This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: /n7daD1RqkaS9L1Q+df11RFPV2A7OLEIHgOmJjv6iuU= Subject key identifier: D6:A2:6B:57:41:5D:7F:11:B2:90:54:DB:94:C8:1F:F7:3C:DA:80:CF Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 493E13CA5ABF98377BA3D8257FD7AC5E4DA05F1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 020E Signing time: Sat 24 Jan 2026 10:50:42 +0000 Manifest this update: Sat 24 Jan 2026 10:45:42 +0000 Manifest next update: Tue 27 Jan 2026 16:18:42 +0000 Files and hashes: 1: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: U/r5YF0kk0NWRWj9T4vMDM6vRUMDW76xRmr9AIPqjE8=) 2: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) 3: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) 4: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3e:13:ca:5a:bf:98:37:7b:a3:d8:25:7f:d7:ac:5e:4d:a0:5f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Jan 24 10:45:42 2026 GMT Not After : Jan 27 16:18:42 2026 GMT Subject: CN=D6A26B57415D7F11B29054DB94C81FF73CDA80CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:61:d2:0a:de:46:e4:ca:5c:34:00:64:c0: 30:9a:75:0a:d8:f4:93:75:04:eb:ec:fa:de:af:80: 99:e5:28:d5:7d:8d:d4:08:89:96:43:36:20:6d:c3: e5:30:a6:6d:d6:c7:aa:35:de:6f:8c:12:4c:d2:55: b1:cd:3d:a1:71:f7:6f:f8:2e:cb:cc:3b:1c:f8:78: 8a:35:ee:4a:5b:13:e2:41:a5:e2:6f:36:eb:72:e9: 12:43:73:13:d3:0f:1e:79:1e:36:56:dc:fc:b0:f1: ae:8b:3e:1b:f0:63:48:f6:64:00:2b:94:56:c5:5f: 45:73:61:96:b4:f4:14:23:07:03:aa:cf:05:86:b2: 9b:8f:85:91:e5:2b:98:20:c2:fe:db:5b:17:45:5d: 39:67:84:08:89:4f:46:dd:3d:ba:69:fe:a3:45:db: 62:5c:50:5e:62:ef:e8:da:77:1e:60:05:82:b1:86: dd:09:10:e8:b5:11:ff:b9:54:43:41:80:7e:53:28: 16:72:f1:25:99:db:1b:b4:b5:38:40:66:68:d5:24: 5e:39:1e:36:e0:84:06:b0:91:2a:2f:e0:25:cb:75: 3e:93:67:e3:93:d5:cf:be:14:fb:b3:b0:e7:0d:60: 51:b3:b5:28:5c:aa:28:5b:bf:66:ee:cc:2e:bd:c1: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:6B:57:41:5D:7F:11:B2:90:54:DB:94:C8:1F:F7:3C:DA:80:CF X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:84:bc:db:51:13:31:0c:e9:35:98:80:e6:42:b5:31:4f:51: 2a:98:2c:1b:9d:57:2b:21:37:89:a0:b2:89:da:9f:49:a6:a2: 8c:5a:00:3e:86:48:f2:3e:11:16:05:80:b6:6a:b5:fd:ea:7d: 21:d7:88:47:c9:04:45:3f:88:65:99:e6:40:92:03:ee:95:ee: 47:ec:80:bb:6e:05:55:50:56:6c:52:71:b2:a3:8a:b8:8a:e5: 09:1c:34:3a:04:a7:50:27:34:f8:92:74:54:7d:5c:77:8e:80: cb:b7:b7:e7:d3:66:f8:20:34:57:bf:46:14:07:75:aa:1d:69: 38:aa:6a:11:91:78:6e:49:ea:14:ac:69:27:2c:ca:ed:f6:a4: 60:e3:36:45:01:df:cd:b5:5b:7c:f6:ea:fa:39:90:4a:1f:f4: fc:65:54:a4:1f:62:1b:36:a2:e7:af:e7:cd:eb:5e:b1:c3:ad: fa:d2:d6:7e:aa:ff:7a:12:5a:17:11:9c:e3:6c:ec:95:43:b2: 5f:7e:30:e8:bf:ea:36:c0:40:74:bb:13:ff:e7:58:04:a2:3b: a8:cb:6c:f3:88:4d:ae:11:69:dd:20:7f:ed:ef:6c:3d:4b:30: df:b7:3a:1f:cf:c9:7d:df:7c:9b:1f:75:07:88:7e:2c:c5:e1: 94:9a:1c:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUST4Tylq/mDd7o9glf9esXk2gXx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNjAxMjQxMDQ1NDJaFw0yNjAxMjcxNjE4NDJaMDMxMTAvBgNV BAMTKEQ2QTI2QjU3NDE1RDdGMTFCMjkwNTREQjk0QzgxRkY3M0NEQTgwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEWHSCt5G5MpcNABkwDCadQrY 9JN1BOvs+t6vgJnlKNV9jdQIiZZDNiBtw+Uwpm3Wx6o13m+MEkzSVbHNPaFx92/4 LsvMOxz4eIo17kpbE+JBpeJvNuty6RJDcxPTDx55HjZW3Pyw8a6LPhvwY0j2ZAAr lFbFX0VzYZa09BQjBwOqzwWGspuPhZHlK5ggwv7bWxdFXTlnhAiJT0bdPbpp/qNF 22JcUF5i7+jadx5gBYKxht0JEOi1Ef+5VENBgH5TKBZy8SWZ2xu0tThAZmjVJF45 HjbghAawkSov4CXLdT6TZ+OT1c++FPuzsOcNYFGztShcqihbv2buzC69wbsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qJrV0FdfxGykFTblMgf9zzagM8wHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeEvNtREzEM6TWYgOZCtTFPUSqYLBudVysh N4mgsonan0mmooxaAD6GSPI+ERYFgLZqtf3qfSHXiEfJBEU/iGWZ5kCSA+6V7kfs gLtuBVVQVmxScbKjiriK5QkcNDoEp1AnNPiSdFR9XHeOgMu3t+fTZvggNFe/RhQH daodaTiqahGReG5J6hSsaScsyu32pGDjNkUB3821W3z26vo5kEof9PxlVKQfYhs2 ouev583rXrHDrfrS1n6q/3oSWhcRnONs7JVDsl9+MOi/6jbAQHS7E//nWASiO6jL bPOITa4Rad0gf+3vbD1LMN+3Oh/PyX3ffJsfdQeIfizF4ZSaHBY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:19 2026 by rpki-client