This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: RJ6L+JBHtyWtVzPUwc6O1kGyh4NOVj72DlaJupUtHhU= Subject key identifier: 2F:05:37:CF:77:D5:02:DE:70:C8:33:53:13:A3:EC:FB:ED:6A:BF:23 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 1A34D631797D31431BFA20FFED0414D53525E3C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0546 Signing time: Fri 23 Jan 2026 22:32:09 +0000 Manifest this update: Fri 23 Jan 2026 22:27:09 +0000 Manifest next update: Tue 27 Jan 2026 03:41:09 +0000 Files and hashes: 1: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) 2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 3: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 4: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: 3CrouRWNQrdc7zWH/OlBesMG6C1RW5HU0lRkA7J+YwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:34:d6:31:79:7d:31:43:1b:fa:20:ff:ed:04:14:d5:35:25:e3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Jan 23 22:27:09 2026 GMT Not After : Jan 27 03:41:09 2026 GMT Subject: CN=2F0537CF77D502DE70C8335313A3ECFBED6ABF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:9a:f6:20:96:1a:8d:e4:2c:0f:9b:72:bf: b6:2e:41:e5:95:52:93:df:98:6e:1b:c1:d7:f1:48: e2:7a:fd:50:a2:2f:18:b5:2f:4b:d6:5c:f7:a7:cb: 1d:f5:6d:43:ec:f4:ac:4c:6f:2a:a4:84:f4:04:b7: a7:66:3d:c5:a9:a6:6c:64:4d:79:ac:1f:89:15:59: 7e:84:cf:d0:80:0c:a1:2e:91:5f:22:a1:93:ed:bf: 0a:9f:2a:19:f0:ae:3e:a0:8c:b4:cf:45:1d:07:6c: 9d:f1:f7:77:7f:d6:12:dc:a3:7d:40:2c:64:c0:99: d8:10:82:ba:7a:35:8d:5b:ba:82:e1:94:ba:56:af: 39:b8:af:c1:52:3b:3c:6f:13:3d:ef:49:fe:63:40: 49:9a:9e:9e:ea:79:39:76:ca:76:97:5d:d6:ae:78: f1:9c:c5:7a:56:6e:64:ab:ae:7f:67:3b:01:b9:2a: 07:3a:e4:66:e5:8d:37:1e:b8:9d:1e:46:27:7a:3c: 88:49:7d:20:d4:d2:ab:ca:03:b3:b0:6e:00:b2:85: 93:66:fe:b4:aa:37:fe:c9:16:11:71:88:1f:33:c8: e0:e3:f4:60:99:54:02:90:ec:86:3e:cd:d4:67:25: 6e:fe:c2:c1:11:5f:45:63:c8:1c:39:94:5d:b7:5a: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:37:CF:77:D5:02:DE:70:C8:33:53:13:A3:EC:FB:ED:6A:BF:23 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:fa:b3:e1:e2:af:12:cc:00:28:e6:bf:4d:ae:41:8e:b0:ee: 30:2b:f5:a8:2a:8e:4d:38:f1:8c:e8:02:2a:dd:a2:6a:d0:f1: b9:88:45:a1:4b:8c:72:c1:54:0f:60:b7:ba:64:17:e1:e3:d5: 7f:f7:e9:a8:68:be:95:65:b8:32:c1:e0:f2:8a:6c:7e:39:2f: fd:da:f0:53:df:6e:a1:ef:26:f6:37:8f:8e:26:79:0f:05:f5: 1a:84:61:09:18:5d:01:53:3f:68:ec:11:42:2b:74:bd:06:1c: 23:65:2f:75:f5:38:84:08:33:d1:37:f1:31:98:7e:3f:df:83: 1c:30:6c:96:6d:b3:7c:b7:3b:83:c0:ec:a3:11:00:43:5e:0c: 9a:18:00:ac:5f:5a:54:5f:9e:09:35:05:d9:70:06:d9:ae:cd: 1e:27:6c:bd:4b:98:b5:39:77:18:fb:b5:ef:43:ee:74:c2:11: 3d:1e:08:be:9a:99:3c:47:5b:03:5d:8d:05:69:ba:a0:78:0d: 00:48:4c:58:b4:92:56:53:32:43:53:cc:90:9c:f5:8f:10:3f: f1:ef:2f:67:be:51:c0:71:6b:d7:a3:da:5f:a8:da:a2:ba:26: d2:f5:14:d9:64:79:8b:3c:30:ed:8d:11:93:e3:bd:24:e2:ed: 41:dd:ae:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjTWMXl9MUMb+iD/7QQU1TUl48IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNjAxMjMyMjI3MDlaFw0yNjAxMjcwMzQxMDlaMDMxMTAvBgNV BAMTKDJGMDUzN0NGNzdENTAyREU3MEM4MzM1MzEzQTNFQ0ZCRUQ2QUJGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7Zr2IJYajeQsD5tyv7YuQeWV UpPfmG4bwdfxSOJ6/VCiLxi1L0vWXPenyx31bUPs9KxMbyqkhPQEt6dmPcWppmxk TXmsH4kVWX6Ez9CADKEukV8ioZPtvwqfKhnwrj6gjLTPRR0HbJ3x93d/1hLco31A LGTAmdgQgrp6NY1buoLhlLpWrzm4r8FSOzxvEz3vSf5jQEmanp7qeTl2ynaXXdau ePGcxXpWbmSrrn9nOwG5Kgc65GbljTceuJ0eRid6PIhJfSDU0qvKA7OwbgCyhZNm /rSqN/7JFhFxiB8zyODj9GCZVAKQ7IY+zdRnJW7+wsERX0VjyBw5lF23WmuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwU3z3fVAt5wyDNTE6Ps++1qvyMwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMb6s+HirxLMACjmv02uQY6w7jAr9agqjk04 8YzoAirdomrQ8bmIRaFLjHLBVA9gt7pkF+Hj1X/36ahovpVluDLB4PKKbH45L/3a 8FPfbqHvJvY3j44meQ8F9RqEYQkYXQFTP2jsEUIrdL0GHCNlL3X1OIQIM9E38TGY fj/fgxwwbJZts3y3O4PA7KMRAENeDJoYAKxfWlRfngk1BdlwBtmuzR4nbL1LmLU5 dxj7te9D7nTCET0eCL6amTxHWwNdjQVpuqB4DQBITFi0klZTMkNTzJCc9Y8QP/Hv L2e+UcBxa9ej2l+o2qK6JtL1FNlkeYs8MO2NEZPjvSTi7UHdrpI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:11 2026 by rpki-client