This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: sNUVExQHp74x+9I2qqfTEWgxFdJMipk0FpRhxTbuGjk= Subject key identifier: DE:CB:42:0F:23:D2:E1:C7:C9:DD:E4:87:3A:AF:0F:45:78:27:C8:D1 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 2C0DE21180AD00E32AE8A7CBBDC832FB487F9E9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: C4 Signing time: Mon 19 Jan 2026 22:11:08 +0000 Manifest this update: Mon 19 Jan 2026 22:06:08 +0000 Manifest next update: Thu 22 Jan 2026 23:46:08 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: 5eui/TrgZ2DFBW5eAQ0833OParb5lXfPWbGJEkXNjrg=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 23:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:e2:11:80:ad:00:e3:2a:e8:a7:cb:bd:c8:32:fb:48:7f:9e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Jan 19 22:06:08 2026 GMT Not After : Jan 22 23:46:08 2026 GMT Subject: CN=DECB420F23D2E1C7C9DDE4873AAF0F457827C8D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:63:8a:89:55:c3:92:a2:71:b9:c8:b9:92: f2:50:d1:7c:ab:1e:9e:8a:3c:13:5f:d7:ad:d8:99: 2e:4e:66:2c:ed:a8:38:9e:55:fc:f4:1b:65:32:b6: b3:28:c4:55:d1:bf:ff:7a:ab:08:a8:bd:5b:95:de: d8:69:2e:83:9e:fb:6f:57:16:09:19:83:47:e2:97: ff:92:c7:23:85:b7:d5:25:a1:6b:f1:9f:d5:4a:64: 6d:19:15:fe:7b:07:da:69:e0:82:c3:de:7f:68:64: 33:b4:f1:29:4c:72:90:46:34:91:56:7f:0f:2b:d7: cb:d8:6d:03:8b:31:9c:4c:57:94:bf:a7:09:a4:b4: 95:9c:e4:08:fc:d1:22:5c:b0:21:92:c1:2b:c8:1a: f1:9f:95:3b:fd:fc:5a:20:ce:20:ea:66:72:af:6b: b9:d1:b8:d4:65:0b:b0:25:ef:82:d1:29:5e:1c:b5: 0f:53:be:8d:b8:c0:1c:46:40:08:55:ec:cc:4d:12: de:14:d6:3c:55:be:1f:26:f3:90:33:8c:00:b8:5b: 1c:e7:ef:32:24:57:70:fe:c8:62:6e:0e:9e:be:f5: 9b:db:e2:dd:e8:5d:0a:cd:86:6e:9c:b5:0d:13:7a: ec:40:80:9d:8c:6c:92:c6:2b:43:7b:da:8e:ac:fa: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:42:0F:23:D2:E1:C7:C9:DD:E4:87:3A:AF:0F:45:78:27:C8:D1 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:45:70:20:09:b8:97:ab:08:14:3e:a4:d5:48:c5:e2:d5:03: 39:0c:05:c6:c8:30:f9:c1:c1:c1:ab:c2:9f:cb:da:e0:bb:7d: 3d:12:ba:79:90:f5:c2:98:c2:ec:78:e3:b1:9d:c5:b5:85:e6: ad:57:9f:1c:d2:da:6a:a4:b9:3d:9a:ef:99:fc:63:e7:72:4f: f1:60:b0:51:4e:94:f9:13:22:ea:a1:f5:f3:58:b1:a9:a4:8c: 55:99:38:45:73:86:bb:98:dc:42:56:e1:27:7f:87:79:04:d6: 70:10:86:fe:cd:28:ab:95:3f:8e:8a:32:f7:d6:7b:53:99:fc: cb:58:c3:78:ac:1f:ef:df:d8:b9:4a:4c:87:79:29:2e:bb:99: 24:8b:a0:9f:b9:02:1c:f9:3f:25:8c:68:4c:fb:b2:e3:9c:0f: 29:73:16:6b:51:ba:35:28:4c:99:48:b1:73:1e:44:10:75:c2: d4:9b:b0:dc:47:9d:6c:1e:fb:77:82:7a:76:63:1c:00:a8:a9: 62:1b:81:5b:ad:4f:8d:8a:33:ee:82:ea:d4:f5:61:43:94:36: f4:16:49:ce:73:0e:3d:8b:8f:ad:d1:34:7e:54:df:84:28:cd: 74:b4:0a:06:1c:f8:b8:17:d0:34:02:6c:2d:99:2f:0d:ec:74: c6:b6:b2:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULA3iEYCtAOMq6KfLvcgy+0h/npowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNjAxMTkyMjA2MDhaFw0yNjAxMjIyMzQ2MDhaMDMxMTAvBgNV BAMTKERFQ0I0MjBGMjNEMkUxQzdDOURERTQ4NzNBQUYwRjQ1NzgyN0M4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8mOKiVXDkqJxuci5kvJQ0Xyr Hp6KPBNf163YmS5OZiztqDieVfz0G2UytrMoxFXRv/96qwiovVuV3thpLoOe+29X FgkZg0fil/+SxyOFt9UloWvxn9VKZG0ZFf57B9pp4ILD3n9oZDO08SlMcpBGNJFW fw8r18vYbQOLMZxMV5S/pwmktJWc5Aj80SJcsCGSwSvIGvGflTv9/FogziDqZnKv a7nRuNRlC7Al74LRKV4ctQ9Tvo24wBxGQAhV7MxNEt4U1jxVvh8m85AzjAC4Wxzn 7zIkV3D+yGJuDp6+9Zvb4t3oXQrNhm6ctQ0TeuxAgJ2MbJLGK0N72o6s+r7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3stCDyPS4cfJ3eSHOq8PRXgnyNEwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxFcCAJuJerCBQ+pNVIxeLVAzkMBcbIMPnB wcGrwp/L2uC7fT0SunmQ9cKYwux447GdxbWF5q1XnxzS2mqkuT2a75n8Y+dyT/Fg sFFOlPkTIuqh9fNYsamkjFWZOEVzhruY3EJW4Sd/h3kE1nAQhv7NKKuVP46KMvfW e1OZ/MtYw3isH+/f2LlKTId5KS67mSSLoJ+5Ahz5PyWMaEz7suOcDylzFmtRujUo TJlIsXMeRBB1wtSbsNxHnWwe+3eCenZjHACoqWIbgVutT42KM+6C6tT1YUOUNvQW Sc5zDj2Lj63RNH5U34QozXS0CgYc+LgX0DQCbC2ZLw3sdMa2sjs= -----END CERTIFICATE-----Generated at Wed Jan 21 17:54:48 2026 by rpki-client