This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: 8J100gBc2/ZQacDLOTZxyYTraN8SuUF3fSRrhHGc7hU= Subject key identifier: 67:2C:28:AC:59:4A:E1:13:22:89:B5:46:2E:2E:A8:C3:D4:9A:2E:D3 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 349313B24E100486183072A698CC9C221A11CE46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0545 Signing time: Sat 24 Jan 2026 04:30:43 +0000 Manifest this update: Sat 24 Jan 2026 04:25:43 +0000 Manifest next update: Tue 27 Jan 2026 12:35:43 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) 3: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: a6Q8xaRh4pOK+MlADrfkkuOa/voLpKSlStNTqFeRD8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:93:13:b2:4e:10:04:86:18:30:72:a6:98:cc:9c:22:1a:11:ce:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jan 24 04:25:43 2026 GMT Not After : Jan 27 12:35:43 2026 GMT Subject: CN=672C28AC594AE1132289B5462E2EA8C3D49A2ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:35:00:54:c5:f2:df:22:67:8e:f5:35:dc: ad:a1:cd:e9:88:9c:3d:d1:ce:b4:a9:04:d0:5a:32: 61:53:3d:25:b9:1b:60:30:b2:ba:ee:51:3a:f0:f4: de:65:b9:09:4d:df:a8:83:4b:e4:24:f4:75:86:7a: 18:5c:9d:c8:71:0c:04:63:a9:5d:de:0e:4c:19:12: 2c:e6:fb:91:07:33:81:9c:e0:f7:ed:1f:ed:ca:4b: 9f:2c:1d:d1:0e:8f:2e:ae:6f:da:81:e6:d5:bc:48: cd:e8:80:1b:1e:5f:50:bb:21:ca:2c:13:9b:bf:60: 1e:93:22:12:29:90:d4:1d:77:b5:77:8f:81:64:e4: a1:34:2a:57:8a:91:c1:e2:40:35:01:23:a1:d8:d6: 4b:63:4a:2a:4a:a2:88:94:c8:06:18:80:4d:46:a9: 0b:4b:67:82:87:1f:8a:db:de:2b:cf:fa:34:69:e0: b5:8c:4c:77:0b:8b:8e:ed:79:6a:af:09:56:fe:da: ac:a8:83:53:38:1b:cb:c7:cc:8d:3b:bd:51:89:a3: 0f:fc:b0:8e:fa:8e:b9:a1:93:e5:86:a3:74:13:97: c7:80:79:0d:ea:c0:66:8e:10:bd:cc:f0:88:ad:11: 69:83:ab:ae:a9:4f:e1:d0:91:83:2d:1e:04:21:e8: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:28:AC:59:4A:E1:13:22:89:B5:46:2E:2E:A8:C3:D4:9A:2E:D3 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:8f:15:5a:4c:5c:6c:aa:2b:19:94:47:aa:0a:74:38:7f:c2: 56:98:19:ec:a8:6a:38:a7:05:87:92:1d:1b:7b:6d:80:77:7f: f6:2f:99:c1:c4:86:f6:ee:d8:9a:b3:da:df:a6:b5:2a:12:64: cc:ee:a1:e3:0b:6c:2e:59:3e:a7:be:58:17:7d:b9:eb:25:ef: dc:74:70:ad:f3:51:63:ff:ec:b8:a1:8f:0a:95:d4:43:40:19: 34:40:82:b5:08:dd:77:1e:05:6b:f5:69:87:9f:d5:c5:25:ad: 34:a9:ae:aa:86:b1:50:f3:e1:d7:f3:04:0f:e5:73:30:4b:7e: 1e:f0:32:77:43:6f:86:25:bc:ec:2a:3c:2b:d5:de:39:ce:04: a4:77:ce:4a:ad:0b:08:a9:26:b9:5d:94:c4:c4:8c:c9:da:21: 40:2f:3b:a6:32:21:d8:ee:a7:3f:ec:a2:6c:52:3d:66:fc:77: 8a:62:2a:35:36:85:22:92:a8:a5:ec:1b:f1:e2:2c:2d:36:63: 20:cb:ce:df:b3:bc:96:23:69:0d:b1:f8:65:bd:58:91:d2:c8: e5:9e:8a:1d:46:86:e5:44:ba:3b:36:b6:0c:84:a3:68:0e:97: bb:f7:d9:8d:fd:5c:f3:f0:69:ae:03:a5:15:cf:cc:70:a2:39: 57:40:96:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJMTsk4QBIYYMHKmmMycIhoRzkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNjAxMjQwNDI1NDNaFw0yNjAxMjcxMjM1NDNaMDMxMTAvBgNV BAMTKDY3MkMyOEFDNTk0QUUxMTMyMjg5QjU0NjJFMkVBOEMzRDQ5QTJFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYTUAVMXy3yJnjvU13K2hzemI nD3RzrSpBNBaMmFTPSW5G2AwsrruUTrw9N5luQlN36iDS+Qk9HWGehhcnchxDARj qV3eDkwZEizm+5EHM4Gc4PftH+3KS58sHdEOjy6ub9qB5tW8SM3ogBseX1C7Icos E5u/YB6TIhIpkNQdd7V3j4Fk5KE0KleKkcHiQDUBI6HY1ktjSipKooiUyAYYgE1G qQtLZ4KHH4rb3ivP+jRp4LWMTHcLi47teWqvCVb+2qyog1M4G8vHzI07vVGJow/8 sI76jrmhk+WGo3QTl8eAeQ3qwGaOEL3M8IitEWmDq66pT+HQkYMtHgQh6AADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyworFlK4RMiibVGLi6ow9SaLtMwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2PFVpMXGyqKxmUR6oKdDh/wlaYGeyoajin BYeSHRt7bYB3f/YvmcHEhvbu2Jqz2t+mtSoSZMzuoeMLbC5ZPqe+WBd9uesl79x0 cK3zUWP/7LihjwqV1ENAGTRAgrUI3XceBWv1aYef1cUlrTSprqqGsVDz4dfzBA/l czBLfh7wMndDb4YlvOwqPCvV3jnOBKR3zkqtCwipJrldlMTEjMnaIUAvO6YyIdju pz/somxSPWb8d4piKjU2hSKSqKXsG/HiLC02YyDLzt+zvJYjaQ2x+GW9WJHSyOWe ih1GhuVEujs2tgyEo2gOl7v32Y39XPPwaa4DpRXPzHCiOVdAlt4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:26 2026 by rpki-client