This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: 9ubo5QqtcQ6zQ4ezZg916xOObjnY1cr2Gxr+3Xs67no= Subject key identifier: CE:C4:21:91:CF:33:08:13:0F:3B:79:58:B7:E0:E5:BE:06:1B:C2:87 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 7283BCFFBF5077022BABB026CB7EC8A033C20E37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0228 Signing time: Fri 23 Jan 2026 19:20:50 +0000 Manifest this update: Fri 23 Jan 2026 19:15:49 +0000 Manifest next update: Tue 27 Jan 2026 04:13:49 +0000 Files and hashes: 1: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: tvhHtlA8eCswTQH46i7ThmFEvkKzxtUQsm4qrxnQqS8=) 4: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:83:bc:ff:bf:50:77:02:2b:ab:b0:26:cb:7e:c8:a0:33:c2:0e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Jan 23 19:15:49 2026 GMT Not After : Jan 27 04:13:49 2026 GMT Subject: CN=CEC42191CF3308130F3B7958B7E0E5BE061BC287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:67:9d:42:8e:be:c4:88:db:4a:44:7c:4e: 6e:a4:79:3f:77:fb:b8:ac:43:f1:5f:30:90:42:a0: 62:e5:f1:84:30:73:99:90:ba:3c:f3:39:4c:5b:8b: 27:9d:c8:33:6b:1f:89:78:95:19:1e:52:73:d2:52: 81:6e:61:42:36:9d:27:f7:1f:28:0a:6f:46:27:e2: e7:f7:b7:4f:50:d5:f5:1c:2e:d9:84:23:d0:8b:79: 78:55:d5:88:ab:5a:0f:46:82:25:84:f5:d8:2c:5b: 1e:86:38:82:96:d8:90:62:ee:ad:a2:5c:21:66:f3: 45:1d:23:1d:96:2c:d9:24:33:24:e2:af:59:d0:1d: 7d:e6:93:d9:ba:6c:93:f3:45:f4:64:78:41:bd:c0: db:c2:08:b5:0e:46:b5:2f:6d:53:d2:bc:d4:3d:91: e9:78:f5:d8:a1:ec:74:af:83:77:4a:47:ca:aa:ac: 51:5f:d3:64:90:e7:11:db:c0:77:c3:1a:24:6c:c2: 95:89:bf:0e:5c:ca:d8:db:cf:51:eb:df:60:c9:3d: a6:78:af:9d:f2:e9:6b:3e:06:ce:89:8a:76:da:14: 58:f7:8e:fc:0a:5b:c0:b9:20:8a:ba:94:c0:d0:87: f8:29:16:15:b7:f7:7c:d0:3d:df:e6:be:17:83:c5: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C4:21:91:CF:33:08:13:0F:3B:79:58:B7:E0:E5:BE:06:1B:C2:87 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:48:dd:0e:33:dd:25:2f:0a:e9:98:8c:14:d0:fd:ad:11:0e: 29:a9:68:3e:db:4d:ac:2b:cf:95:25:cf:e8:23:e6:08:b8:93: 44:ec:ae:de:94:f2:8c:54:7a:47:f1:5a:a4:13:b2:9e:20:a6: 01:96:0d:cc:b7:b8:65:30:7c:48:8f:cd:b4:01:14:2a:61:d5: 50:de:6d:d0:7d:df:c1:5d:b3:19:4f:46:6a:96:4f:4c:c7:3e: 1d:0b:ef:78:04:7f:d7:5a:d2:34:f9:22:5d:14:6c:ec:1a:11: 89:68:7c:af:d9:a6:cd:c7:cd:f7:92:d4:8d:0a:58:9e:eb:52: 9f:48:27:3c:40:ae:bb:51:e2:4f:90:d2:39:04:17:b6:e7:05: e7:6e:62:7a:ff:02:6f:76:62:0a:5f:51:6c:ba:63:1e:5f:84: c2:49:18:2f:f0:ba:49:af:55:02:9f:a0:2a:3a:6c:74:ac:09: 41:b7:65:a3:78:fb:9f:db:18:4b:a9:5b:c2:d9:84:98:7e:3d: a1:80:91:7c:de:32:0e:5e:10:5b:fe:42:95:39:ff:14:b5:b0: 43:be:c7:e4:a4:77:3b:32:49:95:da:73:c9:bf:b9:ca:0f:4d: bf:17:f5:c2:28:3c:55:9a:10:3e:80:5e:53:00:9d:a9:52:c3: 73:8b:fe:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoO8/79QdwIrq7Amy37IoDPCDjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNjAxMjMxOTE1NDlaFw0yNjAxMjcwNDEzNDlaMDMxMTAvBgNV BAMTKENFQzQyMTkxQ0YzMzA4MTMwRjNCNzk1OEI3RTBFNUJFMDYxQkMyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3E2edQo6+xIjbSkR8Tm6keT93 +7isQ/FfMJBCoGLl8YQwc5mQujzzOUxbiyedyDNrH4l4lRkeUnPSUoFuYUI2nSf3 HygKb0Yn4uf3t09Q1fUcLtmEI9CLeXhV1YirWg9GgiWE9dgsWx6GOIKW2JBi7q2i XCFm80UdIx2WLNkkMyTir1nQHX3mk9m6bJPzRfRkeEG9wNvCCLUORrUvbVPSvNQ9 kel49dih7HSvg3dKR8qqrFFf02SQ5xHbwHfDGiRswpWJvw5cytjbz1Hr32DJPaZ4 r53y6Ws+Bs6JinbaFFj3jvwKW8C5IIq6lMDQh/gpFhW393zQPd/mvheDxcqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsQhkc8zCBMPO3lYt+DlvgYbwocwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9I3Q4z3SUvCumYjBTQ/a0RDimpaD7bTawr z5Ulz+gj5gi4k0Tsrt6U8oxUekfxWqQTsp4gpgGWDcy3uGUwfEiPzbQBFCph1VDe bdB938FdsxlPRmqWT0zHPh0L73gEf9da0jT5Il0UbOwaEYlofK/Zps3HzfeS1I0K WJ7rUp9IJzxArrtR4k+Q0jkEF7bnBeduYnr/Am92YgpfUWy6Yx5fhMJJGC/wukmv VQKfoCo6bHSsCUG3ZaN4+5/bGEupW8LZhJh+PaGAkXzeMg5eEFv+QpU5/xS1sEO+ x+SkdzsySZXac8m/ucoPTb8X9cIoPFWaED6AXlMAnalSw3OL/mw= -----END CERTIFICATE-----Generated at Sun Jan 25 15:27:28 2026 by rpki-client