This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: OpK6M4dWYcwP3VQspw5FcoLiUFzs+Xh+4TggNt4Jdq8= Subject key identifier: 55:F8:1F:E7:89:76:29:38:E2:0A:CB:E0:E9:34:E2:E0:3E:4C:79:5C Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 134BA643103922F2F9C6B80AAAA943F8F5D86B23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0253 Signing time: Sat 24 Jan 2026 19:52:36 +0000 Manifest this update: Sat 24 Jan 2026 19:47:36 +0000 Manifest next update: Tue 27 Jan 2026 21:05:36 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: idMIQoLxTRIBKdYc1Lte0ozrCWV1cAp4Dm3oUCF1urU=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: iQWBLlqIhDVaQel1mjDud9rhiarI0+EVMzv8EoEyA1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4b:a6:43:10:39:22:f2:f9:c6:b8:0a:aa:a9:43:f8:f5:d8:6b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Jan 24 19:47:36 2026 GMT Not After : Jan 27 21:05:36 2026 GMT Subject: CN=55F81FE789762938E20ACBE0E934E2E03E4C795C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:51:ea:09:7d:74:6b:0a:4a:38:06:16:03: c5:5c:69:f7:65:99:62:8c:1b:df:bd:5c:63:d7:75: b8:46:cb:7e:91:c5:c2:ed:4e:ba:d0:5a:2d:a3:14: b8:b6:f5:f5:ca:5b:90:12:92:a6:5d:5f:de:87:4c: ce:9a:72:ef:a8:06:ac:7f:46:b7:55:d9:4a:f6:1a: 2a:f8:32:6d:7d:49:d4:9c:d1:46:a5:34:c6:2c:05: d1:70:8f:f8:ee:f1:ec:be:c6:06:ae:c2:28:4f:be: 4f:6f:ac:d7:57:72:1a:6e:e7:8d:23:b9:da:4a:c4: 98:f6:7e:1b:81:84:98:7a:e9:31:4d:18:28:74:11: 10:58:a6:44:d2:ee:16:ad:0b:69:93:80:dc:57:ef: 9c:33:d1:b9:f4:3f:54:93:b4:9b:26:ef:7f:af:70: fd:e3:d7:b7:e9:4a:2f:31:2a:2d:8f:f2:f9:1d:4c: 1c:7d:5a:8b:2b:bf:e2:11:1b:d6:4b:76:67:1c:ea: 4b:f5:0f:24:74:29:0a:1f:35:01:5c:77:5c:8d:1a: a8:02:ee:01:db:b8:10:bc:f3:51:ca:da:ea:4e:4a: e7:1b:15:69:2c:b7:b2:21:c1:3c:77:f5:3b:f6:8e: 99:f4:6f:fb:47:6b:e7:f8:9b:85:34:f4:09:ed:ba: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F8:1F:E7:89:76:29:38:E2:0A:CB:E0:E9:34:E2:E0:3E:4C:79:5C X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:20:13:1a:d4:36:61:bf:d3:b7:c7:f9:00:9e:0e:3b:58:a8: 1d:f5:1a:92:41:47:d4:7d:3c:1e:9a:32:ff:5e:ab:78:27:c3: a6:c1:34:0b:74:48:21:0d:dc:10:90:91:61:81:d8:5c:ff:b8: a9:63:00:85:21:6e:08:cc:59:ea:03:f1:32:27:a4:b6:c6:5a: 41:37:37:bf:9e:db:7e:78:09:75:cf:4f:00:ff:ed:d0:ff:44: ef:17:43:fd:1f:8e:bd:34:fd:9b:e0:7f:6f:3b:df:16:c6:d4: e0:41:63:5f:a9:c8:45:18:91:9f:ac:64:4e:cd:1e:da:78:18: 66:fc:2b:30:ae:56:35:ae:4a:9f:84:1b:b6:5b:d8:08:02:44: 67:0f:59:e5:2a:b7:a2:80:18:50:aa:ad:7a:0f:00:84:75:29: 99:f1:34:5a:09:f2:e2:4d:b1:af:d6:c5:9b:4d:db:87:55:ec: 2d:cf:0e:e2:d4:90:19:b8:44:af:7d:d5:8a:ea:86:fa:53:4b: 4f:34:92:36:fa:69:64:37:b0:7a:7a:9b:4e:cc:83:1d:2a:7b: d7:65:91:4c:bf:50:37:b3:f8:86:19:bf:45:3e:8e:eb:43:bc: a8:ac:ee:a5:1c:3a:e9:c6:53:2e:24:44:4a:73:f8:c2:5a:96: 7c:e0:49:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0umQxA5IvL5xrgKqqlD+PXYayMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNjAxMjQxOTQ3MzZaFw0yNjAxMjcyMTA1MzZaMDMxMTAvBgNV BAMTKDU1RjgxRkU3ODk3NjI5MzhFMjBBQ0JFMEU5MzRFMkUwM0U0Qzc5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijlHqCX10awpKOAYWA8Vcafdl mWKMG9+9XGPXdbhGy36RxcLtTrrQWi2jFLi29fXKW5ASkqZdX96HTM6acu+oBqx/ RrdV2Ur2Gir4Mm19SdSc0UalNMYsBdFwj/ju8ey+xgauwihPvk9vrNdXchpu540j udpKxJj2fhuBhJh66TFNGCh0ERBYpkTS7hatC2mTgNxX75wz0bn0P1STtJsm73+v cP3j17fpSi8xKi2P8vkdTBx9Wosrv+IRG9ZLdmcc6kv1DyR0KQofNQFcd1yNGqgC 7gHbuBC881HK2upOSucbFWkst7IhwTx39Tv2jpn0b/tHa+f4m4U09AntuswbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVfgf54l2KTjiCsvg6TTi4D5MeVwwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIgExrUNmG/07fH+QCeDjtYqB31GpJBR9R9 PB6aMv9eq3gnw6bBNAt0SCEN3BCQkWGB2Fz/uKljAIUhbgjMWeoD8TInpLbGWkE3 N7+e2354CXXPTwD/7dD/RO8XQ/0fjr00/Zvgf2873xbG1OBBY1+pyEUYkZ+sZE7N Htp4GGb8KzCuVjWuSp+EG7Zb2AgCRGcPWeUqt6KAGFCqrXoPAIR1KZnxNFoJ8uJN sa/WxZtN24dV7C3PDuLUkBm4RK991YrqhvpTS080kjb6aWQ3sHp6m07Mgx0qe9dl kUy/UDez+IYZv0U+jutDvKis7qUcOunGUy4kREpz+MJalnzgSZc= -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:11 2026 by rpki-client