This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: waKOdH6aKyO7SoxYaqWdTssWvcERz6DUbfBxehmhudI= Subject key identifier: A4:74:CA:15:8A:BF:D1:C1:E7:CD:90:8C:6A:B9:75:0E:7B:43:CF:B6 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 331B4AA34FE310AEE093CAD4BA97C0AA57C8B302 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: C1 Signing time: Fri 23 Jan 2026 18:11:26 +0000 Manifest this update: Fri 23 Jan 2026 18:06:26 +0000 Manifest next update: Mon 26 Jan 2026 19:20:26 +0000 Files and hashes: 1: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: ognMaIR8OO7xilDxJeLuqB3ttzZf8RUyYtX22uFQ6Qg=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1b:4a:a3:4f:e3:10:ae:e0:93:ca:d4:ba:97:c0:aa:57:c8:b3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Jan 23 18:06:26 2026 GMT Not After : Jan 26 19:20:26 2026 GMT Subject: CN=A474CA158ABFD1C1E7CD908C6AB9750E7B43CFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:ee:03:9d:f7:5b:aa:ce:1a:d7:9d:30:b3: 10:7e:00:31:93:a6:0b:6a:ac:91:31:71:93:1c:b7: b8:5c:78:f5:6a:38:1f:f2:c6:60:75:fb:6c:56:b6: fc:52:d3:5e:61:82:c4:87:09:a0:43:62:8a:dd:12: 47:c9:3d:d5:2f:6a:20:04:04:06:2d:9c:54:ac:3c: f4:f4:a8:54:97:b5:c6:9e:72:da:f9:2b:c2:a8:ac: e1:b9:d8:e3:07:cf:91:c2:bb:e9:c5:10:62:27:f4: b0:30:7d:80:96:91:33:49:cc:8c:02:a8:11:7e:98: 45:3f:41:76:fa:24:1c:7a:2d:1f:fa:76:3e:36:b4: 10:df:ef:d2:88:21:bb:68:7e:70:cc:3a:eb:3e:ab: bd:05:e6:36:79:f6:66:b5:96:db:e2:50:2b:43:b9: a1:26:08:97:2a:8c:22:e4:7b:14:df:96:9e:74:f7: 63:17:d0:1f:32:99:6a:5f:c5:f0:b6:0f:ee:f5:04: 0d:73:e3:12:54:2b:fe:0d:0a:b3:aa:df:82:bb:6d: 28:26:de:27:6f:e9:52:8c:14:9b:38:c0:cc:26:43: fa:14:84:88:99:de:b0:88:f2:6b:47:6a:4d:af:22: fd:a2:9c:47:f3:f5:48:f8:49:aa:ba:56:f6:27:4b: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:74:CA:15:8A:BF:D1:C1:E7:CD:90:8C:6A:B9:75:0E:7B:43:CF:B6 X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9f:17:5f:da:79:22:c3:4c:27:ed:e8:cd:2b:69:17:ea:0a: bc:e7:15:e4:b5:d1:3b:97:f5:73:c7:b9:14:d5:12:35:d8:72: e4:fe:b3:f1:33:5d:61:38:0c:fd:8b:56:b7:0e:85:7e:fc:93: 90:a5:ca:ea:c4:08:b6:02:47:ca:e5:58:40:43:9e:9e:db:fc: a8:40:71:cf:85:bc:56:e0:e1:b3:9f:bb:9e:36:e8:c9:96:40: dc:16:8d:5c:37:c6:4e:26:bd:c7:69:5b:5d:db:d3:e9:40:4f: 46:06:f5:3e:ee:07:c4:63:c4:1d:f1:0e:62:b2:9b:9f:14:41: 66:99:47:62:9a:77:11:43:64:35:a7:98:41:21:07:af:75:3d: e9:c9:7c:72:8a:cf:6e:23:0c:ae:e1:61:0f:15:06:9d:b2:21: 24:1f:1f:61:ee:b1:0d:6e:73:be:4d:0d:98:6d:0e:04:50:1b: 07:58:3f:3d:c8:a8:71:d0:af:45:5d:f6:e2:b7:f0:3d:37:41: 90:03:9c:29:05:c2:39:e4:fa:b2:4b:c4:4c:ff:c4:2a:35:3f: c5:ef:7b:c7:3b:08:9d:fd:fe:43:6a:b8:98:c4:0c:f2:15:4f: e1:79:25:6c:71:7d:70:a4:99:e6:73:36:a9:5c:5e:29:81:4c: 7d:63:8b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxtKo0/jEK7gk8rUupfAqlfIswIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNjAxMjMxODA2MjZaFw0yNjAxMjYxOTIwMjZaMDMxMTAvBgNV BAMTKEE0NzRDQTE1OEFCRkQxQzFFN0NEOTA4QzZBQjk3NTBFN0I0M0NGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG+4Dnfdbqs4a150wsxB+ADGT pgtqrJExcZMct7hcePVqOB/yxmB1+2xWtvxS015hgsSHCaBDYordEkfJPdUvaiAE BAYtnFSsPPT0qFSXtcaectr5K8KorOG52OMHz5HCu+nFEGIn9LAwfYCWkTNJzIwC qBF+mEU/QXb6JBx6LR/6dj42tBDf79KIIbtofnDMOus+q70F5jZ59ma1ltviUCtD uaEmCJcqjCLkexTflp5092MX0B8ymWpfxfC2D+71BA1z4xJUK/4NCrOq34K7bSgm 3idv6VKMFJs4wMwmQ/oUhIiZ3rCI8mtHak2vIv2inEfz9Uj4Saq6VvYnS4WRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHTKFYq/0cHnzZCMarl1DntDz7YwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACefF1/aeSLDTCft6M0raRfqCrznFeS10TuX 9XPHuRTVEjXYcuT+s/EzXWE4DP2LVrcOhX78k5ClyurECLYCR8rlWEBDnp7b/KhA cc+FvFbg4bOfu5426MmWQNwWjVw3xk4mvcdpW13b0+lAT0YG9T7uB8RjxB3xDmKy m58UQWaZR2KadxFDZDWnmEEhB691PenJfHKKz24jDK7hYQ8VBp2yISQfH2HusQ1u c75NDZhtDgRQGwdYPz3IqHHQr0Vd9uK38D03QZADnCkFwjnk+rJLxEz/xCo1P8Xv e8c7CJ39/kNquJjEDPIVT+F5JWxxfXCkmeZzNqlcXimBTH1jixU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:24:52 2026 by rpki-client