This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft File: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft (raw, json) Hash identifier: TKFnoeBgLmj7K9MSd7yEBADuOBldxStuA4aACK0S73k= Subject key identifier: E9:92:DE:82:99:6A:01:83:8D:C9:EC:52:FC:6F:F7:F6:E5:4A:DF:47 Authority key identifier: 9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 Certificate issuer: /CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Certificate serial: 2C30E1FF84721390CD8D2DA1A6B6B88A7FBF15BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft Manifest number: 13 Signing time: Sat 24 Jan 2026 15:12:23 +0000 Manifest this update: Sat 24 Jan 2026 15:07:23 +0000 Manifest next update: Wed 28 Jan 2026 00:39:23 +0000 Files and hashes: 1: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl (hash: Kom4mwwDjJezcSzpyOBTyIExp13LvA0xm5aDEL0RQKM=) 2: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: oUENuD0SMegzfgG7zCwjryjELhYU0l7sm/nxY+l6d1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:30:e1:ff:84:72:13:90:cd:8d:2d:a1:a6:b6:b8:8a:7f:bf:15:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Validity Not Before: Jan 24 15:07:23 2026 GMT Not After : Jan 28 00:39:23 2026 GMT Subject: CN=E992DE82996A01838DC9EC52FC6FF7F6E54ADF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:f5:5e:e3:63:0d:cd:64:2d:cb:7a:de:55: b1:e0:f8:09:ae:9a:a7:e4:bd:66:e4:ac:1a:9c:bd: 1e:46:a3:b9:68:57:87:8c:93:74:33:36:4c:c2:b0: c9:14:c2:31:9d:f9:9a:89:5d:6e:48:ed:8d:5f:b6: 57:2e:93:b4:84:c6:56:49:85:5f:3a:44:fc:2d:58: 18:e1:63:f6:19:05:a5:07:2e:7e:3b:1e:d2:f4:ea: 54:9e:75:d5:78:18:cc:8d:cc:15:8e:d7:93:1c:67: c0:2a:22:6c:e9:95:9e:26:ff:e7:f4:c0:28:b6:59: e1:27:2b:5a:28:23:dc:ce:d0:5f:58:68:8e:dc:21: 00:39:04:0e:32:78:15:48:31:7c:0b:0b:b8:d3:fd: 80:1c:5f:35:28:7e:3a:e8:fb:1d:c9:a5:54:d5:8a: 14:a8:86:58:cd:0d:cf:10:76:c7:99:1a:25:e8:56: 7e:28:1a:85:e5:a2:a1:55:01:ea:63:a6:b0:d6:73: 3b:19:84:a7:14:cb:14:e8:9e:83:bb:92:29:dc:02: 39:f9:df:ae:71:ed:90:e9:da:52:e1:40:b1:77:e1: 56:5d:43:ab:63:9b:b1:03:7a:e4:82:68:a0:c0:9c: 50:75:0f:1c:6b:17:3e:87:ed:7a:89:1c:a3:ae:a0: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:DE:82:99:6A:01:83:8D:C9:EC:52:FC:6F:F7:F6:E5:4A:DF:47 X509v3 Authority Key Identifier: keyid:9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c6:6c:aa:81:60:a9:ab:72:d8:93:6f:0d:b7:6f:43:86:5e: 73:fa:ee:22:4b:16:07:c0:3a:4d:e3:2f:a5:47:21:28:85:6f: 87:bb:65:79:a0:63:f3:50:02:80:37:f0:bf:cf:6a:4e:aa:27: 2d:a7:3e:21:65:4b:ad:5a:e2:0e:30:db:28:78:27:e7:b9:41: 25:62:3c:fb:8f:0b:1e:45:5f:41:7b:d1:1f:9b:6f:33:2e:dd: 54:80:df:f8:04:1d:26:b8:0b:68:39:66:e6:6b:15:aa:44:83: 81:01:55:5c:c7:be:d9:bf:dd:21:04:9e:6f:80:1b:fb:2a:54: 86:32:44:a8:c7:88:e5:28:d4:b0:d3:ed:45:87:f4:c6:47:91: 07:51:83:93:ee:d3:7d:ee:c8:1e:58:11:03:c8:7c:da:ee:bd: 1e:3f:28:67:50:f8:83:6f:c6:d0:af:6d:9e:42:68:cc:fa:e5: f3:dd:c6:ae:15:a7:72:9b:31:61:61:c6:6b:bb:b8:c4:22:78: 6a:52:b4:52:5c:c0:ba:b6:4f:ad:30:86:ba:b6:44:fc:bd:90: d9:b4:de:d9:92:a4:fc:01:8a:a7:8d:34:e5:6c:3f:80:8c:bd: dc:97:75:fb:06:bc:15:13:a2:ad:dd:dc:04:7b:82:df:d7:76: b5:98:db:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDDh/4RyE5DNjS2hpra4in+/FbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVB Q0EzRkU0NTAeFw0yNjAxMjQxNTA3MjNaFw0yNjAxMjgwMDM5MjNaMDMxMTAvBgNV BAMTKEU5OTJERTgyOTk2QTAxODM4REM5RUM1MkZDNkZGN0Y2RTU0QURGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vvVe42MNzWQty3reVbHg+Amu mqfkvWbkrBqcvR5Go7loV4eMk3QzNkzCsMkUwjGd+ZqJXW5I7Y1ftlcuk7SExlZJ hV86RPwtWBjhY/YZBaUHLn47HtL06lSeddV4GMyNzBWO15McZ8AqImzplZ4m/+f0 wCi2WeEnK1ooI9zO0F9YaI7cIQA5BA4yeBVIMXwLC7jT/YAcXzUofjro+x3JpVTV ihSohljNDc8QdseZGiXoVn4oGoXloqFVAepjprDWczsZhKcUyxTonoO7kincAjn5 365x7ZDp2lLhQLF34VZdQ6tjm7EDeuSCaKDAnFB1DxxrFz6H7XqJHKOuoBirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ZLegplqAYONyexS/G/39uVK30cwHwYDVR0j BBgwFoAUnZumcPIcILy3tCeFiuVCxayj/kUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMC85RDlCQTY3MEYy MUMyMEJDQjdCNDI3ODU4QUU1NDJDNUFDQTNGRTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVBQ0Ez RkU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThlNDYxMGEtYTc5NC00MDU5LTk3 ZDktZjJjNjlkYTU0YzhiLzAvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQy QzVBQ0EzRkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjGbKqBYKmrctiTbw23b0OGXnP67iJLFgfA Ok3jL6VHISiFb4e7ZXmgY/NQAoA38L/Pak6qJy2nPiFlS61a4g4w2yh4J+e5QSVi PPuPCx5FX0F70R+bbzMu3VSA3/gEHSa4C2g5ZuZrFapEg4EBVVzHvtm/3SEEnm+A G/sqVIYyRKjHiOUo1LDT7UWH9MZHkQdRg5Pu033uyB5YEQPIfNruvR4/KGdQ+INv xtCvbZ5CaMz65fPdxq4Vp3KbMWFhxmu7uMQieGpStFJcwLq2T60whrq2RPy9kNm0 3tmSpPwBiqeNNOVsP4CMvdyXdfsGvBUToq3d3AR7gt/XdrWY28Q= -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:04 2026 by rpki-client