This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: 7MOLehDed+BN5arMteVxcyQPV0+4VVYW8krtn24+LKA= Subject key identifier: A3:DE:A0:4C:38:96:E7:9D:F7:36:27:F3:61:EB:4F:65:CB:29:57:DC Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 37051B2EFC32A339F1A4BB80BB22AF227C8C9AD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 0505 Signing time: Fri 23 Jan 2026 21:21:59 +0000 Manifest this update: Fri 23 Jan 2026 21:16:59 +0000 Manifest next update: Tue 27 Jan 2026 03:48:59 +0000 Files and hashes: 1: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: Chttz8ATG4v00HegNpRxdMvWQaZxvtWRbWEtdde9Sdg=) 2: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) 3: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) 4: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 5: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:05:1b:2e:fc:32:a3:39:f1:a4:bb:80:bb:22:af:22:7c:8c:9a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Jan 23 21:16:59 2026 GMT Not After : Jan 27 03:48:59 2026 GMT Subject: CN=A3DEA04C3896E79DF73627F361EB4F65CB2957DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:0d:4f:a8:b1:4e:06:2c:68:b8:ea:71:57: ff:2b:a4:3d:1b:1f:50:de:2f:0c:cf:72:42:86:3b: 81:55:4b:fa:3a:8b:e9:3c:2f:76:a2:5b:46:54:30: fa:12:8c:2d:1c:01:73:7c:03:16:1c:23:38:d8:5a: d7:83:35:e8:27:e0:65:fe:c0:d8:a3:9e:1f:c6:bd: 99:63:fc:6b:78:b7:c8:bd:4a:00:b4:92:2d:cd:bf: ba:44:bd:fb:b3:ec:40:71:ac:0c:70:3a:10:75:5f: 8e:fe:a0:cc:f4:7c:88:96:c9:40:86:40:eb:09:ef: d5:6f:f5:3c:9a:64:8e:85:b2:9c:1f:81:68:db:89: 0b:a7:22:ba:4a:0e:bb:c0:53:7c:01:15:87:3f:cd: 1f:89:48:03:f0:4f:3d:af:47:f5:59:b3:d0:b3:ab: d4:47:5c:d9:c0:46:50:ea:80:6a:b9:39:e7:71:f9: 34:70:16:b4:6b:44:8c:5c:a3:2a:9f:92:c8:91:84: a3:59:7a:f0:85:55:50:95:47:fc:62:18:53:64:e9: e7:02:ea:1c:4b:a0:29:e3:25:10:01:a4:92:65:21: 47:83:b4:73:ba:87:eb:19:15:b6:cd:6f:7c:08:5c: c2:37:c6:81:e7:c8:83:ec:09:4e:18:e9:fc:a9:da: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DE:A0:4C:38:96:E7:9D:F7:36:27:F3:61:EB:4F:65:CB:29:57:DC X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:bf:c9:4a:d9:ab:78:ca:a9:ed:b2:39:bd:f2:aa:3b:a7:d8: ed:9e:20:4c:d6:d2:95:69:ae:cb:12:7b:93:b9:6c:93:6e:13: 52:ab:6d:33:14:86:4e:18:ca:a1:d7:3d:4d:80:fc:8d:0b:8f: 51:5c:85:a2:3d:0f:fc:32:9a:ea:f8:9f:58:ea:0b:a8:3f:5a: 70:c7:93:90:49:13:9b:9f:ee:c5:2c:76:d6:73:05:56:9e:9a: fa:bc:4d:1b:da:4d:33:8f:00:8f:2a:5d:d3:f1:6f:d8:be:70: 13:e3:ed:59:e6:32:82:18:07:15:ab:aa:5a:12:45:b2:99:03: 5e:4d:db:3a:68:cc:06:ad:c2:30:95:25:5b:72:af:57:cc:c0: 81:e8:19:88:c6:03:1a:d8:15:da:4f:25:4a:01:cc:2f:7a:aa: 8d:ad:ee:db:67:8f:44:1c:85:2e:c0:75:28:d5:d4:b9:1e:4f: 32:aa:ea:0d:02:51:32:07:00:b2:8b:46:80:0a:07:99:05:c5: 08:ef:f5:97:20:79:ac:55:be:23:42:e0:06:dd:54:ba:87:5e: 88:2b:53:61:90:d8:1e:9c:3c:fc:4a:c9:71:2d:da:2e:b8:a0: 52:bf:e7:a6:50:a9:96:cc:11:80:31:d1:e5:70:26:eb:8d:e9: 6b:fe:53:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwUbLvwyoznxpLuAuyKvInyMmtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNjAxMjMyMTE2NTlaFw0yNjAxMjcwMzQ4NTlaMDMxMTAvBgNV BAMTKEEzREVBMDRDMzg5NkU3OURGNzM2MjdGMzYxRUI0RjY1Q0IyOTU3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vQ1PqLFOBixouOpxV/8rpD0b H1DeLwzPckKGO4FVS/o6i+k8L3aiW0ZUMPoSjC0cAXN8AxYcIzjYWteDNegn4GX+ wNijnh/GvZlj/Gt4t8i9SgC0ki3Nv7pEvfuz7EBxrAxwOhB1X47+oMz0fIiWyUCG QOsJ79Vv9TyaZI6FspwfgWjbiQunIrpKDrvAU3wBFYc/zR+JSAPwTz2vR/VZs9Cz q9RHXNnARlDqgGq5Oedx+TRwFrRrRIxcoyqfksiRhKNZevCFVVCVR/xiGFNk6ecC 6hxLoCnjJRABpJJlIUeDtHO6h+sZFbbNb3wIXMI3xoHnyIPsCU4Y6fyp2j8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo96gTDiW5533NifzYetPZcspV9wwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMu/yUrZq3jKqe2yOb3yqjun2O2eIEzW0pVp rssSe5O5bJNuE1KrbTMUhk4YyqHXPU2A/I0Lj1FchaI9D/wymur4n1jqC6g/WnDH k5BJE5uf7sUsdtZzBVaemvq8TRvaTTOPAI8qXdPxb9i+cBPj7VnmMoIYBxWrqloS RbKZA15N2zpozAatwjCVJVtyr1fMwIHoGYjGAxrYFdpPJUoBzC96qo2t7ttnj0Qc hS7AdSjV1LkeTzKq6g0CUTIHALKLRoAKB5kFxQjv9ZcgeaxVviNC4AbdVLqHXogr U2GQ2B6cPPxKyXEt2i64oFK/56ZQqZbMEYAx0eVwJuuN6Wv+U4w= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:11 2026 by rpki-client