This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: m+P6E+//LC4qwTF4Y8X7IIAhYulZ6/RoMOmmL3O/55A= Subject key identifier: 1B:D9:C9:AB:35:BD:C0:D0:BC:36:43:85:14:90:6F:B4:74:0F:64:5D Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 11388F071A5B0F44C440C2FACC589F95365AAECF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: 0108 Signing time: Sun 25 Jan 2026 09:21:30 +0000 Manifest this update: Sun 25 Jan 2026 09:16:30 +0000 Manifest next update: Wed 28 Jan 2026 14:35:30 +0000 Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: 5H0XZYlm0632kwdzELeWFQ4TTul8mMLbATD9QD9nAes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:38:8f:07:1a:5b:0f:44:c4:40:c2:fa:cc:58:9f:95:36:5a:ae:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Jan 25 09:16:30 2026 GMT Not After : Jan 28 14:35:30 2026 GMT Subject: CN=1BD9C9AB35BDC0D0BC36438514906FB4740F645D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:13:01:07:92:14:2c:18:4a:0f:58:92:6b: 87:95:e0:2c:bf:01:8f:11:d7:3f:6e:a5:fb:65:1d: 69:12:53:99:9c:5d:cb:8a:1b:56:53:38:56:9b:bd: 77:5d:3c:ea:12:c6:35:48:2d:96:df:74:c2:df:e1: 6d:f1:8a:6c:ff:6a:ba:c0:78:38:2c:63:5b:14:0c: 2d:f5:57:44:39:d6:a1:f0:26:c5:7c:37:b9:4d:f3: f8:df:92:27:e6:5e:25:c2:44:43:88:81:ce:cc:cd: c2:43:7b:de:f5:ee:1f:ac:1f:fd:b8:e2:62:84:08: 24:c1:a1:7c:86:1e:52:5e:bd:d8:32:dc:a5:64:c7: 94:ec:e9:3e:e5:63:25:dc:a1:a1:71:d7:9e:a6:37: 34:9d:ec:e6:2a:d7:05:57:bb:90:64:40:c0:15:32: 11:74:16:b8:96:c0:b5:d5:ee:71:db:3e:52:f5:3c: 0f:e5:33:7d:b2:de:a1:85:eb:02:e0:10:b9:f8:69: cd:0d:50:44:fd:06:c6:b5:35:04:68:0a:1a:c2:ff: fd:ef:61:3c:ee:85:3e:b7:22:37:cb:56:46:0c:a2: 23:55:8d:60:48:f4:9a:39:78:2b:34:19:2a:67:34: bf:2b:fe:58:74:3d:f2:6e:96:1a:d5:ce:3a:f7:c5: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:C9:AB:35:BD:C0:D0:BC:36:43:85:14:90:6F:B4:74:0F:64:5D X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:8c:bf:42:04:38:3a:9d:1d:c1:99:72:c5:fc:ec:92:97:af: 02:0f:40:25:fe:55:59:28:2b:f0:f6:ce:ef:2c:65:fa:da:a7: 37:e4:9e:74:0c:e7:dd:57:15:f6:b9:81:b0:18:25:2d:fa:d1: 66:80:07:41:e1:7c:1b:fa:b6:d6:4d:bf:07:42:a5:f6:3c:56: 00:7b:f6:b6:97:bc:ae:1c:db:84:33:49:b9:69:49:13:f4:42: 5b:ca:51:9c:03:38:7e:37:da:6f:a8:e1:b6:fb:1e:a1:fa:99: 40:85:fe:4b:d2:53:14:c9:2e:36:1c:48:58:6a:33:07:7b:9e: 26:ae:06:d4:14:18:fa:29:26:4b:45:6c:e5:bb:4c:f6:39:0a: a7:cf:d8:c2:77:d3:bf:0c:df:9f:db:12:14:99:ac:a0:5f:b5: f9:91:71:89:8e:48:e8:b3:59:68:52:5e:2c:7f:41:56:d0:88: 1e:62:56:a0:02:1b:1f:8b:33:a3:ce:8a:91:3a:47:de:1b:78: e9:10:89:68:b0:74:b7:da:73:f9:78:75:7a:66:a3:f5:ce:3b: cb:1b:21:ea:7c:78:f0:73:79:d9:42:16:c0:a2:58:17:a3:02: 64:48:48:8e:85:dc:d6:9f:3c:09:07:bb:b8:47:32:de:2b:fe: 83:51:df:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETiPBxpbD0TEQML6zFiflTZars8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNjAxMjUwOTE2MzBaFw0yNjAxMjgxNDM1MzBaMDMxMTAvBgNV BAMTKDFCRDlDOUFCMzVCREMwRDBCQzM2NDM4NTE0OTA2RkI0NzQwRjY0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaRMBB5IULBhKD1iSa4eV4Cy/ AY8R1z9upftlHWkSU5mcXcuKG1ZTOFabvXddPOoSxjVILZbfdMLf4W3ximz/arrA eDgsY1sUDC31V0Q51qHwJsV8N7lN8/jfkifmXiXCREOIgc7MzcJDe9717h+sH/24 4mKECCTBoXyGHlJevdgy3KVkx5Ts6T7lYyXcoaFx156mNzSd7OYq1wVXu5BkQMAV MhF0FriWwLXV7nHbPlL1PA/lM32y3qGF6wLgELn4ac0NUET9Bsa1NQRoChrC//3v YTzuhT63IjfLVkYMoiNVjWBI9Jo5eCs0GSpnNL8r/lh0PfJulhrVzjr3xcFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9nJqzW9wNC8NkOFFJBvtHQPZF0wHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeMv0IEODqdHcGZcsX87JKXrwIPQCX+VVko K/D2zu8sZfrapzfknnQM591XFfa5gbAYJS360WaAB0HhfBv6ttZNvwdCpfY8VgB7 9raXvK4c24QzSblpSRP0QlvKUZwDOH432m+o4bb7HqH6mUCF/kvSUxTJLjYcSFhq Mwd7niauBtQUGPopJktFbOW7TPY5CqfP2MJ3078M35/bEhSZrKBftfmRcYmOSOiz WWhSXix/QVbQiB5iVqACGx+LM6POipE6R94beOkQiWiwdLfac/l4dXpmo/XOO8sb Iep8ePBzedlCFsCiWBejAmRISI6F3NafPAkHu7hHMt4r/oNR3zw= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:17 2026 by rpki-client