This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: R+/rmUaPde7/eG1s+6iURNS/Iyc5X1p3UGjEn6AOcGI= Subject key identifier: 75:88:3C:CB:34:E1:53:F4:79:92:6F:7E:1B:26:DF:9F:62:E3:E9:46 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 63F01C4364728D42D058211E646B08518FA4CBE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 0205 Signing time: Sat 24 Jan 2026 22:20:56 +0000 Manifest this update: Sat 24 Jan 2026 22:15:56 +0000 Manifest next update: Wed 28 Jan 2026 02:04:56 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) 2: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: +SFbwkL6ly/fOT1LAItsWgIFr3awpRISKi7YLHSqgmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f0:1c:43:64:72:8d:42:d0:58:21:1e:64:6b:08:51:8f:a4:cb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Jan 24 22:15:56 2026 GMT Not After : Jan 28 02:04:56 2026 GMT Subject: CN=75883CCB34E153F479926F7E1B26DF9F62E3E946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:14:ef:b9:3f:f3:0f:46:f3:16:61:b2:c8: 60:1e:2f:fa:30:da:4f:21:9d:f1:c0:c4:82:1f:30: 9f:34:ea:15:62:ca:33:64:09:31:5d:30:02:4d:8d: 5a:f4:cd:ce:e2:42:21:a4:8d:ce:20:b2:a9:18:91: 4b:ce:d1:a0:9d:e9:5e:43:eb:32:e1:fc:6f:54:fd: bd:84:61:10:7c:16:98:e5:d1:e5:dd:f5:01:6b:3a: db:7f:0a:c7:c4:91:42:1e:ca:fd:d2:59:ef:8b:08: 68:1d:3d:54:cd:38:7b:0a:47:71:f5:5b:68:13:05: ed:d2:c7:72:4c:07:50:62:bd:ee:cf:3c:ac:5e:35: 41:d9:7d:d2:ad:a3:c8:57:ca:6e:10:37:ee:4c:6c: 0f:39:2c:3e:3e:1e:0c:8f:4d:2f:fc:21:c5:83:29: cf:de:95:f2:e2:ed:d5:48:b0:ba:05:19:9f:f2:86: a2:21:2c:d4:05:f1:63:e5:8f:da:66:33:d0:97:50: 78:bc:50:91:56:ac:73:98:cd:44:0a:3e:dc:e6:55: 56:52:a9:16:04:1e:44:7a:4e:fd:c3:a4:5a:ae:be: 4b:0c:74:61:e6:85:c1:f6:56:c8:c3:a4:5a:a5:dd: f0:9a:52:15:b9:cb:4d:60:d4:dc:e4:fb:8b:65:b1: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:88:3C:CB:34:E1:53:F4:79:92:6F:7E:1B:26:DF:9F:62:E3:E9:46 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c5:b7:99:f6:b5:49:a0:05:ee:45:b4:5f:65:f8:44:7e:03: bc:2c:42:16:f3:26:fb:a0:4c:df:ad:08:40:c2:cf:53:98:6d: 37:34:02:c0:b0:2a:4d:f9:37:d3:17:2a:01:ff:72:36:7b:14: c6:cd:3b:e5:82:59:9f:89:bc:65:69:4a:72:8d:57:3f:f0:12: 27:81:4e:d3:81:cf:b1:c2:42:f6:0a:a3:c7:e5:14:62:4d:32: 96:f8:a7:85:d4:4e:d2:59:41:e8:6e:ab:99:02:3f:64:de:62: 8f:7f:52:3c:5a:bd:4a:64:dc:49:4f:31:bf:32:7d:3f:16:38: 3a:9e:cf:95:16:d1:cd:4c:be:fe:c6:7c:6a:2a:2b:50:75:30: 64:f0:6b:aa:55:78:dd:9b:b1:b5:25:d3:09:8e:5d:bf:70:d8: cc:d4:7d:e3:ac:c8:a8:cd:b0:f7:56:dd:e7:7e:ce:26:da:a8: cc:46:63:eb:01:2c:65:d9:b6:c8:d5:8a:16:a7:47:6b:fa:d0: af:e8:62:a1:98:b8:1b:ec:f9:be:e9:13:84:e3:61:9f:6c:4b: 6e:70:25:5f:68:38:2d:92:a6:51:88:9d:0e:bd:0d:91:b2:d3: d6:54:8f:91:e8:a0:f8:db:97:a0:f9:91:66:99:6b:f7:48:4f: 65:b2:7d:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/AcQ2RyjULQWCEeZGsIUY+ky+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNjAxMjQyMjE1NTZaFw0yNjAxMjgwMjA0NTZaMDMxMTAvBgNV BAMTKDc1ODgzQ0NCMzRFMTUzRjQ3OTkyNkY3RTFCMjZERjlGNjJFM0U5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVRTvuT/zD0bzFmGyyGAeL/ow 2k8hnfHAxIIfMJ806hViyjNkCTFdMAJNjVr0zc7iQiGkjc4gsqkYkUvO0aCd6V5D 6zLh/G9U/b2EYRB8Fpjl0eXd9QFrOtt/CsfEkUIeyv3SWe+LCGgdPVTNOHsKR3H1 W2gTBe3Sx3JMB1Bive7PPKxeNUHZfdKto8hXym4QN+5MbA85LD4+HgyPTS/8IcWD Kc/elfLi7dVIsLoFGZ/yhqIhLNQF8WPlj9pmM9CXUHi8UJFWrHOYzUQKPtzmVVZS qRYEHkR6Tv3DpFquvksMdGHmhcH2VsjDpFql3fCaUhW5y01g1Nzk+4tlsefDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdYg8yzThU/R5km9+Gybfn2Lj6UYwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzFt5n2tUmgBe5FtF9l+ER+A7wsQhbzJvug TN+tCEDCz1OYbTc0AsCwKk35N9MXKgH/cjZ7FMbNO+WCWZ+JvGVpSnKNVz/wEieB TtOBz7HCQvYKo8flFGJNMpb4p4XUTtJZQehuq5kCP2TeYo9/UjxavUpk3ElPMb8y fT8WODqez5UW0c1Mvv7GfGoqK1B1MGTwa6pVeN2bsbUl0wmOXb9w2MzUfeOsyKjN sPdW3ed+zibaqMxGY+sBLGXZtsjVihanR2v60K/oYqGYuBvs+b7pE4TjYZ9sS25w JV9oOC2SplGInQ69DZGy09ZUj5HooPjbl6D5kWaZa/dIT2WyfTA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:41 2026 by rpki-client