This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: DVGVAooOghz3M9oQPN3jGV13IRuZrwwbvwiqn0DoBYw= Subject key identifier: 42:38:73:BA:B1:F1:29:9C:A5:E2:0A:AB:2E:F2:FF:F9:BB:51:88:37 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 7C9FE4DA92E0307154B03D4FE66CE10627271A7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: FE Signing time: Sun 25 Jan 2026 22:01:42 +0000 Manifest this update: Sun 25 Jan 2026 21:56:42 +0000 Manifest next update: Thu 29 Jan 2026 08:10:42 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: 8ltIV+JksWMb74ROM1Yv4I95tviH2xEGeFXjCJHheDA=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9f:e4:da:92:e0:30:71:54:b0:3d:4f:e6:6c:e1:06:27:27:1a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Jan 25 21:56:42 2026 GMT Not After : Jan 29 08:10:42 2026 GMT Subject: CN=423873BAB1F1299CA5E20AAB2EF2FFF9BB518837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:a2:f1:47:73:de:dc:29:98:46:f3:2c:ff: af:29:11:32:79:43:b5:78:1b:85:48:e2:57:3b:b6: 44:5d:7e:9d:d8:bc:1b:93:17:7e:07:b9:5b:1e:0a: 99:8c:bd:fc:fb:74:cf:aa:26:1e:64:2e:7e:97:4f: fd:c0:d8:17:19:07:7a:53:05:ff:da:7a:7a:fb:d2: 12:f2:8b:af:b7:75:24:3b:7e:67:b1:f2:22:6f:78: d4:ab:cc:11:ad:d3:24:79:85:26:b3:07:d7:3b:87: 66:d2:df:ee:3a:c6:b1:0b:8c:11:9d:b2:22:0d:37: b5:97:4c:47:f7:6c:df:b1:73:4b:40:77:2a:7e:27: 00:7b:bc:ce:70:9b:d0:32:e1:69:83:db:5b:96:4b: 00:60:06:15:2d:4c:fd:cb:34:58:7b:bf:85:c8:5e: 6b:a8:71:20:4f:82:d1:6c:cb:24:e5:aa:3f:ae:9a: 1f:7c:75:52:fb:f5:13:43:b3:e5:c1:7b:e7:6c:a5: 20:86:5c:d9:7d:8e:80:80:37:a0:f9:73:03:65:21: 9b:77:32:dc:f0:5a:d3:04:6b:17:dc:af:9f:db:4a: 6f:17:19:39:55:ca:52:f6:99:93:8c:80:8f:e1:b7: 68:3d:09:2f:9b:ab:fe:63:a2:5a:94:c9:52:27:46: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:73:BA:B1:F1:29:9C:A5:E2:0A:AB:2E:F2:FF:F9:BB:51:88:37 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:96:59:33:c5:82:61:7f:c2:24:39:f9:2a:48:5e:a1:5b:85: 5a:71:0e:bd:5a:4d:6c:5b:ac:7f:fa:6e:ea:82:e1:45:a8:7e: 00:20:3e:cc:9f:5c:40:cb:8c:9b:dc:47:f5:c5:a1:d2:fb:5f: 0d:ed:54:f3:6a:35:81:1e:73:2a:88:cf:1e:63:b4:a5:ca:a1: 43:9b:1a:29:d8:e2:fa:bf:02:ef:45:00:36:e5:c3:52:fd:df: 69:69:8a:c9:60:b0:1c:15:aa:1e:11:1c:90:c8:e8:62:31:d4: de:db:8c:7a:b7:fa:c6:5a:cb:1b:2a:0e:24:56:ad:28:cb:71: 6d:87:5a:93:01:c1:01:99:49:87:0a:6e:dd:d0:0f:a9:92:d8: 6a:29:13:f1:c7:5b:a8:5c:b9:20:e6:57:1f:f5:e4:86:ea:a0: 5f:1b:a0:66:7d:95:b7:c2:62:da:71:87:f2:01:cb:37:36:cc: 46:17:c3:f1:46:20:ab:57:c1:fc:27:2c:38:be:2c:9f:d6:3d: 79:ea:cd:5e:61:e7:5f:74:ed:70:89:bb:a3:9e:67:75:89:86: 44:e4:a1:d6:75:06:eb:8d:7c:26:a4:2a:01:7e:f4:bb:54:24: c6:0e:b4:96:84:f6:0d:7b:f8:d4:7a:37:c1:fc:66:57:b6:63: a8:00:52:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJ/k2pLgMHFUsD1P5mzhBicnGn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNjAxMjUyMTU2NDJaFw0yNjAxMjkwODEwNDJaMDMxMTAvBgNV BAMTKDQyMzg3M0JBQjFGMTI5OUNBNUUyMEFBQjJFRjJGRkY5QkI1MTg4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWH6LxR3Pe3CmYRvMs/68pETJ5 Q7V4G4VI4lc7tkRdfp3YvBuTF34HuVseCpmMvfz7dM+qJh5kLn6XT/3A2BcZB3pT Bf/aenr70hLyi6+3dSQ7fmex8iJveNSrzBGt0yR5hSazB9c7h2bS3+46xrELjBGd siINN7WXTEf3bN+xc0tAdyp+JwB7vM5wm9Ay4WmD21uWSwBgBhUtTP3LNFh7v4XI XmuocSBPgtFsyyTlqj+umh98dVL79RNDs+XBe+dspSCGXNl9joCAN6D5cwNlIZt3 MtzwWtMEaxfcr5/bSm8XGTlVylL2mZOMgI/ht2g9CS+bq/5jolqUyVInRlbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQjhzurHxKZyl4gqrLvL/+btRiDcwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmWWTPFgmF/wiQ5+SpIXqFbhVpxDr1aTWxb rH/6buqC4UWofgAgPsyfXEDLjJvcR/XFodL7Xw3tVPNqNYEecyqIzx5jtKXKoUOb GinY4vq/Au9FADblw1L932lpislgsBwVqh4RHJDI6GIx1N7bjHq3+sZayxsqDiRW rSjLcW2HWpMBwQGZSYcKbt3QD6mS2GopE/HHW6hcuSDmVx/15IbqoF8boGZ9lbfC Ytpxh/IByzc2zEYXw/FGIKtXwfwnLDi+LJ/WPXnqzV5h51907XCJu6OeZ3WJhkTk odZ1BuuNfCakKgF+9LtUJMYOtJaE9g17+NR6N8H8Zle2Y6gAUrQ= -----END CERTIFICATE-----Generated at Mon Jan 26 02:16:31 2026 by rpki-client