This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: TKSJXLb8KtDEMUePLhimZAVhcnlKK6o1u0RR49bWIGE= Subject key identifier: E9:4A:3C:A5:15:B7:2A:A6:DE:91:5C:53:C8:1F:A2:24:54:47:D1:62 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 0332CA9EEC1AFB48AA5FDBAD8BD933E6110B175C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 021C Signing time: Sat 24 Jan 2026 23:01:10 +0000 Manifest this update: Sat 24 Jan 2026 22:56:10 +0000 Manifest next update: Wed 28 Jan 2026 01:16:10 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: awCXTFpTEwEOULPCbK4L6vdAvlaXWjLgNAZUakZNUqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:32:ca:9e:ec:1a:fb:48:aa:5f:db:ad:8b:d9:33:e6:11:0b:17:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Jan 24 22:56:10 2026 GMT Not After : Jan 28 01:16:10 2026 GMT Subject: CN=E94A3CA515B72AA6DE915C53C81FA2245447D162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:84:00:11:d8:85:65:73:83:1a:a7:61:94: 02:3a:60:a2:12:45:39:29:b6:cc:74:dc:0c:bf:9b: 81:b5:0d:69:c7:2c:da:8c:bd:47:42:94:42:79:a9: db:c8:9a:9f:0a:ac:18:af:4b:06:e9:3c:d3:5e:61: 8d:81:e1:d7:3e:cb:02:09:d5:3b:ff:fd:a5:90:d8: 8e:57:ae:94:c8:13:98:b4:f5:c2:e7:f6:1f:a5:1f: 53:0e:22:63:60:bb:78:39:af:68:8f:00:95:7b:bb: 49:bf:f8:2d:a5:1d:ff:ed:98:3d:47:67:27:8b:a1: a8:21:f8:f6:f4:b2:af:c8:8c:08:6c:05:bf:61:53: 0d:5b:31:20:b1:80:5b:67:9a:74:5f:af:e5:91:c5: 0d:15:dd:f2:db:5b:f3:c2:3f:79:36:10:bf:b1:5b: 9a:fe:85:72:92:dd:56:37:cc:03:9c:00:6e:3e:63: 23:4d:13:6e:71:8a:81:88:1a:d2:e2:ae:11:8b:54: dc:58:10:01:8f:78:50:8c:14:10:ef:01:29:ac:5f: dc:b9:4b:6d:d9:35:d6:08:4d:18:1e:41:6d:8f:c7: 5d:91:e9:16:84:11:81:fe:e1:21:46:b4:ad:91:bd: e4:e6:c4:16:29:14:f6:83:90:d9:4b:3a:3f:7f:58: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:3C:A5:15:B7:2A:A6:DE:91:5C:53:C8:1F:A2:24:54:47:D1:62 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:74:b6:b8:c4:7a:fe:e8:e7:b5:ea:36:c6:36:d7:8d:55:26: f8:3e:04:4b:8d:42:89:1d:1f:af:fe:68:dc:68:f3:31:5e:b2: 6c:a5:04:f0:9c:c1:3c:0a:c6:d4:a2:ad:be:4d:57:0a:97:a6: e3:2c:50:97:9f:d5:aa:93:83:73:2a:0a:08:0e:12:7b:8c:c7: 9d:c7:c1:8e:c8:5e:b5:7f:a6:ed:e8:17:5a:d2:9f:1a:be:75: 36:cc:85:9d:d1:b0:4a:24:bb:bd:90:56:84:ef:2c:d6:07:7b: 87:7f:6e:a9:54:11:32:6e:46:b3:d7:4f:11:5f:d4:ee:68:87: c7:3c:92:14:58:10:13:8f:49:b6:59:45:ab:1c:d2:10:e7:10: 97:7e:7d:ec:9c:96:5c:da:d8:b2:1d:40:21:dc:36:3e:51:cb: 06:66:8a:6e:be:df:b0:77:33:27:91:29:1d:fc:ce:83:77:7b: 71:51:94:0b:15:95:2a:1b:44:1d:1c:42:85:8f:ba:f4:75:3e: 03:04:d8:b0:ba:63:08:9d:c6:1b:f6:0e:a3:90:8e:38:30:d4: 5d:3f:62:99:d9:e7:03:0a:49:06:d3:4c:34:9e:ca:f3:e3:2d: fa:23:06:ef:03:22:7b:0f:3d:84:ab:ef:4b:27:9b:e1:3b:7e: 6e:5b:2d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzLKnuwa+0iqX9uti9kz5hELF1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNjAxMjQyMjU2MTBaFw0yNjAxMjgwMTE2MTBaMDMxMTAvBgNV BAMTKEU5NEEzQ0E1MTVCNzJBQTZERTkxNUM1M0M4MUZBMjI0NTQ0N0QxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPIQAEdiFZXODGqdhlAI6YKIS RTkptsx03Ay/m4G1DWnHLNqMvUdClEJ5qdvImp8KrBivSwbpPNNeYY2B4dc+ywIJ 1Tv//aWQ2I5XrpTIE5i09cLn9h+lH1MOImNgu3g5r2iPAJV7u0m/+C2lHf/tmD1H ZyeLoagh+Pb0sq/IjAhsBb9hUw1bMSCxgFtnmnRfr+WRxQ0V3fLbW/PCP3k2EL+x W5r+hXKS3VY3zAOcAG4+YyNNE25xioGIGtLirhGLVNxYEAGPeFCMFBDvASmsX9y5 S23ZNdYITRgeQW2Px12R6RaEEYH+4SFGtK2RveTmxBYpFPaDkNlLOj9/WHDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Uo8pRW3KqbekVxTyB+iJFRH0WIwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOZ0trjEev7o57XqNsY2141VJvg+BEuNQokd H6/+aNxo8zFesmylBPCcwTwKxtSirb5NVwqXpuMsUJef1aqTg3MqCggOEnuMx53H wY7IXrV/pu3oF1rSnxq+dTbMhZ3RsEoku72QVoTvLNYHe4d/bqlUETJuRrPXTxFf 1O5oh8c8khRYEBOPSbZZRasc0hDnEJd+feycllza2LIdQCHcNj5RywZmim6+37B3 MyeRKR38zoN3e3FRlAsVlSobRB0cQoWPuvR1PgME2LC6Ywidxhv2DqOQjjgw1F0/ YpnZ5wMKSQbTTDSeyvPjLfojBu8DInsPPYSr70snm+E7fm5bLTg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:50 2026 by rpki-client