This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: bCBEE/AzxP2jsfK/ckwx2sRyR+sY5l9iq0G/40nxz0o= Subject key identifier: A6:D0:77:41:4E:C1:47:49:C5:E8:31:75:5A:C4:D4:81:A9:98:1D:23 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 252CEBE7181F4074C17BD1CDB17ACE477E75ABBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 028A Signing time: Sun 25 Jan 2026 05:00:59 +0000 Manifest this update: Sun 25 Jan 2026 04:55:59 +0000 Manifest next update: Wed 28 Jan 2026 15:20:59 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: DciChcaboUfsrBY3fVm5PdQ5x8eTMjGie48Xu/WwfhY=) 3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2c:eb:e7:18:1f:40:74:c1:7b:d1:cd:b1:7a:ce:47:7e:75:ab:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Jan 25 04:55:59 2026 GMT Not After : Jan 28 15:20:59 2026 GMT Subject: CN=A6D077414EC14749C5E831755AC4D481A9981D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:68:34:97:c0:f0:0b:26:a0:97:16:8a:a4:a6: 8e:ac:58:26:ea:be:64:9a:68:99:7f:b1:07:5b:c7: a3:93:ff:47:fb:72:88:c6:93:51:bb:e9:25:7d:71: 96:ac:6a:0d:d9:49:94:13:68:35:95:09:7d:5e:f4: c5:d5:8b:3a:15:67:57:97:0c:36:3f:bb:de:e9:51: 91:23:78:8d:39:86:d6:41:4e:4f:9f:36:d3:48:89: 17:a6:ab:b9:a8:8f:f1:83:7a:92:0e:46:2d:47:5b: ec:f7:d8:b0:0c:fb:59:2f:04:5c:9a:55:19:dd:32: d1:1d:9c:8a:51:8f:7d:e3:7b:73:9b:23:81:17:7a: 2c:aa:01:63:82:9f:57:7d:bf:04:42:b2:21:66:a4: 07:09:87:14:08:a3:34:01:11:c9:57:c9:c9:d2:11: 27:f0:9d:e4:3f:5f:dc:db:21:34:e3:bb:66:9a:48: 4d:7e:be:49:eb:d1:7c:56:84:93:61:54:1a:d2:71: 0e:4c:c6:60:6a:bd:79:22:a3:a3:75:90:23:f2:cc: 24:f7:b5:d2:42:42:05:53:db:47:19:17:31:bb:8a: fe:89:95:22:cc:82:8d:d7:4b:92:00:66:a8:da:cd: c6:b1:e9:19:3d:c8:3b:ca:b4:d8:4b:60:da:65:77: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D0:77:41:4E:C1:47:49:C5:E8:31:75:5A:C4:D4:81:A9:98:1D:23 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:29:b9:f6:4b:4b:ca:c5:86:4a:f5:f0:f8:08:8a:ee:cf:61: b3:e1:21:65:47:74:93:52:51:1b:b0:e2:c9:83:2a:3e:a9:c4: ce:9a:40:18:d3:2e:69:2d:52:fa:c2:fb:f7:12:b8:1c:b6:0f: 9a:c6:07:67:26:3d:bf:b2:bb:3d:06:96:a8:a4:dc:90:c2:38: f3:5c:0e:a8:e4:38:ca:03:60:ba:db:05:07:cd:6f:64:41:bf: c0:cc:b8:48:94:a3:2c:00:3d:46:81:63:4b:54:a6:fe:64:32: 87:89:9f:26:b7:35:2d:0b:85:9f:17:66:c2:64:80:c0:09:ef: ee:0d:1a:93:80:72:41:44:05:4a:29:78:d8:17:f4:8d:61:4e: 27:b3:93:35:d9:aa:9a:b5:dd:d1:6e:38:78:d4:a9:c9:d8:27: 92:db:1e:2d:68:ef:19:ba:6e:1c:3a:e3:27:a1:d5:c9:e8:e9: 95:ae:2f:8d:bc:35:b2:c2:c0:d6:0b:84:bd:b8:26:61:2e:17: 88:bb:bb:4f:22:2f:2c:fb:96:ae:31:e1:10:ab:ac:82:77:0f: 04:32:bd:4d:fd:68:75:08:c7:fc:86:2b:22:44:10:39:a4:39: ca:e9:7e:ec:54:c6:e1:6f:2d:ce:e4:3a:5b:36:54:f5:2c:1e: 12:a3:81:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSzr5xgfQHTBe9HNsXrOR351q7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNjAxMjUwNDU1NTlaFw0yNjAxMjgxNTIwNTlaMDMxMTAvBgNV BAMTKEE2RDA3NzQxNEVDMTQ3NDlDNUU4MzE3NTVBQzRENDgxQTk5ODFEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiaDSXwPALJqCXFoqkpo6sWCbq vmSaaJl/sQdbx6OT/0f7cojGk1G76SV9cZasag3ZSZQTaDWVCX1e9MXVizoVZ1eX DDY/u97pUZEjeI05htZBTk+fNtNIiRemq7moj/GDepIORi1HW+z32LAM+1kvBFya VRndMtEdnIpRj33je3ObI4EXeiyqAWOCn1d9vwRCsiFmpAcJhxQIozQBEclXycnS ESfwneQ/X9zbITTju2aaSE1+vknr0XxWhJNhVBrScQ5MxmBqvXkio6N1kCPyzCT3 tdJCQgVT20cZFzG7iv6JlSLMgo3XS5IAZqjazcax6Rk9yDvKtNhLYNpld3u7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptB3QU7BR0nF6DF1WsTUgamYHSMwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYpufZLS8rFhkr18PgIiu7PYbPhIWVHdJNS URuw4smDKj6pxM6aQBjTLmktUvrC+/cSuBy2D5rGB2cmPb+yuz0Glqik3JDCOPNc DqjkOMoDYLrbBQfNb2RBv8DMuEiUoywAPUaBY0tUpv5kMoeJnya3NS0LhZ8XZsJk gMAJ7+4NGpOAckFEBUopeNgX9I1hTiezkzXZqpq13dFuOHjUqcnYJ5LbHi1o7xm6 bhw64yeh1cno6ZWuL428NbLCwNYLhL24JmEuF4i7u08iLyz7lq4x4RCrrIJ3DwQy vU39aHUIx/yGKyJEEDmkOcrpfuxUxuFvLc7kOls2VPUsHhKjgcE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:42 2026 by rpki-client