This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: TkWBpXsCJW4e7EsXiW4U5gYQESeaVpWkSBpgr3wBzDc= Subject key identifier: BC:31:55:DB:59:77:8F:CB:FD:0F:3B:49:C5:BA:37:F1:C6:90:0A:F8 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 78AF9AF70C9CBBBB80F2EFCF18C474668EC1006B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 03C6 Signing time: Sat 24 Jan 2026 11:01:06 +0000 Manifest this update: Sat 24 Jan 2026 10:56:06 +0000 Manifest next update: Tue 27 Jan 2026 16:28:06 +0000 Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) 2: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: R9hN96/wfEO4CZaVj5x/KG3ETqgljz4tyCMFDZVB2QU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:af:9a:f7:0c:9c:bb:bb:80:f2:ef:cf:18:c4:74:66:8e:c1:00:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Jan 24 10:56:06 2026 GMT Not After : Jan 27 16:28:06 2026 GMT Subject: CN=BC3155DB59778FCBFD0F3B49C5BA37F1C6900AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:42:37:d7:c8:76:b1:82:85:d4:b9:b0:28: cd:cb:ff:0b:e7:2a:b3:95:31:6f:8f:52:6e:07:80: f4:fc:f7:1d:b2:d9:99:63:01:fc:3d:2c:4d:a1:df: 38:32:6d:f2:c4:81:2e:ee:72:ac:98:ce:bd:93:3e: 74:0b:61:fb:04:56:7c:09:8a:3d:67:34:57:87:d0: 96:50:94:63:1d:a9:58:60:fd:a9:3c:a1:6f:9b:96: 21:7d:23:c5:d3:2b:2e:3f:e9:99:96:55:55:c5:d8: 40:0d:9b:9c:e0:9b:52:a3:f8:ac:d0:05:8c:31:35: 4d:fb:6f:51:8a:7d:2d:1f:14:96:1d:75:8b:47:4f: d0:51:08:d8:f8:0a:66:4b:c4:a7:c5:10:39:66:0e: 25:cd:89:e3:16:c5:bd:71:e1:11:a1:1d:e1:2f:5b: 91:7d:66:78:67:6b:33:f3:a4:50:99:b3:12:26:9d: f7:e3:a3:7b:e6:67:55:bd:4c:af:9a:01:ae:ae:b3: ec:2e:32:2a:a5:5c:4f:66:3f:46:93:b4:99:e6:0c: cd:dd:6d:6b:ec:d6:03:fb:a5:c0:bd:8e:8f:43:95: e0:e6:bb:15:78:ae:62:f5:59:e1:b3:73:a3:14:e2: d8:dd:e9:94:c0:b1:da:6c:68:b7:c9:b5:8a:7f:a3: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:31:55:DB:59:77:8F:CB:FD:0F:3B:49:C5:BA:37:F1:C6:90:0A:F8 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:3b:23:fe:7a:c1:60:62:14:35:71:4d:7b:d4:bb:0c:d5: 1c:ab:ca:b6:41:66:06:76:f4:bc:a1:d7:04:60:3d:17:ce:ca: 4d:5f:49:91:bc:7b:7f:d6:3e:aa:36:f2:55:ab:6d:01:d5:13: 2b:37:48:4c:5e:8e:21:2b:d5:27:2b:5d:b9:3f:b9:b6:dd:b7: 72:33:e6:80:5d:f4:a6:c9:90:9b:64:e5:90:03:57:12:79:0d: 37:d6:7a:09:62:e0:07:b2:da:68:99:1d:47:26:bc:ab:4a:07: 01:53:bc:9c:d1:0b:6d:0c:14:63:30:29:50:78:aa:a9:65:03: 80:bf:1a:fc:f1:ff:66:6e:31:63:67:89:43:35:dc:89:02:8c: 86:7f:1c:8a:d4:47:15:25:89:b0:db:45:48:b1:74:ff:bf:97: 2b:42:6f:76:72:09:8e:3e:0e:5b:64:50:1b:1a:cd:2c:47:e7: 51:44:63:0d:13:1a:e4:b3:64:93:59:f4:0f:5d:ea:ac:06:3f: 13:cc:fc:a8:db:f2:99:bf:19:8e:e4:ae:06:91:c1:a3:17:96: 0c:49:b8:3f:13:34:a6:3d:e5:20:0b:91:19:a9:cb:99:8f:78: e3:9c:4d:28:1e:d8:1a:a5:79:fd:91:e9:24:d4:55:2a:cd:5d: fb:ce:48:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeK+a9wycu7uA8u/PGMR0Zo7BAGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNjAxMjQxMDU2MDZaFw0yNjAxMjcxNjI4MDZaMDMxMTAvBgNV BAMTKEJDMzE1NURCNTk3NzhGQ0JGRDBGM0I0OUM1QkEzN0YxQzY5MDBBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tkI318h2sYKF1LmwKM3L/wvn KrOVMW+PUm4HgPT89x2y2ZljAfw9LE2h3zgybfLEgS7ucqyYzr2TPnQLYfsEVnwJ ij1nNFeH0JZQlGMdqVhg/ak8oW+bliF9I8XTKy4/6ZmWVVXF2EANm5zgm1Kj+KzQ BYwxNU37b1GKfS0fFJYddYtHT9BRCNj4CmZLxKfFEDlmDiXNieMWxb1x4RGhHeEv W5F9ZnhnazPzpFCZsxImnffjo3vmZ1W9TK+aAa6us+wuMiqlXE9mP0aTtJnmDM3d bWvs1gP7pcC9jo9DleDmuxV4rmL1WeGzc6MU4tjd6ZTAsdpsaLfJtYp/o+MvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDFV21l3j8v9DztJxbo38caQCvgwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDSOyP+esFgYhQ1cU171LsM1RyryrZBZgZ2 9Lyh1wRgPRfOyk1fSZG8e3/WPqo28lWrbQHVEys3SExejiEr1ScrXbk/ubbdt3Iz 5oBd9KbJkJtk5ZADVxJ5DTfWegli4Aey2miZHUcmvKtKBwFTvJzRC20MFGMwKVB4 qqllA4C/Gvzx/2ZuMWNniUM13IkCjIZ/HIrURxUlibDbRUixdP+/lytCb3ZyCY4+ DltkUBsazSxH51FEYw0TGuSzZJNZ9A9d6qwGPxPM/Kjb8pm/GY7krgaRwaMXlgxJ uD8TNKY95SALkRmpy5mPeOOcTSge2Bqlef2R6STUVSrNXfvOSGM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:09 2026 by rpki-client