This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: dKddMDxD/SrQ3lPRuKtqWvG5L22OObKT93T+SnyMSlA= Subject key identifier: 8E:57:0E:8C:7F:1C:7C:D4:C6:04:92:EC:D1:BD:47:A3:58:33:26:F6 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 6B27CFC1311BFB687E5BD5547BF4CD11956D9016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 0209 Signing time: Sat 24 Jan 2026 21:02:05 +0000 Manifest this update: Sat 24 Jan 2026 20:57:05 +0000 Manifest next update: Wed 28 Jan 2026 08:03:05 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: qWJBApNjal+LlhCAEb6SoJQJh7AD/pYpEu+Zctct4d0=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:27:cf:c1:31:1b:fb:68:7e:5b:d5:54:7b:f4:cd:11:95:6d:90:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Jan 24 20:57:05 2026 GMT Not After : Jan 28 08:03:05 2026 GMT Subject: CN=8E570E8C7F1C7CD4C60492ECD1BD47A3583326F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:a8:68:22:1f:e9:09:1f:2c:30:04:21:5a: 42:2f:b1:82:31:e2:ff:3c:7c:42:d7:1f:92:2a:2e: 0d:57:f7:4c:d5:fd:8e:fd:c0:92:5b:a9:4b:f5:60: aa:a3:c1:89:77:a8:69:da:40:92:37:ae:0a:57:20: b8:f1:56:99:a3:2b:9e:17:ab:28:96:01:78:84:28: 45:a3:66:dc:68:1b:fa:51:ed:99:5d:da:4e:ae:fd: f1:a9:f7:a6:5c:9e:09:6b:87:09:11:98:0b:15:cb: 8f:70:a3:19:45:2d:20:7e:cb:bb:27:4c:6b:00:70: 16:9a:8d:25:88:9e:62:b2:0b:3c:d6:39:dd:b7:18: 21:f9:ab:fc:13:19:36:d7:33:c5:46:96:cc:d2:d5: fa:3d:50:02:83:b0:40:0f:37:04:7a:a1:1e:f8:00: 10:17:df:05:45:6e:05:96:a6:97:f3:1d:79:aa:48: 31:0a:de:ab:27:a7:b3:1a:48:eb:6f:54:c6:bf:e3: 46:dc:c9:92:a5:46:60:c3:1c:77:ab:90:38:9c:4a: df:e4:b9:7d:33:3a:d2:69:df:95:c8:57:03:a3:e2: 2f:e4:c1:f8:7f:38:bd:e6:99:31:94:0e:a6:bf:03: 09:51:3b:94:c8:c0:63:d4:fd:20:5f:e1:88:fc:3c: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:57:0E:8C:7F:1C:7C:D4:C6:04:92:EC:D1:BD:47:A3:58:33:26:F6 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c9:5f:87:3c:b3:0b:91:ca:c2:13:31:00:fc:df:71:01:78: 7e:b8:20:3d:06:24:8c:e5:e6:49:16:0b:a2:cd:75:7c:68:5e: cf:63:85:bc:9f:31:70:19:d9:7a:3e:b7:3c:41:7f:66:19:b7: 97:9d:b1:f7:03:d1:c5:c9:76:2d:99:7a:83:72:a5:01:6c:8d: e6:be:70:9c:aa:eb:b5:67:cc:ec:98:f4:af:96:c4:2d:74:20: a3:22:a9:91:0b:09:29:80:94:0c:8f:11:44:7c:84:af:a1:9c: 19:56:7a:96:a6:b5:5d:fb:40:95:5f:8d:1b:e5:31:a3:66:9a: 65:65:a1:81:a6:76:c2:37:aa:5a:42:0a:96:99:0e:c6:39:00: fe:38:65:a5:6c:56:87:36:5a:b3:ce:d2:22:cd:ed:bd:87:8f: b0:59:d6:54:03:00:24:f7:89:de:54:98:11:d5:50:d2:5d:63: 66:15:80:89:19:3d:53:cd:7e:2d:8a:55:1e:f2:92:d7:da:a6: b0:3c:6c:8e:7a:7f:83:2e:65:19:22:95:6d:27:d8:48:83:c1: 53:c7:7b:4c:5d:59:a8:76:48:3f:73:79:2f:80:d6:80:d7:28: 02:12:11:1f:cb:98:9d:4e:47:42:43:b3:30:56:1d:fa:ce:1d: e5:a4:f5:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayfPwTEb+2h+W9VUe/TNEZVtkBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNjAxMjQyMDU3MDVaFw0yNjAxMjgwODAzMDVaMDMxMTAvBgNV BAMTKDhFNTcwRThDN0YxQzdDRDRDNjA0OTJFQ0QxQkQ0N0EzNTgzMzI2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg5ahoIh/pCR8sMAQhWkIvsYIx 4v88fELXH5IqLg1X90zV/Y79wJJbqUv1YKqjwYl3qGnaQJI3rgpXILjxVpmjK54X qyiWAXiEKEWjZtxoG/pR7Zld2k6u/fGp96ZcnglrhwkRmAsVy49woxlFLSB+y7sn TGsAcBaajSWInmKyCzzWOd23GCH5q/wTGTbXM8VGlszS1fo9UAKDsEAPNwR6oR74 ABAX3wVFbgWWppfzHXmqSDEK3qsnp7MaSOtvVMa/40bcyZKlRmDDHHerkDicSt/k uX0zOtJp35XIVwOj4i/kwfh/OL3mmTGUDqa/AwlRO5TIwGPU/SBf4Yj8PHlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlcOjH8cfNTGBJLs0b1Ho1gzJvYwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3JX4c8swuRysITMQD833EBeH64ID0GJIzl 5kkWC6LNdXxoXs9jhbyfMXAZ2Xo+tzxBf2YZt5edsfcD0cXJdi2ZeoNypQFsjea+ cJyq67VnzOyY9K+WxC10IKMiqZELCSmAlAyPEUR8hK+hnBlWepamtV37QJVfjRvl MaNmmmVloYGmdsI3qlpCCpaZDsY5AP44ZaVsVoc2WrPO0iLN7b2Hj7BZ1lQDACT3 id5UmBHVUNJdY2YVgIkZPVPNfi2KVR7yktfaprA8bI56f4MuZRkilW0n2EiDwVPH e0xdWah2SD9zeS+A1oDXKAISER/LmJ1OR0JDszBWHfrOHeWk9Rc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:46:08 2026 by rpki-client