This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: tMC3K34ULZZSetBk7Yqz6ykZbK8AyONE8MFDn8ZSmBE= Subject key identifier: 7C:5D:5C:80:02:8A:9D:DA:3E:BC:B9:61:04:74:6D:44:4B:FC:87:AF Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 3CB3EF812F49F5E29D239B483CB3CA2F9E9B97D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 0232 Signing time: Tue 20 Jan 2026 01:12:35 +0000 Manifest this update: Tue 20 Jan 2026 01:07:35 +0000 Manifest next update: Fri 23 Jan 2026 05:05:35 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 2: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: UIpTOEjtzK6WEM0o8H2ROuqB2kT/G3qJXdDfVh6zc5I=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 05:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b3:ef:81:2f:49:f5:e2:9d:23:9b:48:3c:b3:ca:2f:9e:9b:97:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Jan 20 01:07:35 2026 GMT Not After : Jan 23 05:05:35 2026 GMT Subject: CN=7C5D5C80028A9DDA3EBCB96104746D444BFC87AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:bd:ee:ad:a3:a3:77:04:b6:cf:af:db:92: d8:a4:78:4a:57:f8:58:9d:51:0e:c6:ab:97:fb:c7: 5b:9a:f5:b9:1c:ba:0d:82:59:97:5a:f4:f5:a9:fc: 48:dd:17:57:8b:18:92:bf:3e:b5:6c:23:32:55:0c: 35:ca:28:9e:b6:92:56:90:88:48:d2:27:8a:1a:a1: 51:19:4d:1a:9d:c0:7f:6a:e7:78:b8:19:4f:5e:1c: 9c:42:ba:14:42:d0:42:74:54:17:54:af:33:62:16: 40:c8:bb:64:c0:1e:b7:4c:b3:fc:c4:60:1f:89:8f: c9:19:c3:ee:9f:6d:59:36:0a:96:de:51:41:7c:43: 55:4a:4f:a7:1b:9a:12:95:4f:a6:ef:0e:65:54:65: f5:9c:22:0d:6f:29:94:e6:52:64:b4:ca:ff:7d:d3: ca:f6:5c:d5:b2:11:a4:75:98:a5:84:d6:3e:80:52: 91:88:04:51:3c:da:12:c3:e0:03:e9:9e:19:88:e5: 40:d8:83:59:8f:a5:b3:9d:82:b9:e6:f7:f1:3e:97: 76:39:a3:64:cd:a9:40:b4:e5:21:00:bb:12:48:01: 46:61:cb:4d:16:4f:e2:f1:52:7f:b9:af:5e:d4:dd: b2:c5:f0:27:5d:14:43:58:93:f4:23:b9:f1:6a:29: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5D:5C:80:02:8A:9D:DA:3E:BC:B9:61:04:74:6D:44:4B:FC:87:AF X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:56:33:ad:23:be:4d:89:a9:fe:41:cb:69:53:39:2b:71:4e: b1:54:99:c0:e7:85:78:3d:5d:e5:68:87:ac:ac:93:61:9a:b5: d8:ce:04:40:40:e8:06:83:e6:92:31:24:56:19:81:29:ad:2c: ce:fd:c8:1e:8a:f1:88:75:f4:67:22:d3:e1:d5:66:c5:e3:fa: db:5f:4e:bd:b6:f3:39:b3:ee:d7:61:42:a3:80:1c:b0:e2:00: 45:20:ee:e8:da:39:a8:bb:f9:6f:49:6a:bc:8d:16:cd:69:67: 56:98:e5:5a:fe:1a:07:c9:99:52:62:77:9e:d0:c1:f2:c8:5c: 23:97:f0:d4:36:96:8b:13:b0:05:61:aa:e2:3a:ac:52:ff:73: 00:91:a9:08:0a:3a:b4:8d:a6:d2:80:10:30:cf:27:f1:4e:6d: 12:5f:6d:0f:20:ee:d0:24:09:12:b6:83:24:d4:cb:f0:a5:b6: 37:09:49:47:fe:a5:d7:7d:23:bd:d9:62:cd:88:b3:be:7d:eb: 82:53:61:31:ff:d6:0c:ec:c2:73:65:ba:19:37:41:61:b9:da: 7c:78:1f:ea:af:70:f3:89:61:13:de:87:53:80:d1:86:fd:6e: 00:cd:2b:e6:d7:21:58:d5:2f:0a:33:57:a8:f1:a0:40:dd:6b: 65:d4:a1:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLPvgS9J9eKdI5tIPLPKL56bl9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNjAxMjAwMTA3MzVaFw0yNjAxMjMwNTA1MzVaMDMxMTAvBgNV BAMTKDdDNUQ1QzgwMDI4QTlEREEzRUJDQjk2MTA0NzQ2RDQ0NEJGQzg3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5L3uraOjdwS2z6/bktikeEpX +FidUQ7Gq5f7x1ua9bkcug2CWZda9PWp/EjdF1eLGJK/PrVsIzJVDDXKKJ62klaQ iEjSJ4oaoVEZTRqdwH9q53i4GU9eHJxCuhRC0EJ0VBdUrzNiFkDIu2TAHrdMs/zE YB+Jj8kZw+6fbVk2CpbeUUF8Q1VKT6cbmhKVT6bvDmVUZfWcIg1vKZTmUmS0yv99 08r2XNWyEaR1mKWE1j6AUpGIBFE82hLD4APpnhmI5UDYg1mPpbOdgrnm9/E+l3Y5 o2TNqUC05SEAuxJIAUZhy00WT+LxUn+5r17U3bLF8CddFENYk/QjufFqKYEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfF1cgAKKndo+vLlhBHRtREv8h68wHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxWM60jvk2Jqf5By2lTOStxTrFUmcDnhXg9 XeVoh6ysk2GatdjOBEBA6AaD5pIxJFYZgSmtLM79yB6K8Yh19Gci0+HVZsXj+ttf Tr228zmz7tdhQqOAHLDiAEUg7ujaOai7+W9JaryNFs1pZ1aY5Vr+GgfJmVJid57Q wfLIXCOX8NQ2losTsAVhquI6rFL/cwCRqQgKOrSNptKAEDDPJ/FObRJfbQ8g7tAk CRK2gyTUy/CltjcJSUf+pdd9I73ZYs2Is75964JTYTH/1gzswnNluhk3QWG52nx4 H+qvcPOJYRPeh1OA0Yb9bgDNK+bXIVjVLwozV6jxoEDda2XUoXA= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:09 2026 by rpki-client