This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: Gn7pwX2Yg/wrF7otDK85XeXbjz5jJsb369Sb7y54zbg= Subject key identifier: F7:8A:09:FB:9D:A0:45:5F:FA:E2:3C:B4:44:30:F3:AF:85:28:3D:B0 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 68E3FA1FBFE6F55A216EB0C1EA1E37FDF5DD7A5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 0325 Signing time: Sat 24 Jan 2026 03:20:49 +0000 Manifest this update: Sat 24 Jan 2026 03:15:49 +0000 Manifest next update: Tue 27 Jan 2026 09:29:49 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=) 2: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: zFtBwKZb/7GY0X+43yyFgoVtRZXSyacvDbog9IbZnWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e3:fa:1f:bf:e6:f5:5a:21:6e:b0:c1:ea:1e:37:fd:f5:dd:7a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Jan 24 03:15:49 2026 GMT Not After : Jan 27 09:29:49 2026 GMT Subject: CN=F78A09FB9DA0455FFAE23CB44430F3AF85283DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:3b:87:01:6f:d3:29:35:01:34:29:4f:5a: fc:3c:85:0d:d5:3c:8e:11:58:16:6f:7c:c8:fd:23: 5d:97:15:09:eb:f6:72:54:70:82:cd:1b:33:4f:8f: 0a:f3:d6:7a:19:37:10:66:d7:63:d8:4d:8c:48:d2: 84:bf:cb:62:37:30:1f:50:10:d7:da:78:82:cc:e9: e2:9b:0e:8a:66:fb:8a:65:ce:6a:c6:45:54:ec:4b: d2:37:5b:63:45:10:ff:e7:fc:61:1a:67:53:08:c0: ea:eb:f2:43:2a:0f:14:10:f1:74:ae:be:6b:cb:02: 80:91:ac:e1:07:59:4d:dc:ab:1b:9d:09:c0:ca:78: 17:25:ea:bd:aa:e7:79:7f:dd:38:c4:79:ac:03:d4: 51:b5:5a:47:4f:7f:b2:ba:24:9f:45:8c:eb:bf:12: d2:58:51:fc:3c:04:f1:dc:00:74:62:e1:b6:6a:a4: a9:ff:37:d2:2d:ac:5a:2a:44:aa:2e:b4:9e:64:64: 27:97:ad:e8:44:93:38:1c:75:34:d6:17:c5:4b:d2: a1:d9:64:13:09:2f:24:1d:b6:e9:d7:34:c7:62:33: b5:31:5c:52:7a:48:4c:8d:01:1f:75:81:d2:37:3e: 5d:24:50:4a:65:7a:57:80:77:04:17:27:ef:69:4e: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8A:09:FB:9D:A0:45:5F:FA:E2:3C:B4:44:30:F3:AF:85:28:3D:B0 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:9c:92:8f:c7:d6:9a:90:93:4c:63:ff:09:d7:35:07:07:40: 92:7c:02:6b:b3:c5:89:12:ff:10:b1:4c:6b:31:4b:b7:5e:6a: 97:bd:4b:22:10:60:d0:cc:d9:a1:a3:bf:7c:68:82:10:f2:b9: a3:37:a7:cd:96:2f:b1:a5:43:9f:a1:74:91:6d:65:1d:53:76: bb:54:4a:41:a0:ad:ea:46:3f:54:f7:36:1e:41:79:77:44:6c: 6a:a2:3f:5c:a6:5e:e3:f1:9d:78:e6:73:9f:32:b9:8e:e3:14: e5:0f:64:2f:2f:f9:df:e3:bd:75:ff:cf:63:7c:65:58:90:51: 9f:a6:8e:63:fb:27:f0:68:c5:5c:77:24:7d:04:34:5c:20:b6: d1:a9:c0:61:1b:20:35:2b:38:d5:f1:e3:06:26:87:a6:59:8f: ad:24:a9:5c:63:09:01:16:6a:1c:e8:73:f2:62:c9:da:bb:c8: e9:f6:c0:f3:83:34:4e:62:ad:43:fb:bb:96:65:6f:04:0c:8f: b8:8d:7c:d0:45:eb:c8:4d:b0:db:a6:ac:be:db:51:c3:7e:5c: 4d:2f:b2:42:60:19:3b:7e:cb:ea:17:2f:db:74:2e:cc:8c:d9: d4:3d:17:23:54:06:bd:e8:70:fe:87:fc:8f:c2:b8:04:1a:9e: 74:e9:24:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOP6H7/m9VohbrDB6h43/fXdel4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNjAxMjQwMzE1NDlaFw0yNjAxMjcwOTI5NDlaMDMxMTAvBgNV BAMTKEY3OEEwOUZCOURBMDQ1NUZGQUUyM0NCNDQ0MzBGM0FGODUyODNEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7DuHAW/TKTUBNClPWvw8hQ3V PI4RWBZvfMj9I12XFQnr9nJUcILNGzNPjwrz1noZNxBm12PYTYxI0oS/y2I3MB9Q ENfaeILM6eKbDopm+4plzmrGRVTsS9I3W2NFEP/n/GEaZ1MIwOrr8kMqDxQQ8XSu vmvLAoCRrOEHWU3cqxudCcDKeBcl6r2q53l/3TjEeawD1FG1WkdPf7K6JJ9FjOu/ EtJYUfw8BPHcAHRi4bZqpKn/N9ItrFoqRKoutJ5kZCeXrehEkzgcdTTWF8VL0qHZ ZBMJLyQdtunXNMdiM7UxXFJ6SEyNAR91gdI3Pl0kUEpleleAdwQXJ+9pTspBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94oJ+52gRV/64jy0RDDzr4UoPbAwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANicko/H1pqQk0xj/wnXNQcHQJJ8AmuzxYkS /xCxTGsxS7deape9SyIQYNDM2aGjv3xoghDyuaM3p82WL7GlQ5+hdJFtZR1TdrtU SkGgrepGP1T3Nh5BeXdEbGqiP1ymXuPxnXjmc58yuY7jFOUPZC8v+d/jvXX/z2N8 ZViQUZ+mjmP7J/BoxVx3JH0ENFwgttGpwGEbIDUrONXx4wYmh6ZZj60kqVxjCQEW ahzoc/Jiydq7yOn2wPODNE5irUP7u5ZlbwQMj7iNfNBF68hNsNumrL7bUcN+XE0v skJgGTt+y+oXL9t0LsyM2dQ9FyNUBr3ocP6H/I/CuAQannTpJFM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:02 2026 by rpki-client