This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: RbvSKLds24lXXzD/+vTSO27HRZ8sZlwc2Wu7c0ZKqEE= Subject key identifier: 9C:3E:7F:1D:FC:30:5A:C1:ED:E2:99:6F:15:F0:EC:7F:F9:F6:4C:DB Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 7F350EA2A0267BC35B86AC0D35E0025D97BB921F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0114 Signing time: Fri 23 Jan 2026 16:42:26 +0000 Manifest this update: Fri 23 Jan 2026 16:37:26 +0000 Manifest next update: Mon 26 Jan 2026 19:25:26 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: 11zxkzWMjbPWrnNe4SZvPPc+oQ1XJkxKHpK44uuEdsA=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:35:0e:a2:a0:26:7b:c3:5b:86:ac:0d:35:e0:02:5d:97:bb:92:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Jan 23 16:37:26 2026 GMT Not After : Jan 26 19:25:26 2026 GMT Subject: CN=9C3E7F1DFC305AC1EDE2996F15F0EC7FF9F64CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:d4:ec:60:72:a2:61:f3:76:5e:04:39:19: a2:c2:ff:42:95:a6:4e:ca:06:4b:37:2d:34:cd:02: 9f:99:ca:41:3b:51:69:87:59:97:a2:c8:68:ab:2f: c8:b1:7c:e3:bd:0a:72:a0:03:11:44:86:a7:6a:04: 87:10:51:d2:74:08:0c:ad:02:08:cf:34:78:8e:1d: f1:01:88:de:cc:36:be:c0:57:98:05:d6:46:9a:63: 9b:79:7a:e3:8d:79:10:a3:44:43:9a:5b:c7:c6:6d: 4a:7a:33:99:8e:49:3f:13:ef:0a:da:54:81:5c:e6: 1b:90:59:38:36:50:33:00:16:63:63:ce:9e:af:2f: 20:e8:0c:8c:a8:9a:e2:66:d2:6c:a0:33:d4:db:f4: 1e:fc:14:ae:e9:d7:82:a3:87:b1:ca:d6:f8:52:60: 96:59:9d:76:bb:f1:52:de:d3:88:ec:ed:ac:56:0e: 1e:f0:49:0e:5e:e4:e1:d5:93:a7:03:8a:92:2d:26: b1:37:9c:56:2e:15:a4:22:e0:03:f0:68:00:56:12: 0c:39:3b:81:8a:cf:53:c2:f7:f2:4e:4b:05:75:0a: b3:38:7e:f6:93:e4:05:de:75:8d:3e:94:d2:44:f4: 4a:e2:56:72:53:2c:4e:49:e5:2c:fd:22:64:c6:54: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3E:7F:1D:FC:30:5A:C1:ED:E2:99:6F:15:F0:EC:7F:F9:F6:4C:DB X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b3:18:56:0e:dd:93:d9:d6:51:8d:24:80:2d:23:b9:7d:87: bd:60:e6:9e:a0:55:43:8d:a3:97:07:07:8e:51:7e:5e:03:fc: 26:b8:01:6d:a6:ea:0f:ed:4e:36:a2:dd:65:b8:e0:6d:a5:59: 81:3c:43:82:ad:15:60:99:91:c7:c9:78:e4:e5:25:76:3c:64: 6a:66:e2:31:0f:75:83:dd:8b:7d:c8:3f:f9:b3:e4:8e:5e:44: 61:8f:09:b8:d2:e2:9c:46:27:10:2c:c5:87:85:29:1a:72:e6: f2:59:73:d7:d5:d4:d4:f1:38:48:49:77:b5:64:44:be:d1:d4: 38:d2:9a:86:60:98:2c:ac:c2:75:2f:de:2b:d0:42:c7:62:15: 6b:42:17:51:31:a9:d6:9b:d5:8b:ba:f5:23:dc:25:97:e1:9c: e0:d0:7f:cd:07:47:45:d0:d9:6f:7a:cb:85:24:96:d3:98:2f: 54:f4:97:ff:30:ef:d3:59:e0:19:2b:d1:f8:26:f0:3a:a6:08: 98:35:0b:e1:36:65:de:c7:ea:36:9a:44:bb:09:75:31:81:18: e2:7a:ba:ec:3d:cb:2f:dc:8a:b5:92:44:66:9c:c2:0a:b7:70: f6:9a:50:a8:3e:f3:d0:2e:e2:e9:60:e0:85:89:fe:a6:bf:84: f5:f6:47:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzUOoqAme8NbhqwNNeACXZe7kh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNjAxMjMxNjM3MjZaFw0yNjAxMjYxOTI1MjZaMDMxMTAvBgNV BAMTKDlDM0U3RjFERkMzMDVBQzFFREUyOTk2RjE1RjBFQzdGRjlGNjRDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ONTsYHKiYfN2XgQ5GaLC/0KV pk7KBks3LTTNAp+ZykE7UWmHWZeiyGirL8ixfOO9CnKgAxFEhqdqBIcQUdJ0CAyt AgjPNHiOHfEBiN7MNr7AV5gF1kaaY5t5euONeRCjREOaW8fGbUp6M5mOST8T7wra VIFc5huQWTg2UDMAFmNjzp6vLyDoDIyomuJm0mygM9Tb9B78FK7p14Kjh7HK1vhS YJZZnXa78VLe04js7axWDh7wSQ5e5OHVk6cDipItJrE3nFYuFaQi4APwaABWEgw5 O4GKz1PC9/JOSwV1CrM4fvaT5AXedY0+lNJE9EriVnJTLE5J5Sz9ImTGVFePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnD5/HfwwWsHt4plvFfDsf/n2TNswHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyzGFYO3ZPZ1lGNJIAtI7l9h71g5p6gVUON o5cHB45Rfl4D/Ca4AW2m6g/tTjai3WW44G2lWYE8Q4KtFWCZkcfJeOTlJXY8ZGpm 4jEPdYPdi33IP/mz5I5eRGGPCbjS4pxGJxAsxYeFKRpy5vJZc9fV1NTxOEhJd7Vk RL7R1DjSmoZgmCyswnUv3ivQQsdiFWtCF1Exqdab1Yu69SPcJZfhnODQf80HR0XQ 2W96y4UkltOYL1T0l/8w79NZ4Bkr0fgm8DqmCJg1C+E2Zd7H6jaaRLsJdTGBGOJ6 uuw9yy/cirWSRGacwgq3cPaaUKg+89Au4ulg4IWJ/qa/hPX2R28= -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:43 2026 by rpki-client