This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: UPna6z4+3SdWIig/9kwnD+2nrmRS9OfbBp7ni9JJgt4= Subject key identifier: 49:FB:FD:15:97:7B:95:64:00:3A:5B:E6:AB:A6:69:48:41:FC:AA:7A Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 22AE62FF2B13CB05EC7863F94F60D1ADAB3512E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 0156 Signing time: Fri 23 Jan 2026 16:31:14 +0000 Manifest this update: Fri 23 Jan 2026 16:26:14 +0000 Manifest next update: Mon 26 Jan 2026 20:14:14 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: k9nDcTecQDemzlEvx8C2f1DdB6NHnhDvPJ/dZM6/qxA=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 20:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ae:62:ff:2b:13:cb:05:ec:78:63:f9:4f:60:d1:ad:ab:35:12:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Jan 23 16:26:14 2026 GMT Not After : Jan 26 20:14:14 2026 GMT Subject: CN=49FBFD15977B9564003A5BE6ABA6694841FCAA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:1a:d8:6a:b3:d5:11:bb:92:a2:4f:85:39: eb:4f:9f:75:ed:48:20:a1:6d:15:87:16:72:9e:67: d4:08:0e:43:9a:02:3a:b3:e0:a0:5c:cb:58:36:49: 0e:0b:93:31:21:eb:91:7c:e6:cd:6f:a3:54:84:bd: 8a:72:d3:0c:4a:8a:75:1b:4b:bc:3f:9e:b4:ad:ca: 74:d5:e4:e6:aa:e4:13:8e:6f:6e:7b:b8:2f:4b:99: d2:bb:59:7c:e3:a0:fa:ae:d9:94:13:a8:f6:7e:80: 53:b0:94:e0:e7:54:97:03:9d:03:89:9d:d9:ac:f7: cc:60:a8:8c:5e:e9:46:f6:a4:cf:d6:77:ca:3d:0e: bc:6d:7e:63:eb:35:8c:ad:0b:00:26:21:6c:e6:c1: 0e:45:2b:e3:62:c9:3d:19:e6:88:0d:04:d0:6a:7d: d0:a4:1e:22:3c:5f:14:e7:89:44:38:a5:45:ba:01: f3:55:2e:f5:13:44:e8:89:b7:45:90:46:7b:9a:44: 8d:82:75:d2:49:3b:87:3a:aa:a2:20:40:a6:96:3e: c2:b6:dc:f0:c2:d9:28:3a:e8:f6:6c:d4:18:c8:19: 93:41:97:db:45:9b:40:6b:b0:3c:26:d3:a9:18:d6: 04:bf:7a:a1:e9:df:50:02:45:4a:7d:79:dd:cd:88: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:FD:15:97:7B:95:64:00:3A:5B:E6:AB:A6:69:48:41:FC:AA:7A X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:95:0d:fa:17:d1:d1:d9:0a:c0:34:0a:15:01:c3:19:f0:d0: 1d:64:eb:e9:79:95:99:9f:28:09:60:e8:74:4e:57:bb:d3:12: 36:98:a2:6c:f3:84:c0:ff:25:a7:8f:df:fd:27:5c:d5:a3:e5: 66:51:6c:0b:92:f4:3c:32:17:c5:4b:38:59:7e:b9:9f:d5:e1: 59:10:47:6c:09:7e:ae:b5:7a:fb:66:80:87:9b:0e:34:f3:cb: c9:75:12:8e:30:24:76:b9:f0:9a:89:3d:2a:4e:f0:64:d3:3d: 1c:b4:e8:8f:51:c0:f3:36:bb:5e:e9:ff:14:e8:21:e3:26:e5: b0:a8:79:03:6f:a8:3b:8c:be:45:58:b3:3f:30:bc:86:d3:e0: 67:e5:e0:ea:5b:07:fe:40:94:4f:c3:2c:83:e2:fb:ff:1b:af: 53:6d:d2:2b:19:d2:e0:ab:bb:c0:c1:83:63:eb:5c:e7:0a:1f: 23:51:25:35:df:09:5f:9f:42:87:a2:05:35:cc:f7:f7:b3:e0: ab:fe:3a:2a:a8:3e:b3:6d:55:e4:8b:04:62:8c:e1:ec:b7:9f: fe:11:e5:f3:e3:8e:22:69:de:3a:00:cb:05:c5:1c:a8:af:3b: 54:fc:bb:d1:2f:b9:9b:dc:b8:2a:7f:3e:ee:87:15:fe:68:c1: 9a:8c:d2:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIq5i/ysTywXseGP5T2DRras1EuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNjAxMjMxNjI2MTRaFw0yNjAxMjYyMDE0MTRaMDMxMTAvBgNV BAMTKDQ5RkJGRDE1OTc3Qjk1NjQwMDNBNUJFNkFCQTY2OTQ4NDFGQ0FBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ShrYarPVEbuSok+FOetPn3Xt SCChbRWHFnKeZ9QIDkOaAjqz4KBcy1g2SQ4LkzEh65F85s1vo1SEvYpy0wxKinUb S7w/nrStynTV5Oaq5BOOb257uC9LmdK7WXzjoPqu2ZQTqPZ+gFOwlODnVJcDnQOJ ndms98xgqIxe6Ub2pM/Wd8o9DrxtfmPrNYytCwAmIWzmwQ5FK+NiyT0Z5ogNBNBq fdCkHiI8XxTniUQ4pUW6AfNVLvUTROiJt0WQRnuaRI2CddJJO4c6qqIgQKaWPsK2 3PDC2Sg66PZs1BjIGZNBl9tFm0BrsDwm06kY1gS/eqHp31ACRUp9ed3NiLjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSfv9FZd7lWQAOlvmq6ZpSEH8qnowHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGVDfoX0dHZCsA0ChUBwxnw0B1k6+l5lZmf KAlg6HROV7vTEjaYomzzhMD/JaeP3/0nXNWj5WZRbAuS9DwyF8VLOFl+uZ/V4VkQ R2wJfq61evtmgIebDjTzy8l1Eo4wJHa58JqJPSpO8GTTPRy06I9RwPM2u17p/xTo IeMm5bCoeQNvqDuMvkVYsz8wvIbT4Gfl4OpbB/5AlE/DLIPi+/8br1Nt0isZ0uCr u8DBg2PrXOcKHyNRJTXfCV+fQoeiBTXM9/ez4Kv+OiqoPrNtVeSLBGKM4ey3n/4R 5fPjjiJp3joAywXFHKivO1T8u9EvuZvcuCp/Pu6HFf5owZqM0oA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:22 2026 by rpki-client