This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: UEyNbJLsUG6MQdcxQ3kDQBKfiI/gIzsQEc04qc/Q4Cs= Subject key identifier: DA:A0:C8:57:9B:EA:CF:36:3E:28:E5:86:C3:1C:24:45:7B:81:26:28 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 28C808DB305F4192030615FC93338C5F42E83D7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 03A7 Signing time: Sat 24 Jan 2026 10:21:45 +0000 Manifest this update: Sat 24 Jan 2026 10:16:45 +0000 Manifest next update: Tue 27 Jan 2026 14:35:45 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: GiLRX/xBCmUNzJgxsLFOWJMB9iL0kQpUc2oMxeqFs/A=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c8:08:db:30:5f:41:92:03:06:15:fc:93:33:8c:5f:42:e8:3d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Jan 24 10:16:45 2026 GMT Not After : Jan 27 14:35:45 2026 GMT Subject: CN=DAA0C8579BEACF363E28E586C31C24457B812628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:a3:85:f4:d5:e4:ba:46:08:10:04:0e:82: c9:99:2f:5e:96:9c:71:5f:54:cb:5b:d0:c9:ef:f5: 56:81:4a:e9:75:69:2c:ab:65:ac:63:17:bf:fb:fb: 66:ca:5e:f6:77:a4:aa:6e:07:85:4b:ff:38:89:92: 1f:41:83:45:04:a5:66:95:d2:ab:b0:28:ef:43:70: 64:69:e7:81:a8:a1:d1:95:6d:c7:98:d2:ab:8e:ac: 32:04:f2:ef:38:c0:e0:6a:4e:f8:a9:db:70:93:76: c9:cf:8d:7b:2a:31:55:75:1f:1c:c4:a2:59:bc:f3: b3:7c:66:b7:2b:fc:ae:35:ba:20:c3:0f:1a:92:8a: 67:2a:2c:ff:c0:63:e8:01:36:b6:ce:1c:4a:72:c3: 78:b5:74:ee:ce:d9:1e:12:51:17:ba:76:6b:80:3e: 12:96:0a:f3:fc:06:42:8f:41:2e:1f:dc:e9:23:c4: 1c:ce:54:e5:bb:dd:01:5b:7c:38:ed:2e:37:d1:31: d7:8f:23:af:b3:ba:ba:6f:25:1b:c6:5f:11:56:8a: a1:7e:aa:26:1f:b3:f3:fd:e3:c0:e6:0d:e2:3c:77: 38:23:d3:89:98:c1:d7:fb:48:b3:56:f1:67:4d:6d: 0b:e9:4c:d0:cb:ff:7e:da:32:3c:8e:2e:0b:60:78: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A0:C8:57:9B:EA:CF:36:3E:28:E5:86:C3:1C:24:45:7B:81:26:28 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:10:e8:0f:62:c6:5f:3e:88:23:35:d1:3b:5f:fc:6a:39:13: 8d:aa:c6:12:6d:be:b7:49:4e:5f:03:65:a4:02:02:2d:6f:21: 83:bc:de:14:d2:f1:09:f8:6b:98:62:7c:b9:1c:da:ba:0b:73: ae:a8:21:7e:fa:55:51:75:ce:eb:cb:b9:16:9e:f3:80:a6:aa: 1f:8a:6a:c6:45:1f:52:39:a6:bd:1d:16:73:3e:8a:ce:8d:8b: 0e:72:03:22:9f:48:0f:0f:86:2f:3d:58:ca:f9:d0:53:0a:53: c9:19:96:3c:8e:63:34:74:a4:ab:93:0e:7a:30:d6:f2:17:f8: c9:d0:b4:7f:3d:3f:8f:6d:44:07:73:f4:ee:8e:2b:91:bc:ff: 32:f0:90:8d:d1:41:9c:b9:1d:e7:00:52:d5:a4:74:4d:48:55: e1:22:f2:4a:1e:72:e3:b2:a6:52:dc:23:9b:fb:8c:45:95:a3: 5a:b9:1f:ad:d3:4f:1c:39:4e:58:a6:10:ed:bf:be:20:6e:1e: c3:a3:07:7b:3e:bc:bc:80:0c:0b:aa:1d:ba:98:b4:f1:4a:20: 40:47:0c:ee:3a:09:99:56:5d:5a:24:ec:92:86:4c:2c:46:72: da:92:d8:26:ce:cd:71:57:40:87:16:a0:94:60:83:0c:bf:08: b5:86:12:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMgI2zBfQZIDBhX8kzOMX0LoPXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNjAxMjQxMDE2NDVaFw0yNjAxMjcxNDM1NDVaMDMxMTAvBgNV BAMTKERBQTBDODU3OUJFQUNGMzYzRTI4RTU4NkMzMUMyNDQ1N0I4MTI2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P6OF9NXkukYIEAQOgsmZL16W nHFfVMtb0Mnv9VaBSul1aSyrZaxjF7/7+2bKXvZ3pKpuB4VL/ziJkh9Bg0UEpWaV 0quwKO9DcGRp54GoodGVbceY0quOrDIE8u84wOBqTvip23CTdsnPjXsqMVV1HxzE olm887N8Zrcr/K41uiDDDxqSimcqLP/AY+gBNrbOHEpyw3i1dO7O2R4SURe6dmuA PhKWCvP8BkKPQS4f3OkjxBzOVOW73QFbfDjtLjfRMdePI6+zurpvJRvGXxFWiqF+ qiYfs/P948DmDeI8dzgj04mYwdf7SLNW8WdNbQvpTNDL/37aMjyOLgtgeIGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qDIV5vqzzY+KOWGwxwkRXuBJigwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8Q6A9ixl8+iCM10Ttf/Go5E42qxhJtvrdJ Tl8DZaQCAi1vIYO83hTS8Qn4a5hifLkc2roLc66oIX76VVF1zuvLuRae84Cmqh+K asZFH1I5pr0dFnM+is6Niw5yAyKfSA8Phi89WMr50FMKU8kZljyOYzR0pKuTDnow 1vIX+MnQtH89P49tRAdz9O6OK5G8/zLwkI3RQZy5HecAUtWkdE1IVeEi8koecuOy plLcI5v7jEWVo1q5H63TTxw5TlimEO2/viBuHsOjB3s+vLyADAuqHbqYtPFKIEBH DO46CZlWXVok7JKGTCxGctqS2CbOzXFXQIcWoJRggwy/CLWGEno= -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:20 2026 by rpki-client