This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft File: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft (raw, json) Hash identifier: mg4N5GWYqbk8xjrzifG+h2ZhIL7EHN4fq8chwyuzdTI= Subject key identifier: 2D:C7:81:3A:9F:2E:77:A9:AF:00:2F:F7:CB:5F:2B:0E:6E:CE:29:12 Authority key identifier: B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E Certificate issuer: /CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Certificate serial: 52D75BE67CB20A28BA637F2DD01B02A141826D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft Manifest number: 17 Signing time: Sat 24 Jan 2026 10:41:25 +0000 Manifest this update: Sat 24 Jan 2026 10:36:25 +0000 Manifest next update: Tue 27 Jan 2026 18:21:25 +0000 Files and hashes: 1: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: dIQVr4EU9vhVUlOy70LmMe/aV/AkNcRz6oJAaRY0RBk=) 2: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl (hash: kzYxeZp7Ii2YAdTez/hVFglllKH0HmwhqV2QYpuTd3E=) 3: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: aUiV56swPp0i277EKeACkxB8KCq996e6HKIfY3dUZVk=) 4: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: Kyu9bQtpDSvLwwsNNqwUqQbMYywTTXQyJkLm6NWbIzI=) 5: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: KoQeDklma/MmavV82lm83EnfussemBPyB+je36QbhV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:5b:e6:7c:b2:0a:28:ba:63:7f:2d:d0:1b:02:a1:41:82:6d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Validity Not Before: Jan 24 10:36:25 2026 GMT Not After : Jan 27 18:21:25 2026 GMT Subject: CN=2DC7813A9F2E77A9AF002FF7CB5F2B0E6ECE2912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:e0:5e:d8:d5:49:5d:f2:ce:4b:a2:da:16: 7b:46:eb:87:93:b3:c0:7c:2a:3a:9a:67:d5:09:07: 77:be:26:ca:e1:9c:33:de:35:23:61:2c:2d:3b:81: db:73:16:55:f8:a7:52:9c:eb:ca:4b:f4:18:f8:e8: e8:e4:7a:ab:30:a9:55:61:a1:9a:cf:78:4a:e4:3e: 70:4c:d3:78:d3:6c:71:09:59:48:8e:c8:dd:dd:7e: 72:2e:6b:90:32:f8:e2:b9:c5:38:62:9f:cd:dc:b9: cb:4d:f7:ba:7b:72:28:23:39:77:06:4b:f9:76:72: ed:87:ae:72:e9:91:e1:2b:a1:b2:ac:ad:17:a9:74: 10:41:6b:fb:e5:60:a0:ba:12:12:7d:53:05:49:b1: d4:da:16:ba:2f:97:00:81:e1:a8:fa:92:5b:8e:da: 47:5e:4c:b3:5f:09:c5:00:d2:fe:72:53:34:91:34: 3a:7f:0c:9b:94:52:ca:8c:58:72:b7:e5:fd:26:fe: f8:a9:ea:37:ed:0b:09:06:7a:21:6c:1f:a0:db:ec: ee:ba:dc:7e:62:f6:3e:fb:8a:50:a2:f3:fb:24:6b: dd:f9:6d:97:e7:9b:20:c6:5e:98:a8:74:af:73:2f: a8:f6:3b:a5:ef:a8:b1:cd:9b:7a:d9:30:88:a4:20: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:81:3A:9F:2E:77:A9:AF:00:2F:F7:CB:5F:2B:0E:6E:CE:29:12 X509v3 Authority Key Identifier: keyid:B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:08:b4:00:51:68:74:02:99:6b:c9:bb:ac:87:e9:28:f9: 5f:b1:70:ab:f2:5e:9c:f8:95:0c:27:1d:7f:d0:c5:34:e9:a5: 0e:18:fc:20:92:6e:30:16:66:92:c5:16:7b:53:a3:a5:c4:06: 1f:a2:84:11:6b:38:2f:ae:26:0c:15:b0:c1:60:ed:06:19:7b: 28:5a:0e:f3:7e:0d:c0:a5:2a:4a:ce:35:33:9a:0f:f5:0d:2b: 7f:30:eb:79:ff:c1:ad:4c:81:ed:d1:9c:dd:02:67:22:58:f3: 07:d5:8a:13:4a:f7:be:1f:56:1e:5b:7f:c3:78:e9:69:8d:7b: 04:5a:96:68:64:46:99:1e:bd:0f:c8:1e:d6:f6:0f:e5:78:65: fb:57:c4:f0:5f:b8:3f:3b:a8:01:42:5a:98:f0:de:01:7b:0f: 08:00:c7:a6:82:06:34:12:0c:d5:9c:4d:5b:fd:f8:73:c7:c2: a2:55:6c:a2:d7:f2:49:61:61:17:7b:d6:a1:75:a6:6f:ac:51: 51:b7:6b:05:bf:d1:33:90:b0:91:24:00:64:e8:66:b0:10:e6: ca:8b:b6:39:08:44:9d:97:0d:c5:4e:81:90:98:fe:66:20:9d: 78:78:13:af:76:2d:2c:91:9d:a8:89:2f:d8:07:43:3c:e1:7b: 3c:90:90:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtdb5nyyCii6Y38t0BsCoUGCbYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5 OThDRkM1RTAeFw0yNjAxMjQxMDM2MjVaFw0yNjAxMjcxODIxMjVaMDMxMTAvBgNV BAMTKDJEQzc4MTNBOUYyRTc3QTlBRjAwMkZGN0NCNUYyQjBFNkVDRTI5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVOBe2NVJXfLOS6LaFntG64eT s8B8KjqaZ9UJB3e+JsrhnDPeNSNhLC07gdtzFlX4p1Kc68pL9Bj46OjkeqswqVVh oZrPeErkPnBM03jTbHEJWUiOyN3dfnIua5Ay+OK5xThin83cuctN97p7cigjOXcG S/l2cu2HrnLpkeErobKsrRepdBBBa/vlYKC6EhJ9UwVJsdTaFrovlwCB4aj6kluO 2kdeTLNfCcUA0v5yUzSRNDp/DJuUUsqMWHK35f0m/vip6jftCwkGeiFsH6Db7O66 3H5i9j77ilCi8/ska935bZfnmyDGXpiodK9zL6j2O6XvqLHNm3rZMIikIHCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULceBOp8ud6mvAC/3y18rDm7OKRIwHwYDVR0j BBgwFoAUuePc5/6F5INH1srjbIPeNZmM/F4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDg4NjgwNS0zYjg1LTRjNWItOWI2YS1kNjJhZDU2YTY2YWMvMC9COUUzRENFN0ZF ODVFNDgzNDdENkNBRTM2QzgzREUzNTk5OENGQzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5OThD RkM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RF MzU5OThDRkM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy8CLQAUWh0Aplrybush+ko+V+xcKvyXpz4 lQwnHX/QxTTppQ4Y/CCSbjAWZpLFFntTo6XEBh+ihBFrOC+uJgwVsMFg7QYZeyha DvN+DcClKkrONTOaD/UNK38w63n/wa1Mge3RnN0CZyJY8wfVihNK974fVh5bf8N4 6WmNewRalmhkRpkevQ/IHtb2D+V4ZftXxPBfuD87qAFCWpjw3gF7DwgAx6aCBjQS DNWcTVv9+HPHwqJVbKLX8klhYRd71qF1pm+sUVG3awW/0TOQsJEkAGToZrAQ5sqL tjkIRJ2XDcVOgZCY/mYgnXh4E692LSyRnaiJL9gHQzzhezyQkA8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:32:47 2026 by rpki-client