This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: VzuQd2qTBcK67lVRKTbl0NvV857RYqOxJvLipK85lCM= Subject key identifier: 49:22:62:B1:2C:E3:12:35:74:D6:F9:56:2B:E6:24:6B:CD:DF:52:A6 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 3263D41837CD5401BB72F78BF43CD69D5AB0C618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 0540 Signing time: Sat 24 Jan 2026 14:51:43 +0000 Manifest this update: Sat 24 Jan 2026 14:46:43 +0000 Manifest next update: Tue 27 Jan 2026 15:36:43 +0000 Files and hashes: 1: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: KPy4wwG1rUEhb2HkwYLt9qDhwW663bqth4d6GZ6HtxE=) 2: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 3: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 4: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 5: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:63:d4:18:37:cd:54:01:bb:72:f7:8b:f4:3c:d6:9d:5a:b0:c6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Jan 24 14:46:43 2026 GMT Not After : Jan 27 15:36:43 2026 GMT Subject: CN=492262B12CE3123574D6F9562BE6246BCDDF52A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:ee:c5:16:a0:bd:a3:30:c5:41:f1:3a:13: c5:34:7e:a0:d4:39:49:d3:f2:42:3d:e0:a3:3d:d7: c3:c2:b6:ee:a7:b5:67:0d:a6:1f:e0:8b:a4:f6:0f: 33:9d:78:c9:32:ee:43:fd:8c:37:f4:0a:b6:ce:33: b0:57:56:db:2a:dd:72:6e:7a:0e:b5:f2:c4:c4:25: 45:b0:a4:9a:a3:d7:3d:81:a6:3e:bc:c2:cd:1f:ae: e3:0e:5b:bc:51:3e:f2:a0:0a:05:c7:2a:4b:13:93: 00:84:b2:a4:98:3a:ba:2c:3b:00:a4:10:92:f7:83: 06:e4:cd:4b:00:da:1d:7d:9d:d7:fe:b8:84:43:15: b2:77:39:b0:48:eb:e9:f7:56:12:50:8d:36:b1:fc: 0a:df:83:fe:a5:91:c3:b4:ff:e2:65:77:34:1d:4d: 14:2b:0a:38:5e:92:3f:2f:6d:75:aa:df:1d:c7:05: 68:f5:86:07:44:dd:5f:8c:ba:a0:ea:b1:37:d0:fa: e8:2d:ea:eb:f5:f6:30:c7:1b:07:cb:1a:3a:cd:e7: e7:f5:fc:8d:27:59:e0:42:8c:25:57:de:b0:9a:f0: ed:ad:ec:b5:e5:aa:aa:22:d7:84:1d:5d:db:05:0e: 5e:8e:d9:c3:db:59:0c:b7:0a:9f:be:ce:8c:e7:9f: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:62:B1:2C:E3:12:35:74:D6:F9:56:2B:E6:24:6B:CD:DF:52:A6 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2a:11:fa:f5:7c:83:cd:e0:ad:81:81:55:db:35:c9:a6:01: ab:0a:b5:8d:cd:84:1d:4d:15:bb:b0:1a:45:8c:0d:35:e0:2e: e8:1c:51:81:13:58:5e:28:9d:d4:46:33:12:27:a6:ae:1c:58: ef:bb:c8:0d:98:d1:6d:f9:76:a7:1a:25:9b:0f:eb:e9:47:05: b8:ae:93:43:f9:e3:eb:5f:19:1d:69:aa:b8:67:a9:7d:d1:34: 02:26:c8:63:4d:df:69:d4:ce:93:43:40:58:db:4a:9f:5d:a2: db:95:4e:6b:13:32:f0:dd:93:c7:e8:2e:10:94:63:2b:2e:52: 04:f5:91:3f:4f:ca:ab:d2:1c:16:b7:5f:9a:0f:a3:f8:0c:78: e6:f9:16:86:71:1d:1b:52:cc:52:4f:bc:7c:3e:12:ef:6a:b2: 96:e2:bc:8d:dd:e7:08:78:5d:fa:b1:59:64:1a:c7:c0:f7:5b: 12:38:fe:12:a5:c9:fb:92:df:d3:17:f3:f1:43:88:8a:5c:c6: 43:eb:19:76:fd:1a:48:1d:99:06:92:d4:85:9c:a8:8d:e4:8d: d2:87:f1:97:4e:4b:aa:30:b0:44:e7:64:e7:65:3d:a0:52:5c: 33:c0:9a:45:b9:cb:20:c8:62:ee:8f:8a:ba:2d:ce:db:86:27: a9:6c:8e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmPUGDfNVAG7cveL9DzWnVqwxhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNjAxMjQxNDQ2NDNaFw0yNjAxMjcxNTM2NDNaMDMxMTAvBgNV BAMTKDQ5MjI2MkIxMkNFMzEyMzU3NEQ2Rjk1NjJCRTYyNDZCQ0RERjUyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4+7FFqC9ozDFQfE6E8U0fqDU OUnT8kI94KM918PCtu6ntWcNph/gi6T2DzOdeMky7kP9jDf0CrbOM7BXVtsq3XJu eg618sTEJUWwpJqj1z2Bpj68ws0fruMOW7xRPvKgCgXHKksTkwCEsqSYOrosOwCk EJL3gwbkzUsA2h19ndf+uIRDFbJ3ObBI6+n3VhJQjTax/Arfg/6lkcO0/+JldzQd TRQrCjhekj8vbXWq3x3HBWj1hgdE3V+MuqDqsTfQ+ugt6uv19jDHGwfLGjrN5+f1 /I0nWeBCjCVX3rCa8O2t7LXlqqoi14QdXdsFDl6O2cPbWQy3Cp++zoznn/nTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSSJisSzjEjV01vlWK+Yka83fUqYwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4qEfr1fIPN4K2BgVXbNcmmAasKtY3NhB1N FbuwGkWMDTXgLugcUYETWF4ondRGMxInpq4cWO+7yA2Y0W35dqcaJZsP6+lHBbiu k0P54+tfGR1pqrhnqX3RNAImyGNN32nUzpNDQFjbSp9dotuVTmsTMvDdk8foLhCU YysuUgT1kT9PyqvSHBa3X5oPo/gMeOb5FoZxHRtSzFJPvHw+Eu9qspbivI3d5wh4 XfqxWWQax8D3WxI4/hKlyfuS39MX8/FDiIpcxkPrGXb9GkgdmQaS1IWcqI3kjdKH 8ZdOS6owsETnZOdlPaBSXDPAmkW5yyDIYu6PirotztuGJ6lsjkY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:37 2026 by rpki-client