This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: xufVQJOEFDSQA6FtzxS2dLtB8jI8ZNOEeonR5ZQLXN4= Subject key identifier: A6:1B:27:55:E1:F9:C6:14:2C:20:F8:82:64:E9:ED:FA:CC:44:80:02 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 6F3B0D56F8E1592C4475258C55132C2CAE92E4A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 027B Signing time: Sat 24 Jan 2026 10:10:03 +0000 Manifest this update: Sat 24 Jan 2026 10:05:03 +0000 Manifest next update: Tue 27 Jan 2026 12:25:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) 2: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) 3: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: c4fiz5QCeOM47kM1zR31aojsfx8gzELCazDeYkxP4L4=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3b:0d:56:f8:e1:59:2c:44:75:25:8c:55:13:2c:2c:ae:92:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Jan 24 10:05:03 2026 GMT Not After : Jan 27 12:25:03 2026 GMT Subject: CN=A61B2755E1F9C6142C20F88264E9EDFACC448002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:9a:f5:0d:45:b0:2c:2e:bd:29:6d:b1:e3: 61:0c:33:bb:e0:67:83:21:91:a5:1f:2f:61:67:ed: f3:e5:91:4c:79:cb:d4:f5:40:5d:b5:df:aa:97:88: 8f:18:a9:17:bd:f0:68:b4:64:05:4a:a6:e1:56:d1: 2b:6d:eb:c0:88:d7:e6:e7:e3:21:24:b8:72:28:e9: d8:9b:87:19:a2:2d:8a:a8:d0:5a:9a:3a:dc:e8:0b: b4:d2:58:57:d9:b2:3a:0d:13:c8:12:a0:b1:0c:ea: 57:8b:24:38:f2:ec:d6:82:0d:2d:3d:2d:6e:e7:f9: 9b:b6:e5:6a:00:be:85:f6:00:bd:2b:31:2b:67:ef: 72:72:a5:ec:8d:45:bd:e6:5a:8c:78:be:b8:97:21: 87:e1:ff:5f:f1:fc:51:8a:0e:dd:91:0f:e6:8a:dd: 3a:44:88:b8:32:7b:2e:84:de:69:a1:15:be:3c:7b: 97:f1:84:15:e7:11:4c:e1:b2:97:a0:71:68:31:4c: 4a:cc:fa:11:bb:8d:7c:08:2c:c8:e2:6c:7e:a8:b4: 20:17:63:05:6d:eb:f3:e3:cd:bd:d5:ca:dd:05:87: 95:1b:66:bc:e2:46:e1:85:0a:d6:16:9c:1f:a7:33: 74:e8:3a:8f:10:1b:b5:6f:b2:13:2f:46:4a:1d:f6: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:27:55:E1:F9:C6:14:2C:20:F8:82:64:E9:ED:FA:CC:44:80:02 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:63:e9:9c:63:c3:cd:2b:d7:52:e5:60:01:88:79:fa:8a:61: 68:a1:5b:55:91:b6:cc:23:a5:60:11:53:60:8c:b6:cf:7d:71: 01:05:f0:11:5b:7c:63:87:6f:84:e9:b6:a3:bd:09:1c:e4:ee: c9:1f:f5:b5:6c:f9:d5:b5:db:fb:34:a5:c1:f7:ae:77:28:e7: db:e0:57:53:c4:3f:7e:f0:31:72:e5:62:d6:d2:9a:53:b6:e2: d2:1a:07:65:cd:a7:15:ec:c7:d2:42:5f:13:c9:90:2d:ee:4b: 89:bb:81:a7:b6:4a:d0:3b:e9:2d:c7:89:50:45:a3:30:8d:be: 70:16:56:a1:bf:03:b9:bc:c2:23:bc:af:90:f2:77:30:63:02: bf:98:3b:56:81:d1:f0:59:f9:7e:d5:2e:dd:b2:2c:08:de:a4: f0:82:02:cf:20:79:5e:e5:cd:c0:15:1f:24:45:cb:26:de:14: 26:bc:78:01:17:45:6e:1b:b6:59:d7:99:ef:1f:aa:23:51:18: c0:5c:bd:75:97:07:59:9c:7e:6a:2c:7b:fd:1d:bf:90:bb:f9: ce:cb:64:e0:56:7e:6c:6d:83:e1:ca:fd:c3:21:c1:88:ca:03: 23:51:00:24:9a:e4:8c:48:8f:8e:a9:75:44:5d:ee:25:f2:f1: a2:7f:5c:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzsNVvjhWSxEdSWMVRMsLK6S5KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNjAxMjQxMDA1MDNaFw0yNjAxMjcxMjI1MDNaMDMxMTAvBgNV BAMTKEE2MUIyNzU1RTFGOUM2MTQyQzIwRjg4MjY0RTlFREZBQ0M0NDgwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RJr1DUWwLC69KW2x42EMM7vg Z4MhkaUfL2Fn7fPlkUx5y9T1QF2136qXiI8YqRe98Gi0ZAVKpuFW0Stt68CI1+bn 4yEkuHIo6dibhxmiLYqo0FqaOtzoC7TSWFfZsjoNE8gSoLEM6leLJDjy7NaCDS09 LW7n+Zu25WoAvoX2AL0rMStn73JypeyNRb3mWox4vriXIYfh/1/x/FGKDt2RD+aK 3TpEiLgyey6E3mmhFb48e5fxhBXnEUzhspegcWgxTErM+hG7jXwILMjibH6otCAX YwVt6/Pjzb3Vyt0Fh5UbZrziRuGFCtYWnB+nM3ToOo8QG7VvshMvRkod9uMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphsnVeH5xhQsIPiCZOnt+sxEgAIwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdj6Zxjw80r11LlYAGIefqKYWihW1WRtswj pWARU2CMts99cQEF8BFbfGOHb4TptqO9CRzk7skf9bVs+dW12/s0pcH3rnco59vg V1PEP37wMXLlYtbSmlO24tIaB2XNpxXsx9JCXxPJkC3uS4m7gae2StA76S3HiVBF ozCNvnAWVqG/A7m8wiO8r5DydzBjAr+YO1aB0fBZ+X7VLt2yLAjepPCCAs8geV7l zcAVHyRFyybeFCa8eAEXRW4btlnXme8fqiNRGMBcvXWXB1mcfmose/0dv5C7+c7L ZOBWfmxtg+HK/cMhwYjKAyNRACSa5IxIj46pdURd7iXy8aJ/XMA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:28 2026 by rpki-client