This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: FhuLVXJkENK6iwr0RZmEOIDIU2FldAHa/f6OSUI4cNk= Subject key identifier: 05:04:3E:BD:54:03:67:7D:8E:15:9D:CE:EB:0E:8C:FB:93:63:BF:45 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 51A39AC32EED57E47F4C17059B383EB5F44E8264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 01A6 Signing time: Mon 26 Jan 2026 04:40:54 +0000 Manifest this update: Mon 26 Jan 2026 04:35:54 +0000 Manifest next update: Thu 29 Jan 2026 12:43:54 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 2: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) 3: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 4: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: DA2qxbe7KlOt1u6v+yzDviAqT3XPetyfLqGicS1jxKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 12:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a3:9a:c3:2e:ed:57:e4:7f:4c:17:05:9b:38:3e:b5:f4:4e:82:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Jan 26 04:35:54 2026 GMT Not After : Jan 29 12:43:54 2026 GMT Subject: CN=05043EBD5403677D8E159DCEEB0E8CFB9363BF45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:d4:6f:18:6e:2a:54:31:84:aa:6b:15:0d: ec:05:ec:f6:f8:bf:a5:13:ea:5b:a9:16:b3:8d:ec: d5:56:5f:a1:19:85:43:13:a1:e6:63:5d:4b:19:39: 38:1d:3d:28:aa:86:29:34:ef:f7:a1:ed:52:8b:94: 40:a3:41:7d:09:30:44:aa:3d:61:95:fb:58:ab:fa: e5:61:c3:d6:af:12:60:ca:a2:2d:90:ee:e3:16:b8: 3e:80:80:b9:2a:f0:82:e8:99:68:7b:08:04:2f:f2: 04:32:c5:36:d8:60:d4:7c:7c:7c:90:f8:0b:67:20: 48:27:e4:64:5c:2e:67:9c:b4:1e:26:9a:b9:05:03: 84:03:f6:48:fe:4f:d8:04:74:07:b5:21:e0:c8:52: 32:f5:34:eb:ee:75:8e:e2:7e:ee:96:67:b5:28:45: 6a:cf:3f:28:d2:98:21:27:dd:b3:f1:3f:83:44:be: f1:85:92:86:6c:a5:88:d7:fb:34:89:f5:4c:52:bf: f2:47:59:9c:53:f6:ac:da:de:aa:16:54:aa:10:53: 18:8a:31:84:a4:ce:b2:e3:f8:55:08:61:1e:e7:9e: 09:4a:e9:aa:97:80:4d:b5:78:ca:35:90:6e:ce:05: b6:df:d2:00:d4:5a:2f:d2:82:22:c2:b7:88:ec:8a: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:3E:BD:54:03:67:7D:8E:15:9D:CE:EB:0E:8C:FB:93:63:BF:45 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:7e:73:1e:2f:16:a4:45:3b:fc:55:bb:a2:8f:57:e0:f3:c9: c3:16:7b:db:77:46:d3:7d:87:99:5e:f1:97:4c:73:85:fa:97: 1a:07:80:6c:cb:82:54:5c:1e:f4:ee:83:92:a6:7b:74:1e:1b: bb:37:ee:c5:7c:00:8f:50:47:56:d1:2c:4d:ab:09:28:50:16: b1:0b:8b:66:63:4e:fd:4b:3e:19:e2:0c:f8:68:61:32:14:4b: ac:ba:6a:58:fb:d5:66:70:56:0f:70:c6:85:31:f3:7b:d8:8f: 6e:43:dd:99:19:37:2f:73:dc:21:91:79:c8:4e:c8:39:ff:f8: 66:f2:f3:8f:fd:82:82:77:f7:d4:57:7c:50:e9:aa:37:a0:bd: 76:97:a9:bd:7d:c5:f4:02:13:0d:89:20:51:40:03:fd:0e:66: 68:52:c4:b0:2e:c3:d2:f4:e0:63:23:f1:37:d3:66:1a:96:2c: 0c:9e:70:8a:95:6e:e7:30:0a:d9:a2:25:8b:c8:c7:5c:57:f8: 6f:e6:59:fb:0d:5d:9e:e6:8b:de:0b:1d:55:0e:ff:9b:1a:dd: 86:41:97:5b:e9:a7:d9:24:64:41:41:f1:16:d4:08:f8:56:c8: 8e:c8:10:27:7d:a7:52:5a:75:90:8a:20:ba:ac:3d:62:f3:bf: cd:17:d7:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUaOawy7tV+R/TBcFmzg+tfROgmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNjAxMjYwNDM1NTRaFw0yNjAxMjkxMjQzNTRaMDMxMTAvBgNV BAMTKDA1MDQzRUJENTQwMzY3N0Q4RTE1OURDRUVCMEU4Q0ZCOTM2M0JGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hNRvGG4qVDGEqmsVDewF7Pb4 v6UT6lupFrON7NVWX6EZhUMToeZjXUsZOTgdPSiqhik07/eh7VKLlECjQX0JMESq PWGV+1ir+uVhw9avEmDKoi2Q7uMWuD6AgLkq8ILomWh7CAQv8gQyxTbYYNR8fHyQ +AtnIEgn5GRcLmectB4mmrkFA4QD9kj+T9gEdAe1IeDIUjL1NOvudY7ifu6WZ7Uo RWrPPyjSmCEn3bPxP4NEvvGFkoZspYjX+zSJ9UxSv/JHWZxT9qza3qoWVKoQUxiK MYSkzrLj+FUIYR7nnglK6aqXgE21eMo1kG7OBbbf0gDUWi/SgiLCt4jsitgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQQ+vVQDZ32OFZ3O6w6M+5Njv0UwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALp+cx4vFqRFO/xVu6KPV+DzycMWe9t3RtN9 h5le8ZdMc4X6lxoHgGzLglRcHvTug5Kme3QeG7s37sV8AI9QR1bRLE2rCShQFrEL i2ZjTv1LPhniDPhoYTIUS6y6alj71WZwVg9wxoUx83vYj25D3ZkZNy9z3CGRechO yDn/+Gby84/9goJ399RXfFDpqjegvXaXqb19xfQCEw2JIFFAA/0OZmhSxLAuw9L0 4GMj8TfTZhqWLAyecIqVbucwCtmiJYvIx1xX+G/mWfsNXZ7mi94LHVUO/5sa3YZB l1vpp9kkZEFB8RbUCPhWyI7IECd9p1JadZCKILqsPWLzv80X15E= -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:31 2026 by rpki-client