This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: 4GVEvrAbL6RX9sVcr2bK50cuic6srwVSaVaDTtrC7T4= Subject key identifier: 33:BA:39:65:A1:64:4A:9D:3E:F3:89:06:38:96:51:55:8F:72:7C:B4 Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 461E2E914450F71DE87DC7F8A9448D76C517CB70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 0342 Signing time: Sun 25 Jan 2026 15:32:00 +0000 Manifest this update: Sun 25 Jan 2026 15:27:00 +0000 Manifest next update: Thu 29 Jan 2026 00:58:00 +0000 Files and hashes: 1: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: vAq6lsY42BXR7U/mB9CtNIOTBdvFcFhLGtl4pvMIpok=) 2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1e:2e:91:44:50:f7:1d:e8:7d:c7:f8:a9:44:8d:76:c5:17:cb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Jan 25 15:27:00 2026 GMT Not After : Jan 29 00:58:00 2026 GMT Subject: CN=33BA3965A1644A9D3EF38906389651558F727CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:46:5b:69:d2:e7:c1:2a:47:7d:31:23:8c: 0b:a2:a5:21:64:fe:6e:88:af:da:8b:98:ce:89:87: a5:2d:86:12:d5:76:fa:27:d3:92:85:33:f1:3e:d5: b1:0a:2b:a4:bf:78:cf:3e:b9:fe:92:7b:8e:0b:a9: ed:be:76:19:a8:b5:53:47:b2:d9:64:74:ce:2b:4c: 6b:ff:b8:70:aa:12:f6:42:01:eb:81:6c:df:bd:92: 73:77:99:44:5c:93:25:88:f1:16:76:9c:8c:f6:95: 1d:ab:fc:6d:52:c1:64:0d:dd:b5:2e:4b:7b:49:fe: 83:99:2e:fe:33:75:59:4b:97:20:1a:48:b5:55:dc: eb:b9:85:2d:36:32:e3:79:fd:16:50:28:24:7b:95: b8:cb:6e:7b:3a:0d:f1:48:06:fd:e6:8a:63:59:71: dc:7e:ed:ec:f1:25:73:62:fb:ba:bb:04:91:ff:c9: fb:d0:9c:99:84:0f:48:6b:c7:ba:74:54:84:09:c2: ff:a1:40:04:22:eb:70:f0:34:4e:34:3e:6f:9d:ce: 89:33:7b:5c:45:78:59:de:03:ba:d4:34:24:17:85: a1:ca:c9:58:ef:19:07:27:4d:45:8a:61:c2:6c:54: a2:a5:89:37:a1:10:fa:cf:10:96:b6:3e:19:72:f4: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:39:65:A1:64:4A:9D:3E:F3:89:06:38:96:51:55:8F:72:7C:B4 X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f3:a5:15:5e:0d:50:e9:e7:f0:25:e8:85:84:32:e1:50:a8: df:96:42:6c:41:71:eb:91:e0:91:5d:0d:fd:80:e3:04:e2:1d: 82:62:58:78:70:7a:67:5a:f9:bb:32:63:50:51:6c:92:b1:55: 3b:51:07:62:02:55:32:af:fe:0d:c7:dc:c5:4a:3b:cd:89:6c: 65:0d:36:4d:f4:e5:5d:c4:27:8b:dd:a2:15:7a:1a:0d:9a:59: 27:15:ab:e6:f2:42:2e:a7:2b:0a:6a:d6:8b:9c:8c:ab:e7:33: 89:b0:f1:53:83:70:39:71:ef:ab:be:bc:ed:4c:9e:eb:e1:09: 50:72:7b:37:9a:9d:79:da:23:48:4f:59:6b:2c:30:35:3a:50: d9:b4:19:1b:32:53:36:ca:fd:17:48:ce:46:8a:c7:aa:b3:c7: 7e:ae:44:4c:5c:1f:8d:59:7b:4a:b1:2b:fc:d3:1d:ea:3d:19: e7:2b:75:70:89:83:42:28:4b:c5:75:35:ca:60:84:19:41:3d: 62:09:4f:90:df:6d:09:69:12:73:79:ac:e0:c6:16:d4:a2:78: bd:48:9e:03:4a:12:bf:48:e7:06:12:1d:f3:26:33:68:39:58: 9b:08:c5:46:8b:64:9f:ad:46:5f:1b:13:fc:1f:0b:84:4f:03: 39:6f:6e:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURh4ukURQ9x3ofcf4qUSNdsUXy3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNjAxMjUxNTI3MDBaFw0yNjAxMjkwMDU4MDBaMDMxMTAvBgNV BAMTKDMzQkEzOTY1QTE2NDRBOUQzRUYzODkwNjM4OTY1MTU1OEY3MjdDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fkZbadLnwSpHfTEjjAuipSFk /m6Ir9qLmM6Jh6UthhLVdvon05KFM/E+1bEKK6S/eM8+uf6Se44Lqe2+dhmotVNH stlkdM4rTGv/uHCqEvZCAeuBbN+9knN3mURckyWI8RZ2nIz2lR2r/G1SwWQN3bUu S3tJ/oOZLv4zdVlLlyAaSLVV3Ou5hS02MuN5/RZQKCR7lbjLbns6DfFIBv3mimNZ cdx+7ezxJXNi+7q7BJH/yfvQnJmED0hrx7p0VIQJwv+hQAQi63DwNE40Pm+dzokz e1xFeFneA7rUNCQXhaHKyVjvGQcnTUWKYcJsVKKliTehEPrPEJa2Phly9OS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7o5ZaFkSp0+84kGOJZRVY9yfLQwHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfzpRVeDVDp5/Al6IWEMuFQqN+WQmxBceuR 4JFdDf2A4wTiHYJiWHhwemda+bsyY1BRbJKxVTtRB2ICVTKv/g3H3MVKO82JbGUN Nk305V3EJ4vdohV6Gg2aWScVq+byQi6nKwpq1oucjKvnM4mw8VODcDlx76u+vO1M nuvhCVByezeanXnaI0hPWWssMDU6UNm0GRsyUzbK/RdIzkaKx6qzx36uRExcH41Z e0qxK/zTHeo9GecrdXCJg0IoS8V1NcpghBlBPWIJT5DfbQlpEnN5rODGFtSieL1I ngNKEr9I5wYSHfMmM2g5WJsIxUaLZJ+tRl8bE/wfC4RPAzlvbrU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:07 2026 by rpki-client