This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: jbYbdkkG9IbDoSpo+nLFoNMqfbQ180LDQeVl1KYcG+U= Subject key identifier: 6F:18:6C:B7:72:01:0D:73:4A:0F:5B:4D:EC:2C:13:77:85:D1:E3:D0 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 439FC318C35AA9789A28D6F22348B0B68F84DC11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0286 Signing time: Sat 24 Jan 2026 21:10:42 +0000 Manifest this update: Sat 24 Jan 2026 21:05:42 +0000 Manifest next update: Wed 28 Jan 2026 07:07:42 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: ogoe80Vg5yjbP7+9icABvWv5oEOmScOFNw8QmDF47xU=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9f:c3:18:c3:5a:a9:78:9a:28:d6:f2:23:48:b0:b6:8f:84:dc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Jan 24 21:05:42 2026 GMT Not After : Jan 28 07:07:42 2026 GMT Subject: CN=6F186CB772010D734A0F5B4DEC2C137785D1E3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:ed:ca:28:d4:f7:f8:e0:ac:f2:e2:71:46: 56:90:d6:d5:d3:73:74:7f:5d:24:8e:57:f3:51:0b: 1e:7d:83:71:d5:59:f4:0a:33:4b:6b:3f:aa:ab:3b: c0:08:5c:04:16:cb:6f:52:55:47:61:12:a8:1d:c2: 6e:49:bf:6e:8a:c0:12:07:43:1f:25:05:dc:7f:df: 9a:2e:00:90:d9:c5:de:ce:65:ad:31:69:92:7b:4b: 64:26:38:0f:0b:08:f5:cd:46:02:25:9a:ca:90:3b: 29:05:90:81:08:3b:14:f7:ed:fb:f7:85:66:98:bc: 1b:3f:26:aa:21:29:2b:49:2d:ce:40:8d:07:92:c7: cd:3c:cd:7d:98:74:6b:45:d3:27:a0:83:9e:5b:3b: 2b:c9:91:03:b3:be:f8:11:60:63:ee:1f:9e:75:6c: 1e:9e:b0:e9:e5:11:89:97:32:77:69:c3:f0:5f:de: 1a:c6:91:57:d8:7b:22:43:61:68:b3:4d:88:5d:6a: 89:b3:72:9e:f7:93:22:03:47:b4:ef:44:a3:a5:e8: 06:f1:96:84:69:df:3c:36:79:4d:d5:9c:b4:53:c6: 61:7c:0f:52:12:7c:d4:0a:4c:54:91:ab:bb:58:b2: cf:d1:45:ce:f0:d6:d9:8c:dd:8b:82:17:14:06:fb: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:18:6C:B7:72:01:0D:73:4A:0F:5B:4D:EC:2C:13:77:85:D1:E3:D0 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:9b:72:c3:5a:c7:fa:2c:08:83:f8:ba:d2:99:55:39:2b: 6e:b7:aa:a1:f4:2e:0a:d3:5b:6d:fb:4a:6c:6e:6c:f1:91:b7: 00:2f:b7:cd:3b:75:94:30:be:21:df:54:51:86:3e:34:87:d4: 37:73:a6:1c:1e:88:67:e2:f8:0a:c5:11:4f:a4:74:d3:f0:26: 2b:1b:e6:97:c1:61:ba:17:fb:8e:c1:a9:bb:48:b8:f0:9d:71: 22:29:ae:62:2e:2f:70:e2:71:2f:d5:af:a7:b2:06:f7:9f:56: dc:44:a2:67:f4:36:25:52:fd:1b:01:e3:85:e8:65:9d:18:7e: 8e:a2:e6:ff:ce:de:18:6b:34:37:33:e3:ac:de:c3:9b:a5:1c: 2e:e9:a8:38:86:f5:ba:7b:6e:4e:c9:85:62:66:8c:bd:60:ba: 54:51:4c:ef:6b:bf:b0:29:23:e8:1a:77:90:cd:b2:1c:73:7c: 5b:b8:2f:c7:30:a8:e5:4c:bf:e3:f7:12:50:5c:d3:92:96:d0: f1:09:82:a0:d8:84:cb:4d:ff:10:dc:2d:28:52:4d:f9:c2:23: b0:6b:c0:34:a0:5b:5b:db:a9:9e:55:92:64:78:2b:9e:02:32: c7:c8:21:2f:52:7c:9c:e8:1c:52:13:ea:cf:3e:16:40:01:c0: c5:26:ec:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5/DGMNaqXiaKNbyI0iwto+E3BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNjAxMjQyMTA1NDJaFw0yNjAxMjgwNzA3NDJaMDMxMTAvBgNV BAMTKDZGMTg2Q0I3NzIwMTBENzM0QTBGNUI0REVDMkMxMzc3ODVEMUUzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDase3KKNT3+OCs8uJxRlaQ1tXT c3R/XSSOV/NRCx59g3HVWfQKM0trP6qrO8AIXAQWy29SVUdhEqgdwm5Jv26KwBIH Qx8lBdx/35ouAJDZxd7OZa0xaZJ7S2QmOA8LCPXNRgIlmsqQOykFkIEIOxT37fv3 hWaYvBs/JqohKStJLc5AjQeSx808zX2YdGtF0yegg55bOyvJkQOzvvgRYGPuH551 bB6esOnlEYmXMndpw/Bf3hrGkVfYeyJDYWizTYhdaomzcp73kyIDR7TvRKOl6Abx loRp3zw2eU3VnLRTxmF8D1ISfNQKTFSRq7tYss/RRc7w1tmM3YuCFxQG+yiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbxhst3IBDXNKD1tN7CwTd4XR49AwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn8m3LDWsf6LAiD+LrSmVU5K263qqH0LgrT W237SmxubPGRtwAvt807dZQwviHfVFGGPjSH1DdzphweiGfi+ArFEU+kdNPwJisb 5pfBYboX+47BqbtIuPCdcSIprmIuL3DicS/Vr6eyBvefVtxEomf0NiVS/RsB44Xo ZZ0Yfo6i5v/O3hhrNDcz46zew5ulHC7pqDiG9bp7bk7JhWJmjL1gulRRTO9rv7Ap I+gad5DNshxzfFu4L8cwqOVMv+P3ElBc05KW0PEJgqDYhMtN/xDcLShSTfnCI7Br wDSgW1vbqZ5VkmR4K54CMsfIIS9SfJzoHFIT6s8+FkABwMUm7Hw= -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:02 2026 by rpki-client