This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: +8FrBqgPyTBkbLR6VLQOjJUjZBc0P7K5kBpBZ3qJmIM= Subject key identifier: 8F:DB:9D:91:6B:3B:6A:32:05:9E:9A:E6:32:9F:C6:EA:CB:64:3B:9B Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 2D289E875FEFCCAD02A5C2A6FD3C33BCF46573A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 0412 Signing time: Sun 25 Jan 2026 17:41:49 +0000 Manifest this update: Sun 25 Jan 2026 17:36:49 +0000 Manifest next update: Thu 29 Jan 2026 01:37:49 +0000 Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: jJYNTfIAyMC2NRZr4ppEtCVznm9AD64Q42L5AHJhiL4=) 2: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: 2+21cgS9YAYcOp19nxMBI5CX1Jc0yGks8hyoPNdCeDQ=) 3: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: n4CYzNDoabAEP/aoqMbX//PNLMzoiH5yYr9fzEzYL2Y=) 4: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: bhUXyn1m9ClF/H6g61K6U8JFPr/lZN61y4GI83n7uSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:28:9e:87:5f:ef:cc:ad:02:a5:c2:a6:fd:3c:33:bc:f4:65:73:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Jan 25 17:36:49 2026 GMT Not After : Jan 29 01:37:49 2026 GMT Subject: CN=8FDB9D916B3B6A32059E9AE6329FC6EACB643B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:34:89:af:35:c7:36:fb:1e:98:79:d5:00: ce:14:c1:36:9c:76:1f:f4:61:0d:2b:e8:f7:cc:7f: 7e:cf:48:ff:f7:34:8c:37:c8:88:d2:cf:6d:c4:9d: 5d:f1:22:c4:be:24:95:b7:4f:d5:98:91:b5:54:52: dd:22:b7:6e:82:8a:4e:94:a3:54:94:7a:00:a8:f6: 73:ff:38:87:fb:dd:72:08:33:2f:59:79:6b:91:5c: 9b:4e:9b:d2:9a:47:7c:16:00:54:96:4f:a9:0d:8a: 02:76:0b:d4:9e:e9:ea:7a:2b:bc:9b:e4:e1:bd:ef: b5:62:f0:d5:fd:a4:9d:10:54:0a:ce:e9:0e:8a:62: ef:33:fc:24:d0:78:d4:46:7b:c3:60:02:d8:39:0a: ee:aa:c8:ea:f3:83:d0:bc:a0:44:88:9e:75:07:21: 1a:83:ee:48:d0:35:45:56:b3:da:c4:0f:b8:09:a5: 10:a4:af:bf:40:2f:17:2e:db:d9:60:79:29:88:fb: 27:3a:8c:e6:ce:e2:f6:ae:ae:e1:ab:0f:73:96:e3: ac:05:1e:6f:2d:d1:ab:68:b5:04:b4:24:6e:c3:da: 78:b6:86:4b:be:b7:da:67:0e:71:54:44:ff:3a:e4: 47:34:17:5f:93:32:6f:cd:59:20:8c:a9:7d:25:51: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:9D:91:6B:3B:6A:32:05:9E:9A:E6:32:9F:C6:EA:CB:64:3B:9B X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:24:78:c5:22:d2:6d:2e:03:e8:73:e4:02:77:8d:1c:d6: f3:b3:42:13:5b:b3:e9:c2:e6:c9:66:d2:56:79:7c:67:1f:ff: 70:a9:9a:c5:0f:a5:c5:c1:1d:d5:ef:ac:a9:b5:20:e5:d3:84: e4:bf:4f:f2:be:00:b1:f2:81:b7:95:2e:d0:91:71:f8:c4:e3: ca:eb:80:18:1f:1d:5e:74:0f:68:eb:cc:b3:2c:88:a6:1b:ab: 28:53:20:14:f5:7d:b8:d4:35:4e:8b:23:6d:ef:69:f4:49:47: cf:f2:cb:88:f7:2d:72:e9:4d:30:9e:d7:29:90:dd:10:4c:96: fc:0b:92:d6:e5:50:c4:36:ae:d4:7d:06:c0:1f:c1:4e:0b:c5: 4a:95:af:a6:b9:ce:ac:4b:04:13:b9:e1:7e:af:cd:c9:7c:2f: 16:06:cc:27:bc:6d:c9:e3:96:f2:0b:c9:6e:b1:08:c9:3c:be: 8d:2c:77:a1:d0:45:07:f8:12:ba:c4:68:94:92:55:ed:de:81: 11:db:78:08:6b:c5:fc:3e:71:90:58:61:bd:7d:43:22:e6:10: 73:b5:ae:1b:0b:75:ec:4c:46:9c:b1:dd:4d:68:e2:f4:7e:71: 32:29:0a:15:ad:48:c5:cb:42:85:14:65:8f:33:db:34:32:7d: f9:7f:8d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSieh1/vzK0CpcKm/TwzvPRlc6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNjAxMjUxNzM2NDlaFw0yNjAxMjkwMTM3NDlaMDMxMTAvBgNV BAMTKDhGREI5RDkxNkIzQjZBMzIwNTlFOUFFNjMyOUZDNkVBQ0I2NDNCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UjSJrzXHNvsemHnVAM4UwTac dh/0YQ0r6PfMf37PSP/3NIw3yIjSz23EnV3xIsS+JJW3T9WYkbVUUt0it26Cik6U o1SUegCo9nP/OIf73XIIMy9ZeWuRXJtOm9KaR3wWAFSWT6kNigJ2C9Se6ep6K7yb 5OG977Vi8NX9pJ0QVArO6Q6KYu8z/CTQeNRGe8NgAtg5Cu6qyOrzg9C8oESInnUH IRqD7kjQNUVWs9rED7gJpRCkr79ALxcu29lgeSmI+yc6jObO4vauruGrD3OW46wF Hm8t0atotQS0JG7D2ni2hku+t9pnDnFURP865Ec0F1+TMm/NWSCMqX0lUdVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9udkWs7ajIFnprmMp/G6stkO5swHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4tJHjFItJtLgPoc+QCd40c1vOzQhNbs+nC 5slm0lZ5fGcf/3CpmsUPpcXBHdXvrKm1IOXThOS/T/K+ALHygbeVLtCRcfjE48rr gBgfHV50D2jrzLMsiKYbqyhTIBT1fbjUNU6LI23vafRJR8/yy4j3LXLpTTCe1ymQ 3RBMlvwLktblUMQ2rtR9BsAfwU4LxUqVr6a5zqxLBBO54X6vzcl8LxYGzCe8bcnj lvILyW6xCMk8vo0sd6HQRQf4ErrEaJSSVe3egRHbeAhrxfw+cZBYYb19QyLmEHO1 rhsLdexMRpyx3U1o4vR+cTIpChWtSMXLQoUUZY8z2zQyffl/jXA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:06 2026 by rpki-client