This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: 7qS4qMiIsyo8V8fzbjgkKBbSj6KJE0ywfJGj9MxgUQs= Subject key identifier: FE:B1:13:AD:1E:9F:EB:31:19:BC:33:F5:C0:E6:FA:E3:B7:AF:24:F8 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 20065C9B02AF9A204C6ABD414E05573F4595C50D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 0129 Signing time: Wed 21 Jan 2026 06:32:33 +0000 Manifest this update: Wed 21 Jan 2026 06:27:33 +0000 Manifest next update: Sat 24 Jan 2026 18:30:33 +0000 Files and hashes: 1: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 2: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 3: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 4: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: xioAwWQ1U50mo6003qkzZzBhVbXHQYimpQqnEo3kpF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 18:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:06:5c:9b:02:af:9a:20:4c:6a:bd:41:4e:05:57:3f:45:95:c5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Jan 21 06:27:33 2026 GMT Not After : Jan 24 18:30:33 2026 GMT Subject: CN=FEB113AD1E9FEB3119BC33F5C0E6FAE3B7AF24F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a8:a1:83:6a:6a:58:61:4c:37:29:c1:39:b6: da:ed:00:76:fe:e6:70:2c:ab:9c:4b:06:aa:d0:97: f3:6a:27:7a:62:1c:11:d2:11:2f:e2:17:4b:53:b2: c9:7e:7e:66:72:dc:31:8c:95:73:ac:b1:c8:49:20: 0c:8c:ef:9e:14:6b:51:4e:3e:19:b2:d8:3c:83:88: e5:76:13:7e:ab:74:18:53:ac:1d:20:61:e7:ff:18: 75:f4:84:54:69:40:da:16:6c:18:dc:b9:d2:6a:d3: ee:03:05:12:28:db:94:81:c6:dd:8d:56:37:7b:50: 87:93:8d:f2:74:29:06:aa:2c:ee:42:ac:3c:dd:4c: 2c:56:30:11:3b:86:65:21:2c:03:90:0c:78:58:98: d4:cb:cc:a6:ca:45:00:e8:9e:91:7d:75:66:cc:fe: 15:b8:7c:f0:2f:d9:44:4e:b9:77:5b:e8:d4:af:ce: 05:e2:56:7f:5f:73:00:66:d7:0b:dc:54:64:d1:a6: e3:95:57:c0:3a:15:5d:99:52:d3:62:43:d1:e3:75: 3b:5b:c8:22:38:1a:95:b4:73:dc:b3:ca:ef:09:88: 3b:fc:01:86:80:a7:dc:be:86:76:9b:54:d9:4a:e0: d2:df:47:80:87:bf:95:0f:19:21:c5:6f:af:e3:4f: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B1:13:AD:1E:9F:EB:31:19:BC:33:F5:C0:E6:FA:E3:B7:AF:24:F8 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:50:72:57:1b:cd:81:d4:c2:9b:71:6b:5b:aa:fb:72:89:4b: 58:71:41:fa:3e:50:8c:bf:3b:72:61:f7:1e:2c:76:8b:8a:99: 05:32:b7:8d:96:07:60:c6:b1:d5:9b:2e:b9:38:95:ee:1a:69: b2:12:7d:84:e3:1a:57:dd:2e:1a:d8:38:3d:e6:91:86:a7:f3: 67:b5:b2:67:82:39:bc:49:88:d0:5b:43:f9:bf:81:e6:32:1f: 59:bb:ff:fc:77:57:21:1b:86:ae:b5:de:51:6d:27:19:4c:88: d5:b1:9e:87:1e:c2:e4:63:0c:ad:46:fd:28:74:96:31:4a:47: 3b:fb:45:fc:aa:d4:3c:52:db:0a:03:53:7a:4b:6a:21:a1:75: 20:f9:c0:35:44:58:aa:31:dd:d3:8b:43:94:b7:ca:55:5f:9e: af:75:56:f5:25:16:c5:8d:ab:45:68:ca:8a:d9:13:3e:55:60: 5d:8e:29:92:99:8a:64:51:fa:b4:77:0a:ea:e8:87:28:1e:9a: 48:cf:95:9b:4b:73:08:55:94:5c:9b:9c:b2:8a:11:1b:b9:4b: b8:c2:bf:f8:b9:b3:1f:be:49:5f:a1:f4:02:d8:b5:17:e3:a2: 61:2f:a6:0c:86:f1:a0:c8:98:dc:36:20:8d:f0:b2:18:70:8a: b4:98:c9:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAZcmwKvmiBMar1BTgVXP0WVxQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNjAxMjEwNjI3MzNaFw0yNjAxMjQxODMwMzNaMDMxMTAvBgNV BAMTKEZFQjExM0FEMUU5RkVCMzExOUJDMzNGNUMwRTZGQUUzQjdBRjI0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyqKGDampYYUw3KcE5ttrtAHb+ 5nAsq5xLBqrQl/NqJ3piHBHSES/iF0tTssl+fmZy3DGMlXOsschJIAyM754Ua1FO Phmy2DyDiOV2E36rdBhTrB0gYef/GHX0hFRpQNoWbBjcudJq0+4DBRIo25SBxt2N Vjd7UIeTjfJ0KQaqLO5CrDzdTCxWMBE7hmUhLAOQDHhYmNTLzKbKRQDonpF9dWbM /hW4fPAv2UROuXdb6NSvzgXiVn9fcwBm1wvcVGTRpuOVV8A6FV2ZUtNiQ9HjdTtb yCI4GpW0c9yzyu8JiDv8AYaAp9y+hnabVNlK4NLfR4CHv5UPGSHFb6/jTw2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rETrR6f6zEZvDP1wOb647evJPgwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVQclcbzYHUwptxa1uq+3KJS1hxQfo+UIy/ O3Jh9x4sdouKmQUyt42WB2DGsdWbLrk4le4aabISfYTjGlfdLhrYOD3mkYan82e1 smeCObxJiNBbQ/m/geYyH1m7//x3VyEbhq613lFtJxlMiNWxnocewuRjDK1G/Sh0 ljFKRzv7Rfyq1DxS2woDU3pLaiGhdSD5wDVEWKox3dOLQ5S3ylVfnq91VvUlFsWN q0VoyorZEz5VYF2OKZKZimRR+rR3CurohygemkjPlZtLcwhVlFybnLKKERu5S7jC v/i5sx++SV+h9ALYtRfjomEvpgyG8aDImNw2II3wshhwirSYybE= -----END CERTIFICATE-----Generated at Thu Jan 22 17:23:07 2026 by rpki-client