:1e:a6:00:35:b7:83:f7: e7:95:a6:b1:b1:ed:5a:2e:64:85:26:b6:b6:e8:99:5b:b5:ae: df:a1:73:d2:30:70:1a:8a:d6:eb:9a:42:ee:06:b3:d9:8a:50: ad:71:2d:62:a6:2c:36:f4:2a:50:e4:88:27:67:25:6a:6e:3f: f6:4f:a8:9d:53:44:61:29:18:9b:9e:7d:c5:2a:6d:74:c3:92: 1d:03:e3:19:b6:30:ef:f7:71:09:c9:77:b1:7a:82:c5:9c:9f: 65:cc:ec:c0:28:63:04:7b:8e:4a:44:f8:73:68:9f:39:ac:9c: 17:1b:2f:f7:c9:59:b8:bc:fe:06:93:c4:00:f9:b9:36:ae:a0: 9d:c0:d9:7a:24:44:be:6b:58:b5:82:b0:2b:ef:94:c9:28:1a: 98:85:4f:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXXqDot6EcN2BwsV+oP7+vHE0pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNjAxMjAwMzI2NDhaFw0yNjAxMjMxNDMxNDhaMDMxMTAvBgNV BAMTKEY0RkVCRDI4QjZBNzg2QTBERjczOTAxRUYwRjdGODI0RDY0QTM3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoNG2C4VVEhPMa9fhaR5kqXc4+ iko5kFq/s1DIkxMGIz3Mx1dsEl6cjawy8JsCkIHriAYFa8ia93kcPGF9oDJfsdA3 oxi02aYGXfd8Uoxuhk7pgKCrGqAKhjFK+6dYV9WZuAlfROctu7pR6FKkmciSoDQT bf0i539otGhrNeL7bOp4Zscl1UmnoIscbrMt+DTnoAulYBZWgskknaXrXZ25KwyK q3Tg75j0uPdIMiL4Ak/a/NL2vPv1vNvTYYW9mP+IZcXeFpS2hjgCW1QISuN+NHt6 Nto6pDRyK1B1x2u3m0QgpgnkVCWvl0vTn85mX0Q6afoRmeU48OPPo7scSCq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9P69KLanhqDfc5Ae8Pf4JNZKN3IwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjsI3ekHwkj78GVKR9xC/rCLVfwXvwTPdRP CaidUXJuGiXbVIkwD8o51i0d0vqORC/oWaNJ3yQM0Y3gIlGPKu2cEz6B3ASRAZqO MB+mQ/3X3DfePvvc7HA/noWLFgyXfZ9F0P8jHqYANbeD9+eVprGx7VouZIUmtrbo mVu1rt+hc9IwcBqK1uuaQu4Gs9mKUK1xLWKmLDb0KlDkiCdnJWpuP/ZPqJ1TRGEp GJuefcUqbXTDkh0D4xm2MO/3cQnJd7F6gsWcn2XM7MAoYwR7jkpE+HNonzmsnBcb L/fJWbi8/gaTxAD5uTauoJ3A2XokRL5rWLWCsCvvlMkoGpiFT+I= -----END CERTIFICATE-----Generated at Wed Jan 21 12:14:47 2026 by rpki-client