This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: zrSv9urw7YG1DbdG9C1NS8v7a8JBUlYlWMFLtopjDhs= Subject key identifier: A4:DC:BC:00:4D:E1:40:A7:D3:B6:AD:0D:20:D0:C5:1E:B5:A2:83:2E Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 31C777A221E039987BDC92E4302FB2220B5DF0D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 024D Signing time: Fri 23 Jan 2026 09:21:24 +0000 Manifest this update: Fri 23 Jan 2026 09:16:24 +0000 Manifest next update: Mon 26 Jan 2026 18:43:24 +0000 Files and hashes: 1: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: 7NrLjxpA9KsczmCUYl28F47HBtqHFMIUqn7EFZeJDXo=) 2: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 3: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c7:77:a2:21:e0:39:98:7b:dc:92:e4:30:2f:b2:22:0b:5d:f0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Jan 23 09:16:24 2026 GMT Not After : Jan 26 18:43:24 2026 GMT Subject: CN=A4DCBC004DE140A7D3B6AD0D20D0C51EB5A2832E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f8:b5:a5:74:0c:07:ea:76:18:97:82:1b:b6: dc:60:24:e7:1a:ad:6b:58:ca:3d:6a:f4:ef:1b:3a: 8b:ab:57:7b:61:b8:e4:6b:3a:71:49:db:73:85:32: 51:d1:a1:31:34:22:eb:44:02:5a:90:e3:5d:f3:79: db:64:af:98:37:80:a6:ed:ee:14:f8:81:e5:30:e3: 53:24:f9:1e:c1:06:0d:e9:d5:7c:9c:cb:49:a8:51: 5c:b7:e5:64:5d:e7:4a:88:55:0c:9e:5b:a6:a5:ab: 7f:65:88:fb:11:8c:85:8e:12:c0:48:6e:35:2c:59: 8e:f6:f0:f3:af:e8:73:62:7d:f3:8f:21:02:5b:db: 12:37:cc:c7:e7:9e:fe:03:28:d9:9e:90:b5:a7:94: bb:1b:7f:9e:cf:9c:ef:ac:f6:4b:dd:0e:b1:55:40: 4e:92:c7:6d:e4:b2:e8:7e:54:94:63:1b:23:82:7a: 96:1f:48:df:02:3b:32:77:53:86:52:63:32:3b:b9: 2a:86:dc:87:95:aa:d2:19:b2:a4:80:64:9c:6f:dd: 62:80:d9:dd:4c:a3:8d:19:f7:70:43:03:6f:ee:06: 84:31:62:c5:e6:48:f8:4b:e5:79:99:68:9d:5f:15: 21:9b:dd:2d:b9:fb:97:c2:03:ff:dc:3d:95:93:df: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DC:BC:00:4D:E1:40:A7:D3:B6:AD:0D:20:D0:C5:1E:B5:A2:83:2E X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7c:98:d2:80:ed:cc:4d:5c:04:48:32:81:11:82:43:a8:23: bf:45:f9:6e:85:27:23:a3:89:d9:1e:44:1c:62:31:d3:96:da: c4:f7:f7:1c:53:09:a7:b4:72:79:bf:e9:51:4f:c9:39:11:56: e4:6b:1f:56:f0:27:76:35:74:da:4a:35:bd:3d:2e:56:f7:83: 7a:30:c8:36:45:1b:95:20:a2:d9:cd:bc:0b:8a:73:de:80:18: 5d:44:d4:58:f1:23:99:eb:f6:1b:70:54:f4:20:11:65:c8:71: 83:ea:dc:7c:4b:64:d5:74:d0:24:44:99:4b:ce:e4:3d:12:20: 27:1a:fa:79:36:19:d7:d1:1b:e0:5c:9b:f4:d3:48:10:79:c2: 54:9e:0b:05:4f:f7:1f:94:43:1a:c0:96:74:c6:eb:36:15:83: 07:73:89:a9:e4:96:01:95:95:8b:15:07:7d:e8:92:16:df:ac: 30:1f:d3:1a:54:fe:6b:6d:76:e1:5d:de:de:94:c5:bd:9d:c4: 4e:41:7d:fb:d7:1d:99:18:6a:8d:d2:e7:69:3a:e6:75:a0:79: 72:22:ab:bd:37:7c:2a:0c:91:a8:23:26:c7:aa:89:d8:3b:ed: 85:d4:2f:65:75:23:86:34:4e:3e:63:9f:15:ee:2f:5f:2c:ca: 7d:b3:70:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMcd3oiHgOZh73JLkMC+yIgtd8NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNjAxMjMwOTE2MjRaFw0yNjAxMjYxODQzMjRaMDMxMTAvBgNV BAMTKEE0RENCQzAwNERFMTQwQTdEM0I2QUQwRDIwRDBDNTFFQjVBMjgzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv+LWldAwH6nYYl4IbttxgJOca rWtYyj1q9O8bOourV3thuORrOnFJ23OFMlHRoTE0IutEAlqQ413zedtkr5g3gKbt 7hT4geUw41Mk+R7BBg3p1Xycy0moUVy35WRd50qIVQyeW6alq39liPsRjIWOEsBI bjUsWY728POv6HNiffOPIQJb2xI3zMfnnv4DKNmekLWnlLsbf57PnO+s9kvdDrFV QE6Sx23ksuh+VJRjGyOCepYfSN8COzJ3U4ZSYzI7uSqG3IeVqtIZsqSAZJxv3WKA 2d1Mo40Z93BDA2/uBoQxYsXmSPhL5XmZaJ1fFSGb3S25+5fCA//cPZWT3+57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpNy8AE3hQKfTtq0NINDFHrWigy4wHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh8mNKA7cxNXARIMoERgkOoI79F+W6FJyOj idkeRBxiMdOW2sT39xxTCae0cnm/6VFPyTkRVuRrH1bwJ3Y1dNpKNb09Llb3g3ow yDZFG5UgotnNvAuKc96AGF1E1FjxI5nr9htwVPQgEWXIcYPq3HxLZNV00CREmUvO 5D0SICca+nk2GdfRG+Bcm/TTSBB5wlSeCwVP9x+UQxrAlnTG6zYVgwdzianklgGV lYsVB33okhbfrDAf0xpU/mttduFd3t6Uxb2dxE5BffvXHZkYao3S52k65nWgeXIi q703fCoMkagjJseqidg77YXUL2V1I4Y0Tj5jnxXuL18syn2zcNw= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:10 2026 by rpki-client