This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft File: 26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft (raw, json) Hash identifier: SydfXmO3Uh9fg4/43LnW2ire0cXadxAIIQsohJGkoNg= Subject key identifier: 21:D4:0D:1D:BF:01:C3:DE:CB:96:5B:12:BE:F4:71:47:82:59:D1:1C Authority key identifier: 26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C Certificate issuer: /CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C Certificate serial: 53A2D29CBDF6194E5DFFAD44A32AF2224C52C338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft Manifest number: 01EC Signing time: Sun 21 Dec 2025 07:00:54 +0000 Manifest this update: Sun 21 Dec 2025 06:55:54 +0000 Manifest next update: Wed 24 Dec 2025 12:25:54 +0000 Files and hashes: 1: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: l6aeKW09Sx7rSFkeI19KtMnYYrlj03ziclyGv0GOLhU=) 2: 26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl (hash: m1MZc1UPYJ3tTYUDeMcjWeENsI+tYL/qsZjDbYKzqPU=) 3: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: tPkwmcbFGdH2Zdm8XN8SrM9FraltUANniKZrGodwkPI=) 4: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: FzyKL9bCnJSB3v6U9N3ecP/uhXzcWqpKC54Mt7U5nck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a2:d2:9c:bd:f6:19:4e:5d:ff:ad:44:a3:2a:f2:22:4c:52:c3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C Validity Not Before: Dec 21 06:55:54 2025 GMT Not After : Dec 24 12:25:54 2025 GMT Subject: CN=21D40D1DBF01C3DECB965B12BEF471478259D11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:b0:f1:b9:2d:39:d5:f8:f7:ac:0f:f6:10: f4:d5:2e:7e:cf:24:07:19:68:fe:a3:a5:98:56:ff: 84:56:f5:2d:32:6c:3a:00:0f:85:7d:15:18:07:ac: 7c:b5:d2:71:90:32:18:80:bd:f1:af:73:02:02:33: 6d:43:28:5b:6b:db:5b:16:0f:a6:78:e0:99:b2:bb: 5d:58:5e:fb:17:b4:65:90:98:18:ae:5b:ca:cd:76: 45:84:2f:35:bb:dc:97:a8:c2:d0:f4:a5:31:9f:b9: 21:e5:78:0a:53:aa:e1:63:81:a9:d3:61:e9:fd:69: 41:4b:99:26:84:87:09:7c:e1:0d:e2:fa:5a:11:0c: b5:80:7b:11:7a:ec:61:5a:e7:2e:58:4b:a0:fe:bb: a9:18:5d:77:f6:b4:df:69:77:bf:53:92:a7:2c:b2: c4:cf:18:fd:72:48:b3:3f:e1:47:c6:93:4c:54:00: 66:3c:ba:ba:d2:d4:78:d9:27:cf:d0:c5:30:2f:91: 54:db:1e:54:7d:2e:c6:e4:f7:c0:43:b7:19:00:05: ea:b6:e9:14:d2:d4:2c:0e:d9:57:11:1f:4c:39:da: 80:3d:a8:9e:4d:d0:05:9e:ed:8b:36:e4:4b:15:6d: a0:3b:d1:c7:ac:fe:98:26:ab:4b:90:64:27:ca:c2: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:0D:1D:BF:01:C3:DE:CB:96:5B:12:BE:F4:71:47:82:59:D1:1C X509v3 Authority Key Identifier: