This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: eRyRGcaNWRYLkkNk9hPR6VCzeHh5Xkj2UUq5He8Rz94= Subject key identifier: 41:B9:35:48:0E:A0:C9:70:9C:72:61:87:FB:3E:43:9D:7A:B3:4F:C8 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 2A2DE02538C26941BA35BD8864F61723721234C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 029D Signing time: Tue 20 Jan 2026 04:02:09 +0000 Manifest this update: Tue 20 Jan 2026 03:57:09 +0000 Manifest next update: Fri 23 Jan 2026 07:07:09 +0000 Files and hashes: 1: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: t1OWN6gm90SvImzwws28CQ53gTfOaLXKxfqrgXh94Y4=) 2: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: V+fb6XnTlrTwajolV1018fpYCJj4tiIFM7PBAKbOmR4=) 3: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: btn366wZk5X/LbhkknHgrSEj+dlkWgK4+w6HiC3XS9g=) 4: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: 2PpG67/Hif4l3pFwRCwEQ7HNcb5HgHsPLTC3ZJMlI9c=) 5: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: FyCE3LyMNMrGnPbdrpK5+sH4y62xX8bxVpZUT6w7BJU=) 6: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: Y0QuciRTpFDwvV/OBPdTjgLcEkiudatiiHEhsbTutWI=) 7: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: g6JykGSCyvPJN6suwP4pksfv3CU4McJpDF6g+WQNj7o=) 8: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: B08azy3XQsiTZf5UppG1ngPrOYAEwHH6x3322yJGfrI=) 9: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: kzF5yTng2nsAricqtS3yvK+w9DfNlAwfQFzAL4v5DWA=) 10: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: G0y3tssGsefR1ItOMtc1BYHuZ0hgATuC18s9snklT+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 07:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2d:e0:25:38:c2:69:41:ba:35:bd:88:64:f6:17:23:72:12:34:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Jan 20 03:57:09 2026 GMT Not After : Jan 23 07:07:09 2026 GMT Subject: CN=41B935480EA0C9709C726187FB3E439D7AB34FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8f:a9:ff:19:5d:bc:7c:cd:6e:76:e0:b6:d2: eb:e8:74:50:8e:eb:6f:22:a1:05:19:4b:c4:43:c7: 45:ac:97:b7:a0:37:fc:41:35:60:f1:fe:12:dc:4c: 4f:c3:5d:08:3a:be:fb:90:1f:ee:74:01:0d:2c:20: d1:d7:bd:05:3d:d6:ba:50:e6:d9:1c:66:ad:f9:24: fe:86:fb:fe:d5:31:06:4d:b1:a4:8f:c4:b4:8e:54: 22:68:56:08:90:fc:b3:f8:dd:4d:eb:02:21:6d:6b: 19:05:a4:c8:de:0a:43:06:d6:2b:84:ba:92:f2:1b: 8b:8e:20:60:6d:1f:d1:61:ae:1b:c0:db:46:1b:24: d1:0e:01:01:e9:78:9c:83:58:1a:fb:fd:6a:06:41: ef:bd:3f:96:a1:c0:63:14:5f:cc:c2:2c:35:71:d3: 7b:cd:e4:5f:e1:a9:1a:77:f4:d1:b8:d4:72:2e:39: 5e:db:a1:14:c4:54:d2:11:f1:07:5d:02:15:a6:24: 9d:56:d8:07:ee:77:48:a7:6c:90:79:51:48:1c:e1: e3:62:e1:9d:ad:06:c0:b7:f1:58:2e:47:21:ac:58: bf:71:73:ed:a0:8f:17:05:a5:80:40:fd:74:bd:86: b7:e0:26:15:20:02:e5:fd:ff:25:cd:5b:c0:48:85: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:35:48:0E:A0:C9:70:9C:72:61:87:FB:3E:43:9D:7A:B3:4F:C8 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d4:49:7e:b2:7b:f0:33:b0:e1:27:25:4a:d2:43:76:22:32: ce:dd:ed:22:a0:7e:61:69:0c:da:67:c8:4e:6d:55:64:ad:61: 7c:e4:be:6c:d2:63:cf:65:60:58:0a:42:8e:61:69:5a:20:51: 65:9e:95:b8:e5:97:91:c2:d4:90:ef:24:89:2e:02:cc:3e:50: 5b:ed:8d:31:b5:e5:c4:f9:cd:5e:07:f0:fc:d3:2f:1f:d4:eb: 8f:5f:63:d2:40:d2:3a:59:21:16:af:89:86:6a:7c:58:55:a7: 50:76:82:f0:4b:69:c9:eb:d4:8b:5b:1d:0a:84:05:66:b1:ca: 4b:40:b7:a3:ef:4b:d0:17:1f:b1:c7:de:49:a7:6c:a2:d5:41: 3b:4b:72:2e:be:ae:ee:65:c7:7d:b4:cc:71:94:f1:e7:c9:36: a8:7a:de:05:9b:69:c6:80:35:6e:78:1f:39:df:4a:44:af:5a: b9:8f:24:8f:76:14:6d:f3:91:81:7f:0d:54:c2:71:1d:5f:0a: 21:52:91:96:1f:69:e3:51:3e:b3:f4:4e:9d:83:f4:05:64:0a: 95:3c:7d:b5:27:22:f4:38:a4:9f:7a:67:75:41:05:b6:f1:a0: c9:b2:cb:64:9d:ba:4b:25:34:5e:64:30:8d:d3:55:f7:23:26: a7:b4:40:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKi3gJTjCaUG6Nb2IZPYXI3ISNMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNjAxMjAwMzU3MDlaFw0yNjAxMjMwNzA3MDlaMDMxMTAvBgNV BAMTKDQxQjkzNTQ4MEVBMEM5NzA5QzcyNjE4N0ZCM0U0MzlEN0FCMzRGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsj6n/GV28fM1uduC20uvodFCO 628ioQUZS8RDx0Wsl7egN/xBNWDx/hLcTE/DXQg6vvuQH+50AQ0sINHXvQU91rpQ 5tkcZq35JP6G+/7VMQZNsaSPxLSOVCJoVgiQ/LP43U3rAiFtaxkFpMjeCkMG1iuE upLyG4uOIGBtH9FhrhvA20YbJNEOAQHpeJyDWBr7/WoGQe+9P5ahwGMUX8zCLDVx 03vN5F/hqRp39NG41HIuOV7boRTEVNIR8QddAhWmJJ1W2Afud0inbJB5UUgc4eNi 4Z2tBsC38VguRyGsWL9xc+2gjxcFpYBA/XS9hrfgJhUgAuX9/yXNW8BIhdvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQbk1SA6gyXCccmGH+z5DnXqzT8gwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPUSX6ye/AzsOEnJUrSQ3YiMs7d7SKgfmFp DNpnyE5tVWStYXzkvmzSY89lYFgKQo5haVogUWWelbjll5HC1JDvJIkuAsw+UFvt jTG15cT5zV4H8PzTLx/U649fY9JA0jpZIRaviYZqfFhVp1B2gvBLacnr1ItbHQqE BWaxyktAt6PvS9AXH7HH3kmnbKLVQTtLci6+ru5lx320zHGU8efJNqh63gWbacaA NW54HznfSkSvWrmPJI92FG3zkYF/DVTCcR1fCiFSkZYfaeNRPrP0Tp2D9AVkCpU8 fbUnIvQ4pJ96Z3VBBbbxoMmyy2SdukslNF5kMI3TVfcjJqe0QE0= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:34 2026 by rpki-client