This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: Mv1JA5/4FVo58ZgDVBKgQwZtjZ+dwTFE7N/4A0Df5dw= Subject key identifier: D8:5A:83:1E:12:34:71:2B:CF:97:56:98:2A:2D:9B:BF:E5:BB:31:3E Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 42FAF0D2E19A08A8ACBF335E6446391C65EF7262 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 02AA Signing time: Sat 24 Jan 2026 17:01:52 +0000 Manifest this update: Sat 24 Jan 2026 16:56:52 +0000 Manifest next update: Wed 28 Jan 2026 01:49:52 +0000 Files and hashes: 1: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: /Kgh1FtqsVLrB3iwOwCMZ2TMayaqjrjzlWBGkP9pHjc=) 3: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fa:f0:d2:e1:9a:08:a8:ac:bf:33:5e:64:46:39:1c:65:ef:72:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Jan 24 16:56:52 2026 GMT Not After : Jan 28 01:49:52 2026 GMT Subject: CN=D85A831E1234712BCF9756982A2D9BBFE5BB313E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:da:d0:91:7d:66:e7:3b:38:bc:fd:ae:60: 74:0e:cc:78:89:60:84:be:92:e0:81:af:88:10:fe: 03:94:ca:cf:33:36:6d:2b:eb:74:f8:4b:e7:5b:b3: 19:0a:4e:ef:80:cf:54:77:4b:96:da:51:1a:16:9d: 56:c4:f8:79:0b:ed:e4:b1:fd:4f:46:26:b9:55:64: 5a:34:a8:7e:77:83:e4:e1:f2:91:c9:29:4e:06:b2: b6:3a:df:4e:a5:b9:0f:ae:3a:57:04:1d:b0:2c:8b: 3f:e3:77:1a:83:9d:a1:71:45:f0:d8:6c:91:1e:cd: 6b:d7:58:b8:09:6b:20:7f:86:74:6c:bd:93:04:72: f1:6b:f9:f6:4c:a6:9e:aa:c0:28:0f:2c:a9:2d:2c: 17:88:2f:3f:09:3f:a8:a2:03:11:9f:86:d2:55:10: ab:ff:9c:f9:aa:e8:67:9c:ea:c3:1f:24:1e:a3:a1: 48:6c:df:cb:7d:f7:fa:de:19:fe:49:22:57:c6:0b: c9:da:7a:9c:4e:77:8b:99:ea:25:53:8e:fb:2d:20: 6d:ba:70:6e:1a:77:72:8e:89:b4:d4:3f:48:ee:91: 1a:80:55:44:68:55:d7:55:81:77:3d:f6:69:6a:dc: 75:de:51:34:5d:1a:0f:e5:c3:c7:8f:9d:17:98:55: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5A:83:1E:12:34:71:2B:CF:97:56:98:2A:2D:9B:BF:E5:BB:31:3E X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4e:46:b7:3b:89:2d:a8:85:ce:22:89:e2:1a:da:4c:8a:59: 8f:ee:a5:58:06:2b:95:ca:9d:c7:f1:a1:95:ac:b4:39:a2:ab: 28:ef:53:1b:fd:23:36:03:14:49:39:f5:cb:80:30:d1:5c:b3: 83:82:1f:42:85:b1:7f:93:6f:87:52:b4:8f:ce:da:91:73:23: e3:eb:e7:f2:f1:ad:77:97:92:dc:6c:30:0a:98:be:08:be:a0: 4c:12:b3:0e:a7:ec:cf:dd:bd:57:cb:0c:e1:34:99:de:c2:d6: cd:02:ed:90:20:3f:c4:81:d5:f5:44:da:99:25:f8:36:57:ff: cf:ff:80:b4:45:c3:74:f6:4f:e2:30:72:6e:ef:ad:6c:d3:2c: 3f:cb:16:26:6f:3b:07:11:d4:6a:b9:9f:ec:59:9f:a9:0a:85: 2f:4c:43:30:58:58:48:a7:a0:76:2d:34:ee:d3:75:c5:cd:23: 01:d6:ee:2a:cd:fc:6f:28:e5:4c:e6:5c:b9:55:ae:dd:d4:b2: 89:f8:1c:3c:10:25:d5:b0:2e:83:21:e8:2d:35:3f:b2:91:0d: 69:0e:a1:03:b5:a0:93:ef:48:14:65:db:a8:7c:c8:ca:53:aa: 44:b2:58:1f:27:44:bb:17:74:1b:de:f0:9a:95:d6:a8:ff:9c: 83:ea:07:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvrw0uGaCKisvzNeZEY5HGXvcmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNjAxMjQxNjU2NTJaFw0yNjAxMjgwMTQ5NTJaMDMxMTAvBgNV BAMTKEQ4NUE4MzFFMTIzNDcxMkJDRjk3NTY5ODJBMkQ5QkJGRTVCQjMxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohtrQkX1m5zs4vP2uYHQOzHiJ YIS+kuCBr4gQ/gOUys8zNm0r63T4S+dbsxkKTu+Az1R3S5baURoWnVbE+HkL7eSx /U9GJrlVZFo0qH53g+Th8pHJKU4GsrY6306luQ+uOlcEHbAsiz/jdxqDnaFxRfDY bJEezWvXWLgJayB/hnRsvZMEcvFr+fZMpp6qwCgPLKktLBeILz8JP6iiAxGfhtJV EKv/nPmq6Gec6sMfJB6joUhs38t99/reGf5JIlfGC8naepxOd4uZ6iVTjvstIG26 cG4ad3KOibTUP0jukRqAVURoVddVgXc99mlq3HXeUTRdGg/lw8ePnReYVVKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2FqDHhI0cSvPl1aYKi2bv+W7MT4wHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlORrc7iS2ohc4iieIa2kyKWY/upVgGK5XK ncfxoZWstDmiqyjvUxv9IzYDFEk59cuAMNFcs4OCH0KFsX+Tb4dStI/O2pFzI+Pr 5/LxrXeXktxsMAqYvgi+oEwSsw6n7M/dvVfLDOE0md7C1s0C7ZAgP8SB1fVE2pkl +DZX/8//gLRFw3T2T+Iwcm7vrWzTLD/LFiZvOwcR1Gq5n+xZn6kKhS9MQzBYWEin oHYtNO7TdcXNIwHW7irN/G8o5UzmXLlVrt3Uson4HDwQJdWwLoMh6C01P7KRDWkO oQO1oJPvSBRl26h8yMpTqkSyWB8nRLsXdBve8JqV1qj/nIPqB5Q= -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:13 2026 by rpki-client