This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: kLhTXCJMf6Z7T91tuJUtVZioxuxcXCh6F300bHGNvME= Subject key identifier: B0:FD:84:32:51:8D:36:A1:70:EA:48:D9:D2:79:02:9F:AE:AF:3C:FD Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 67CCACFF2383E5B9A049CE677B889588FDBDF862 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 0143 Signing time: Sun 25 Jan 2026 18:00:39 +0000 Manifest this update: Sun 25 Jan 2026 17:55:39 +0000 Manifest next update: Thu 29 Jan 2026 03:19:39 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: LMKkJT5038gIvbvMLQjU9PkM4UYcOAYrMMcMMzshP6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cc:ac:ff:23:83:e5:b9:a0:49:ce:67:7b:88:95:88:fd:bd:f8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Jan 25 17:55:39 2026 GMT Not After : Jan 29 03:19:39 2026 GMT Subject: CN=B0FD8432518D36A170EA48D9D279029FAEAF3CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:48:e5:0d:4d:c6:27:8d:43:34:20:58:7e: ae:b5:3f:0b:a9:61:1e:6c:9e:8d:bb:35:2d:4a:f1: 09:7a:bb:ec:21:9f:1b:2f:a8:70:53:77:30:e7:dd: c5:c9:8c:54:9c:6a:9d:ee:cd:52:c6:8c:03:41:a0: 5c:74:a0:5e:3a:70:e3:9f:ce:89:22:7a:77:ba:a8: 3e:0e:20:01:45:41:d7:13:51:68:6d:fa:82:f2:45: 22:6a:1b:82:54:48:de:2c:36:d1:ee:5c:31:dd:d8: 5b:42:3f:e6:57:83:c6:47:ec:08:ce:8e:63:5d:fd: e3:c3:2f:0e:3a:09:0e:fe:e6:ed:ed:cb:9c:32:0f: 3e:14:02:8a:b7:5e:1e:0f:2a:32:4a:ba:d8:22:92: e3:7d:2e:1e:54:b4:2c:b6:01:bf:c1:36:c7:66:76: f4:7d:17:ae:4d:cd:81:9b:75:ff:24:e1:ac:b1:7c: f9:ae:74:57:66:17:9d:f7:6f:b9:31:40:c4:3c:82: 71:52:f3:f9:d7:59:1c:d2:5c:e3:35:2c:c0:e7:2b: d5:30:ef:17:7c:e6:6e:76:ce:84:b4:35:77:d2:02: 0e:49:73:ea:9d:1b:71:26:90:50:9b:7d:cd:a7:9a: b3:3a:d2:19:02:5d:17:1e:b9:11:34:c3:f6:d3:c8: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:84:32:51:8D:36:A1:70:EA:48:D9:D2:79:02:9F:AE:AF:3C:FD X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d1:45:3b:14:61:8a:92:d6:4a:cb:8a:4d:50:f2:a1:53:c1: 28:c2:11:56:2c:8d:29:ef:97:33:c9:f1:20:e5:a2:a6:0a:85: e9:76:28:e0:bc:d4:f1:27:44:93:95:7a:7d:62:f3:07:37:09: 70:5a:3c:57:0f:c3:a5:a3:67:bf:ae:2d:70:d4:94:03:96:82: a5:33:fa:a0:f7:04:76:87:c6:cb:fa:99:a5:10:5d:68:9b:cb: 70:54:dc:41:24:06:47:c4:55:0c:c0:aa:c3:61:f4:b5:57:92: 76:72:4f:51:65:02:77:65:e4:48:2c:87:4c:14:10:2a:15:a1: a9:af:2d:b0:e7:59:70:c6:c6:ed:b6:dc:ec:6b:5a:4d:16:1e: fc:b6:08:b9:db:58:20:97:1e:87:5a:a1:90:e7:f3:47:02:fb: 3f:18:8a:ff:ad:47:b2:2b:45:5c:a2:08:d5:1c:a8:67:6b:df: 21:7a:9b:32:54:0b:cf:1b:ca:99:9e:65:71:6a:9c:17:64:bc: 4b:8d:cd:80:cc:46:12:a9:e1:3d:79:4b:73:17:a9:f9:37:3d: 07:a1:54:87:0a:72:d4:4c:34:c4:aa:15:c0:36:5f:e9:68:c1: 3d:0a:13:79:bd:16:28:40:06:0c:62:72:1c:a7:32:74:69:78: 1b:e8:71:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8ys/yOD5bmgSc5ne4iViP29+GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNjAxMjUxNzU1MzlaFw0yNjAxMjkwMzE5MzlaMDMxMTAvBgNV BAMTKEIwRkQ4NDMyNTE4RDM2QTE3MEVBNDhEOUQyNzkwMjlGQUVBRjNDRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErUjlDU3GJ41DNCBYfq61Pwup YR5sno27NS1K8Ql6u+whnxsvqHBTdzDn3cXJjFScap3uzVLGjANBoFx0oF46cOOf zokiene6qD4OIAFFQdcTUWht+oLyRSJqG4JUSN4sNtHuXDHd2FtCP+ZXg8ZH7AjO jmNd/ePDLw46CQ7+5u3ty5wyDz4UAoq3Xh4PKjJKutgikuN9Lh5UtCy2Ab/BNsdm dvR9F65NzYGbdf8k4ayxfPmudFdmF533b7kxQMQ8gnFS8/nXWRzSXOM1LMDnK9Uw 7xd85m52zoS0NXfSAg5Jc+qdG3EmkFCbfc2nmrM60hkCXRceuRE0w/bTyJRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsP2EMlGNNqFw6kjZ0nkCn66vPP0wHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHRRTsUYYqS1krLik1Q8qFTwSjCEVYsjSnv lzPJ8SDloqYKhel2KOC81PEnRJOVen1i8wc3CXBaPFcPw6WjZ7+uLXDUlAOWgqUz +qD3BHaHxsv6maUQXWiby3BU3EEkBkfEVQzAqsNh9LVXknZyT1FlAndl5Egsh0wU ECoVoamvLbDnWXDGxu223OxrWk0WHvy2CLnbWCCXHodaoZDn80cC+z8Yiv+tR7Ir RVyiCNUcqGdr3yF6mzJUC88bypmeZXFqnBdkvEuNzYDMRhKp4T15S3MXqfk3PQeh VIcKctRMNMSqFcA2X+lowT0KE3m9FihABgxichynMnRpeBvocaE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:54 2026 by rpki-client