This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: D7HJHgWu1P4ogDoyn+MmkHmtrX/RiqsaN0+s/vJNqc0= Subject key identifier: 6B:AB:D6:9C:68:43:7D:CB:1C:DF:A2:74:7B:E0:78:63:76:B4:04:71 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 0B815EB3F9570F17A21F448D3B2C554DAC66EC98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 02E1 Signing time: Sat 24 Jan 2026 04:32:31 +0000 Manifest this update: Sat 24 Jan 2026 04:27:31 +0000 Manifest next update: Tue 27 Jan 2026 06:25:31 +0000 Files and hashes: 1: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: ho1TWE15c1RKZnIgclOZW0+5TnmCmtJPP2i8V8+R5l0=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:81:5e:b3:f9:57:0f:17:a2:1f:44:8d:3b:2c:55:4d:ac:66:ec:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Jan 24 04:27:31 2026 GMT Not After : Jan 27 06:25:31 2026 GMT Subject: CN=6BABD69C68437DCB1CDFA2747BE0786376B40471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:04:00:55:2a:51:68:a3:66:8b:f0:ed:9b: 18:60:23:be:98:61:a4:63:3e:14:90:2d:2a:1a:a2: 82:b9:81:5b:7a:56:11:fc:d3:c4:02:bc:99:94:8c: b9:96:d3:50:79:eb:c9:15:a9:28:f1:a0:ae:11:6d: 62:aa:35:1f:fb:c6:b2:fc:b9:87:7e:86:c2:a2:7a: 53:c8:9b:76:b2:e6:ff:3c:bb:87:18:58:1f:99:f0: 15:b6:e5:4e:f8:f7:2e:43:1e:4a:9e:70:3e:31:14: a7:37:0d:22:57:34:c0:01:05:ca:86:a8:15:11:4a: 8a:a1:d0:11:46:8b:47:93:33:52:76:51:e8:a8:19: 0a:84:0e:c4:af:78:2f:d9:a1:de:fe:90:f4:a4:a2: 98:77:55:75:ba:dd:e2:52:60:16:6e:7e:69:2c:6a: 2a:b6:b0:a8:1c:fe:24:e2:2b:86:92:b1:d2:30:ee: ff:bd:f1:73:97:c2:7b:85:24:cd:fe:67:3f:ed:53: 9c:6a:f9:34:7e:14:3d:50:5d:57:1a:2c:46:17:e3: 3b:a2:43:56:e7:5a:bd:f4:7f:1f:5d:31:a7:d2:17: 4b:f5:2f:f7:e1:88:75:f0:78:6d:74:55:23:f2:d3: d0:dd:cf:08:66:64:6d:1a:3c:d9:ad:ef:00:34:a4: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AB:D6:9C:68:43:7D:CB:1C:DF:A2:74:7B:E0:78:63:76:B4:04:71 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c0:0d:a0:45:28:2f:78:25:28:44:9d:91:86:5a:43:10:9f: 8d:80:f0:5c:07:40:0b:69:81:61:aa:3c:63:fa:e3:d2:4b:f3: 1b:ab:59:de:02:46:5f:8f:2c:a9:e6:33:f9:45:44:33:17:3b: ec:ed:a5:e2:37:92:9d:2b:23:8e:75:34:59:f1:65:a3:ce:94: f8:92:6d:a0:e3:84:af:36:1c:90:87:0f:83:fa:07:a8:a1:28: b4:16:fd:28:a5:1f:cf:06:76:80:90:35:e8:99:f0:15:87:46: d6:f9:e9:b6:fd:25:3e:92:fc:1b:2c:da:b1:30:a3:05:33:fd: 12:42:3a:ae:5e:d8:27:e2:76:08:77:c9:95:74:b9:d9:20:87: 1c:8f:2b:a9:92:12:25:56:f9:d6:65:3e:b1:49:a4:d8:3f:e8: d3:af:b9:bd:06:ab:ab:39:a9:0a:99:55:2a:8a:a2:2c:a7:dc: 24:4c:0a:06:85:73:3b:a1:b0:d6:c1:96:74:dc:f4:be:b8:20: 08:05:f5:b6:43:5d:ba:2f:bb:f5:b3:cb:d8:7e:cb:29:c1:28: ad:73:17:7b:0a:0c:ef:28:6c:7c:2c:d8:7d:8e:59:db:2a:8d: cc:4b:20:94:61:da:e6:1b:48:f8:3c:ba:99:c0:f4:b0:13:1e: e4:70:c2:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4Fes/lXDxeiH0SNOyxVTaxm7JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNjAxMjQwNDI3MzFaFw0yNjAxMjcwNjI1MzFaMDMxMTAvBgNV BAMTKDZCQUJENjlDNjg0MzdEQ0IxQ0RGQTI3NDdCRTA3ODYzNzZCNDA0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2gQAVSpRaKNmi/DtmxhgI76Y YaRjPhSQLSoaooK5gVt6VhH808QCvJmUjLmW01B568kVqSjxoK4RbWKqNR/7xrL8 uYd+hsKielPIm3ay5v88u4cYWB+Z8BW25U749y5DHkqecD4xFKc3DSJXNMABBcqG qBURSoqh0BFGi0eTM1J2UeioGQqEDsSveC/Zod7+kPSkoph3VXW63eJSYBZufmks aiq2sKgc/iTiK4aSsdIw7v+98XOXwnuFJM3+Zz/tU5xq+TR+FD1QXVcaLEYX4zui Q1bnWr30fx9dMafSF0v1L/fhiHXweG10VSPy09DdzwhmZG0aPNmt7wA0pKBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa6vWnGhDfcsc36J0e+B4Y3a0BHEwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnADaBFKC94JShEnZGGWkMQn42A8FwHQAtp gWGqPGP649JL8xurWd4CRl+PLKnmM/lFRDMXO+ztpeI3kp0rI451NFnxZaPOlPiS baDjhK82HJCHD4P6B6ihKLQW/SilH88GdoCQNeiZ8BWHRtb56bb9JT6S/Bss2rEw owUz/RJCOq5e2Cfidgh3yZV0udkghxyPK6mSEiVW+dZlPrFJpNg/6NOvub0Gq6s5 qQqZVSqKoiyn3CRMCgaFczuhsNbBlnTc9L64IAgF9bZDXbovu/Wzy9h+yynBKK1z F3sKDO8obHws2H2OWdsqjcxLIJRh2uYbSPg8upnA9LATHuRwwq8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:19 2026 by rpki-client