This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: Tc3Uvia55MM1DgeWk5SxaL52bTmpOZ12DPE4GwpzU5g= Subject key identifier: E4:2F:43:7A:A5:99:78:CF:5E:6F:31:E7:BC:6D:77:7A:C7:D7:3C:16 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 7FF592DC87D68FA35BAECB47F7CEEFD1C2EDAF74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: 0113 Signing time: Tue 20 Jan 2026 01:01:15 +0000 Manifest this update: Tue 20 Jan 2026 00:56:15 +0000 Manifest next update: Fri 23 Jan 2026 10:06:15 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 2: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 3: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 4: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: Ovywtmmu8b89YGJgy2mDMmQpnFSg2mbx4tH9IYKRb5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f5:92:dc:87:d6:8f:a3:5b:ae:cb:47:f7:ce:ef:d1:c2:ed:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Jan 20 00:56:15 2026 GMT Not After : Jan 23 10:06:15 2026 GMT Subject: CN=E42F437AA59978CF5E6F31E7BC6D777AC7D73C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:91:45:bd:84:b5:a4:e9:31:aa:06:5b:db: df:0e:fa:20:dd:c5:23:4c:b0:90:5b:ea:21:11:ec: e1:64:50:78:e2:1d:5e:60:76:ab:c9:d4:83:f1:7a: 2c:cd:9f:a2:a9:2f:5f:ff:4b:b2:89:47:fd:d0:bc: 52:85:c3:3c:28:37:51:d9:ab:19:20:11:8c:f9:95: e1:92:d1:ae:33:2b:85:b5:97:28:6d:25:1f:0d:a5: ad:c7:0d:a4:65:3a:7e:c8:77:ae:86:65:ea:0e:50: c4:88:cc:b9:3a:b0:17:cf:df:7b:29:fc:5a:14:75: 46:bf:ce:3e:a0:d7:e1:8f:cf:7a:6f:5d:e9:04:4c: 18:2a:82:3e:27:5d:cc:de:5a:92:55:40:6f:4a:59: 87:41:20:b9:fa:4a:94:62:66:83:03:38:c5:28:00: 84:94:16:5d:1c:a2:e0:de:0d:c7:8b:3b:69:96:eb: a2:f4:69:41:a3:3a:4d:41:4e:35:ad:a0:6d:35:e0: 50:78:5b:1c:bd:76:24:6e:10:72:90:95:91:de:35: c6:66:ee:bd:4c:a0:a5:fb:af:02:6e:5e:ae:8a:5c: 6d:41:cf:3f:6f:28:07:5e:2c:76:77:5b:30:31:75: cb:64:45:4f:62:d6:30:bf:65:0b:1a:40:5d:7e:14: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2F:43:7A:A5:99:78:CF:5E:6F:31:E7:BC:6D:77:7A:C7:D7:3C:16 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:d9:10:43:dc:71:1c:10:b6:fc:8d:60:20:01:4a:da:3d: bd:47:8a:47:b6:83:a9:86:51:7b:99:28:57:a8:35:4d:25:01: dd:ba:b4:16:dc:5c:8b:53:09:9b:18:6a:f0:ea:84:97:69:db: 13:ea:1d:3c:7e:e1:8f:e0:7b:39:9b:54:66:94:a7:16:51:03: 6f:08:ae:4a:79:22:9b:a5:ae:d5:59:1d:58:01:cf:cc:58:8b: e7:b7:8a:6e:de:8f:cb:56:5a:a6:10:56:f0:02:66:58:e7:28: 6b:aa:2b:af:dd:35:d0:78:8f:b7:91:bb:51:c1:5b:32:29:ab: 0a:f5:8d:d2:4e:25:34:1e:d3:4d:e9:3c:ec:99:60:dc:94:1c: 77:36:71:83:d5:7e:1a:35:f3:48:26:0a:57:23:d1:be:3e:4d: 9b:79:97:2d:25:0c:4d:e9:9f:e7:75:a7:92:b2:79:73:f6:57: 2d:1d:b0:c3:c5:f0:0f:69:bd:c8:92:6b:a2:fb:c8:23:d3:a5: 13:8a:7b:dd:6b:50:31:d3:97:60:f7:6f:9e:62:2e:5e:c0:b6: 9f:0b:9c:f4:77:dc:bd:8d:d9:40:51:be:4d:a1:4f:46:59:de: 93:d5:07:ee:c6:bf:15:9b:ea:36:6b:7d:57:41:ad:dc:3e:f7: a4:d3:6b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/WS3IfWj6NbrstH987v0cLtr3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNjAxMjAwMDU2MTVaFw0yNjAxMjMxMDA2MTVaMDMxMTAvBgNV BAMTKEU0MkY0MzdBQTU5OTc4Q0Y1RTZGMzFFN0JDNkQ3NzdBQzdENzNDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8U5FFvYS1pOkxqgZb298O+iDd xSNMsJBb6iER7OFkUHjiHV5gdqvJ1IPxeizNn6KpL1//S7KJR/3QvFKFwzwoN1HZ qxkgEYz5leGS0a4zK4W1lyhtJR8Npa3HDaRlOn7Id66GZeoOUMSIzLk6sBfP33sp /FoUdUa/zj6g1+GPz3pvXekETBgqgj4nXczeWpJVQG9KWYdBILn6SpRiZoMDOMUo AISUFl0couDeDceLO2mW66L0aUGjOk1BTjWtoG014FB4Wxy9diRuEHKQlZHeNcZm 7r1MoKX7rwJuXq6KXG1Bzz9vKAdeLHZ3WzAxdctkRU9i1jC/ZQsaQF1+FLOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5C9DeqWZeM9ebzHnvG13esfXPBYwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc/2RBD3HEcELb8jWAgAUraPb1Hike2g6mG UXuZKFeoNU0lAd26tBbcXItTCZsYavDqhJdp2xPqHTx+4Y/gezmbVGaUpxZRA28I rkp5IpulrtVZHVgBz8xYi+e3im7ej8tWWqYQVvACZljnKGuqK6/dNdB4j7eRu1HB WzIpqwr1jdJOJTQe003pPOyZYNyUHHc2cYPVfho180gmClcj0b4+TZt5ly0lDE3p n+d1p5KyeXP2Vy0dsMPF8A9pvciSa6L7yCPTpROKe91rUDHTl2D3b55iLl7Atp8L nPR33L2N2UBRvk2hT0ZZ3pPVB+7GvxWb6jZrfVdBrdw+96TTa40= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:33 2026 by rpki-client