This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: EWMeL5jeHt/zOlTScSLQexotkK0/hcJFmASTUyz0VAo= Subject key identifier: E9:4E:03:E7:96:0C:31:E9:EE:6C:66:29:71:4C:64:D8:F9:F2:AC:CD Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 430897600E761FA6EEFBADC9A249BF488F38F464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: C2 Signing time: Sun 25 Jan 2026 19:21:25 +0000 Manifest this update: Sun 25 Jan 2026 19:16:25 +0000 Manifest next update: Thu 29 Jan 2026 04:07:25 +0000 Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) 2: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: Y7vtHG3ygtawUx0o8xsdKI9G2D+iUWdhjKJK+CM3IJc=) 3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:08:97:60:0e:76:1f:a6:ee:fb:ad:c9:a2:49:bf:48:8f:38:f4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Jan 25 19:16:25 2026 GMT Not After : Jan 29 04:07:25 2026 GMT Subject: CN=E94E03E7960C31E9EE6C6629714C64D8F9F2ACCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:ca:2b:5a:13:7f:a6:56:4d:71:89:56:f0: e6:8e:62:64:d2:2f:eb:11:b3:25:62:2b:bd:d8:9e: fd:63:6b:bd:72:18:49:d4:de:52:64:b5:02:f3:e3: d6:cd:a0:7a:c8:21:53:db:9e:23:cd:5b:51:a7:f7: d5:a3:77:af:ed:eb:07:5e:5d:78:61:4c:39:60:8b: c6:48:38:da:6f:a8:d5:ad:09:05:87:b1:41:e5:0f: bb:de:7b:e2:74:8b:78:75:28:b1:c7:c6:0f:08:af: 4c:34:97:08:c7:46:f0:40:92:93:f2:33:e5:db:74: 37:9c:2b:d0:a3:42:a4:a9:fd:e4:62:3e:79:c8:5c: c5:49:a4:e7:64:6e:fb:12:13:5e:e2:b7:8f:52:95: 59:9f:ac:a4:a8:f6:1b:c1:43:a4:74:c4:ff:30:22: 0b:71:6d:c7:df:e1:0c:0a:a8:f2:1c:5c:ef:60:85: 55:9d:23:18:20:03:75:24:fe:24:9f:03:11:c3:2d: 08:ee:c1:0c:18:6b:cc:3e:af:a6:ef:44:1f:6e:c4: a2:5a:7e:97:93:89:ad:79:28:75:c6:a6:81:7d:bf: 9c:64:f3:03:4e:14:9b:c0:5c:d4:43:d3:dc:9e:02: a8:d7:a9:b6:bb:9e:54:0b:bb:a2:f7:dc:1f:a1:d3: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4E:03:E7:96:0C:31:E9:EE:6C:66:29:71:4C:64:D8:F9:F2:AC:CD X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:52:bf:f0:41:6c:4f:55:b2:67:9c:7b:5d:a8:74:1b:db:3e: e3:fd:7a:52:8e:cd:63:42:eb:ad:44:ad:e4:cf:7b:70:ff:6d: 60:50:67:ab:a9:d9:51:44:58:9e:92:d5:e4:82:cd:ba:11:dc: 48:ea:df:6f:cf:37:bb:e8:d2:ff:a8:77:34:47:eb:17:b2:4f: d8:63:5b:ec:46:79:c3:1b:9c:c2:b3:49:63:e9:c3:b0:0c:21: 0f:f4:bf:19:57:7d:a6:d3:4a:95:ff:6b:77:b6:0b:8b:1f:4d: 8e:78:94:88:a2:30:53:01:f4:d7:52:46:fd:0e:1e:40:52:30: 34:18:0c:cc:2b:60:41:4c:78:53:e1:fc:8d:4f:ed:82:00:95: b0:a4:1c:03:9a:b0:4f:24:dd:74:04:21:a4:e9:e7:1b:45:19: 8b:df:e1:4f:a1:d8:78:d6:c7:8a:4d:96:9c:a7:84:b8:83:4b: 89:18:d1:8e:67:9a:a5:95:93:03:45:f6:fc:e5:75:1f:78:51: b0:8e:a3:ab:bd:7a:50:5f:ae:52:e4:01:1c:85:0b:66:f0:2d: f2:a0:1e:78:b4:42:fb:32:70:7d:8a:e3:c2:a8:df:02:9e:b0: 97:fc:3c:61:34:b8:8a:64:e7:88:e1:cc:59:c8:5d:71:56:76: 7f:e5:88:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwiXYA52H6bu+63Jokm/SI849GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNjAxMjUxOTE2MjVaFw0yNjAxMjkwNDA3MjVaMDMxMTAvBgNV BAMTKEU5NEUwM0U3OTYwQzMxRTlFRTZDNjYyOTcxNEM2NEQ4RjlGMkFDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfeMorWhN/plZNcYlW8OaOYmTS L+sRsyViK73Ynv1ja71yGEnU3lJktQLz49bNoHrIIVPbniPNW1Gn99Wjd6/t6wde XXhhTDlgi8ZIONpvqNWtCQWHsUHlD7vee+J0i3h1KLHHxg8Ir0w0lwjHRvBAkpPy M+XbdDecK9CjQqSp/eRiPnnIXMVJpOdkbvsSE17it49SlVmfrKSo9hvBQ6R0xP8w Igtxbcff4QwKqPIcXO9ghVWdIxggA3Uk/iSfAxHDLQjuwQwYa8w+r6bvRB9uxKJa fpeTia15KHXGpoF9v5xk8wNOFJvAXNRD09yeAqjXqba7nlQLu6L33B+h04mBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6U4D55YMMenubGYpcUxk2PnyrM0wHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANFSv/BBbE9Vsmece12odBvbPuP9elKOzWNC 661EreTPe3D/bWBQZ6up2VFEWJ6S1eSCzboR3Ejq32/PN7vo0v+odzRH6xeyT9hj W+xGecMbnMKzSWPpw7AMIQ/0vxlXfabTSpX/a3e2C4sfTY54lIiiMFMB9NdSRv0O HkBSMDQYDMwrYEFMeFPh/I1P7YIAlbCkHAOasE8k3XQEIaTp5xtFGYvf4U+h2HjW x4pNlpynhLiDS4kY0Y5nmqWVkwNF9vzldR94UbCOo6u9elBfrlLkARyFC2bwLfKg Hni0QvsycH2K48Ko3wKesJf8PGE0uIpk54jhzFnIXXFWdn/liEw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:21:54 2026 by rpki-client