This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: BZypER4B1fAp5aBxx0N2JlUhmH4pywlXTT0oeFSnPik= Subject key identifier: 14:78:9D:CD:5F:28:9F:10:2A:32:8E:81:A9:72:BA:12:29:98:6C:BD Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 5D5032E2DCF5AE1BF62E81DF4D53091711E3F74A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 0435 Signing time: Sat 24 Jan 2026 02:01:32 +0000 Manifest this update: Sat 24 Jan 2026 01:56:32 +0000 Manifest next update: Tue 27 Jan 2026 12:17:32 +0000 Files and hashes: 1: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 6UGq70yqGCv4Jo62+HBDpQaV3mfvxDs9ysTpWoLe92k=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: wYE1H9Wr7TBPEnivLA+AmwtO90AzuAp/OA0G1iMo88I=) 3: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: ruJsXhvsoiH6hvRPCSw20cFJp9hay/OJaB8KL7ct0jg=) 4: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: zqpJXJIOBhnwLUMtiPQXOx2KMC9Zw7fPIh3iuLnJlNg=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:50:32:e2:dc:f5:ae:1b:f6:2e:81:df:4d:53:09:17:11:e3:f7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Jan 24 01:56:32 2026 GMT Not After : Jan 27 12:17:32 2026 GMT Subject: CN=14789DCD5F289F102A328E81A972BA1229986CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:73:07:81:03:16:32:e7:a2:3e:50:ca:96:18: 3b:53:e1:6d:55:94:c0:cf:60:17:21:bd:fd:bd:ed: 52:53:f4:bc:40:fc:d9:5a:ba:0f:ff:11:79:aa:ad: b4:4b:b6:6b:9c:ac:85:70:21:3d:76:5a:27:81:fb: 87:6b:01:a8:68:5a:91:d5:b7:a5:ff:e9:40:7c:85: 90:61:d6:30:45:82:6b:ec:02:63:fc:8a:4b:d5:2e: 6a:13:98:58:14:fd:b5:cf:e0:8d:89:18:0f:25:6b: 41:91:8b:84:44:10:ad:60:db:f4:1f:06:e1:e5:19: dd:c1:36:2b:e9:ca:09:2f:f6:64:68:ae:36:0d:36: 7d:83:a4:33:94:be:76:e2:9a:25:ed:e0:09:5d:2b: a5:ea:7a:16:e5:81:98:6d:05:42:6b:b5:41:94:f3: 11:9e:cb:2f:69:e0:05:66:be:af:65:e4:47:ca:6e: c0:88:d6:94:70:0d:3c:6e:10:c7:b8:f3:17:88:1c: 1e:61:ba:47:93:4e:da:42:91:8e:1c:5c:0d:cb:d0: f9:03:dc:5e:4a:4a:30:7b:85:cd:e6:97:3f:a1:43: f3:22:b5:01:68:ae:57:3b:40:09:cc:59:25:84:d5: 0d:26:8a:38:68:00:5a:63:fd:19:b0:7e:79:a3:48: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:9D:CD:5F:28:9F:10:2A:32:8E:81:A9:72:BA:12:29:98:6C:BD X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:57:75:fb:72:0e:c4:11:10:30:aa:e1:4f:c7:67:3f:75:53: 90:87:19:4c:3c:71:bb:e5:35:ee:d2:bd:56:5e:91:7f:3b:5a: 54:88:1d:3f:3a:a1:2c:7a:83:8b:13:2c:d1:49:4f:cd:54:57: 3c:02:93:4f:57:c1:1d:32:d8:3f:64:f5:67:52:e0:44:7b:78: 9d:ca:35:63:20:65:8f:ef:88:9d:7e:3d:1b:bd:0a:d3:f4:ce: 03:49:5d:a9:3b:3d:f9:29:3b:0e:3b:b2:c0:08:8b:d2:f8:10: 7a:54:02:64:66:1f:d2:52:ef:25:17:d3:d4:fc:da:e1:1e:1c: 77:e4:6e:b4:c3:9a:cc:b0:16:ec:8e:b3:b3:8f:04:c8:25:97: 0d:9e:b9:e6:95:7e:f8:eb:2d:e8:c5:fe:48:74:e5:73:30:21: c9:55:46:ae:06:f2:83:b4:dc:c7:1c:c6:ae:90:46:64:f8:56: b6:95:c5:25:f4:c0:99:39:94:06:fa:50:17:74:4e:10:83:d0: 53:4e:38:89:66:cc:e6:8f:34:55:07:50:05:ba:f8:a5:93:bb: 21:22:61:c7:49:ef:b6:f9:d8:46:e5:82:4b:0e:ab:a4:68:a4: 95:6a:f9:d4:c7:49:bf:cc:b9:24:a0:49:f5:47:51:6c:c6:68: dd:4c:0d:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVAy4tz1rhv2LoHfTVMJFxHj90owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNjAxMjQwMTU2MzJaFw0yNjAxMjcxMjE3MzJaMDMxMTAvBgNV BAMTKDE0Nzg5RENENUYyODlGMTAyQTMyOEU4MUE5NzJCQTEyMjk5ODZDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDucweBAxYy56I+UMqWGDtT4W1V lMDPYBchvf297VJT9LxA/Nlaug//EXmqrbRLtmucrIVwIT12WieB+4drAahoWpHV t6X/6UB8hZBh1jBFgmvsAmP8ikvVLmoTmFgU/bXP4I2JGA8la0GRi4REEK1g2/Qf BuHlGd3BNivpygkv9mRorjYNNn2DpDOUvnbimiXt4AldK6XqehblgZhtBUJrtUGU 8xGeyy9p4AVmvq9l5EfKbsCI1pRwDTxuEMe48xeIHB5hukeTTtpCkY4cXA3L0PkD 3F5KSjB7hc3mlz+hQ/MitQForlc7QAnMWSWE1Q0mijhoAFpj/RmwfnmjSIWXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHidzV8onxAqMo6BqXK6EimYbL0wHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARXdftyDsQREDCq4U/HZz91U5CHGUw8cbvl Ne7SvVZekX87WlSIHT86oSx6g4sTLNFJT81UVzwCk09XwR0y2D9k9WdS4ER7eJ3K NWMgZY/viJ1+PRu9CtP0zgNJXak7PfkpOw47ssAIi9L4EHpUAmRmH9JS7yUX09T8 2uEeHHfkbrTDmsywFuyOs7OPBMgllw2eueaVfvjrLejF/kh05XMwIclVRq4G8oO0 3Mccxq6QRmT4VraVxSX0wJk5lAb6UBd0ThCD0FNOOIlmzOaPNFUHUAW6+KWTuyEi YcdJ77b52EblgksOq6RopJVq+dTHSb/MuSSgSfVHUWzGaN1MDf0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:12 2026 by rpki-client