This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: ICd2hyFMZP4foO7TdLKsa1FK/xkBf7tgu7Dykuqj5RA= Subject key identifier: CD:E8:10:7E:35:9F:F7:FD:46:5F:A8:23:DB:51:E2:17:98:44:83:6D Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 2EF305FC65F69E785E2FF678BDCC62E80677394F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 020D Signing time: Sat 24 Jan 2026 06:52:04 +0000 Manifest this update: Sat 24 Jan 2026 06:47:04 +0000 Manifest next update: Tue 27 Jan 2026 06:52:04 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: i0HuNTLfQDOrpSQS9//DmLXkPRXfxAWy4FCWZTlf46A=) 2: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: 2AfHqO9heo5Z0jXbgmEkhELWS6FN1LPkikP7RRxHBrw=) 3: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: LiqrFpCZi9jjQ9ExuAGMLd7TL59TSrfkrGld2vDA3ec=) 4: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: JAUG1rzaRjTxhu0CN7drLhWzPlh83chb6LGEj4moDMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f3:05:fc:65:f6:9e:78:5e:2f:f6:78:bd:cc:62:e8:06:77:39:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Jan 24 06:47:04 2026 GMT Not After : Jan 27 06:52:04 2026 GMT Subject: CN=CDE8107E359FF7FD465FA823DB51E2179844836D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f8:1e:79:19:33:36:17:06:c3:5a:5d:6a:df: 52:47:39:43:a5:e0:e6:83:23:67:5d:03:92:47:79: 67:be:3a:9c:e4:c6:11:d6:9d:2e:6e:91:c1:88:5f: 2b:85:cc:c9:e3:00:41:91:95:2f:c9:34:73:4d:e8: f2:21:cc:d3:69:aa:70:29:e8:60:c7:bb:c7:8a:99: f8:21:7a:2c:62:86:00:63:75:62:3a:9c:12:26:0c: e5:42:45:7f:46:be:17:40:6c:e5:37:91:51:f2:81: 92:7a:53:7f:9a:63:0c:c9:19:9a:eb:db:e9:60:16: 8e:72:25:e6:69:e2:44:0c:4e:ff:52:a2:ab:67:1d: ed:13:98:91:62:fd:34:a2:e0:82:c8:07:90:d0:aa: e0:69:d8:17:a0:27:e1:9e:00:e8:42:c4:23:80:5f: fb:13:5f:99:ac:c9:ec:56:af:77:de:b6:a7:27:0b: da:6c:18:4a:c9:36:39:b6:a5:70:cf:23:d7:0d:68: ca:23:16:89:e9:ec:cf:3b:33:d4:7d:82:c8:3b:19: 66:71:79:d1:dd:d6:7e:62:9e:22:86:01:89:8c:f5: 0e:11:17:7d:9e:8f:b7:50:9d:a8:7e:06:65:da:86: 8c:df:ce:cc:81:b7:3f:25:bb:e1:77:f8:52:94:6d: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E8:10:7E:35:9F:F7:FD:46:5F:A8:23:DB:51:E2:17:98:44:83:6D X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:38:c6:74:cf:a6:86:58:ef:12:12:dc:98:9f:82:22:05: b6:4b:7f:41:96:e5:0a:80:31:ab:99:a8:9e:e4:ac:ec:04:6f: 66:71:b2:fa:43:8d:49:0e:9a:f4:49:87:be:f8:cc:08:50:e1: a1:0e:7d:e0:f1:c2:8f:05:ce:35:d4:5e:e9:01:bf:0c:31:64: bd:6b:4b:bf:18:8d:f4:c2:9e:f7:61:b6:81:70:38:c8:82:85: a7:ba:29:99:e9:0f:5b:f5:cb:37:78:6d:86:ee:ff:5c:e3:42: f4:23:e5:e8:81:a4:5b:60:7f:ab:a5:c7:03:c7:b5:17:94:b5: b2:53:42:74:96:e2:4c:6f:a2:32:19:77:01:de:ab:fc:9b:4f: b7:b1:79:43:a9:bb:de:57:6a:62:72:d7:75:b2:cd:3d:53:70: bb:2c:54:6a:57:ab:65:a7:56:0d:bf:b9:e7:ff:c1:c2:71:65: 4d:86:cb:37:7d:25:30:f0:31:49:73:8a:2f:49:6f:d6:09:38: 41:5c:ca:a6:9d:dc:5a:2d:47:51:69:bf:a0:5f:fa:9b:ac:30: 33:25:d5:53:cb:1c:74:50:2f:cb:bf:f9:2d:11:a8:44:b2:1d: d5:f1:67:08:05:52:c0:86:9c:b0:34:54:cf:ab:0e:35:eb:b4: 77:e0:81:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvMF/GX2nnheL/Z4vcxi6AZ3OU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNjAxMjQwNjQ3MDRaFw0yNjAxMjcwNjUyMDRaMDMxMTAvBgNV BAMTKENERTgxMDdFMzU5RkY3RkQ0NjVGQTgyM0RCNTFFMjE3OTg0NDgzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+B55GTM2FwbDWl1q31JHOUOl 4OaDI2ddA5JHeWe+OpzkxhHWnS5ukcGIXyuFzMnjAEGRlS/JNHNN6PIhzNNpqnAp 6GDHu8eKmfgheixihgBjdWI6nBImDOVCRX9GvhdAbOU3kVHygZJ6U3+aYwzJGZrr 2+lgFo5yJeZp4kQMTv9SoqtnHe0TmJFi/TSi4ILIB5DQquBp2BegJ+GeAOhCxCOA X/sTX5msyexWr3fetqcnC9psGErJNjm2pXDPI9cNaMojFonp7M87M9R9gsg7GWZx edHd1n5iniKGAYmM9Q4RF32ej7dQnah+BmXahozfzsyBtz8lu+F3+FKUbQ7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzegQfjWf9/1GX6gj21HiF5hEg20wHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7EOMZ0z6aGWO8SEtyYn4IiBbZLf0GW5QqA MauZqJ7krOwEb2ZxsvpDjUkOmvRJh774zAhQ4aEOfeDxwo8FzjXUXukBvwwxZL1r S78YjfTCnvdhtoFwOMiChae6KZnpD1v1yzd4bYbu/1zjQvQj5eiBpFtgf6ulxwPH tReUtbJTQnSW4kxvojIZdwHeq/ybT7exeUOpu95XamJy13WyzT1TcLssVGpXq2Wn Vg2/uef/wcJxZU2Gyzd9JTDwMUlzii9Jb9YJOEFcyqad3FotR1Fpv6Bf+pusMDMl 1VPLHHRQL8u/+S0RqESyHdXxZwgFUsCGnLA0VM+rDjXrtHfggeI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:42 2026 by rpki-client