This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json) Hash identifier: +T7McVlQv4sjtXN+kDpzQTw3rRJXE8ReVpqjqDxFp3I= Subject key identifier: 40:6C:B4:FB:5A:C8:5F:1A:F9:B1:3A:5A:20:CA:F4:C7:22:F1:05:A5 Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 6E38D5376D060CFF4074C6495113510546E183B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft Manifest number: 026B Signing time: Thu 01 Jan 2026 13:11:11 +0000 Manifest this update: Thu 01 Jan 2026 13:06:11 +0000 Manifest next update: Sun 04 Jan 2026 23:57:11 +0000 Files and hashes: 1: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: U633ym5jUdptckJshhV25CxUbvCB8/wjZ9iL8MKR52I=) 2: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: Eby+lQ4Pxm8KXTz+flHKlrHTMIozSwlfEZkt1PamieE=) 3: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: DwzbcXroI8gNYKGQ4eUqNjfcLXfCqCYoHIzRD47u86M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:38:d5:37:6d:06:0c:ff:40:74:c6:49:51:13:51:05:46:e1:83:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Jan 1 13:06:11 2026 GMT Not After : Jan 4 23:57:11 2026 GMT Subject: CN=406CB4FB5AC85F1AF9B13A5A20CAF4C722F105A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:23:5a:3c:e5:66:4a:95:41:2c:fc:c0:b7:01: 3e:c2:29:aa:74:33:27:14:22:03:20:f2:9b:13:0e: cb:dc:dd:79:24:8d:a7:c4:66:55:7f:91:03:3c:b8: 72:07:ee:2a:3a:8a:d2:98:e4:5f:dc:d7:84:84:2b: cf:4c:f6:f4:06:1b:89:7e:42:e0:c6:d5:3a:f1:10: c3:3d:cd:2b:42:75:38:16:d0:c5:0c:ad:1a:98:09: b5:94:aa:bc:c7:d8:1f:db:07:67:e7:2c:1f:4b:79: 80:b5:6b:da:d4:04:5c:74:5d:40:cc:90:60:ef:0d: c9:56:7f:61:89:ce:55:f2:7e:c4:17:42:ed:5b:3b: 06:29:18:fb:49:14:fb:66:f0:12:17:d0:dc:d5:4f: ce:5d:df:68:ef:18:66:7d:b9:fd:6e:de:41:ef:bb: 67:40:cd:31:b4:48:03:99:f3:28:25:51:1d:6b:ff: f0:57:1c:16:89:da:64:af:97:fa:2e:be:61:26:1b: 54:50:bb:e3:fb:62:e5:56:ee:71:d7:27:3c:fa:45: b4:96:d1:ba:c2:34:7b:7b:f4:44:67:56:b4:db:6a: 01:da:a7:14:db:d5:be:49:cd:4d:13:6b:2c:2d:ed: 07:77:3f:f1:b9:53:1b:ba:5a:21:ee:0e:ec:46:b7: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6C:B4:FB:5A:C8:5F:1A:F9:B1:3A:5A:20:CA:F4:C7:22:F1:05:A5 X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:29:97:e0:d7:34:7d:81:60:2b:c2:6d:26:ca:96:7a:fe:ec: 8b:0a:dc:7c:02:a3:ae:80:bc:5f:05:9b:46:16:9f:ec:5d:a1: b0:48:0e:6d:3b:65:4f:4c:85:96:f2:5d:70:a2:3a:fe:4a:e7: 08:01:22:65:5a:b9:8b:59:9a:cf:95:2b:e6:2a:56:bc:88:c3: a6:60:39:6a:3a:69:ec:72:99:65:4c:f4:ae:93:d1:61:6b:7b: ae:b7:5f:00:23:9c:f4:1d:f7:9d:46:2c:16:8d:90:2e:7c:0e: da:30:6f:1c:dd:ad:f4:1b:b3:5c:64:4b:7f:14:0d:ca:cb:49: 48:89:03:10:bb:bf:db:c0:95:4c:9a:7e:21:b9:c5:d4:8d:7c: d6:e0:6d:3d:26:a7:d6:f3:c8:d0:e7:58:7e:84:c8:8c:34:28: e6:ab:8c:4f:69:79:5f:1d:0c:13:76:47:ef:b3:0b:33:4b:3c: 86:79:93:e5:57:ee:ad:a2:54:e7:7a:44:91:5a:31:36:05:c0: 72:69:b1:8f:01:b5:e1:22:e4:74:d1:eb:57:71:47:e0:19:80: 11:9f:3a:7f:f8:d5:23:28:04:4c:47:f3:92:fb:66:61:2c:24: 0d:b6:a5:f4:d4:e0:4b:b7:dc:4d:6a:86:ad:4f:a1:3e:d8:2d: c1:96:bf:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjjVN20GDP9AdMZJURNRBUbhg7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNjAxMDExMzA2MTFaFw0yNjAxMDQyMzU3MTFaMDMxMTAvBgNV BAMTKDQwNkNCNEZCNUFDODVGMUFGOUIxM0E1QTIwQ0FGNEM3MjJGMTA1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5I1o85WZKlUEs/MC3AT7CKap0 MycUIgMg8psTDsvc3XkkjafEZlV/kQM8uHIH7io6itKY5F/c14SEK89M9vQGG4l+ QuDG1TrxEMM9zStCdTgW0MUMrRqYCbWUqrzH2B/bB2fnLB9LeYC1a9rUBFx0XUDM kGDvDclWf2GJzlXyfsQXQu1bOwYpGPtJFPtm8BIX0NzVT85d32jvGGZ9uf1u3kHv u2dAzTG0SAOZ8yglUR1r//BXHBaJ2mSvl/ouvmEmG1RQu+P7YuVW7nHXJzz6RbSW 0brCNHt79ERnVrTbagHapxTb1b5JzU0Taywt7Qd3P/G5Uxu6WiHuDuxGt97tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGy0+1rIXxr5sTpaIMr0xyLxBaUwHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3 MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkpl+DXNH2BYCvCbSbKlnr+7IsK3HwCo66A vF8Fm0YWn+xdobBIDm07ZU9MhZbyXXCiOv5K5wgBImVauYtZms+VK+YqVryIw6Zg OWo6aexymWVM9K6T0WFre663XwAjnPQd951GLBaNkC58DtowbxzdrfQbs1xkS38U DcrLSUiJAxC7v9vAlUyafiG5xdSNfNbgbT0mp9bzyNDnWH6EyIw0KOarjE9peV8d DBN2R++zCzNLPIZ5k+VX7q2iVOd6RJFaMTYFwHJpsY8BteEi5HTR61dxR+AZgBGf On/41SMoBExH85L7ZmEsJA22pfTU4Eu33E1qhq1PoT7YLcGWv5A= -----END CERTIFICATE-----Generated at Thu Jan 1 14:28:31 2026 by rpki-client