This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft File: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json) Hash identifier: ti/N+h3F1L8Chv5kHJLWuz4fuDPpUCE+IpDVmDq0rN0= Subject key identifier: 92:04:93:24:13:3E:85:E1:B2:66:CF:B6:49:56:A9:0F:F2:DD:BE:6D Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 Certificate issuer: /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Certificate serial: 7959CDF5710F1B0533F8A72DFF77B1BD9EBAF055 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft Manifest number: 0543 Signing time: Sun 25 Jan 2026 23:11:57 +0000 Manifest this update: Sun 25 Jan 2026 23:06:57 +0000 Manifest next update: Thu 29 Jan 2026 00:16:57 +0000 Files and hashes: 1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: rSopiWeeiiIW3oiUakakBdSPDhk+MbVzdavLqe67f9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:59:cd:f5:71:0f:1b:05:33:f8:a7:2d:ff:77:b1:bd:9e:ba:f0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Validity Not Before: Jan 25 23:06:57 2026 GMT Not After : Jan 29 00:16:57 2026 GMT Subject: CN=92049324133E85E1B266CFB64956A90FF2DDBE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:da:23:79:52:cc:f1:0d:56:02:42:f4:f0: a9:80:66:e1:a3:24:5e:59:b6:11:6c:f1:af:07:59: 3d:d8:43:8a:32:04:05:ed:e3:11:6f:cb:0a:55:7c: 99:86:96:90:ce:37:3b:05:75:71:a4:f1:5e:01:4f: f6:3e:f8:8e:a6:ce:45:13:b0:61:2c:bd:44:e5:b3: 47:d4:49:d2:ff:36:a8:d9:d9:72:70:35:1e:2d:3b: 46:76:a6:19:7d:8e:40:4d:8d:16:f1:dc:62:d8:91: 5c:0f:b6:8d:fb:ef:cb:3d:e2:ea:c7:33:d7:90:2c: e7:22:64:2c:e3:a0:c6:fb:30:49:40:a5:6e:da:1c: 7e:ea:75:a9:29:f2:c4:aa:df:b5:34:a0:5f:ba:64: f0:42:ee:e6:8a:ac:17:6e:cb:5a:02:15:e2:bb:08: 9f:42:20:79:b8:c8:b6:45:e3:5c:ec:a7:db:b0:2e: b0:32:12:24:cb:a6:50:8b:88:7c:eb:c6:5a:27:75: e2:21:ec:2e:bd:36:7c:fe:85:70:28:dd:46:cb:ff: 2e:00:78:c9:64:e9:1d:36:f8:0f:e7:5f:21:6d:7d: ea:4d:8a:be:a7:7f:10:b3:2e:cc:b4:b9:a9:95:82: 87:cd:2d:55:21:b9:a8:c3:12:93:4c:b7:fe:f1:15: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:93:24:13:3E:85:E1:B2:66:CF:B6:49:56:A9:0F:F2:DD:BE:6D X509v3 Authority Key Identifier: keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:61:1a:ea:80:17:5f:df:62:20:41:8f:56:79:ab:1a:4f:ed: 91:d0:08:10:88:0f:b6:13:6b:4a:ec:a5:9a:84:4d:53:5c:fe: 6e:92:d4:f7:9a:fa:71:bd:aa:4f:c7:a7:30:cf:88:a6:bb:29: 4a:d9:cc:76:e8:70:89:e9:ba:64:26:d5:10:df:b2:f5:ac:0c: ff:55:29:17:fd:f5:e4:96:3c:4e:41:90:65:a5:ea:b1:64:d6: fc:69:c4:c6:c1:2b:a7:d5:ad:fd:d6:71:9a:d5:5b:fe:67:2f: 81:d7:e6:bb:57:92:1e:5f:d4:f8:aa:4f:af:9b:97:2c:41:77: 41:47:21:b5:7f:ec:32:22:8d:60:bd:8a:af:cf:7e:6f:d2:4c: f5:bd:33:d3:9f:31:e0:9b:30:40:14:fc:54:d8:51:50:b4:95: 9a:3b:8d:92:16:90:a4:57:20:53:7b:10:99:b0:77:9b:fb:cd: ec:6d:0f:38:a5:d5:62:99:4d:13:e9:a8:dc:34:1c:ce:a8:0c: ce:d7:1f:73:57:09:7e:65:ff:6a:a0:02:b8:ff:e9:15:af:f4: 05:bb:8b:5e:a3:58:ce:81:b4:85:d7:2f:5c:1d:45:3c:48:c5: 87:2e:8e:45:bb:8d:be:2e:0b:36:20:d6:85:c7:1d:43:47:66: 33:52:ef:f3 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUeVnN9XEPGwUz+Kct/3exvZ668FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC QjZBMjRBNzAeFw0yNjAxMjUyMzA2NTdaFw0yNjAxMjkwMDE2NTdaMDMxMTAvBgNV BAMTKDkyMDQ5MzI0MTMzRTg1RTFCMjY2Q0ZCNjQ5NTZBOTBGRjJEREJFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31NojeVLM8Q1WAkL08KmAZuGj JF5ZthFs8a8HWT3YQ4oyBAXt4xFvywpVfJmGlpDONzsFdXGk8V4BT/Y++I6mzkUT sGEsvUTls0fUSdL/NqjZ2XJwNR4tO0Z2phl9jkBNjRbx3GLYkVwPto3778s94urH M9eQLOciZCzjoMb7MElApW7aHH7qdakp8sSq37U0oF+6ZPBC7uaKrBduy1oCFeK7 CJ9CIHm4yLZF41zsp9uwLrAyEiTLplCLiHzrxlondeIh7C69Nnz+hXAo3UbL/y4A eMlk6R02+A/nXyFtfepNir6nfxCzLsy0uamVgofNLVUhuajDEpNMt/7xFZknAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQUkgSTJBM+heGyZs+2SVapD/Ldvm0wHwYDVR0j BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B AQsFAAOCAQEAymEa6oAXX99iIEGPVnmrGk/tkdAIEIgPthNrSuylmoRNU1z+bpLU 95r6cb2qT8enMM+IprspStnMduhwiem6ZCbVEN+y9awM/1UpF/315JY8TkGQZaXq sWTW/GnExsErp9Wt/dZxmtVb/mcvgdfmu1eSHl/U+KpPr5uXLEF3QUchtX/sMiKN YL2Kr89+b9JM9b0z058x4JswQBT8VNhRULSVmjuNkhaQpFcgU3sQmbB3m/vN7G0P OKXVYplNE+mo3DQczqgMztcfc1cJfmX/aqACuP/pFa/0BbuLXqNYzoG0hdcvXB1F PEjFhy6ORbuNvi4LNiDWhccdQ0dmM1Lv8w== -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:07 2026 by rpki-client