This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: 4k7L+7omiv0zFUcWh1vlsE+O2wXvj5J1bfN5C44HzAo= Subject key identifier: 27:B5:60:7A:CA:DC:C0:3D:8A:CC:A2:E7:C1:29:01:6E:32:88:24:28 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 782E76CFC6C312763C115782C363DB2BA608F681 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 023D Signing time: Sun 25 Jan 2026 06:51:55 +0000 Manifest this update: Sun 25 Jan 2026 06:46:55 +0000 Manifest next update: Wed 28 Jan 2026 12:07:55 +0000 Files and hashes: 1: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 2: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: XrWaP3tHfFVrd51RJuwr8hO7v/9CGUH4JTiA+6lqQHg=) 3: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 4: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 5: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 6: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 7: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 8: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 9: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 10: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 11: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 12: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 13: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 14: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 15: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 16: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 17: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2e:76:cf:c6:c3:12:76:3c:11:57:82:c3:63:db:2b:a6:08:f6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jan 25 06:46:55 2026 GMT Not After : Jan 28 12:07:55 2026 GMT Subject: CN=27B5607ACADCC03D8ACCA2E7C129016E32882428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:53:9e:d6:9b:9c:1d:fc:a7:fd:0c:3f:b9: 13:f0:ed:2d:02:8e:26:b6:86:be:7d:af:71:26:7f: 51:3b:c7:08:53:3d:47:b6:08:4f:aa:78:ea:d5:30: 64:90:a7:29:c9:e5:d2:b0:2d:20:87:65:c2:e5:08: ed:3d:07:ef:c9:8a:f2:2a:b1:50:ef:fb:7b:06:e4: b3:78:68:4d:6d:54:7d:0f:0c:ff:5c:0d:1d:84:3c: 4e:d1:d9:1c:6f:62:f6:07:b3:d8:d7:f2:75:3f:0f: 4d:d1:c8:76:a3:5b:12:dc:86:b2:f1:99:70:ba:f8: 75:4f:4b:f2:b4:e7:a1:3d:f9:80:72:81:90:3b:d0: 1d:8e:41:63:3c:2d:ce:9c:fd:5b:b2:20:51:2f:6c: 71:24:71:2f:29:a3:e3:b1:37:43:2d:69:fc:68:70: 24:2b:51:2e:6e:91:0c:22:ae:c1:89:e8:b7:63:e6: e1:c2:62:5a:13:2c:0c:80:00:42:c5:13:09:87:fb: af:0e:2b:63:0a:9d:08:be:7a:0a:68:9d:88:37:6c: c2:a3:32:7b:34:2b:10:ed:f6:cd:9e:67:25:c5:79: 88:7e:5b:ac:93:b7:1c:f9:c1:44:5c:0a:b3:a0:69: 30:21:a9:8d:87:01:8a:84:f7:55:af:c1:c1:c8:e4: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B5:60:7A:CA:DC:C0:3D:8A:CC:A2:E7:C1:29:01:6E:32:88:24:28 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ea:bd:7c:1f:6b:d6:e3:af:6f:71:a8:1e:86:6f:53:14:23: b3:4d:55:44:88:50:e5:a4:40:7e:e1:92:23:d6:7a:65:81:a2: 54:36:35:fc:3a:6d:85:3b:7e:d3:55:3a:6f:0b:45:a0:d7:a4: dd:a6:97:97:cc:f5:be:32:11:64:6b:4a:c2:ef:3c:6a:ff:ba: 53:d1:6a:4a:9e:0f:2b:66:ba:fd:30:ce:a7:4a:b1:5f:0f:a7: fe:e0:1d:1f:07:dd:68:e5:09:2d:fc:e3:db:ec:26:7a:7c:1d: db:c7:3f:4c:00:3f:eb:08:d7:f4:09:2f:5d:3a:33:bb:cf:e9: 5f:78:61:dd:4e:82:7f:26:4a:04:5b:30:0f:e6:01:b7:88:d9: 71:d4:d0:df:e3:b1:4c:bb:31:cd:46:8f:7d:14:41:e2:16:85: a5:b8:b7:50:a4:38:55:88:cd:98:ad:c7:24:80:e5:bb:d4:23: 65:0b:b4:e3:1c:d4:02:13:d9:42:66:96:4f:31:3d:6a:f6:16: 53:d0:fa:d0:d0:6d:2b:fc:14:13:c8:5c:e6:97:7f:f4:7f:86: 4f:e8:32:a6:74:ed:61:18:eb:fb:fb:a8:6c:82:b4:99:1d:e7: 70:64:6b:81:46:b5:10:45:19:cb:fd:22:82:54:8b:0d:2a:0b: 6e:c9:4b:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeC52z8bDEnY8EVeCw2PbK6YI9oEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjAxMjUwNjQ2NTVaFw0yNjAxMjgxMjA3NTVaMDMxMTAvBgNV BAMTKDI3QjU2MDdBQ0FEQ0MwM0Q4QUNDQTJFN0MxMjkwMTZFMzI4ODI0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZfVOe1pucHfyn/Qw/uRPw7S0C jia2hr59r3Emf1E7xwhTPUe2CE+qeOrVMGSQpynJ5dKwLSCHZcLlCO09B+/JivIq sVDv+3sG5LN4aE1tVH0PDP9cDR2EPE7R2RxvYvYHs9jX8nU/D03RyHajWxLchrLx mXC6+HVPS/K056E9+YBygZA70B2OQWM8Lc6c/VuyIFEvbHEkcS8po+OxN0Mtafxo cCQrUS5ukQwirsGJ6Ldj5uHCYloTLAyAAELFEwmH+68OK2MKnQi+egponYg3bMKj Mns0KxDt9s2eZyXFeYh+W6yTtxz5wURcCrOgaTAhqY2HAYqE91WvwcHI5ACTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ7VgesrcwD2KzKLnwSkBbjKIJCgwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXqvXwfa9bjr29xqB6Gb1MUI7NNVUSIUOWk QH7hkiPWemWBolQ2Nfw6bYU7ftNVOm8LRaDXpN2ml5fM9b4yEWRrSsLvPGr/ulPR akqeDytmuv0wzqdKsV8Pp/7gHR8H3WjlCS3849vsJnp8HdvHP0wAP+sI1/QJL106 M7vP6V94Yd1Ogn8mSgRbMA/mAbeI2XHU0N/jsUy7Mc1Gj30UQeIWhaW4t1CkOFWI zZitxySA5bvUI2ULtOMc1AIT2UJmlk8xPWr2FlPQ+tDQbSv8FBPIXOaXf/R/hk/o MqZ07WEY6/v7qGyCtJkd53Bka4FGtRBFGcv9IoJUiw0qC27JS/0= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:54 2026 by rpki-client