This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: DQTty5uAZSoxQUH8fON+xkshUlVuaw2sfk2yZ9+/uiQ= Subject key identifier: B1:B6:03:F7:78:DA:B6:18:0B:4F:BA:32:6C:05:41:8A:AD:09:2D:6C Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 3A0F605DE19B1BC16C65AD7EF9A40338CD2207C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 09:02:18 +0000 Manifest this update: Sat 24 Jan 2026 08:57:18 +0000 Manifest next update: Tue 27 Jan 2026 18:29:18 +0000 Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 2: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: NqHTI2u60Vx3qTa2DVsdMiiLwWRMRFG5/qzJjOHaOd4=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0f:60:5d:e1:9b:1b:c1:6c:65:ad:7e:f9:a4:03:38:cd:22:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Jan 24 08:57:18 2026 GMT Not After : Jan 27 18:29:18 2026 GMT Subject: CN=B1B603F778DAB6180B4FBA326C05418AAD092D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:40:80:ec:ae:6d:dc:0b:ee:b4:fb:28:25: 98:db:bc:47:69:c9:12:b8:5d:d4:8c:31:80:1c:38: 1a:a1:36:cd:01:7a:b3:ce:79:ea:b6:c4:26:d0:f7: 66:3c:05:54:f3:aa:2c:f4:31:a7:96:3a:85:68:8e: e5:4b:ef:b6:64:87:fb:63:bc:f2:97:bc:25:1b:25: 6b:c8:ff:17:70:a2:6d:28:d7:36:f2:1c:56:de:cc: 11:3e:63:c4:f7:12:d7:c1:71:67:87:eb:da:9d:32: e1:f7:70:50:ce:d1:45:2e:da:4d:e0:10:36:41:5d: ad:30:b6:f6:f9:12:63:0b:f7:9b:6d:84:b8:bf:87: 76:f6:a6:3d:01:6a:a1:fc:1c:df:c0:03:f4:c2:42: 9c:83:95:21:8e:b2:a3:d6:fe:60:2f:36:12:da:09: de:b6:1c:3b:22:14:ef:d0:ed:82:a1:79:a2:20:09: 1b:3a:c5:80:79:ce:ea:ea:47:31:82:d7:e5:83:18: db:45:cc:27:63:3f:41:e2:4b:5c:51:69:5f:c3:81: 94:a6:9c:8c:45:23:f4:3c:1a:09:8a:48:88:ac:53: 7c:e9:9f:fe:e1:57:d0:1e:9f:ef:8c:42:98:6d:8b: 45:81:5b:3e:2a:00:e4:f6:22:71:38:86:23:fd:18: 6a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B6:03:F7:78:DA:B6:18:0B:4F:BA:32:6C:05:41:8A:AD:09:2D:6C X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c7:77:2d:fb:a1:f2:3d:f6:e1:08:0f:70:7a:9a:73:27:7a: 15:4c:dd:7a:40:31:61:d6:4d:ae:88:45:88:25:b3:ec:b2:71: e6:c9:2b:4c:ce:30:ec:68:64:f5:ac:46:3c:4f:ab:5d:e2:41: e3:67:c9:d1:86:ba:93:fa:c4:75:56:df:c8:31:71:3c:40:39: 7c:8b:33:ad:0e:03:1d:e2:2d:bc:f6:e6:1e:11:a0:c7:44:a8: 48:82:41:b2:91:3b:d6:a4:89:7c:9e:6c:b3:91:27:3a:b7:75: 2f:08:bf:e3:d9:dd:52:b0:2c:04:35:2d:e9:1a:94:8a:47:73: f5:ee:9d:ab:ab:57:e7:0c:12:95:26:64:d0:2a:26:70:4d:e5: ad:84:46:c3:04:72:a9:4d:45:03:fe:72:8c:98:2d:45:33:09: ea:1d:75:4f:73:4d:ff:bc:5d:7c:a6:b2:e8:31:fc:91:7e:8c: e6:d7:60:28:c3:87:46:08:48:52:6a:c6:a1:5e:3a:f5:ac:44: 85:80:d7:6d:c9:a9:af:bf:8f:30:6e:58:5a:20:54:d1:7d:27: d0:59:5e:a9:5f:87:3f:57:a9:09:f1:52:98:fd:2d:34:4e:cc: 23:6a:cb:69:46:07:c1:85:58:11:93:6a:c5:b2:b5:6c:44:d4: 4c:50:9d:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOg9gXeGbG8FsZa1++aQDOM0iB8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNjAxMjQwODU3MThaFw0yNjAxMjcxODI5MThaMDMxMTAvBgNV BAMTKEIxQjYwM0Y3NzhEQUI2MTgwQjRGQkEzMjZDMDU0MThBQUQwOTJENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmh0CA7K5t3AvutPsoJZjbvEdp yRK4XdSMMYAcOBqhNs0BerPOeeq2xCbQ92Y8BVTzqiz0MaeWOoVojuVL77Zkh/tj vPKXvCUbJWvI/xdwom0o1zbyHFbezBE+Y8T3EtfBcWeH69qdMuH3cFDO0UUu2k3g EDZBXa0wtvb5EmML95tthLi/h3b2pj0BaqH8HN/AA/TCQpyDlSGOsqPW/mAvNhLa Cd62HDsiFO/Q7YKheaIgCRs6xYB5zurqRzGC1+WDGNtFzCdjP0HiS1xRaV/DgZSm nIxFI/Q8GgmKSIisU3zpn/7hV9Aen++MQphti0WBWz4qAOT2InE4hiP9GGp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsbYD93jathgLT7oybAVBiq0JLWwwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnHdy37ofI99uEID3B6mnMnehVM3XpAMWHW Ta6IRYgls+yycebJK0zOMOxoZPWsRjxPq13iQeNnydGGupP6xHVW38gxcTxAOXyL M60OAx3iLbz25h4RoMdEqEiCQbKRO9akiXyebLORJzq3dS8Iv+PZ3VKwLAQ1Leka lIpHc/XunaurV+cMEpUmZNAqJnBN5a2ERsMEcqlNRQP+coyYLUUzCeoddU9zTf+8 XXymsugx/JF+jObXYCjDh0YISFJqxqFeOvWsRIWA123Jqa+/jzBuWFogVNF9J9BZ Xqlfhz9XqQnxUpj9LTROzCNqy2lGB8GFWBGTasWytWxE1ExQnas= -----END CERTIFICATE-----Generated at Sun Jan 25 23:38:44 2026 by rpki-client