This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: ZJl0wjjrd2BTGAjVI+ZG4TCiNhegJeOT2p/h7TU7FV0= Subject key identifier: 0E:8C:98:67:96:86:87:BB:14:0A:17:F4:9B:77:86:BE:91:A4:B9:8E Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 2AACDCA34F352230C31701442F6975203B0E8357 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 01EF Signing time: Wed 07 Jan 2026 07:31:31 +0000 Manifest this update: Wed 07 Jan 2026 07:26:31 +0000 Manifest next update: Sat 10 Jan 2026 13:37:31 +0000 Files and hashes: 1: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=) 2: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: fW0vqim+VuseDGznsHluBSE1WdI9+C3lCAUb2fBBlOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 13:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ac:dc:a3:4f:35:22:30:c3:17:01:44:2f:69:75:20:3b:0e:83:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Jan 7 07:26:31 2026 GMT Not After : Jan 10 13:37:31 2026 GMT Subject: CN=0E8C9867968687BB140A17F49B7786BE91A4B98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:2b:7a:ad:f0:0b:e9:2e:f6:76:26:14:04: bf:2c:35:52:07:1f:90:21:59:ca:79:2d:24:46:d0: af:31:f1:f1:0f:e6:9c:72:d3:89:19:78:45:10:85: c9:3f:91:df:b6:d5:c7:44:7c:9f:b4:86:fb:15:03: 9b:bc:33:8c:28:48:56:29:aa:a7:d1:7b:0c:70:b5: 1d:36:ec:7f:f1:fc:f4:07:2f:83:c5:61:ca:d1:13: c6:aa:2d:61:dd:46:de:6d:74:d8:1c:b0:a2:0f:70: 4b:45:09:4e:63:f4:bf:98:d2:0f:bf:75:a7:4d:a7: ea:a6:1d:22:52:de:76:1d:03:51:68:2b:79:5d:a4: cd:d0:60:9e:4a:e3:8c:7e:01:49:53:55:59:a0:54: 03:3a:f0:c4:05:60:53:34:61:ec:31:ab:8c:cc:30: 12:16:95:81:e6:f6:b5:1e:4c:23:56:05:b4:04:88: 9a:89:9f:21:c6:43:f7:87:35:75:17:6e:43:f1:f4: c4:b7:c1:9c:fc:59:40:0d:cb:d7:fe:8c:9a:83:d6: 38:5f:1f:05:20:8f:b7:88:cc:7c:03:f7:b7:83:82: d8:0b:ac:c0:7d:ed:45:3e:1a:c5:50:e3:ac:21:2a: 85:70:3b:7f:1c:37:d1:eb:dd:09:8a:e5:3f:d1:c7: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:98:67:96:86:87:BB:14:0A:17:F4:9B:77:86:BE:91:A4:B9:8E X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f6:8c:a6:68:b4:46:29:7b:05:b0:9e:af:a3:85:8d:08:c1: e2:30:b7:d0:83:d3:dd:80:e9:d0:43:7a:f2:5a:f3:be:2d:8a: 71:28:97:f0:36:99:ce:98:aa:4f:ae:d3:44:17:a3:8f:ae:18: 5a:ce:33:97:cf:b9:e9:80:d9:b5:10:00:a8:d7:38:1a:7a:51: fb:d7:7f:23:54:a6:1a:1e:60:f7:7e:27:13:52:ba:37:e9:d5: a8:24:8e:c5:d6:46:80:b8:80:e3:21:24:31:52:2e:20:c2:ce: 87:34:04:ef:b0:01:80:d9:98:29:c1:63:67:51:38:41:60:ef: a9:a8:26:62:77:7c:e1:26:34:6c:01:9e:54:69:e3:c6:79:4b: 01:67:dc:fb:6c:21:d2:da:a8:c2:36:ae:41:95:c5:5a:06:2b: ae:2b:10:b1:d3:25:7a:f5:4c:7e:d0:18:a7:aa:22:b2:ab:b1: 3a:ad:a1:f5:b3:c6:8f:ce:13:01:fc:fb:85:a0:8d:31:df:da: 82:23:1d:a2:c0:33:e4:60:5f:ef:5d:b1:bc:09:fe:50:f9:06: 89:84:35:b1:da:93:63:26:ff:c0:54:2c:b8:4f:36:a4:99:f5: f2:7c:38:1c:30:18:b4:f6:90:6c:6e:8d:1a:74:e7:3e:f8:82: 6d:34:e9:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqzco081IjDDFwFEL2l1IDsOg1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNjAxMDcwNzI2MzFaFw0yNjAxMTAxMzM3MzFaMDMxMTAvBgNV BAMTKDBFOEM5ODY3OTY4Njg3QkIxNDBBMTdGNDlCNzc4NkJFOTFBNEI5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cCt6rfAL6S72diYUBL8sNVIH H5AhWcp5LSRG0K8x8fEP5pxy04kZeEUQhck/kd+21cdEfJ+0hvsVA5u8M4woSFYp qqfRewxwtR027H/x/PQHL4PFYcrRE8aqLWHdRt5tdNgcsKIPcEtFCU5j9L+Y0g+/ dadNp+qmHSJS3nYdA1FoK3ldpM3QYJ5K44x+AUlTVVmgVAM68MQFYFM0Yewxq4zM MBIWlYHm9rUeTCNWBbQEiJqJnyHGQ/eHNXUXbkPx9MS3wZz8WUANy9f+jJqD1jhf HwUgj7eIzHwD97eDgtgLrMB97UU+GsVQ46whKoVwO38cN9Hr3QmK5T/Rxy7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDoyYZ5aGh7sUChf0m3eGvpGkuY4wHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD2jKZotEYpewWwnq+jhY0IweIwt9CD092A 6dBDevJa874tinEol/A2mc6Yqk+u00QXo4+uGFrOM5fPuemA2bUQAKjXOBp6UfvX fyNUphoeYPd+JxNSujfp1agkjsXWRoC4gOMhJDFSLiDCzoc0BO+wAYDZmCnBY2dR OEFg76moJmJ3fOEmNGwBnlRp48Z5SwFn3PtsIdLaqMI2rkGVxVoGK64rELHTJXr1 TH7QGKeqIrKrsTqtofWzxo/OEwH8+4WgjTHf2oIjHaLAM+RgX+9dsbwJ/lD5BomE NbHak2Mm/8BULLhPNqSZ9fJ8OBwwGLT2kGxujRp05z74gm006fk= -----END CERTIFICATE-----Generated at Thu Jan 8 11:30:12 2026 by rpki-client