This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: MJ+HifhA4XgfN0iYJt2DLSTBraB+YzBW5ITsZUW4+aU= Subject key identifier: FF:94:7F:F5:EF:0A:96:E5:D5:E3:5C:09:43:62:7A:C1:A1:C1:0D:D2 Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 44B826313EC66E025976778B95281C98E996CCB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: 0164 Signing time: Sat 24 Jan 2026 01:52:32 +0000 Manifest this update: Sat 24 Jan 2026 01:47:32 +0000 Manifest next update: Tue 27 Jan 2026 08:12:32 +0000 Files and hashes: 1: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=) 2: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: j8buLaYyX93IJJ35dBc+TVoaunlQFyKjvUawdjK6DQA=) 3: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b8:26:31:3e:c6:6e:02:59:76:77:8b:95:28:1c:98:e9:96:cc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Jan 24 01:47:32 2026 GMT Not After : Jan 27 08:12:32 2026 GMT Subject: CN=FF947FF5EF0A96E5D5E35C0943627AC1A1C10DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:25:05:9d:ff:b1:06:f7:6c:2b:d7:70:98: 8b:bc:0d:93:d4:e7:40:42:41:24:00:9f:16:60:b7: cc:98:80:0a:6e:f3:77:f1:fb:37:74:4f:93:c7:1a: c8:37:49:f0:3c:e3:c8:f5:18:df:5c:25:38:f3:8b: ad:d7:71:9e:0d:52:09:06:0c:8f:c0:a1:6b:62:4c: db:c9:9d:94:bd:3e:43:49:8d:7f:03:9f:61:56:33: 68:00:91:98:a3:99:ed:33:6a:0a:dd:fc:33:6c:a0: 47:fe:40:91:62:c3:ac:d8:ae:15:05:7f:db:09:82: d2:4e:64:10:3f:42:fa:8c:59:95:29:a7:6a:4c:ee: 8d:01:2e:db:3d:ef:9e:e7:b0:03:80:64:07:59:ef: 13:a0:2a:73:1b:c0:60:cd:b1:60:1d:0b:41:0b:87: 8d:0c:fa:71:ac:2e:c8:c5:bf:18:0c:b1:3f:17:a3: 1d:5b:d5:62:a7:0a:da:a3:60:e8:21:31:cd:b8:ad: f2:65:29:66:59:55:a3:ab:1d:40:1d:7e:16:86:cd: bc:66:f5:7c:06:c8:25:9e:25:aa:5f:c1:39:7b:50: 01:a1:e2:0b:59:bb:02:ee:48:2a:e2:24:44:e9:c1: 48:5d:c4:2c:9b:e4:43:70:92:57:d6:66:3f:26:f8: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:7F:F5:EF:0A:96:E5:D5:E3:5C:09:43:62:7A:C1:A1:C1:0D:D2 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8d:55:b5:d9:2f:0b:18:b5:e2:f8:40:fd:49:1d:66:32:5b: 22:e2:f3:c8:01:dd:b3:16:7c:2a:f1:96:17:eb:71:2d:c9:a4: 0f:7f:51:53:4d:8b:d3:59:40:b1:a4:08:82:22:c2:91:07:6a: 07:e8:5b:97:53:d1:e3:0e:db:5b:9a:7c:83:22:fc:28:bc:c9: b2:15:cf:cf:a5:03:ab:ca:93:0d:81:39:52:51:4e:79:ff:c0: f8:ec:9b:e9:4c:e6:61:53:0f:0e:92:36:c8:f6:ad:b8:a3:72: 2c:e8:a4:c2:42:c3:bf:09:20:19:bd:a6:0f:ac:82:49:c3:ba: cd:5e:d8:75:5b:11:e0:93:28:ec:fb:ee:3e:6e:e9:bf:9a:38: 3f:0e:b5:9e:7f:73:d2:db:52:41:32:7d:9b:72:32:f0:ae:a4: 9f:b2:02:b1:07:9e:48:28:fb:8c:52:58:36:4f:ba:aa:28:bd: 3a:2f:ca:c0:bb:bf:f8:f3:68:0e:a6:9c:b1:ff:de:c0:5a:fd: 18:40:6a:a1:49:8d:ab:36:18:b4:c1:96:87:fe:e4:34:2b:86: 2f:c0:62:b2:2b:e1:1f:a0:ec:bf:9c:84:d5:c6:ab:18:e9:13: 86:7a:45:5b:80:3c:38:ed:97:f2:32:eb:66:90:fb:16:00:b8: b5:a6:7a:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLgmMT7GbgJZdneLlSgcmOmWzLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNjAxMjQwMTQ3MzJaFw0yNjAxMjcwODEyMzJaMDMxMTAvBgNV BAMTKEZGOTQ3RkY1RUYwQTk2RTVENUUzNUMwOTQzNjI3QUMxQTFDMTBERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NiUFnf+xBvdsK9dwmIu8DZPU 50BCQSQAnxZgt8yYgApu83fx+zd0T5PHGsg3SfA848j1GN9cJTjzi63XcZ4NUgkG DI/AoWtiTNvJnZS9PkNJjX8Dn2FWM2gAkZijme0zagrd/DNsoEf+QJFiw6zYrhUF f9sJgtJOZBA/QvqMWZUpp2pM7o0BLts9757nsAOAZAdZ7xOgKnMbwGDNsWAdC0EL h40M+nGsLsjFvxgMsT8Xox1b1WKnCtqjYOghMc24rfJlKWZZVaOrHUAdfhaGzbxm 9XwGyCWeJapfwTl7UAGh4gtZuwLuSCriJETpwUhdxCyb5ENwklfWZj8m+D93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5R/9e8KluXV41wJQ2J6waHBDdIwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWNVbXZLwsYteL4QP1JHWYyWyLi88gB3bMW fCrxlhfrcS3JpA9/UVNNi9NZQLGkCIIiwpEHagfoW5dT0eMO21uafIMi/Ci8ybIV z8+lA6vKkw2BOVJRTnn/wPjsm+lM5mFTDw6SNsj2rbijcizopMJCw78JIBm9pg+s gknDus1e2HVbEeCTKOz77j5u6b+aOD8OtZ5/c9LbUkEyfZtyMvCupJ+yArEHnkgo +4xSWDZPuqoovTovysC7v/jzaA6mnLH/3sBa/RhAaqFJjas2GLTBlof+5DQrhi/A YrIr4R+g7L+chNXGqxjpE4Z6RVuAPDjtl/Iy62aQ+xYAuLWmeqY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:04 2026 by rpki-client