keyid:26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:1b:1e:eb:b6:5b:0f:40:4c:93:5d:d9:23:1f:ac:3b:b1:3e: 59:1b:e9:3c:24:79:95:02:3e:98:d4:a9:89:f1:29:d4:e0:ae: 9b:46:91:92:44:99:d3:da:75:f4:cb:08:46:87:8a:ff:55:27: d0:2f:5f:c7:d7:51:25:1b:55:2e:45:f8:85:5e:51:70:03:f5: 54:c7:96:93:a6:57:56:58:87:4a:58:9d:a7:32:0b:1e:28:96: b6:ed:4e:b8:dd:82:f3:cb:4e:38:0a:e9:8f:45:db:f3:9c:87: 76:5a:9a:fe:72:c1:db:fc:73:29:5a:57:86:19:b1:0c:c9:b8: f6:e3:57:30:15:c3:34:93:d7:71:9d:60:c6:dc:b2:73:ce:67: 00:81:ac:84:3e:44:ee:8f:3d:84:5a:0f:65:79:58:8c:02:61: bd:a1:e6:c8:01:5e:36:d9:d5:67:6b:91:3c:21:d6:24:3f:77: 2b:2b:14:d0:b0:6c:5f:58:2e:c8:0d:d8:cc:a7:4a:34:5f:18: 3d:0e:bc:1a:57:dd:2c:05:6d:6d:94:14:1e:44:5b:b6:14:ce: 72:cb:e5:47:08:76:61:da:b9:ac:72:98:25:46:c2:99:2a:e6: d0:fd:e3:df:55:20:0a:7d:9a:81:ca:3c:e2:bd:f1:ca:f8:3a: 50:3b:e3:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6LSnL32GU5d/61EoyryIkxSwzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2 NUI5N0U1QzAeFw0yNTEyMjEwNjU1NTRaFw0yNTEyMjQxMjI1NTRaMDMxMTAvBgNV BAMTKDIxRDQwRDFEQkYwMUMzREVDQjk2NUIxMkJFRjQ3MTQ3ODI1OUQxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJrDxuS051fj3rA/2EPTVLn7P JAcZaP6jpZhW/4RW9S0ybDoAD4V9FRgHrHy10nGQMhiAvfGvcwICM21DKFtr21sW D6Z44Jmyu11YXvsXtGWQmBiuW8rNdkWELzW73JeowtD0pTGfuSHleApTquFjganT Yen9aUFLmSaEhwl84Q3i+loRDLWAexF67GFa5y5YS6D+u6kYXXf2tN9pd79Tkqcs ssTPGP1ySLM/4UfGk0xUAGY8urrS1HjZJ8/QxTAvkVTbHlR9Lsbk98BDtxkABeq2 6RTS1CwO2VcRH0w52oA9qJ5N0AWe7Ys25EsVbaA70ces/pgmq0uQZCfKwo/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdQNHb8Bw97LllsSvvRxR4JZ0RwwHwYDVR0j BBgwFoAUJqFBkPhFo/P8M2vTBirm8WW5flwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzYwYTZjMS1jMDgxLTQzOWItYWU4ZC04MTQ5YjYzNGQ1YTIvMC8yNkExNDE5MEY4 NDVBM0YzRkMzMzZCRDMwNjJBRTZGMTY1Qjk3RTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2NUI5 N0U1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M2MGE2YzEtYzA4MS00MzliLWFl OGQtODE0OWI2MzRkNWEyLzAvMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2 RjE2NUI5N0U1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMbHuu2Ww9ATJNd2SMfrDuxPlkb6TwkeZUC PpjUqYnxKdTgrptGkZJEmdPadfTLCEaHiv9VJ9AvX8fXUSUbVS5F+IVeUXAD9VTH lpOmV1ZYh0pYnacyCx4olrbtTrjdgvPLTjgK6Y9F2/Och3Zamv5ywdv8cylaV4YZ sQzJuPbjVzAVwzST13GdYMbcsnPOZwCBrIQ+RO6PPYRaD2V5WIwCYb2h5sgBXjbZ 1WdrkTwh1iQ/dysrFNCwbF9YLsgN2MynSjRfGD0OvBpX3SwFbW2UFB5EW7YUznLL 5UcIdmHauaxymCVGwpkq5tD9499VIAp9moHKPOK98cr4OlA74+s= -----END CERTIFICATE-----Generated at Tue Dec 23 19:00:59 2025 by rpki-client