This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: C1A7DmL9aHJTs4mKwCf/wYDHMbFhNOV61JQ3/ro0le4= Subject key identifier: 52:0A:A7:06:9E:8F:62:1A:29:49:9A:35:A3:B0:2A:6C:9C:04:B3:CF Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 3927EF19450926969A400FEFA3C3F1FB9D7EE98C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 0261 Signing time: Tue 20 Jan 2026 23:32:14 +0000 Manifest this update: Tue 20 Jan 2026 23:27:14 +0000 Manifest next update: Sat 24 Jan 2026 08:15:14 +0000 Files and hashes: 1: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: gtyLEAUaPHB0jkfvo7cr6TOhoZp7aqnMH1MKhTwm9Yo=) 2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 08:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:27:ef:19:45:09:26:96:9a:40:0f:ef:a3:c3:f1:fb:9d:7e:e9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Jan 20 23:27:14 2026 GMT Not After : Jan 24 08:15:14 2026 GMT Subject: CN=520AA7069E8F621A29499A35A3B02A6C9C04B3CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:e9:a8:1f:7c:c7:13:d0:f0:e1:1d:cd:dc: a3:b1:05:0f:da:15:d5:3f:73:4b:df:8b:08:91:73: 50:8c:be:2c:79:25:62:9c:f3:93:92:1a:7e:d5:dc: f2:4c:7f:39:23:c4:48:77:32:40:1f:55:2f:36:51: e4:41:e9:99:0b:66:52:1e:43:72:75:5f:d1:a4:d6: c1:f5:aa:d3:6c:15:05:35:4c:80:5e:1d:f5:bc:f6: 72:a9:55:6d:f6:39:8d:af:16:a6:28:a2:18:b3:0a: 1e:25:7e:54:32:ef:8b:e4:d1:95:7a:a6:58:b4:50: e5:16:13:14:3e:3c:be:e3:60:00:ee:c8:e9:75:8a: 1d:16:85:aa:8a:9c:41:41:cb:3b:c7:7f:1d:85:2b: c4:00:55:cc:a6:25:15:fd:27:4d:d7:b0:db:20:e6: 4e:95:11:6d:dc:f4:97:df:cc:7c:d8:c4:a9:0b:9a: f6:db:8e:82:2d:72:c0:a7:92:d7:41:d3:42:4b:df: c5:17:86:68:24:59:93:b4:1b:2f:6d:11:fe:94:f1: 4f:8a:b6:52:d4:1e:aa:99:60:45:28:0c:cd:dc:4f: 34:de:c7:5b:3d:5f:06:41:f9:3c:91:9b:52:cb:c7: df:2f:aa:e3:66:31:c2:0a:92:db:e7:5b:15:a7:cd: 9b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0A:A7:06:9E:8F:62:1A:29:49:9A:35:A3:B0:2A:6C:9C:04:B3:CF X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2e:1b:80:d0:ae:d7:b3:7c:3a:52:a6:e5:c5:45:54:e1:73: c1:05:db:be:a3:8f:09:b3:a6:a1:ab:84:9b:8d:43:c4:a9:9b: 9e:f9:ab:bd:b7:1d:88:88:0f:75:d4:98:e4:32:59:03:85:96: e5:16:78:98:28:89:16:5b:cd:55:e9:82:6c:fe:78:95:a3:ee: a1:c8:e3:91:c3:8c:9d:70:83:6a:8b:a0:31:99:2a:88:d5:a7: 75:7c:95:8e:44:bb:ec:f8:8b:51:db:4b:eb:80:a1:66:5a:7c: 39:48:1c:35:76:a3:ce:c0:87:2b:3b:d3:97:3f:2b:c6:66:70: 47:4d:49:d6:24:a6:ac:d6:2e:84:5a:07:5f:6e:c3:3f:f2:27: e1:dd:f4:bc:3a:ef:7c:47:82:01:c0:17:d2:c5:4f:7d:e5:7d: 04:57:93:a9:d3:2a:17:ec:f5:c7:48:66:48:89:b0:6b:e4:98: 5f:96:cd:c2:c5:61:ce:8d:59:89:27:01:1e:85:14:b5:bb:67: 75:aa:ee:dd:68:f6:4e:4e:f6:ef:44:c2:01:cc:21:47:00:8c: 0e:ec:1b:78:98:ab:b3:9c:aa:c3:c1:18:45:3d:af:07:a8:08: a6:82:dd:b5:d3:2c:e8:a2:aa:39:53:71:82:0b:ac:a2:a4:6f: 60:0a:bc:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSfvGUUJJpaaQA/vo8Px+51+6YwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNjAxMjAyMzI3MTRaFw0yNjAxMjQwODE1MTRaMDMxMTAvBgNV BAMTKDUyMEFBNzA2OUU4RjYyMUEyOTQ5OUEzNUEzQjAyQTZDOUMwNEIzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOemoH3zHE9Dw4R3N3KOxBQ/a FdU/c0vfiwiRc1CMvix5JWKc85OSGn7V3PJMfzkjxEh3MkAfVS82UeRB6ZkLZlIe Q3J1X9Gk1sH1qtNsFQU1TIBeHfW89nKpVW32OY2vFqYoohizCh4lflQy74vk0ZV6 pli0UOUWExQ+PL7jYADuyOl1ih0WhaqKnEFByzvHfx2FK8QAVcymJRX9J03XsNsg 5k6VEW3c9JffzHzYxKkLmvbbjoItcsCnktdB00JL38UXhmgkWZO0Gy9tEf6U8U+K tlLUHqqZYEUoDM3cTzTex1s9XwZB+TyRm1LLx98vquNmMcIKktvnWxWnzZtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUgqnBp6PYhopSZo1o7AqbJwEs88wHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsuG4DQrtezfDpSpuXFRVThc8EF276jjwmz pqGrhJuNQ8Spm575q723HYiID3XUmOQyWQOFluUWeJgoiRZbzVXpgmz+eJWj7qHI 45HDjJ1wg2qLoDGZKojVp3V8lY5Eu+z4i1HbS+uAoWZafDlIHDV2o87Ahys705c/ K8ZmcEdNSdYkpqzWLoRaB19uwz/yJ+Hd9Lw673xHggHAF9LFT33lfQRXk6nTKhfs 9cdIZkiJsGvkmF+WzcLFYc6NWYknAR6FFLW7Z3Wq7t1o9k5O9u9EwgHMIUcAjA7s G3iYq7OcqsPBGEU9rweoCKaC3bXTLOiiqjlTcYILrKKkb2AKvE4= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:32 2026 by rpki-client