This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: ZSrK3zwkBspMT4F/Vg3QfX5U906Sog7aJsHz+30varg= Subject key identifier: E9:2C:C6:14:EC:81:E0:B9:DE:56:FE:02:BA:07:8C:C6:1F:A2:18:6B Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 1760C73C6BA9B40B0606E1E6B90463135E5F7B4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 054F Signing time: Sat 24 Jan 2026 07:11:51 +0000 Manifest this update: Sat 24 Jan 2026 07:06:51 +0000 Manifest next update: Tue 27 Jan 2026 16:56:51 +0000 Files and hashes: 1: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 2: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 3: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: xUdwfWhj/DTW37oHxA2M7SzJ+NkmDLXU1C60QSD07Pk=) 4: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: LxSVJV070gN5FjdUX054wO7XGmRkz6K/WxRCNonXpkA=) 5: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: vkRhnG/KXjArcab3NvMb03SozLTqgbAbbh+nANy2lhI=) 6: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:60:c7:3c:6b:a9:b4:0b:06:06:e1:e6:b9:04:63:13:5e:5f:7b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Jan 24 07:06:51 2026 GMT Not After : Jan 27 16:56:51 2026 GMT Subject: CN=E92CC614EC81E0B9DE56FE02BA078CC61FA2186B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e9:7e:98:07:ab:a2:bc:5c:ff:d0:04:ed:18: 05:4f:0f:de:6d:7c:7a:de:4f:43:d8:bb:78:10:1f: 54:cb:36:fa:67:4a:3d:c1:41:5e:b9:a6:0c:b0:8b: 7d:bf:a3:f3:b8:12:a0:dc:13:f7:a7:35:a2:15:84: d1:3b:a7:03:bc:63:b4:f0:dc:e5:ad:0e:53:d2:07: 47:08:f2:84:7b:b0:0e:38:ef:0b:e4:da:aa:95:a7: b8:f7:e6:56:21:38:53:7c:ad:99:97:e2:a8:9c:3b: 2f:76:01:88:97:e0:22:b4:43:7f:75:f4:85:3d:6a: 8a:9f:9f:30:d9:27:c8:b5:59:7d:8e:90:02:47:0d: 83:ed:ca:a3:13:bc:5d:d0:b7:36:93:a5:fa:53:3e: 09:c3:85:97:6c:6d:78:2c:62:a7:42:06:54:39:55: f1:59:d2:cf:7b:fd:59:45:14:59:53:95:cb:47:07: 69:5b:25:81:83:73:8e:9b:a2:af:5c:45:69:1d:51: f1:bd:20:97:dd:99:81:25:c3:f6:ee:70:4d:b8:c8: fd:ae:20:8e:de:f8:d0:dc:88:00:8f:16:f4:84:e3: c5:81:27:59:fb:fd:ce:bf:c3:0c:93:f5:5e:3f:5b: cf:fc:d9:28:75:df:b4:c6:73:bd:94:09:62:c5:36: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:C6:14:EC:81:E0:B9:DE:56:FE:02:BA:07:8C:C6:1F:A2:18:6B X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:88:11:21:47:0f:4b:fc:51:96:a2:d7:86:df:69:86:dc:19: bb:cd:54:97:3e:82:d7:96:4b:c3:05:08:57:79:a7:01:5e:c4: e2:de:1b:9c:30:a8:70:df:9c:2c:05:16:fe:9a:04:e4:35:d1: de:87:78:30:06:01:f0:78:59:47:b2:1b:00:c2:ac:e7:fa:33: f9:38:de:b0:7f:ad:7a:8b:e6:f4:1a:70:8e:57:3e:2f:ce:8a: 72:11:42:59:e7:c0:44:5e:8b:be:c7:cd:39:d3:c0:6e:67:35: 2f:b1:6b:99:63:0d:89:31:d6:6f:fc:c9:f9:e7:74:f4:6f:76: 6a:1d:0a:23:92:d8:50:5f:14:82:7c:b6:d1:35:99:67:19:6e: d4:46:1f:4c:75:54:85:1a:f9:38:ae:ec:4f:21:bc:e6:df:55: 0e:bd:30:64:cf:b9:6e:c2:0b:1c:36:72:0d:4e:92:45:44:ed: 4e:e5:53:c6:03:07:55:35:81:20:f7:a4:eb:58:1a:b8:61:a3: 7f:41:bb:7d:e1:1d:2a:8c:13:70:81:a2:f1:2a:ff:16:c0:1a: 7f:86:d9:5a:5a:a0:78:ca:a6:80:d7:c8:c2:83:dc:61:ee:0d: dc:b3:59:07:e1:7d:cb:cf:99:9a:59:b6:c3:09:11:e4:76:97: 55:de:1e:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2DHPGuptAsGBuHmuQRjE15fe0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNjAxMjQwNzA2NTFaFw0yNjAxMjcxNjU2NTFaMDMxMTAvBgNV BAMTKEU5MkNDNjE0RUM4MUUwQjlERTU2RkUwMkJBMDc4Q0M2MUZBMjE4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD76X6YB6uivFz/0ATtGAVPD95t fHreT0PYu3gQH1TLNvpnSj3BQV65pgywi32/o/O4EqDcE/enNaIVhNE7pwO8Y7Tw 3OWtDlPSB0cI8oR7sA447wvk2qqVp7j35lYhOFN8rZmX4qicOy92AYiX4CK0Q391 9IU9aoqfnzDZJ8i1WX2OkAJHDYPtyqMTvF3QtzaTpfpTPgnDhZdsbXgsYqdCBlQ5 VfFZ0s97/VlFFFlTlctHB2lbJYGDc46boq9cRWkdUfG9IJfdmYElw/bucE24yP2u II7e+NDciACPFvSE48WBJ1n7/c6/wwyT9V4/W8/82Sh137TGc72UCWLFNlStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6SzGFOyB4LneVv4CugeMxh+iGGswHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqIESFHD0v8UZai14bfaYbcGbvNVJc+gteW S8MFCFd5pwFexOLeG5wwqHDfnCwFFv6aBOQ10d6HeDAGAfB4WUeyGwDCrOf6M/k4 3rB/rXqL5vQacI5XPi/OinIRQlnnwERei77HzTnTwG5nNS+xa5ljDYkx1m/8yfnn dPRvdmodCiOS2FBfFIJ8ttE1mWcZbtRGH0x1VIUa+Tiu7E8hvObfVQ69MGTPuW7C Cxw2cg1OkkVE7U7lU8YDB1U1gSD3pOtYGrhho39Bu33hHSqME3CBovEq/xbAGn+G 2VpaoHjKpoDXyMKD3GHuDdyzWQfhfcvPmZpZtsMJEeR2l1XeHiI= -----END CERTIFICATE-----Generated at Sun Jan 25 15:42:27 2026 by rpki-client