This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: 7l3kv027JLNY4wRH7S3LXZJg2A8cPzpqnJO+00xkD1M= Subject key identifier: EF:3A:E8:FD:53:2B:18:FA:AC:76:78:4E:E4:50:FA:A1:69:5A:82:CA Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 410B0A5286E6201F7BDBE5904D972BFF95F66112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: 0151 Signing time: Sun 25 Jan 2026 13:21:08 +0000 Manifest this update: Sun 25 Jan 2026 13:16:08 +0000 Manifest next update: Wed 28 Jan 2026 13:25:08 +0000 Files and hashes: 1: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: ZxmwfUBgV8RRJAWBDuLm1+D4sai+jKWI9qI3xFDN57w=) 2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: FVR7OXRQ9lsqccYbbruNBCZHbMSoocj8hgbL/LfCNK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0b:0a:52:86:e6:20:1f:7b:db:e5:90:4d:97:2b:ff:95:f6:61:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Jan 25 13:16:08 2026 GMT Not After : Jan 28 13:25:08 2026 GMT Subject: CN=EF3AE8FD532B18FAAC76784EE450FAA1695A82CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:cb:c5:57:2c:37:84:47:50:a3:6b:fd:ea: c6:d7:40:2b:86:c7:20:66:2d:d4:f0:f6:5b:4b:1e: cc:b1:24:29:5f:70:c4:31:22:07:f1:16:cc:30:57: 8b:5f:97:93:a0:10:9f:0f:47:73:d5:5b:5d:af:b6: 8b:99:c8:7f:a3:7a:32:f7:d1:80:5e:5e:cb:84:19: 1d:d6:0d:e9:4a:7b:36:15:84:6a:60:6c:b5:3e:87: ce:a9:a2:05:6a:c6:c2:8e:ac:64:b8:f9:86:23:cd: a6:d6:0b:85:50:71:e3:7a:1f:16:36:36:c8:80:d2: b1:d6:83:ff:a0:e4:a9:98:b6:56:94:27:b1:7a:59: 00:9d:75:57:34:42:2b:e8:d4:d8:c1:ec:db:d3:99: 83:fa:de:29:6b:c3:01:5d:4f:17:7e:95:51:27:a8: af:de:43:19:83:72:32:55:7a:6f:86:f8:47:e0:1f: f7:96:82:f3:d7:05:13:b6:20:b2:43:07:45:d8:f5: 0a:60:30:e0:35:79:72:cf:ef:88:4b:80:40:cc:93: 2f:35:9f:39:e4:55:f8:c2:14:15:f7:81:6d:ab:ff: 20:28:f4:bb:c9:e2:42:ad:83:57:de:de:2c:0c:24: 0a:d4:0a:02:e8:8f:99:2f:5d:55:b2:3e:32:0e:83: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:E8:FD:53:2B:18:FA:AC:76:78:4E:E4:50:FA:A1:69:5A:82:CA X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0b:72:d2:e8:d6:9c:0e:33:df:50:d6:e0:56:27:46:6a:8c: 77:b3:5e:ba:e9:b4:53:47:f6:d1:af:2e:86:58:e5:71:6f:77: 89:93:da:58:c3:76:9d:c9:cd:be:ac:27:48:b3:e8:8a:dd:d9: 38:22:6f:41:4a:0f:f3:c1:80:e1:53:9a:70:3b:95:1a:79:e8: aa:02:79:f9:bc:35:b6:4a:19:d3:64:26:e1:85:f4:00:c7:ff: 60:7a:16:50:1d:eb:52:f8:b4:8f:99:6f:e3:74:44:8c:0a:0b: 27:77:04:1f:db:53:66:32:d7:5f:05:af:17:3e:58:de:92:54: 09:8a:87:3c:60:38:eb:06:f3:e1:fd:7a:43:cd:81:df:97:bc: 7c:22:96:d4:a1:9a:06:f9:73:bf:c6:83:b6:a3:6a:f9:3b:65: a5:56:b2:17:35:bd:63:08:0c:6b:f8:92:1d:74:1d:e4:a9:d6: 2c:08:2b:53:6e:80:58:a7:d1:5e:ef:d3:65:a4:4e:66:24:7b: 63:55:4a:7f:aa:21:d2:7e:a4:5e:ad:82:27:0a:4d:66:52:aa: d2:e5:a1:85:14:0a:40:c2:2e:9f:a1:f8:bf:09:bf:5c:05:28: 95:26:d8:d6:8b:0d:67:3d:50:76:4b:33:37:2c:0a:76:ff:16: 09:ae:f9:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQsKUobmIB972+WQTZcr/5X2YRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNjAxMjUxMzE2MDhaFw0yNjAxMjgxMzI1MDhaMDMxMTAvBgNV BAMTKEVGM0FFOEZENTMyQjE4RkFBQzc2Nzg0RUU0NTBGQUExNjk1QTgyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVMvFVyw3hEdQo2v96sbXQCuG xyBmLdTw9ltLHsyxJClfcMQxIgfxFswwV4tfl5OgEJ8PR3PVW12vtouZyH+jejL3 0YBeXsuEGR3WDelKezYVhGpgbLU+h86pogVqxsKOrGS4+YYjzabWC4VQceN6HxY2 NsiA0rHWg/+g5KmYtlaUJ7F6WQCddVc0Qivo1NjB7NvTmYP63ilrwwFdTxd+lVEn qK/eQxmDcjJVem+G+EfgH/eWgvPXBRO2ILJDB0XY9QpgMOA1eXLP74hLgEDMky81 nznkVfjCFBX3gW2r/yAo9LvJ4kKtg1fe3iwMJArUCgLoj5kvXVWyPjIOgyutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7zro/VMrGPqsdnhO5FD6oWlagsowHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0LctLo1pwOM99Q1uBWJ0ZqjHezXrrptFNH 9tGvLoZY5XFvd4mT2ljDdp3Jzb6sJ0iz6Ird2Tgib0FKD/PBgOFTmnA7lRp56KoC efm8NbZKGdNkJuGF9ADH/2B6FlAd61L4tI+Zb+N0RIwKCyd3BB/bU2Yy118Frxc+ WN6SVAmKhzxgOOsG8+H9ekPNgd+XvHwiltShmgb5c7/Gg7ajavk7ZaVWshc1vWMI DGv4kh10HeSp1iwIK1NugFin0V7v02WkTmYke2NVSn+qIdJ+pF6tgicKTWZSqtLl oYUUCkDCLp+h+L8Jv1wFKJUm2NaLDWc9UHZLMzcsCnb/Fgmu+ZY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:06 2026 by rpki-client