This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: /Pn0c299rPQDboIiLxpjbsftSQW6pDLEHSH+nOtazPM= Subject key identifier: 13:C1:40:DC:AA:E1:7F:75:11:6B:92:0C:B5:EE:46:BC:34:AA:11:5D Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 325CB3026DD84EFA7A58BCD23F50F5C9ADAF7EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 035E Signing time: Sat 10 Jan 2026 09:21:26 +0000 Manifest this update: Sat 10 Jan 2026 09:16:26 +0000 Manifest next update: Tue 13 Jan 2026 18:15:26 +0000 Files and hashes: 1: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 2: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=) 3: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: ZUtOPXj9h/jnkpgHp8gF0xdyHaak4dk6Lx5Ldsd6xJw=) 4: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 18:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5c:b3:02:6d:d8:4e:fa:7a:58:bc:d2:3f:50:f5:c9:ad:af:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Jan 10 09:16:26 2026 GMT Not After : Jan 13 18:15:26 2026 GMT Subject: CN=13C140DCAAE17F75116B920CB5EE46BC34AA115D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:b9:0f:0c:35:47:2b:c1:a0:9e:14:3b:47: fe:8c:94:d6:34:4e:f1:3c:b2:fc:c3:9e:9d:2a:c7: 28:e5:63:41:9f:50:a2:c6:db:17:56:e3:3a:1e:8a: 90:66:14:21:79:2a:15:d0:5c:77:82:63:18:3f:a1: 5e:c5:b6:d4:18:5b:3e:f2:1e:ea:5c:49:7e:17:1b: 66:48:fd:cc:27:8d:a3:32:88:b0:09:53:c9:83:67: 31:9b:de:14:ca:ea:f0:9a:d8:d7:14:1a:07:5f:c2: 48:c2:06:db:f7:e5:ab:50:37:a5:4b:82:f2:ae:fa: c3:b0:c3:0f:f3:20:88:82:26:90:e0:80:d2:ab:19: 1c:ed:17:74:dd:65:aa:12:0b:01:f7:c0:a1:8b:13: 5f:a1:35:87:a5:8c:62:8c:e2:ca:aa:5d:10:10:27: 27:c9:74:94:41:0c:e3:5c:88:5f:23:ea:3c:62:a8: 31:6f:d0:45:5b:43:73:79:27:8e:54:50:7a:32:f2: 0d:95:c9:55:f5:fd:c6:69:ae:4b:b2:65:85:fc:49: 46:67:47:30:de:bb:b8:0c:df:2b:60:80:b6:ac:38: 41:38:c4:fc:e2:11:4c:30:11:df:e7:65:91:9d:09: d0:a6:a4:5a:06:38:d9:56:15:eb:e1:e2:00:a0:7d: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:40:DC:AA:E1:7F:75:11:6B:92:0C:B5:EE:46:BC:34:AA:11:5D X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e4:bc:05:27:0a:c9:4a:ac:c4:59:08:2f:10:fb:ca:29:ed: 9a:76:26:3c:41:43:db:aa:d7:a1:8a:eb:d9:f9:65:99:b2:af: 76:5f:10:1e:5d:50:2d:67:3b:c7:46:92:0f:d5:50:bc:c0:f0: 3f:53:3e:c7:c5:33:5a:c7:27:86:d0:5d:16:84:0c:96:e1:56: ac:c7:05:c9:96:a9:d4:fc:43:71:e8:ce:7a:02:0c:5d:32:75: 27:e7:d4:fc:e4:2e:c2:a8:28:ac:79:3f:8b:fb:26:bd:a0:e1: 74:f9:9d:cb:9b:36:a1:ad:6b:d5:23:cf:20:85:39:a0:cc:26: b9:01:84:da:96:74:42:32:41:f7:9c:ef:48:1b:54:95:1b:92: 30:d4:05:c6:49:be:0d:e9:45:6e:e9:9f:ef:9c:a7:ba:94:df: 25:7c:a9:40:5d:ce:43:0f:f1:55:6a:5e:55:a1:c7:5c:34:94: 28:4b:cf:70:f3:b9:43:4d:6e:db:7e:ca:e9:2e:00:18:40:e8: 35:4b:87:66:ba:39:9f:55:bd:51:af:cf:ce:69:3b:67:3a:95: 50:0d:d7:93:1a:18:97:ed:63:c2:0a:d2:a3:40:1d:01:0a:b6: dc:12:12:ce:45:43:ad:80:49:94:81:be:c9:a1:87:c8:19:94: 50:2b:30:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlyzAm3YTvp6WLzSP1D1ya2vfqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNjAxMTAwOTE2MjZaFw0yNjAxMTMxODE1MjZaMDMxMTAvBgNV BAMTKDEzQzE0MERDQUFFMTdGNzUxMTZCOTIwQ0I1RUU0NkJDMzRBQTExNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWALkPDDVHK8GgnhQ7R/6MlNY0 TvE8svzDnp0qxyjlY0GfUKLG2xdW4zoeipBmFCF5KhXQXHeCYxg/oV7FttQYWz7y HupcSX4XG2ZI/cwnjaMyiLAJU8mDZzGb3hTK6vCa2NcUGgdfwkjCBtv35atQN6VL gvKu+sOwww/zIIiCJpDggNKrGRztF3TdZaoSCwH3wKGLE1+hNYeljGKM4sqqXRAQ JyfJdJRBDONciF8j6jxiqDFv0EVbQ3N5J45UUHoy8g2VyVX1/cZprkuyZYX8SUZn RzDeu7gM3ytggLasOEE4xPziEUwwEd/nZZGdCdCmpFoGONlWFevh4gCgfcQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8FA3Krhf3URa5IMte5GvDSqEV0wHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbkvAUnCslKrMRZCC8Q+8op7Zp2JjxBQ9uq 16GK69n5ZZmyr3ZfEB5dUC1nO8dGkg/VULzA8D9TPsfFM1rHJ4bQXRaEDJbhVqzH BcmWqdT8Q3HoznoCDF0ydSfn1PzkLsKoKKx5P4v7Jr2g4XT5ncubNqGta9UjzyCF OaDMJrkBhNqWdEIyQfec70gbVJUbkjDUBcZJvg3pRW7pn++cp7qU3yV8qUBdzkMP 8VVqXlWhx1w0lChLz3DzuUNNbtt+yukuABhA6DVLh2a6OZ9VvVGvz85pO2c6lVAN 15MaGJftY8IK0qNAHQEKttwSEs5FQ62ASZSBvsmhh8gZlFArMMw= -----END CERTIFICATE-----Generated at Sun Jan 11 23:55:48 2026 by rpki-client