This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: R6w+wfilO4TYtbplmY/FWaoN9pwyEqWag35wm0I6koc= Subject key identifier: AE:DF:53:06:DA:20:DD:5F:AD:6C:FA:35:45:81:8F:F5:7D:8E:1C:DF Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 2C5A9D6C47D594CEA240901BBC4C332049775D38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0177 Signing time: Mon 26 Jan 2026 20:11:44 +0000 Manifest this update: Mon 26 Jan 2026 20:06:44 +0000 Manifest next update: Thu 29 Jan 2026 22:58:44 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 2: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: CXkHPudchN9Gm1RuQTUeLfWn76634rKpCBtwTDqHTck=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 22:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5a:9d:6c:47:d5:94:ce:a2:40:90:1b:bc:4c:33:20:49:77:5d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Jan 26 20:06:44 2026 GMT Not After : Jan 29 22:58:44 2026 GMT Subject: CN=AEDF5306DA20DD5FAD6CFA3545818FF57D8E1CDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:d2:33:a6:0c:df:04:0a:97:f5:28:d2:39: d9:9d:ca:a8:82:69:12:06:35:af:44:42:30:20:29: e3:d8:5f:b1:03:92:5d:bc:3b:39:25:fe:f1:a0:40: 8b:70:ef:17:df:79:db:f4:55:65:6f:56:97:7b:0d: d4:43:ba:06:a5:4a:9a:19:b3:52:15:96:d3:a9:07: fb:c1:82:a5:77:d2:6a:04:a7:18:5a:f2:e1:56:33: f1:f7:65:a5:44:2b:6c:24:63:87:3b:48:d4:1b:02: d8:0f:39:c4:82:55:17:67:45:33:41:54:10:5c:40: ec:59:3f:03:1e:c2:24:70:ce:6d:3d:fa:83:82:f5: 59:8f:f0:b0:1f:1b:44:20:21:ed:50:39:1a:8d:95: 66:14:74:68:dd:94:59:44:14:29:40:8f:95:42:f7: b7:a5:4a:65:2f:db:c5:de:ad:93:da:a0:ba:cd:84: 55:aa:f1:ee:2a:0f:1a:5a:4d:1d:02:ba:5d:85:ec: 79:b2:9d:d0:eb:b2:fe:f0:ff:d4:22:9a:70:72:26: 72:02:6f:29:d0:60:ff:18:17:3c:49:ae:d4:89:93: 05:b6:b6:29:c6:43:04:95:7a:b6:18:52:b6:59:8c: 53:50:ab:dc:c0:67:30:5b:fd:f9:fb:31:e2:52:34: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DF:53:06:DA:20:DD:5F:AD:6C:FA:35:45:81:8F:F5:7D:8E:1C:DF X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:af:af:ab:6f:c1:f3:40:e4:2b:76:9e:35:65:2e:6a:61:ed: 93:6a:fe:88:96:3b:74:ba:7a:81:b3:d2:65:c6:47:2b:2e:23: e0:39:c7:d8:8c:4c:57:75:82:95:d7:a9:c4:a1:f0:7e:d2:2a: 5d:e9:4c:76:bb:72:78:d1:36:78:a5:69:02:90:6f:52:98:98: 4e:5e:fe:9e:3b:88:f4:1e:24:1f:94:27:31:0f:d2:bd:bb:73: 15:1c:b4:6a:b9:77:f5:62:2f:f4:bf:f9:50:2e:0d:26:81:d9: 53:7f:7b:1d:60:b3:ae:2f:39:a7:73:c3:40:a5:c4:1d:67:f4: e8:4e:7b:11:fc:85:7a:65:ae:02:6a:5e:11:59:59:97:8f:eb: f1:63:38:7a:f9:33:92:43:51:1b:13:0b:3a:7a:50:57:d9:58: 98:cf:64:6a:32:49:26:eb:9d:6c:88:9b:c7:6d:a0:66:ed:8c: e6:dc:05:9a:0a:f5:3e:a5:90:d1:99:bc:73:57:e1:03:d3:30: 41:69:33:d5:b8:41:c7:47:01:43:ad:66:87:67:80:6b:a7:4a: 78:31:12:e0:5d:49:50:92:98:ab:1e:32:32:fb:66:12:86:25: 1c:9a:fe:ee:67:98:9d:ce:f6:72:6b:d8:ee:14:b6:0c:d6:36: 67:77:35:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFqdbEfVlM6iQJAbvEwzIEl3XTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNjAxMjYyMDA2NDRaFw0yNjAxMjkyMjU4NDRaMDMxMTAvBgNV BAMTKEFFREY1MzA2REEyMERENUZBRDZDRkEzNTQ1ODE4RkY1N0Q4RTFDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvdIzpgzfBAqX9SjSOdmdyqiC aRIGNa9EQjAgKePYX7EDkl28Ozkl/vGgQItw7xffedv0VWVvVpd7DdRDugalSpoZ s1IVltOpB/vBgqV30moEpxha8uFWM/H3ZaVEK2wkY4c7SNQbAtgPOcSCVRdnRTNB VBBcQOxZPwMewiRwzm09+oOC9VmP8LAfG0QgIe1QORqNlWYUdGjdlFlEFClAj5VC 97elSmUv28XerZPaoLrNhFWq8e4qDxpaTR0Cul2F7HmyndDrsv7w/9QimnByJnIC bynQYP8YFzxJrtSJkwW2tinGQwSVerYYUrZZjFNQq9zAZzBb/fn7MeJSNB7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrt9TBtog3V+tbPo1RYGP9X2OHN8wHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKavr6tvwfNA5Ct2njVlLmph7ZNq/oiWO3S6 eoGz0mXGRysuI+A5x9iMTFd1gpXXqcSh8H7SKl3pTHa7cnjRNnilaQKQb1KYmE5e /p47iPQeJB+UJzEP0r27cxUctGq5d/ViL/S/+VAuDSaB2VN/ex1gs64vOadzw0Cl xB1n9OhOexH8hXplrgJqXhFZWZeP6/FjOHr5M5JDURsTCzp6UFfZWJjPZGoySSbr nWyIm8dtoGbtjObcBZoK9T6lkNGZvHNX4QPTMEFpM9W4QcdHAUOtZodngGunSngx EuBdSVCSmKseMjL7ZhKGJRya/u5nmJ3O9nJr2O4UtgzWNmd3Nfg= -----END CERTIFICATE-----Generated at Tue Jan 27 11:35:32 2026 by rpki-client