This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: DfLzhL2HTuM2K7/2MFN92kGhljueCXYCt4Qrxy2B1OU= Subject key identifier: C7:6B:53:83:20:91:0A:B2:3C:3F:7B:0C:11:B5:B4:55:62:F7:DB:1F Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 083106E1DE99FC4388812F6DD75EA457FD46809D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0543 Signing time: Mon 26 Jan 2026 06:11:13 +0000 Manifest this update: Mon 26 Jan 2026 06:06:13 +0000 Manifest next update: Thu 29 Jan 2026 13:18:13 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: nIf/xPr/HVsdMoDjye7Eo2Ozvycse3L0zMSdl5xfbWQ=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: /luPqRWa7rmModkmPq2AOhn1AxfZ3BxWQ7kt8Fx95y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 05:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:31:06:e1:de:99:fc:43:88:81:2f:6d:d7:5e:a4:57:fd:46:80:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Jan 26 06:06:13 2026 GMT Not After : Jan 29 13:18:13 2026 GMT Subject: CN=C76B538320910AB23C3F7B0C11B5B45562F7DB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:ca:e9:59:e1:d0:0f:23:6f:48:1c:5a:30: 23:50:dd:8a:d5:11:c3:e7:45:c3:f6:a8:8e:1e:30: a3:25:d1:1e:e7:29:1a:c4:88:f1:b4:7a:fd:fe:55: 56:ce:05:0e:ea:4b:68:ff:e0:9b:b8:03:9a:6b:8e: e5:bc:28:8f:cf:b4:69:ee:5d:c2:dc:91:d8:a6:7b: d2:cc:55:19:db:b6:66:1a:8d:83:8b:9b:1a:04:11: 29:e1:65:04:b9:fc:59:81:15:3c:e9:dc:1d:aa:a0: b5:bc:2f:6f:44:4b:00:53:56:2b:cb:11:31:6a:8a: d5:fe:79:6f:d8:3e:b4:01:ce:76:7d:b1:36:b0:0d: 12:bb:85:02:95:a0:3b:cc:5f:b8:9a:b3:75:ed:ce: 87:7d:73:4d:55:cc:14:a3:56:f2:3d:26:e8:a9:79: db:c8:fb:26:ba:ff:47:3f:b8:f0:04:03:04:7c:e8: 25:83:65:35:69:1c:77:00:24:37:51:3f:0e:8d:fa: c8:67:79:2a:7b:ea:fc:2f:94:0c:2b:e7:27:f2:6c: cc:ed:28:a6:18:b0:2a:eb:ba:42:2b:7a:74:da:0f: 09:03:35:02:27:85:b1:e7:5f:fe:3a:dd:c9:04:6c: 00:79:7c:3c:7d:64:3e:9a:9f:ac:54:f6:1c:b1:a5: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:53:83:20:91:0A:B2:3C:3F:7B:0C:11:B5:B4:55:62:F7:DB:1F X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:47:d9:52:75:fb:a4:54:29:97:0e:11:fa:87:23:79:7f:05: 7d:b8:c2:9a:58:9d:0a:d1:9f:58:62:fc:a1:a9:01:39:22:93: 6c:d3:68:6f:d4:fb:a9:5e:d5:e1:36:99:1f:9c:fa:1f:8a:bb: 01:d8:32:d1:34:19:97:06:cd:04:fd:36:a3:9e:4e:a9:ec:26: 1c:29:00:aa:0f:61:49:72:c3:fe:2c:2a:b3:3a:3d:64:2d:e5: 17:38:d0:8a:72:04:5a:06:39:db:1c:58:df:99:59:6d:f7:44: 8f:9a:0c:9a:3f:7e:64:cb:bf:18:82:db:d8:64:84:19:3f:f1: d9:db:6e:fd:11:91:e3:63:9b:24:13:52:71:9a:ba:33:82:ea: 5d:22:07:a3:e4:6a:06:16:ed:19:6b:20:7b:15:d0:d3:7c:c0: 6a:9c:b6:f5:6f:bb:ac:b7:6c:56:05:cd:12:49:02:63:26:d9: 31:c1:5b:2c:44:c1:6c:d2:5a:01:64:41:7a:cd:18:e0:90:fd: 27:70:09:9e:e4:51:45:ee:13:4b:4f:11:00:6b:42:f8:1d:60: 28:a5:7f:82:57:de:9a:54:a4:f2:90:0c:0c:bd:55:21:dc:07: bb:44:e6:0a:16:fe:69:c1:f5:87:62:1b:73:97:80:5a:8d:bf: 5f:bc:a9:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCDEG4d6Z/EOIgS9t116kV/1GgJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNjAxMjYwNjA2MTNaFw0yNjAxMjkxMzE4MTNaMDMxMTAvBgNV BAMTKEM3NkI1MzgzMjA5MTBBQjIzQzNGN0IwQzExQjVCNDU1NjJGN0RCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxcrpWeHQDyNvSBxaMCNQ3YrV EcPnRcP2qI4eMKMl0R7nKRrEiPG0ev3+VVbOBQ7qS2j/4Ju4A5prjuW8KI/PtGnu XcLckdime9LMVRnbtmYajYOLmxoEESnhZQS5/FmBFTzp3B2qoLW8L29ESwBTVivL ETFqitX+eW/YPrQBznZ9sTawDRK7hQKVoDvMX7ias3Xtzod9c01VzBSjVvI9Juip edvI+ya6/0c/uPAEAwR86CWDZTVpHHcAJDdRPw6N+shneSp76vwvlAwr5yfybMzt KKYYsCrrukIrenTaDwkDNQInhbHnX/463ckEbAB5fDx9ZD6an6xU9hyxpfEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2tTgyCRCrI8P3sMEbW0VWL32x8wHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5H2VJ1+6RUKZcOEfqHI3l/BX24wppYnQrR n1hi/KGpATkik2zTaG/U+6le1eE2mR+c+h+KuwHYMtE0GZcGzQT9NqOeTqnsJhwp AKoPYUlyw/4sKrM6PWQt5Rc40IpyBFoGOdscWN+ZWW33RI+aDJo/fmTLvxiC29hk hBk/8dnbbv0RkeNjmyQTUnGaujOC6l0iB6PkagYW7RlrIHsV0NN8wGqctvVvu6y3 bFYFzRJJAmMm2THBWyxEwWzSWgFkQXrNGOCQ/SdwCZ7kUUXuE0tPEQBrQvgdYCil f4JX3ppUpPKQDAy9VSHcB7tE5goW/mnB9YdiG3OXgFqNv1+8qUo= -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:54 2026 by rpki-client