This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: vl1QYXzVD2afwpTcZJVu8/JerHQZmd+dJH3/AUQ8/gQ= Subject key identifier: A9:F0:42:48:61:2A:D0:78:7B:E3:ED:27:CF:D5:9E:53:FA:86:0D:96 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 5177C476AD89E00D6F35218B592F44672F887A59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 0244 Signing time: Sat 24 Jan 2026 12:42:07 +0000 Manifest this update: Sat 24 Jan 2026 12:37:07 +0000 Manifest next update: Tue 27 Jan 2026 23:12:07 +0000 Files and hashes: 1: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: lzgZrvMAy4i3C/Zxb1RhzVts9615zAgUjr7c5HoYEQQ=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:77:c4:76:ad:89:e0:0d:6f:35:21:8b:59:2f:44:67:2f:88:7a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Jan 24 12:37:07 2026 GMT Not After : Jan 27 23:12:07 2026 GMT Subject: CN=A9F04248612AD0787BE3ED27CFD59E53FA860D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:47:00:1c:c9:dc:a1:ae:bd:4e:60:6f:00: 51:ce:1e:e8:2c:fe:c2:6b:f4:d4:96:6d:36:fd:d3: a8:e0:1c:29:7d:56:7f:d4:1f:90:9d:88:3c:73:b4: 51:9e:c8:b6:63:64:ca:07:34:fa:c2:3e:ee:70:cf: f9:b1:17:39:80:7a:e0:b9:77:0f:31:8e:ce:69:4e: 67:fd:ed:23:3e:a8:c3:63:75:b2:2e:55:8b:d8:31: f9:51:47:5b:d7:68:b8:91:b2:d9:54:af:2e:6a:78: fa:9f:de:21:f8:a6:92:fb:01:9e:a1:83:a1:8e:8c: ed:2d:66:49:7b:6b:f2:df:38:a0:9f:4e:07:42:71: 6e:85:45:ac:82:49:fc:59:b8:7b:b3:17:1d:43:4d: 6c:c8:32:b4:21:3f:67:10:37:95:6f:43:70:9b:4e: 60:21:82:50:66:ee:fa:6b:4c:6e:4f:1f:0e:71:38: b3:8d:5c:9c:ba:64:b3:01:a8:b7:5f:44:2a:c2:39: 3a:09:99:1c:9c:36:d0:ac:1c:b8:fe:50:17:84:74: 93:56:1e:63:ff:a5:a7:68:0c:db:b9:30:3e:bb:d7: e2:94:f3:5f:27:76:27:0f:5e:9f:4e:ca:74:be:d5: d5:25:b3:26:23:b0:47:7b:89:5e:24:0b:ac:eb:96: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F0:42:48:61:2A:D0:78:7B:E3:ED:27:CF:D5:9E:53:FA:86:0D:96 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:dd:4b:a0:05:c2:3a:89:35:a9:14:47:75:83:d2:ab:72:72: be:2f:f3:09:57:e2:c8:aa:14:bc:68:d3:2c:58:89:95:1e:74: 72:62:b5:f0:f2:22:f6:ed:b1:35:f0:4b:9a:52:09:d0:9a:8e: 73:d8:f4:78:1b:cf:74:a0:8e:f1:b6:fb:4a:03:e5:07:8e:e7: 29:58:32:e5:cd:c1:8a:f8:85:61:91:77:66:2f:df:93:dd:02: fc:d1:a0:b6:d7:4c:1d:51:3e:5f:ae:61:3e:2c:be:7f:59:f3: a3:2f:90:5f:b6:07:01:54:b4:b2:2a:0a:00:71:61:df:4a:29: 65:43:2c:ce:aa:95:a2:81:33:e6:37:e7:68:30:14:17:a0:14: a9:b7:af:e2:7a:f5:81:93:89:9b:35:48:02:39:c3:57:2c:fe: fe:8e:4c:3f:4f:b9:f1:ca:7f:05:07:b0:ef:f9:d8:09:80:de: 86:99:01:79:8f:ae:46:a3:b9:f7:89:b4:f1:fa:05:8a:03:7c: 15:40:2c:c6:40:e2:73:af:ef:74:4c:d1:87:7a:d2:b0:c0:98: 4e:72:cf:fd:74:4e:65:23:60:5b:50:fa:61:d8:5b:2a:40:e1: 02:e5:b7:a8:80:35:00:56:af:39:a6:ac:e0:c4:b1:da:b2:79: 5c:cf:78:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXfEdq2J4A1vNSGLWS9EZy+IelkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNjAxMjQxMjM3MDdaFw0yNjAxMjcyMzEyMDdaMDMxMTAvBgNV BAMTKEE5RjA0MjQ4NjEyQUQwNzg3QkUzRUQyN0NGRDU5RTUzRkE4NjBEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QEcAHMncoa69TmBvAFHOHugs /sJr9NSWbTb906jgHCl9Vn/UH5CdiDxztFGeyLZjZMoHNPrCPu5wz/mxFzmAeuC5 dw8xjs5pTmf97SM+qMNjdbIuVYvYMflRR1vXaLiRstlUry5qePqf3iH4ppL7AZ6h g6GOjO0tZkl7a/LfOKCfTgdCcW6FRayCSfxZuHuzFx1DTWzIMrQhP2cQN5VvQ3Cb TmAhglBm7vprTG5PHw5xOLONXJy6ZLMBqLdfRCrCOToJmRycNtCsHLj+UBeEdJNW HmP/padoDNu5MD671+KU818ndicPXp9OynS+1dUlsyYjsEd7iV4kC6zrllw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqfBCSGEq0Hh74+0nz9WeU/qGDZYwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLdS6AFwjqJNakUR3WD0qtycr4v8wlX4siq FLxo0yxYiZUedHJitfDyIvbtsTXwS5pSCdCajnPY9Hgbz3SgjvG2+0oD5QeO5ylY MuXNwYr4hWGRd2Yv35PdAvzRoLbXTB1RPl+uYT4svn9Z86MvkF+2BwFUtLIqCgBx Yd9KKWVDLM6qlaKBM+Y352gwFBegFKm3r+J69YGTiZs1SAI5w1cs/v6OTD9PufHK fwUHsO/52AmA3oaZAXmPrkajufeJtPH6BYoDfBVALMZA4nOv73RM0Yd60rDAmE5y z/10TmUjYFtQ+mHYWypA4QLlt6iANQBWrzmmrODEsdqyeVzPeDE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:24:44 2026 by rpki-client