This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: YG/hJoWurqWq52wu2eNAVhCjKL4Nu1EHzo95faUxiDE= Subject key identifier: DC:F2:8A:AD:A1:F4:D8:A1:38:AD:38:84:08:61:7D:EC:25:36:56:A5 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 4BEFC1F16EC98726FAF3D8A5CA35B76110A8070A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 03A5 Signing time: Sat 24 Jan 2026 13:20:05 +0000 Manifest this update: Sat 24 Jan 2026 13:15:05 +0000 Manifest next update: Tue 27 Jan 2026 22:48:05 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: Ss5RncKkZcdyTG5T8jbvokNUbc1Mu4STSAktkOIthTA=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ef:c1:f1:6e:c9:87:26:fa:f3:d8:a5:ca:35:b7:61:10:a8:07:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Jan 24 13:15:05 2026 GMT Not After : Jan 27 22:48:05 2026 GMT Subject: CN=DCF28AADA1F4D8A138AD388408617DEC253656A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4b:96:76:bb:6e:21:7e:b5:a2:31:15:63:e2: 7a:38:8c:bc:1c:d2:b1:ce:a0:07:24:a0:f7:d5:7d: 3f:82:fb:2d:3f:00:92:86:e7:91:92:9f:21:3d:87: b7:37:1d:86:d0:ef:81:19:ea:a6:41:ab:ec:82:54: a1:ae:be:b7:f1:6c:79:6a:99:78:8c:b2:bb:da:e4: 5e:92:c1:cb:2a:17:63:53:58:7a:0e:f3:c8:e5:13: e4:18:cd:7f:09:f2:88:b3:9b:de:f8:cf:39:8a:e9: a3:d1:22:e5:d8:89:85:c5:da:4a:b6:b3:e3:08:b4: cc:11:35:4b:d1:90:76:a8:8b:7c:a7:1e:39:67:13: e9:5d:5d:66:44:bb:90:ff:c2:3c:b5:e5:63:15:98: fc:f2:c0:c0:8d:ec:71:e6:62:44:ba:e6:d4:7e:7b: c8:30:34:e5:d9:24:83:a4:8d:50:b3:fa:ad:17:eb: cc:27:47:38:27:57:03:d1:28:5c:be:4d:f7:ee:99: 37:b4:f5:e1:17:28:37:ee:e6:23:9b:5e:6d:f9:eb: 93:a8:29:b2:21:30:2f:a4:10:94:e7:fc:dd:0f:76: 44:c8:8a:5e:55:0b:70:74:c0:d1:54:2a:bf:9b:7f: bb:c4:64:e6:c7:64:fc:60:da:a5:23:dc:13:8c:ab: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:8A:AD:A1:F4:D8:A1:38:AD:38:84:08:61:7D:EC:25:36:56:A5 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:fd:91:02:d9:09:d9:aa:ff:99:57:85:af:87:8e:9c:f2:e2: 5f:7d:02:f9:30:c3:a6:d7:3a:2b:a0:28:dd:6d:4c:96:0b:3b: dc:e0:c7:ca:76:1d:86:1e:77:89:da:8f:2f:a0:9a:93:5d:94: 4d:d8:cb:b1:c8:2b:3e:24:c4:e2:97:09:c9:f5:1b:7f:a3:f8: 2a:74:76:e1:13:4f:a8:11:57:8c:75:aa:e0:e0:ae:bb:de:a0: 91:6b:05:ca:0a:d9:6c:cf:d8:13:91:6c:c2:84:b3:f1:07:21: 20:45:62:f7:57:aa:ea:7c:e6:7e:c8:38:e5:e5:f4:3a:6f:fa: 0d:5c:db:08:d3:f1:f3:17:4f:3f:2c:ba:ec:74:d3:c2:85:00: 85:e3:ab:90:48:5f:bd:21:a5:86:b7:a6:e3:cd:7e:28:7d:9d: d4:c0:04:97:97:9a:06:b7:06:dd:67:00:0d:d2:7f:fa:3d:42: 5e:fe:54:68:8d:e5:a0:19:66:8b:fa:39:e0:bf:44:a1:ce:9b: fe:28:dd:d0:12:fb:9c:15:c7:cc:03:29:8f:73:3d:8b:bd:84: 18:a0:b1:2a:ac:04:d9:67:26:03:8b:d3:d5:9e:7e:86:3e:0e: e9:95:3c:1e:eb:af:0f:7d:28:c8:9c:bc:1d:79:af:a5:ee:f2: 9c:2e:49:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+/B8W7Jhyb689ilyjW3YRCoBwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNjAxMjQxMzE1MDVaFw0yNjAxMjcyMjQ4MDVaMDMxMTAvBgNV BAMTKERDRjI4QUFEQTFGNEQ4QTEzOEFEMzg4NDA4NjE3REVDMjUzNjU2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhS5Z2u24hfrWiMRVj4no4jLwc 0rHOoAckoPfVfT+C+y0/AJKG55GSnyE9h7c3HYbQ74EZ6qZBq+yCVKGuvrfxbHlq mXiMsrva5F6SwcsqF2NTWHoO88jlE+QYzX8J8oizm974zzmK6aPRIuXYiYXF2kq2 s+MItMwRNUvRkHaoi3ynHjlnE+ldXWZEu5D/wjy15WMVmPzywMCN7HHmYkS65tR+ e8gwNOXZJIOkjVCz+q0X68wnRzgnVwPRKFy+TffumTe09eEXKDfu5iObXm3565Oo KbIhMC+kEJTn/N0PdkTIil5VC3B0wNFUKr+bf7vEZObHZPxg2qUj3BOMq8G1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3PKKraH02KE4rTiECGF97CU2VqUwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP9kQLZCdmq/5lXha+Hjpzy4l99Avkww6bX OiugKN1tTJYLO9zgx8p2HYYed4najy+gmpNdlE3Yy7HIKz4kxOKXCcn1G3+j+Cp0 duETT6gRV4x1quDgrrveoJFrBcoK2WzP2BORbMKEs/EHISBFYvdXqup85n7IOOXl 9Dpv+g1c2wjT8fMXTz8suux008KFAIXjq5BIX70hpYa3puPNfih9ndTABJeXmga3 Bt1nAA3Sf/o9Ql7+VGiN5aAZZov6OeC/RKHOm/4o3dAS+5wVx8wDKY9zPYu9hBig sSqsBNlnJgOL09WefoY+DumVPB7rrw99KMicvB15r6Xu8pwuSc4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:13 2026 by rpki-client