This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json) Hash identifier: OZZ93u+6rrwYm5lXb7VId3SLGtB0BhoZeA2pM62cFEg= Subject key identifier: B7:D6:1E:4D:F2:D2:B3:2E:04:C2:55:C3:A0:F8:2C:A5:94:E3:9A:D6 Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Certificate serial: 5902ED263ACF077EC657321F8D8C0FC64C2DAFEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft Manifest number: 0147 Signing time: Sat 24 Jan 2026 00:11:11 +0000 Manifest this update: Sat 24 Jan 2026 00:06:11 +0000 Manifest next update: Tue 27 Jan 2026 03:06:11 +0000 Files and hashes: 1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: 5tukECXsgnuw/XAUr8CSpRMVhMw0VvhzwDWFherwEWM=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: V1YXnZ8RaD7jZMTPv9sl3RlMQ1DjfCA6C5B7VF3kpxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:02:ed:26:3a:cf:07:7e:c6:57:32:1f:8d:8c:0f:c6:4c:2d:af:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Validity Not Before: Jan 24 00:06:11 2026 GMT Not After : Jan 27 03:06:11 2026 GMT Subject: CN=B7D61E4DF2D2B32E04C255C3A0F82CA594E39AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:5a:6b:12:0a:4d:de:78:68:18:1e:d8:d0: c8:91:1e:f8:da:8d:74:fe:ae:da:d8:4e:6f:85:09: 3f:c9:7c:49:e2:af:87:de:f8:10:2a:34:59:5f:81: be:c9:2a:38:44:66:46:60:bd:e3:c3:c3:30:85:7d: 65:f7:a5:3c:42:bb:c4:b9:30:79:63:1b:9c:1e:fd: 48:5b:33:37:b8:44:79:25:cd:52:ce:de:2f:c1:ce: 52:df:4c:1e:a1:36:07:b6:c1:b3:3d:a7:fb:b8:06: b6:f7:f2:d6:41:8b:e7:dc:4a:ad:ef:37:dd:14:60: b0:a0:56:fe:c2:0e:1e:04:b5:85:03:0c:71:eb:7a: 1e:06:eb:90:e3:5a:54:75:a7:04:84:6c:06:a5:7c: 02:2a:e4:2e:9d:cf:a0:53:eb:ce:5f:11:c0:fd:de: a8:08:1d:77:af:b2:02:d2:64:16:b8:97:27:8e:f2: 85:89:17:8b:01:87:38:dd:2f:5b:86:ed:91:b1:c5: e6:5c:0f:84:48:4e:a1:c4:1e:ad:d4:ae:9e:74:11: f5:f1:d6:26:75:9e:92:9a:ba:82:13:90:f2:b9:f0: f3:71:0b:47:ee:6c:d2:0f:05:ae:65:e2:f5:54:96: 29:56:d3:4f:a5:4c:e6:18:b8:98:c5:89:21:bc:a2: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D6:1E:4D:F2:D2:B3:2E:04:C2:55:C3:A0:F8:2C:A5:94:E3:9A:D6 X509v3 Authority Key Identifier: keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c9:77:13:80:52:93:e3:cf:83:4e:bf:1e:81:2e:b8:36:ee: 51:fb:d8:37:a2:bd:fd:3a:54:76:36:9a:ff:e6:dc:e6:4d:f7: e7:96:4d:b2:c8:5a:3f:35:63:b4:9c:d6:ad:30:92:cd:e2:5c: 84:0e:ff:0a:5e:8d:73:af:19:50:03:db:6a:8a:15:50:22:01: 9b:06:c2:64:f8:3b:4b:fb:e7:73:c6:2c:95:a7:76:f9:cc:dd: dd:1d:1c:00:94:9b:52:f2:2c:89:da:a4:20:85:91:83:9f:85: fe:fb:4c:ad:9d:96:52:16:c4:75:9c:36:ea:2f:cc:7b:00:70: 30:46:9a:34:dc:34:83:85:9e:89:13:6d:89:57:c4:f8:8c:77: 0d:00:92:0a:bb:43:61:b0:91:a9:5f:2d:41:52:7a:2b:25:75: 77:ea:d8:51:7f:76:5f:51:5d:ff:0a:c3:34:70:ac:a2:84:1e: a2:f3:d0:28:5f:b0:33:20:7d:e8:9a:92:0a:86:c8:71:43:e1: 23:f6:47:0c:95:46:ac:d9:a1:52:3a:70:fa:ec:9b:99:66:fa: 6e:b7:7c:6f:1b:1c:22:f9:1d:87:7d:48:0f:5f:16:11:3d:95: 48:f3:89:03:93:61:98:c7:34:3d:b4:d7:ba:f8:52:dd:77:b8: c2:55:62:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQLtJjrPB37GVzIfjYwPxkwtr+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5 MUJGMDlDNzAeFw0yNjAxMjQwMDA2MTFaFw0yNjAxMjcwMzA2MTFaMDMxMTAvBgNV BAMTKEI3RDYxRTRERjJEMkIzMkUwNEMyNTVDM0EwRjgyQ0E1OTRFMzlBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLFprEgpN3nhoGB7Y0MiRHvja jXT+rtrYTm+FCT/JfEnir4fe+BAqNFlfgb7JKjhEZkZgvePDwzCFfWX3pTxCu8S5 MHljG5we/UhbMze4RHklzVLO3i/BzlLfTB6hNge2wbM9p/u4Brb38tZBi+fcSq3v N90UYLCgVv7CDh4EtYUDDHHreh4G65DjWlR1pwSEbAalfAIq5C6dz6BT685fEcD9 3qgIHXevsgLSZBa4lyeO8oWJF4sBhzjdL1uG7ZGxxeZcD4RITqHEHq3Urp50EfXx 1iZ1npKauoITkPK58PNxC0fubNIPBa5l4vVUlilW00+lTOYYuJjFiSG8ouz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9YeTfLSsy4EwlXDoPgspZTjmtYwHwYDVR0j BBgwFoAUxpUPvJPzCeg5z8Xhou8PbJG/CccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUyMWJkMS0xZGEyLTRiODAtODQxNi1mMDVkZTI5MjIxNmUvMC9DNjk1MEZCQzkz RjMwOUU4MzlDRkM1RTFBMkVGMEY2QzkxQkYwOUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5MUJG MDlDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBG NkM5MUJGMDlDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTJdxOAUpPjz4NOvx6BLrg27lH72Deivf06 VHY2mv/m3OZN9+eWTbLIWj81Y7Sc1q0wks3iXIQO/wpejXOvGVAD22qKFVAiAZsG wmT4O0v753PGLJWndvnM3d0dHACUm1LyLInapCCFkYOfhf77TK2dllIWxHWcNuov zHsAcDBGmjTcNIOFnokTbYlXxPiMdw0Akgq7Q2GwkalfLUFSeisldXfq2FF/dl9R Xf8KwzRwrKKEHqLz0ChfsDMgfeiakgqGyHFD4SP2RwyVRqzZoVI6cPrsm5lm+m63 fG8bHCL5HYd9SA9fFhE9lUjziQOTYZjHND2017r4Ut13uMJVYrE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:21 2026 by rpki-client