This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: wSjrc41HmfQjnp9Jc8WxK0U8S87Ns2Uk1rBBAF4/fbA= Subject key identifier: 24:ED:DA:50:8D:DF:A9:00:53:FE:5E:9E:43:4B:46:3E:0D:32:BF:E3 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 147AE02A771E9EF580C8B88D126D7AE4BB4B76B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 021D Signing time: Wed 07 Jan 2026 10:40:59 +0000 Manifest this update: Wed 07 Jan 2026 10:35:59 +0000 Manifest next update: Sat 10 Jan 2026 11:01:59 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: SCCWrrUyToU1OmvSw1X44To8ClGAbyYZlePmwWI5+Qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 11:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7a:e0:2a:77:1e:9e:f5:80:c8:b8:8d:12:6d:7a:e4:bb:4b:76:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Jan 7 10:35:59 2026 GMT Not After : Jan 10 11:01:59 2026 GMT Subject: CN=24EDDA508DDFA90053FE5E9E434B463E0D32BFE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:75:d3:90:45:90:69:f4:fa:18:ee:b2:59: 88:f3:72:a0:5e:6c:7e:73:fa:34:0d:55:e4:24:6c: 3d:00:d7:cb:97:e9:03:9b:f6:e7:a2:17:62:17:c0: 49:c7:d9:83:f1:55:40:3d:2d:4e:2e:8e:74:fb:b0: 64:72:9a:ef:18:e5:43:3f:ed:cd:77:59:e9:73:29: 24:7f:24:a2:df:7d:9c:e3:69:47:c9:49:d2:72:4f: 10:3f:6b:ac:b7:ba:b0:8d:7d:bb:9b:08:b2:d7:77: f4:b4:4d:64:a9:3c:ac:b8:d0:4e:c5:66:1f:2a:fe: 66:da:46:0d:07:35:3d:86:c6:0b:f5:c6:20:a9:80: ae:22:66:08:cf:ea:05:50:ff:08:08:16:98:1c:e1: 51:75:fb:4d:61:e4:64:45:19:74:b8:e8:30:6e:01: 7e:cb:1a:b8:22:a5:bd:4e:d7:e2:56:28:cd:a0:0a: 81:df:5d:80:2c:f0:be:0d:a9:6f:44:1b:20:37:ff: 18:11:91:9d:1b:ba:4f:c4:00:9e:2f:6d:a6:82:82: 4b:03:e6:c3:5b:35:4a:cc:00:48:26:f7:47:2b:6d: 4a:83:13:54:a8:22:91:7e:65:40:c3:95:f0:95:52: de:09:af:75:e8:df:35:01:5d:00:52:b4:50:47:15: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:ED:DA:50:8D:DF:A9:00:53:FE:5E:9E:43:4B:46:3E:0D:32:BF:E3 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8f:fd:40:cb:e2:5c:03:57:6e:77:46:13:87:2d:96:de:fc: 0b:3b:18:a5:f2:15:a0:10:ba:60:c4:6a:c3:90:7e:4b:80:a7: 86:cb:52:77:51:40:46:77:fb:c9:87:7b:00:09:a6:36:79:c5: 08:ed:9f:a1:a5:a5:5f:65:35:ec:7e:46:4a:8c:ac:5d:0b:26: 75:b8:0d:66:53:f5:f9:76:55:d3:72:48:e3:6c:d4:f0:ce:32: 27:12:fd:91:71:53:00:a7:ca:2e:53:70:73:8b:ff:65:ff:b5: fd:d4:d1:6c:3c:1a:66:a3:33:f5:2d:1b:7c:01:51:1c:ed:5b: eb:cb:4d:d8:6d:03:3d:98:ad:72:cc:bb:80:98:76:ee:c4:50: 3f:70:27:f9:23:eb:e4:17:cb:3d:e5:23:7c:b6:e3:a9:28:54: e7:62:19:fd:3a:85:ee:26:c2:6b:6d:4f:76:00:6c:2e:80:11: 53:22:44:1a:56:46:27:c4:d3:92:b8:24:a2:bb:5f:a6:60:10: d7:04:06:f2:5e:0c:f0:63:de:4a:bc:6f:f8:d6:11:58:26:98: 22:0c:c6:79:48:ab:e7:0e:d1:8c:a8:39:c6:fd:dd:1f:97:bd: 95:8e:cf:7b:7b:9d:82:87:76:5c:2e:31:10:4c:9a:83:dc:e1: b2:36:ab:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHrgKncenvWAyLiNEm165LtLdrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNjAxMDcxMDM1NTlaFw0yNjAxMTAxMTAxNTlaMDMxMTAvBgNV BAMTKDI0RUREQTUwOERERkE5MDA1M0ZFNUU5RTQzNEI0NjNFMEQzMkJGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHHXTkEWQafT6GO6yWYjzcqBe bH5z+jQNVeQkbD0A18uX6QOb9ueiF2IXwEnH2YPxVUA9LU4ujnT7sGRymu8Y5UM/ 7c13WelzKSR/JKLffZzjaUfJSdJyTxA/a6y3urCNfbubCLLXd/S0TWSpPKy40E7F Zh8q/mbaRg0HNT2Gxgv1xiCpgK4iZgjP6gVQ/wgIFpgc4VF1+01h5GRFGXS46DBu AX7LGrgipb1O1+JWKM2gCoHfXYAs8L4NqW9EGyA3/xgRkZ0buk/EAJ4vbaaCgksD 5sNbNUrMAEgm90crbUqDE1SoIpF+ZUDDlfCVUt4Jr3Xo3zUBXQBStFBHFecBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJO3aUI3fqQBT/l6eQ0tGPg0yv+MwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6P/UDL4lwDV253RhOHLZbe/As7GKXyFaAQ umDEasOQfkuAp4bLUndRQEZ3+8mHewAJpjZ5xQjtn6GlpV9lNex+RkqMrF0LJnW4 DWZT9fl2VdNySONs1PDOMicS/ZFxUwCnyi5TcHOL/2X/tf3U0Ww8GmajM/UtG3wB URztW+vLTdhtAz2YrXLMu4CYdu7EUD9wJ/kj6+QXyz3lI3y246koVOdiGf06he4m wmttT3YAbC6AEVMiRBpWRifE05K4JKK7X6ZgENcEBvJeDPBj3kq8b/jWEVgmmCIM xnlIq+cO0YyoOcb93R+XvZWOz3t7nYKHdlwuMRBMmoPc4bI2q48= -----END CERTIFICATE-----Generated at Thu Jan 8 23:55:10 2026 by rpki-client