This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: TsIRVox+pJj9e9M9eyCmVhbA4aJ8aUeaLLIEEEorgyk= Subject key identifier: CE:4C:DA:CC:4A:46:D1:D5:2C:65:27:95:BE:92:91:AC:8D:2C:FD:D3 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 5D5EE79D425A6EFC9E23286358E914EBEAAEAB01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0545 Signing time: Sat 24 Jan 2026 05:51:06 +0000 Manifest this update: Sat 24 Jan 2026 05:46:06 +0000 Manifest next update: Tue 27 Jan 2026 17:03:06 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) 2: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: rOIdNi7iiRmp0Hp+SYY84utlLvebJuJpY2Zr0gEQWZ8=) 3: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5e:e7:9d:42:5a:6e:fc:9e:23:28:63:58:e9:14:eb:ea:ae:ab:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Jan 24 05:46:06 2026 GMT Not After : Jan 27 17:03:06 2026 GMT Subject: CN=CE4CDACC4A46D1D52C652795BE9291AC8D2CFDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:54:2d:78:74:4b:90:96:85:b6:c6:e7:4e: 50:87:e2:62:ed:79:df:6b:7e:5b:0d:75:b4:ae:79: 77:69:6b:e1:d7:97:77:ef:3e:42:5d:f7:f0:79:88: ff:6e:a3:73:22:4b:90:f8:f7:29:0d:69:e1:91:0f: 26:8e:18:45:60:d0:1b:3a:f0:98:5d:90:fe:09:97: 6d:fb:37:e8:57:a8:9d:a4:77:f9:54:47:7d:83:11: 0c:51:56:e8:a6:9d:33:9b:88:d8:22:1a:e9:74:17: 49:ec:43:e7:9e:d9:52:6e:8c:3a:fa:69:e9:84:a4: 01:fd:19:af:26:97:c0:97:9f:04:71:b0:11:b4:11: 95:27:63:97:75:11:ae:68:8d:de:8a:5f:a7:e6:1c: 4e:a7:18:61:22:af:0d:be:ac:7b:00:4f:9a:71:75: ac:b7:0f:03:7b:2e:52:0b:37:ec:91:47:19:2c:49: 91:04:cf:7c:fe:f9:f2:50:cd:d3:48:59:cf:07:8e: bb:56:11:a3:05:db:b9:7e:7f:d0:41:e9:de:66:a5: 73:41:27:d5:8e:8b:00:f5:2e:9d:68:91:a9:30:ea: 3c:89:0a:c1:98:0c:e5:32:df:8d:80:bd:88:e2:bb: 8d:bb:e9:36:fd:e9:66:1e:04:f1:9f:bf:5a:aa:70: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4C:DA:CC:4A:46:D1:D5:2C:65:27:95:BE:92:91:AC:8D:2C:FD:D3 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:34:ea:bf:7c:5b:dc:86:a7:98:85:68:a3:3a:67:53:f8:ed: 4c:c0:0a:e6:44:8d:bd:ed:a6:cc:9c:a1:fb:57:cb:b8:6a:f3: bc:cd:39:08:8b:f5:85:ec:02:e3:d8:4f:de:12:05:32:eb:b9: db:46:2e:c6:d3:3f:6e:cc:d0:59:fb:1c:76:02:ee:9f:cb:9d: 41:66:0b:b2:6d:97:e9:86:6c:5c:61:e0:dc:bc:69:4e:0e:51: eb:3b:5c:1d:69:6b:ad:cf:dc:8c:50:0e:b8:9e:b3:41:a2:c2: 50:d7:73:36:5b:c5:ed:69:b7:69:08:d7:c8:37:54:ea:5c:a2: c4:e7:3e:b3:ff:d2:b3:83:e5:e5:ca:45:1e:a8:15:f4:21:d5: ca:85:10:7d:ee:93:8a:34:8b:99:eb:c6:7b:94:23:c3:23:95: 54:7f:ed:68:00:91:9d:75:50:c7:71:ce:04:3a:46:32:79:82: 71:a3:fe:3b:4a:20:24:34:ff:fa:f9:ef:c4:9b:60:0a:b5:db: b1:10:83:aa:83:21:60:45:d4:db:6a:46:5c:3d:48:a5:13:74: 39:2b:5e:0f:bb:75:a0:51:28:60:68:d3:de:69:0c:1f:a2:c5: b2:1e:99:86:e7:fb:7f:c3:e1:a4:17:59:df:1c:46:87:af:fe: 6a:b0:41:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXV7nnUJabvyeIyhjWOkU6+quqwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNjAxMjQwNTQ2MDZaFw0yNjAxMjcxNzAzMDZaMDMxMTAvBgNV BAMTKENFNENEQUNDNEE0NkQxRDUyQzY1Mjc5NUJFOTI5MUFDOEQyQ0ZERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvFQteHRLkJaFtsbnTlCH4mLt ed9rflsNdbSueXdpa+HXl3fvPkJd9/B5iP9uo3MiS5D49ykNaeGRDyaOGEVg0Bs6 8JhdkP4Jl237N+hXqJ2kd/lUR32DEQxRVuimnTObiNgiGul0F0nsQ+ee2VJujDr6 aemEpAH9Ga8ml8CXnwRxsBG0EZUnY5d1Ea5ojd6KX6fmHE6nGGEirw2+rHsAT5px day3DwN7LlILN+yRRxksSZEEz3z++fJQzdNIWc8HjrtWEaMF27l+f9BB6d5mpXNB J9WOiwD1Lp1okakw6jyJCsGYDOUy342AvYjiu4276Tb96WYeBPGfv1qqcDhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzkzazEpG0dUsZSeVvpKRrI0s/dMwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo06r98W9yGp5iFaKM6Z1P47UzACuZEjb3t psycoftXy7hq87zNOQiL9YXsAuPYT94SBTLrudtGLsbTP27M0Fn7HHYC7p/LnUFm C7Jtl+mGbFxh4Ny8aU4OUes7XB1pa63P3IxQDries0GiwlDXczZbxe1pt2kI18g3 VOpcosTnPrP/0rOD5eXKRR6oFfQh1cqFEH3uk4o0i5nrxnuUI8MjlVR/7WgAkZ11 UMdxzgQ6RjJ5gnGj/jtKICQ0//r578SbYAq127EQg6qDIWBF1NtqRlw9SKUTdDkr Xg+7daBRKGBo095pDB+ixbIemYbn+3/D4aQXWd8cRoev/mqwQZM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:25 2026 by rpki-client