This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: +IZM4PG8xKo7XypnnlxaeCJobbW00J7BkNqHvzyOQoU= Subject key identifier: A4:15:55:D1:7B:EA:97:FE:E6:DF:1D:2D:64:CE:DB:3D:F9:33:CD:0E Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 67F483C5AB5AC3ADC7DEA27305B51798DC89D294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 0153 Signing time: Sun 25 Jan 2026 08:51:21 +0000 Manifest this update: Sun 25 Jan 2026 08:46:21 +0000 Manifest next update: Wed 28 Jan 2026 14:24:21 +0000 Files and hashes: 1: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=) 2: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: OAfIJu38Tp4Zz/xEAMjXn0vNHcRRqFaJEUPpxCLSP8A=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=) 4: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f4:83:c5:ab:5a:c3:ad:c7:de:a2:73:05:b5:17:98:dc:89:d2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Jan 25 08:46:21 2026 GMT Not After : Jan 28 14:24:21 2026 GMT Subject: CN=A41555D17BEA97FEE6DF1D2D64CEDB3DF933CD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:2c:e0:54:00:9d:30:2f:2f:00:d6:e5:43: 90:66:fd:ab:2b:78:e8:bb:d3:ff:27:20:e9:f0:4f: da:c2:98:6c:1e:4f:df:3d:c8:12:97:89:a0:71:1f: 96:61:74:fc:23:14:ee:30:89:54:aa:81:78:ae:03: 77:5f:2b:83:87:7d:97:5e:0b:bb:0e:38:34:38:cf: 02:22:bd:c8:5f:38:de:34:d2:50:01:dc:a0:0e:b4: ec:11:83:30:27:04:a2:0f:70:08:5c:29:d2:ba:ec: 21:13:d4:3b:a3:b5:c0:9c:c6:41:38:22:10:61:47: 6c:ed:15:e6:c3:0d:51:91:6b:79:b9:50:d6:e0:da: 2d:a2:9e:37:2b:dc:c4:3d:92:1c:0a:d2:3d:58:f0: e8:e9:26:0c:c3:72:d0:d5:40:1c:2e:9a:63:e6:31: aa:c3:e6:87:2c:b7:fa:e1:4d:25:b2:5e:b4:9c:80: fb:2d:a3:c8:53:a9:9f:0f:3f:3d:4d:eb:58:99:80: 0f:a4:a4:3d:12:bb:a9:3d:77:86:57:93:67:25:ce: 9d:57:ad:3c:09:3a:f3:f1:e7:6b:52:c0:0b:5a:94: 41:cb:12:85:2d:0c:0f:b2:ed:79:02:5d:78:ec:2b: 97:01:14:2d:12:e6:7d:30:b9:ff:e7:73:1f:23:04: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:15:55:D1:7B:EA:97:FE:E6:DF:1D:2D:64:CE:DB:3D:F9:33:CD:0E X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:19:b5:c8:68:b1:24:2b:81:45:85:a7:dd:5c:c6:26:a5: c7:d3:6b:df:0c:36:33:ae:79:07:00:97:72:49:1c:85:01:d8: 74:33:60:d7:77:c2:2e:e9:7b:d6:d2:9b:e8:cc:5a:fd:f9:5a: c4:e8:33:fc:bb:59:18:c7:2c:17:81:97:41:6f:16:da:8b:f5: 8c:85:b4:f4:79:1b:a9:ec:1d:cd:20:5a:a1:8d:7d:e9:fc:76: e7:6c:6f:38:e6:45:d8:ab:95:06:c6:56:a0:d6:04:39:54:44: a7:fa:b3:65:f9:fc:8a:a7:a5:97:e5:ff:ff:41:77:50:3e:9d: 43:23:06:94:ea:35:22:fe:4b:22:74:09:cf:2f:db:7c:6c:8f: c1:0d:41:ef:03:8c:fb:1c:0c:b1:a6:7e:13:02:38:1d:7c:c1: f2:62:1f:89:b5:ee:b7:a0:18:aa:49:d3:95:d4:27:de:e5:f5: 37:07:0e:77:de:f1:40:55:ba:ee:40:60:48:7a:36:e8:51:3d: 64:46:b2:42:8a:77:50:a3:e7:32:44:92:bd:9c:59:fd:3b:d2: a1:25:74:cf:8f:31:2a:fe:cd:a6:b9:b1:21:77:d6:f8:fc:c6: ca:05:8f:a9:1d:b0:98:45:42:98:bf:1c:1e:23:2a:dd:37:10: 69:62:45:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/SDxataw63H3qJzBbUXmNyJ0pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNjAxMjUwODQ2MjFaFw0yNjAxMjgxNDI0MjFaMDMxMTAvBgNV BAMTKEE0MTU1NUQxN0JFQTk3RkVFNkRGMUQyRDY0Q0VEQjNERjkzM0NEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrDizgVACdMC8vANblQ5Bm/asr eOi70/8nIOnwT9rCmGweT989yBKXiaBxH5ZhdPwjFO4wiVSqgXiuA3dfK4OHfZde C7sOODQ4zwIivchfON400lAB3KAOtOwRgzAnBKIPcAhcKdK67CET1DujtcCcxkE4 IhBhR2ztFebDDVGRa3m5UNbg2i2injcr3MQ9khwK0j1Y8OjpJgzDctDVQBwummPm MarD5ocst/rhTSWyXrScgPsto8hTqZ8PPz1N61iZgA+kpD0Su6k9d4ZXk2clzp1X rTwJOvPx52tSwAtalEHLEoUtDA+y7XkCXXjsK5cBFC0S5n0wuf/ncx8jBMeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpBVV0Xvql/7m3x0tZM7bPfkzzQ4wHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDFGbXIaLEkK4FFhafdXMYmpcfTa98MNjOu eQcAl3JJHIUB2HQzYNd3wi7pe9bSm+jMWv35WsToM/y7WRjHLBeBl0FvFtqL9YyF tPR5G6nsHc0gWqGNfen8dudsbzjmRdirlQbGVqDWBDlURKf6s2X5/IqnpZfl//9B d1A+nUMjBpTqNSL+SyJ0Cc8v23xsj8ENQe8DjPscDLGmfhMCOB18wfJiH4m17reg GKpJ05XUJ97l9TcHDnfe8UBVuu5AYEh6NuhRPWRGskKKd1Cj5zJEkr2cWf070qEl dM+PMSr+zaa5sSF31vj8xsoFj6kdsJhFQpi/HB4jKt03EGliRS0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:28 2026 by rpki-client