This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: 6fCB5ZJDR/tkkWC5rM4MnC6UTBoj3lNsf3UeNQ4af6A= Subject key identifier: 41:F5:AD:8F:56:BC:94:56:63:86:EA:2A:A4:2B:5F:CE:50:F5:9A:88 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 39EFA19C9E806A7E40C390CC5E10549239760D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: EC Signing time: Tue 20 Jan 2026 00:41:30 +0000 Manifest this update: Tue 20 Jan 2026 00:36:30 +0000 Manifest next update: Fri 23 Jan 2026 12:05:30 +0000 Files and hashes: 1: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: ZNeRwTvPRwYBLE5sdbgUPVVh8TQyG01EFXBOC/uWJbI=) 2: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: JPbwfh0rBOb+fA9O+0CKpXIA3xnT0OD5jqX6w7+jsI0=) 3: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 12:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ef:a1:9c:9e:80:6a:7e:40:c3:90:cc:5e:10:54:92:39:76:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Jan 20 00:36:30 2026 GMT Not After : Jan 23 12:05:30 2026 GMT Subject: CN=41F5AD8F56BC94566386EA2AA42B5FCE50F59A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:c8:54:03:4b:1a:24:45:76:0f:c9:e3:15: b3:3b:b1:bf:64:ad:31:2c:b8:68:a4:e3:40:34:a6: 11:b9:a4:e1:72:8b:fd:5c:5d:cb:b3:78:82:82:30: 18:8e:20:9c:5d:11:81:26:b6:bb:16:12:6b:db:cb: 89:92:db:01:24:77:4a:1d:5f:c3:63:c7:0f:2a:b2: 01:1b:f7:d1:9f:f8:47:3c:6d:af:de:46:f3:e1:06: 10:dc:6b:b5:2d:a1:f5:e6:33:23:74:eb:51:9c:2f: eb:ad:28:58:6c:9e:22:d2:20:04:8e:94:74:4f:36: f1:57:90:0b:24:15:26:ce:9f:5e:07:75:ee:2a:c9: 72:25:ba:ab:a2:c5:c7:e6:be:ad:1b:49:22:0e:b7: e0:f5:1c:64:bb:37:8e:e7:dd:e6:92:31:85:10:2f: 4d:56:0c:36:6a:12:56:f8:51:25:80:68:19:e4:fb: b7:06:7e:2b:7a:32:a1:71:c4:16:40:73:43:36:70: 72:1a:8c:18:5a:7e:f5:c5:9a:d0:4c:8d:91:4c:41: 45:be:97:ef:24:68:0f:47:d9:8a:b6:9f:63:04:49: 77:fb:03:d1:ce:c7:e1:fe:53:65:11:05:d0:3d:79: c8:c2:1e:05:f5:29:0f:e2:6f:df:a9:75:60:28:60: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:AD:8F:56:BC:94:56:63:86:EA:2A:A4:2B:5F:CE:50:F5:9A:88 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c6:5b:06:28:40:53:06:9a:fa:af:fc:2b:63:51:55:7d:05: 39:09:52:7f:ab:70:c8:d2:36:f6:b3:50:b5:4c:8c:a6:7d:5a: c4:aa:48:e9:95:f0:9f:75:5a:df:ec:35:a0:41:63:d4:e5:3b: 00:f1:e1:ca:a6:c0:46:c0:d3:6d:87:04:d8:59:04:6e:5d:ac: 04:85:ef:46:6e:a4:64:2d:68:fe:f0:9f:9f:ae:26:88:7f:46: 60:8c:97:5e:15:4f:8e:e6:4d:a2:1f:8f:a7:b1:df:02:44:81: e6:48:a9:57:59:2a:e0:4b:0d:2c:11:2b:36:57:c2:a2:e3:54: c4:ee:37:5a:34:db:07:80:36:38:7b:7f:46:e2:88:88:fe:77: 53:8a:aa:5c:31:49:54:81:70:20:6a:ee:1d:32:b4:ba:db:e0: b9:33:4a:b5:16:4c:e5:d4:19:6e:0e:d3:e5:bd:47:0d:ae:ff: 14:8c:b0:9c:1f:00:7e:06:d0:cd:39:37:fe:b0:b3:89:1e:57: 6d:17:ee:16:6e:c7:47:f2:a5:e1:f9:92:6d:af:0b:54:f4:35: 7c:36:23:5d:66:8b:b3:60:ca:d0:58:e2:71:be:d3:43:52:65: 0d:99:05:98:cb:6a:d1:bc:55:60:1b:04:fc:32:5d:5e:80:b0: 2f:1e:09:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOe+hnJ6Aan5Aw5DMXhBUkjl2DV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNjAxMjAwMDM2MzBaFw0yNjAxMjMxMjA1MzBaMDMxMTAvBgNV BAMTKDQxRjVBRDhGNTZCQzk0NTY2Mzg2RUEyQUE0MkI1RkNFNTBGNTlBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGchUA0saJEV2D8njFbM7sb9k rTEsuGik40A0phG5pOFyi/1cXcuzeIKCMBiOIJxdEYEmtrsWEmvby4mS2wEkd0od X8Njxw8qsgEb99Gf+Ec8ba/eRvPhBhDca7UtofXmMyN061GcL+utKFhsniLSIASO lHRPNvFXkAskFSbOn14Hde4qyXIluquixcfmvq0bSSIOt+D1HGS7N47n3eaSMYUQ L01WDDZqElb4USWAaBnk+7cGfit6MqFxxBZAc0M2cHIajBhafvXFmtBMjZFMQUW+ l+8kaA9H2Yq2n2MESXf7A9HOx+H+U2URBdA9ecjCHgX1KQ/ib9+pdWAoYLoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfWtj1a8lFZjhuoqpCtfzlD1mogwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfGWwYoQFMGmvqv/CtjUVV9BTkJUn+rcMjS NvazULVMjKZ9WsSqSOmV8J91Wt/sNaBBY9TlOwDx4cqmwEbA022HBNhZBG5drASF 70ZupGQtaP7wn5+uJoh/RmCMl14VT47mTaIfj6ex3wJEgeZIqVdZKuBLDSwRKzZX wqLjVMTuN1o02weANjh7f0biiIj+d1OKqlwxSVSBcCBq7h0ytLrb4LkzSrUWTOXU GW4O0+W9Rw2u/xSMsJwfAH4G0M05N/6ws4keV20X7hZux0fypeH5km2vC1T0NXw2 I11mi7NgytBY4nG+00NSZQ2ZBZjLatG8VWAbBPwyXV6AsC8eCXM= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:33 2026 by rpki-client