This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: Mx3zN/abkRWhxCeqJmCfjXQ2DEA1fdpiyyinerZApIA= Subject key identifier: 8C:60:AD:BE:8F:53:C5:FF:C2:59:67:CE:24:E7:EE:85:F6:F1:BD:87 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 294E4C34163AB53203F824C0BF1CA38E35C4FC66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0279 Signing time: Sun 25 Jan 2026 16:11:25 +0000 Manifest this update: Sun 25 Jan 2026 16:06:25 +0000 Manifest next update: Wed 28 Jan 2026 19:05:25 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: wPH8JhEsU1vr/czATE5IeC0W2FAP/c5NRYVzUBR2QDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4e:4c:34:16:3a:b5:32:03:f8:24:c0:bf:1c:a3:8e:35:c4:fc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Jan 25 16:06:25 2026 GMT Not After : Jan 28 19:05:25 2026 GMT Subject: CN=8C60ADBE8F53C5FFC25967CE24E7EE85F6F1BD87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:cc:44:3f:99:34:6a:ec:f5:41:7f:5c:81: 04:eb:35:f4:f0:58:24:b9:46:7d:7c:15:c4:bd:24: 7f:76:c3:67:26:0d:4b:0e:bb:85:6e:14:0a:d8:d5: aa:6d:b0:ef:cc:8c:33:e9:6b:19:cd:09:3c:0a:b3: c6:e3:25:85:bf:2e:d1:02:b7:04:d3:ff:6f:91:08: 8e:f6:1a:44:1e:bf:86:d9:d4:fe:c5:7c:27:46:13: e6:90:6d:33:41:68:2d:91:a6:b7:74:4f:7b:0c:f0: eb:4e:c4:8a:2b:6d:3c:1d:c8:e9:ed:bc:04:73:dd: 7e:99:6d:93:67:0b:49:d6:0a:6d:ad:3e:58:28:66: 80:22:be:a9:8c:88:19:91:a9:0d:1d:cd:2a:e7:e9: 99:af:95:b2:95:67:d1:5e:27:8c:82:65:9d:0d:11: a7:11:db:ce:7a:b2:0b:34:a3:5b:b7:c1:b1:b0:78: 7d:e5:06:51:3d:2b:7f:22:75:81:9f:40:1b:d0:af: 71:dd:4e:c9:77:e5:e1:c7:54:1e:8b:0f:a4:68:de: 5b:ca:55:08:7c:34:8f:c7:ef:87:a2:b4:bc:a3:7a: 36:75:d2:aa:9a:4c:59:f2:44:c8:62:ff:31:d1:a3: c4:ae:03:fb:e5:5c:9b:f2:59:9c:ed:79:a7:93:2c: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:60:AD:BE:8F:53:C5:FF:C2:59:67:CE:24:E7:EE:85:F6:F1:BD:87 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:69:0a:5e:36:c8:f5:bf:47:e0:67:ef:49:37:ff:f0:3f:99: 2e:b7:ec:13:ae:ae:e1:f7:15:f0:a9:1a:8a:a9:4b:96:7b:d8: a3:8c:66:9f:57:f6:b2:1c:e0:f7:11:a1:b4:b1:72:77:58:5a: 6e:4a:9a:38:11:81:00:61:f5:4c:f4:02:c6:f4:43:2d:93:9e: 2d:19:0a:de:3c:42:c9:91:22:6e:f2:0c:1c:25:57:a0:eb:ce: ac:de:28:2a:94:3a:7b:61:4f:8d:cb:4e:13:f6:fd:97:a4:2e: e6:1f:39:86:2d:fd:44:93:86:ef:6a:4b:22:b1:bf:f3:92:ca: ae:f2:dd:2c:03:c1:45:7f:40:ab:6d:1e:97:c0:13:be:3d:51: 1e:87:d3:b1:0f:c0:77:67:1d:36:78:34:c6:5a:27:9f:5e:8d: 79:df:3b:c5:5c:c2:41:2c:a5:0e:91:59:4b:04:18:5d:4b:df: 97:47:d7:ae:9b:76:7b:7a:11:3a:db:d6:38:01:80:e2:07:ae: ef:3c:27:a8:a8:a3:40:29:24:e8:2d:00:54:ce:2c:f2:cf:71: a6:5d:6d:e3:59:0f:1c:72:80:d1:4a:b4:a5:f4:ac:bd:1f:14: 6f:b3:1e:df:74:3f:ad:4c:bc:b6:00:ba:61:c3:49:35:04:d9: f1:71:2c:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKU5MNBY6tTID+CTAvxyjjjXE/GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNjAxMjUxNjA2MjVaFw0yNjAxMjgxOTA1MjVaMDMxMTAvBgNV BAMTKDhDNjBBREJFOEY1M0M1RkZDMjU5NjdDRTI0RTdFRTg1RjZGMUJEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82MxEP5k0auz1QX9cgQTrNfTw WCS5Rn18FcS9JH92w2cmDUsOu4VuFArY1aptsO/MjDPpaxnNCTwKs8bjJYW/LtEC twTT/2+RCI72GkQev4bZ1P7FfCdGE+aQbTNBaC2Rprd0T3sM8OtOxIorbTwdyOnt vARz3X6ZbZNnC0nWCm2tPlgoZoAivqmMiBmRqQ0dzSrn6ZmvlbKVZ9FeJ4yCZZ0N EacR2856sgs0o1u3wbGweH3lBlE9K38idYGfQBvQr3HdTsl35eHHVB6LD6Ro3lvK VQh8NI/H74eitLyjejZ10qqaTFnyRMhi/zHRo8SuA/vlXJvyWZzteaeTLLbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGCtvo9Txf/CWWfOJOfuhfbxvYcwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJpCl42yPW/R+Bn70k3//A/mS637BOuruH3 FfCpGoqpS5Z72KOMZp9X9rIc4PcRobSxcndYWm5KmjgRgQBh9Uz0Asb0Qy2Tni0Z Ct48QsmRIm7yDBwlV6DrzqzeKCqUOnthT43LThP2/ZekLuYfOYYt/USThu9qSyKx v/OSyq7y3SwDwUV/QKttHpfAE749UR6H07EPwHdnHTZ4NMZaJ59ejXnfO8VcwkEs pQ6RWUsEGF1L35dH166bdnt6ETrb1jgBgOIHru88J6ioo0ApJOgtAFTOLPLPcaZd beNZDxxygNFKtKX0rL0fFG+zHt90P61MvLYAumHDSTUE2fFxLG8= -----END CERTIFICATE-----Generated at Mon Jan 26 02:33:04 2026 by rpki-client