This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: osiN2DYCGWr994FFau+m02r+kJZXQIdpzsgO5aXo9Bc= Subject key identifier: 9A:2A:99:73:5A:3C:70:4B:EA:E3:F6:10:87:87:46:0B:93:E6:57:0C Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 7A4DED7F718EF088732EA59D7B12E11F3D2FCF84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 03B1 Signing time: Mon 26 Jan 2026 01:21:41 +0000 Manifest this update: Mon 26 Jan 2026 01:16:41 +0000 Manifest next update: Thu 29 Jan 2026 06:27:41 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: V4S6i0ZaTWECtmvjX9V8lLL5c3d5+wYs6QQdJyUhqf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 06:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4d:ed:7f:71:8e:f0:88:73:2e:a5:9d:7b:12:e1:1f:3d:2f:cf:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Jan 26 01:16:41 2026 GMT Not After : Jan 29 06:27:41 2026 GMT Subject: CN=9A2A99735A3C704BEAE3F6108787460B93E6570C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:32:b5:7a:02:73:0b:88:43:f6:f6:51:f8: d9:e9:1e:ea:c5:95:53:23:7c:fc:16:2f:e3:a9:b0: 63:f1:85:76:ff:b3:23:1b:cd:44:82:89:c3:eb:dd: 6e:a9:88:b4:1c:e2:53:5b:ef:b9:66:01:c5:1f:66: 62:bc:7d:77:aa:ef:fb:79:5a:a0:20:fe:68:ae:bd: e5:ea:f7:52:1c:c3:87:47:9c:0e:15:1f:6f:f1:2a: f3:a1:ce:eb:cb:5b:c4:20:77:d5:b6:41:45:29:39: ae:29:1f:8a:a3:11:e1:b6:b6:f3:6e:3a:62:80:50: 00:96:f2:c0:d1:66:df:87:f0:d9:7d:21:2a:be:04: 04:43:1e:cf:aa:89:89:05:6f:c5:80:d9:81:81:b9: 97:a8:24:80:ed:ea:28:12:1b:3e:72:47:a4:60:32: 99:06:64:87:62:82:7c:e4:35:e8:c8:61:5f:2f:6f: 04:89:9f:76:b5:56:d5:bf:fd:32:54:39:65:a9:0f: 61:f5:48:e0:60:36:b8:8a:06:06:29:8e:01:2b:8b: 88:b2:f0:8a:36:21:61:d6:b6:79:ec:5d:47:22:e3: 56:54:79:4e:a2:89:be:83:8e:01:af:25:f6:08:ed: ca:5c:71:e0:82:56:54:2f:76:1e:73:fc:10:f7:52: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2A:99:73:5A:3C:70:4B:EA:E3:F6:10:87:87:46:0B:93:E6:57:0C X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:13:1d:67:3c:af:43:60:13:18:93:6a:e9:d3:ed:de:6b: 04:64:d9:85:ba:2e:e5:af:eb:49:e1:3e:31:b1:21:e4:9b:6f: 8e:3c:a0:2a:7f:12:57:ee:2a:3f:1f:8f:be:71:a1:02:9f:7f: c0:ba:b3:ba:0a:75:4d:c1:f7:b7:15:f2:ff:1f:3d:d6:2d:43: fb:e1:69:90:dc:08:c7:82:04:90:0c:87:d1:fc:5d:4e:c1:4a: 04:3c:8f:42:86:4d:e5:75:dc:8d:cf:58:b8:81:07:17:ba:74: 0f:0c:73:d7:50:d1:18:05:84:bf:ff:01:23:b3:5e:fd:c6:09: 96:71:2e:7b:d0:97:4a:ec:3b:e0:35:b3:94:6d:93:b4:7a:6e: 20:8b:8e:0e:a2:d8:1f:a8:27:04:d7:ac:dd:24:fb:76:bc:60: 3f:63:1c:16:54:68:6c:c1:5c:d6:83:38:d9:6d:3e:fd:4d:94: cf:55:9e:b6:c3:0a:d3:8a:9c:a8:a3:f2:cc:75:27:db:ff:cd: 70:fe:99:47:33:6f:fc:58:0b:8e:a6:2e:2d:9d:f0:1d:9f:2c: f3:76:02:7e:15:af:ce:0d:c3:39:92:5b:f0:27:c7:b1:a6:e6: a8:f0:c5:30:26:9a:0c:6d:f0:c7:a4:8a:c8:3c:9b:5a:39:a5: 04:ad:40:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUek3tf3GO8IhzLqWdexLhHz0vz4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNjAxMjYwMTE2NDFaFw0yNjAxMjkwNjI3NDFaMDMxMTAvBgNV BAMTKDlBMkE5OTczNUEzQzcwNEJFQUUzRjYxMDg3ODc0NjBCOTNFNjU3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bjK1egJzC4hD9vZR+NnpHurF lVMjfPwWL+OpsGPxhXb/syMbzUSCicPr3W6piLQc4lNb77lmAcUfZmK8fXeq7/t5 WqAg/miuveXq91Icw4dHnA4VH2/xKvOhzuvLW8Qgd9W2QUUpOa4pH4qjEeG2tvNu OmKAUACW8sDRZt+H8Nl9ISq+BARDHs+qiYkFb8WA2YGBuZeoJIDt6igSGz5yR6Rg MpkGZIdignzkNejIYV8vbwSJn3a1VtW//TJUOWWpD2H1SOBgNriKBgYpjgEri4iy 8Io2IWHWtnnsXUci41ZUeU6iib6DjgGvJfYI7cpcceCCVlQvdh5z/BD3UgMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmiqZc1o8cEvq4/YQh4dGC5PmVwwwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMKEx1nPK9DYBMYk2rp0+3eawRk2YW6LuWv 60nhPjGxIeSbb448oCp/ElfuKj8fj75xoQKff8C6s7oKdU3B97cV8v8fPdYtQ/vh aZDcCMeCBJAMh9H8XU7BSgQ8j0KGTeV13I3PWLiBBxe6dA8Mc9dQ0RgFhL//ASOz Xv3GCZZxLnvQl0rsO+A1s5Rtk7R6biCLjg6i2B+oJwTXrN0k+3a8YD9jHBZUaGzB XNaDONltPv1NlM9VnrbDCtOKnKij8sx1J9v/zXD+mUczb/xYC46mLi2d8B2fLPN2 An4Vr84NwzmSW/Anx7Gm5qjwxTAmmgxt8Mekisg8m1o5pQStQDw= -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:50 2026 by rpki-client