This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: NqtxA/1Bpu1pRA3LaxQffYM2ZqxxWiEXtphG800ZdiE= Subject key identifier: 92:3B:4D:2B:73:01:23:9B:95:8E:51:3D:D1:0F:FF:74:CC:34:E3:CF Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 089B434EECBBA316FB44EAEF7B1312D98347C0C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 0169 Signing time: Sun 25 Jan 2026 15:40:04 +0000 Manifest this update: Sun 25 Jan 2026 15:35:04 +0000 Manifest next update: Thu 29 Jan 2026 02:10:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: 5yNHlgPaAwYoatsqtmC18D9WTlmOEw7REg1Y1Gkmmdg=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9b:43:4e:ec:bb:a3:16:fb:44:ea:ef:7b:13:12:d9:83:47:c0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Jan 25 15:35:04 2026 GMT Not After : Jan 29 02:10:04 2026 GMT Subject: CN=923B4D2B7301239B958E513DD10FFF74CC34E3CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:15:85:49:1e:4d:2f:80:ea:62:ca:b0:6c: fb:c2:48:d3:4e:6b:a0:f9:cd:c2:0b:61:ee:a9:c6: 63:08:24:dd:4f:85:34:96:4e:a4:b1:40:d3:ad:82: 96:fe:05:14:2b:a6:5e:ca:d9:8d:d7:94:b6:50:c2: 84:d3:9d:96:54:20:23:6e:05:1d:28:df:17:fa:7a: 4b:0c:da:dd:b0:d9:87:cf:24:9e:20:d4:81:ca:f8: e1:7f:a7:2b:ac:83:0e:66:21:9b:58:de:7c:6b:3c: 07:06:ec:61:d9:5c:56:cc:a3:db:d5:d7:bc:5c:02: 97:51:6d:4d:5f:55:9e:3c:84:38:6f:47:02:66:bf: 53:8f:ab:9a:7e:15:69:ad:08:4d:14:b0:d1:2a:fe: 71:a4:2f:0a:c7:f6:57:22:dc:2a:82:8a:08:d2:ca: 2f:df:18:1c:10:a1:bf:9f:6e:4c:57:ac:99:df:19: d5:cd:a7:95:ed:b4:88:3d:09:70:cd:06:b1:23:7b: 79:25:da:17:1e:1f:7a:3e:a9:fe:19:43:43:52:df: ca:03:1e:ae:1d:2f:12:28:c8:4c:53:fd:61:de:c6: c4:f1:4a:39:01:62:95:d7:a9:e8:c4:18:54:0f:9d: 8f:87:a4:37:02:55:96:e1:2c:da:71:5b:1b:46:de: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:4D:2B:73:01:23:9B:95:8E:51:3D:D1:0F:FF:74:CC:34:E3:CF X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f3:54:1a:ae:68:e0:b1:cd:c5:c7:fc:b3:10:b9:bb:58:20: c0:36:89:04:a1:01:81:18:6c:a0:40:37:11:5b:7f:36:d3:0b: 0d:d3:ab:f0:e5:e9:74:56:9f:62:36:94:45:29:c1:7e:73:93: 85:29:71:bc:9e:00:33:dc:00:ab:95:6e:77:9f:70:fd:c8:04: ee:47:1f:0d:01:d7:7c:e7:f4:50:1e:de:3e:40:12:a8:a5:f3: 1b:06:1d:cb:fb:55:a2:80:5f:74:5a:1b:84:bc:87:1c:7e:70: 42:ef:12:bf:31:0f:03:bd:a2:43:08:87:63:3e:9c:4b:cb:a5: 66:97:21:3d:16:e5:87:10:cd:12:9c:4a:81:2d:56:79:99:c2: f0:05:55:77:48:b3:50:e3:10:f4:92:72:a9:75:f8:3d:ed:fc: 55:7f:4c:6f:93:98:cc:fe:4a:62:72:73:ef:3d:f8:38:9f:5d: ae:52:15:02:4a:89:93:1e:21:44:76:db:aa:c8:88:65:8e:6b: ee:db:77:a0:fb:5b:e3:ff:0b:67:5f:64:0a:ad:a1:56:85:75: 0d:73:e6:4b:95:21:68:0e:da:30:5b:ee:94:48:86:bc:4f:02: aa:75:c7:78:18:09:c5:18:a2:f1:68:ff:b4:bc:c2:db:8c:33: 95:bd:bf:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJtDTuy7oxb7ROrvexMS2YNHwMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNjAxMjUxNTM1MDRaFw0yNjAxMjkwMjEwMDRaMDMxMTAvBgNV BAMTKDkyM0I0RDJCNzMwMTIzOUI5NThFNTEzREQxMEZGRjc0Q0MzNEUzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgBWFSR5NL4DqYsqwbPvCSNNO a6D5zcILYe6pxmMIJN1PhTSWTqSxQNOtgpb+BRQrpl7K2Y3XlLZQwoTTnZZUICNu BR0o3xf6eksM2t2w2YfPJJ4g1IHK+OF/pyusgw5mIZtY3nxrPAcG7GHZXFbMo9vV 17xcApdRbU1fVZ48hDhvRwJmv1OPq5p+FWmtCE0UsNEq/nGkLwrH9lci3CqCigjS yi/fGBwQob+fbkxXrJnfGdXNp5XttIg9CXDNBrEje3kl2hceH3o+qf4ZQ0NS38oD Hq4dLxIoyExT/WHexsTxSjkBYpXXqejEGFQPnY+HpDcCVZbhLNpxWxtG3iaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkjtNK3MBI5uVjlE90Q//dMw0488wHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDzVBquaOCxzcXH/LMQubtYIMA2iQShAYEY bKBANxFbfzbTCw3Tq/Dl6XRWn2I2lEUpwX5zk4UpcbyeADPcAKuVbnefcP3IBO5H Hw0B13zn9FAe3j5AEqil8xsGHcv7VaKAX3RaG4S8hxx+cELvEr8xDwO9okMIh2M+ nEvLpWaXIT0W5YcQzRKcSoEtVnmZwvAFVXdIs1DjEPSScql1+D3t/FV/TG+TmMz+ SmJyc+89+DifXa5SFQJKiZMeIUR226rIiGWOa+7bd6D7W+P/C2dfZAqtoVaFdQ1z 5kuVIWgO2jBb7pRIhrxPAqp1x3gYCcUYovFo/7S8wtuMM5W9v+s= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:55 2026 by rpki-client