This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: Oo1g037YCn3cD7s8bjj9w6LEDhRaXKVHsSkSH+VlKcQ= Subject key identifier: 9C:B6:87:0A:B4:BB:58:A8:7D:88:B5:9C:C1:DF:3A:CE:F8:FA:E1:66 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 2EC385323A6BA610FD238B70B575D5856EBF1CA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 053F Signing time: Fri 23 Jan 2026 09:00:57 +0000 Manifest this update: Fri 23 Jan 2026 08:55:57 +0000 Manifest next update: Mon 26 Jan 2026 19:32:57 +0000 Files and hashes: 1: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 2: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) 3: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: 49KKNQW1InE6IOyfwGFU4CyqZetu2WejXOJmjeaZ82U=) 4: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c3:85:32:3a:6b:a6:10:fd:23:8b:70:b5:75:d5:85:6e:bf:1c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Jan 23 08:55:57 2026 GMT Not After : Jan 26 19:32:57 2026 GMT Subject: CN=9CB6870AB4BB58A87D88B59CC1DF3ACEF8FAE166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:c4:df:53:fd:d0:e7:2f:2a:91:76:dc:30: b7:4e:a8:d4:59:6f:18:30:33:ea:e8:e0:f9:5b:15: 5e:cf:74:88:b7:14:71:ba:c7:f4:57:18:d9:ed:c0: e4:69:46:c1:47:36:00:a6:51:3d:7d:cc:2d:c6:e0: 71:37:61:38:08:35:43:e4:53:78:3c:0a:27:5f:1f: dd:cf:16:a4:8c:17:28:df:96:61:54:cc:28:27:92: ea:36:68:15:16:59:34:ef:1c:72:9c:47:ae:a2:7d: 0d:80:4d:50:f0:d7:f4:76:f9:04:a5:51:c5:3f:54: 7a:91:75:2a:a5:56:ad:9b:b8:7b:52:af:4e:4f:fc: a8:9d:00:25:08:b3:1a:36:6c:2d:d7:35:e4:0d:65: 51:c4:39:37:bc:25:d9:e3:df:3f:1f:61:98:59:4d: 7f:ea:2d:94:42:fa:c4:ca:78:a0:4e:b8:62:d5:82: 83:54:4e:f3:ac:62:eb:89:64:8d:98:fb:a3:db:51: c9:26:99:09:f9:1f:a1:c2:21:cc:ae:05:b6:c5:d6: b1:c2:7c:9f:2f:6d:10:25:6f:bd:06:54:0f:61:18: 75:ce:76:57:e1:cc:74:73:a7:1f:fc:26:31:b4:38: 76:b0:85:57:7d:35:56:db:1a:27:08:81:98:37:54: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B6:87:0A:B4:BB:58:A8:7D:88:B5:9C:C1:DF:3A:CE:F8:FA:E1:66 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:24:77:bb:83:22:57:04:7d:ac:e6:d9:0a:68:ae:f5:26:42: 40:db:3d:d6:77:cc:6a:41:90:8a:17:52:69:17:2f:76:08:eb: ea:7f:77:7a:0d:81:91:f5:25:93:a5:c2:4a:1e:5c:f5:ae:55: b3:41:de:18:24:91:3e:af:58:75:1c:b7:3a:58:db:12:77:73: 87:e6:38:40:d4:31:b9:02:c3:72:5d:f1:2e:35:7d:82:82:a1: 8d:f5:62:cd:5b:0d:61:c9:e0:8f:37:19:75:f3:54:e6:43:5b: cb:7a:67:69:c4:e2:4d:c9:fd:fd:de:2e:99:97:c8:43:a0:0a: 22:f7:cd:5d:fd:32:90:cd:fa:1b:47:6e:82:a2:b2:d7:b7:f6: 5a:0d:5a:f2:7c:35:5f:b8:17:5f:c0:4c:f3:60:b5:22:ae:4a: e3:cf:7d:58:33:42:b9:85:09:fd:75:b9:5d:c3:6d:0e:22:2b: d0:4d:10:29:ef:ae:71:b4:dc:ed:66:b9:71:0f:d6:a5:bc:40: fa:b5:bd:5a:10:eb:7d:cb:9b:e2:c1:fc:28:f8:ab:64:54:7f: aa:df:4c:ff:fb:70:4f:d2:d4:d7:05:24:15:77:a6:85:f8:71: af:42:d0:a9:a5:e0:53:52:72:c8:e2:f4:42:76:2d:a7:bb:f6: 4a:62:37:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsOFMjprphD9I4twtXXVhW6/HKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNjAxMjMwODU1NTdaFw0yNjAxMjYxOTMyNTdaMDMxMTAvBgNV BAMTKDlDQjY4NzBBQjRCQjU4QTg3RDg4QjU5Q0MxREYzQUNFRjhGQUUxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ucTfU/3Q5y8qkXbcMLdOqNRZ bxgwM+ro4PlbFV7PdIi3FHG6x/RXGNntwORpRsFHNgCmUT19zC3G4HE3YTgINUPk U3g8CidfH93PFqSMFyjflmFUzCgnkuo2aBUWWTTvHHKcR66ifQ2ATVDw1/R2+QSl UcU/VHqRdSqlVq2buHtSr05P/KidACUIsxo2bC3XNeQNZVHEOTe8Jdnj3z8fYZhZ TX/qLZRC+sTKeKBOuGLVgoNUTvOsYuuJZI2Y+6PbUckmmQn5H6HCIcyuBbbF1rHC fJ8vbRAlb70GVA9hGHXOdlfhzHRzpx/8JjG0OHawhVd9NVbbGicIgZg3VPTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLaHCrS7WKh9iLWcwd86zvj64WYwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwkd7uDIlcEfazm2QporvUmQkDbPdZ3zGpB kIoXUmkXL3YI6+p/d3oNgZH1JZOlwkoeXPWuVbNB3hgkkT6vWHUctzpY2xJ3c4fm OEDUMbkCw3Jd8S41fYKCoY31Ys1bDWHJ4I83GXXzVOZDW8t6Z2nE4k3J/f3eLpmX yEOgCiL3zV39MpDN+htHboKiste39loNWvJ8NV+4F1/ATPNgtSKuSuPPfVgzQrmF Cf11uV3DbQ4iK9BNECnvrnG03O1muXEP1qW8QPq1vVoQ633Lm+LB/Cj4q2RUf6rf TP/7cE/S1NcFJBV3poX4ca9C0Kml4FNScsji9EJ2Lae79kpiN5M= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:17 2026 by rpki-client