This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft File: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft (raw, json) Hash identifier: b7wWf8EqM3S30CJuXzKp1Bs3hcJyQlTBTadp5X4bFSg= Subject key identifier: E8:32:BB:2C:7B:C6:E1:2A:3B:43:6A:2C:9F:DB:95:8D:15:02:A6:22 Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 4920321BD60A8E8610909768A185ECBB81E467D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft Manifest number: 0298 Signing time: Mon 26 Jan 2026 04:41:46 +0000 Manifest this update: Mon 26 Jan 2026 04:36:46 +0000 Manifest next update: Thu 29 Jan 2026 07:45:46 +0000 Files and hashes: 1: 00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl (hash: ha//oyd2A0Ksm454LgVIBTUO0Q0WOXyWv6UuZuY2Q/w=) 2: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc=) 3: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: qsNJTbCdEl5g+CtS1gIL++26d6eTd1asuHFx0fLTFCk=) 4: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: WCPD3rvs/h3EKH86SX2zTuUBCPJyhF6J/Q+pVbsSNFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 07:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:20:32:1b:d6:0a:8e:86:10:90:97:68:a1:85:ec:bb:81:e4:67:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Jan 26 04:36:46 2026 GMT Not After : Jan 29 07:45:46 2026 GMT Subject: CN=E832BB2C7BC6E12A3B436A2C9FDB958D1502A622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:ce:31:2b:9f:03:86:e1:92:a9:16:52:3f: fc:f3:55:15:a6:04:12:d3:2e:68:07:41:10:07:8e: f5:86:74:ed:c1:54:b9:e2:93:2f:02:84:64:a2:0b: 6b:b6:32:91:d3:7a:f0:64:5e:89:64:c6:5b:af:ee: 42:cf:42:5d:53:28:09:03:52:73:e1:8b:80:8a:4f: 36:ad:3f:bd:35:c0:79:73:01:f6:86:62:e7:9d:c8: 45:c1:1c:21:76:39:3c:ff:68:db:d0:aa:d8:5f:5a: ba:65:07:8d:46:f9:48:cc:4e:8a:21:58:4e:51:ca: a1:cc:22:c7:a0:73:33:6e:39:45:98:e3:3a:a7:d2: 5f:03:b1:4e:01:2f:d3:b5:b8:73:a4:2f:b3:57:3b: 66:33:c3:19:06:bf:b6:97:11:d7:eb:17:d1:ce:5c: 23:a2:66:4d:45:43:fe:29:43:4c:fd:19:0a:c9:09: c0:1a:7f:c0:9d:30:3b:86:70:5b:5a:5b:41:15:e6: 42:94:14:c4:eb:f7:8e:8f:31:94:56:fc:1a:ee:d9: 80:2f:2d:0b:b5:bf:fc:7f:86:e6:18:73:85:0b:4d: 5b:92:3d:04:48:af:29:85:fe:a9:2e:14:ac:ce:62: db:3f:4c:59:42:7d:23:e9:f5:ce:d0:57:ce:d7:1b: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:32:BB:2C:7B:C6:E1:2A:3B:43:6A:2C:9F:DB:95:8D:15:02:A6:22 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fe:fe:81:17:48:1e:46:7f:12:2b:b0:31:41:bc:08:99:cb: 90:a3:bf:0f:23:e7:5c:84:a2:2b:4a:73:2c:aa:96:4e:38:1a: e4:c8:51:6f:ee:fb:98:87:9f:36:2e:fe:f2:25:7e:8a:3d:68: 40:d5:fb:06:3c:95:87:e3:d1:1b:2b:b8:4e:ef:89:48:cf:58: c8:10:05:68:6b:15:d6:b7:d1:eb:79:f7:64:06:e7:3e:71:cb: 63:0d:f1:eb:db:21:aa:53:76:5b:4b:39:06:de:a3:58:a7:c9: 83:cc:6f:8f:ed:cc:52:1b:59:81:16:21:6a:04:7d:c9:cd:fc: bb:c4:14:ab:6d:8f:09:27:72:7c:90:b6:76:24:d1:6a:6b:cf: 77:93:a5:71:c0:99:e0:1f:80:03:ce:9e:84:20:8d:48:30:fe: 57:b7:09:bb:1e:93:5f:ad:45:78:d8:64:3a:85:d2:6b:be:d7: ca:12:6a:83:64:8b:1b:f9:90:27:40:ec:35:1d:7a:fc:dc:c2: 5d:6a:32:cd:82:47:a4:48:31:de:ba:1f:76:da:4b:92:e2:93: cb:54:61:43:44:eb:58:1b:05:d0:d8:d9:bb:b3:28:34:bb:1a: 4c:3c:de:c7:4c:da:ea:3f:09:79:1b:14:5b:08:a4:c3:55:f4: e0:ac:d8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSAyG9YKjoYQkJdooYXsu4HkZ9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNjAxMjYwNDM2NDZaFw0yNjAxMjkwNzQ1NDZaMDMxMTAvBgNV BAMTKEU4MzJCQjJDN0JDNkUxMkEzQjQzNkEyQzlGREI5NThEMTUwMkE2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ec4xK58DhuGSqRZSP/zzVRWm BBLTLmgHQRAHjvWGdO3BVLniky8ChGSiC2u2MpHTevBkXolkxluv7kLPQl1TKAkD UnPhi4CKTzatP701wHlzAfaGYuedyEXBHCF2OTz/aNvQqthfWrplB41G+UjMTooh WE5RyqHMIsegczNuOUWY4zqn0l8DsU4BL9O1uHOkL7NXO2YzwxkGv7aXEdfrF9HO XCOiZk1FQ/4pQ0z9GQrJCcAaf8CdMDuGcFtaW0EV5kKUFMTr946PMZRW/Bru2YAv LQu1v/x/huYYc4ULTVuSPQRIrymF/qkuFKzOYts/TFlCfSPp9c7QV87XG8Z/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6DK7LHvG4So7Q2osn9uVjRUCpiIwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZG OUY4RDFCQkZCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP+/oEXSB5GfxIrsDFBvAiZy5Cjvw8j51yE oitKcyyqlk44GuTIUW/u+5iHnzYu/vIlfoo9aEDV+wY8lYfj0RsruE7viUjPWMgQ BWhrFda30et592QG5z5xy2MN8evbIapTdltLOQbeo1inyYPMb4/tzFIbWYEWIWoE fcnN/LvEFKttjwkncnyQtnYk0Wprz3eTpXHAmeAfgAPOnoQgjUgw/le3Cbsek1+t RXjYZDqF0mu+18oSaoNkixv5kCdA7DUdevzcwl1qMs2CR6RIMd66H3baS5Lik8tU YUNE61gbBdDY2buzKDS7Gkw83sdM2uo/CXkbFFsIpMNV9OCs2D0= -----END CERTIFICATE-----Generated at Tue Jan 27 03:56:45 2026 by rpki-client