This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: mjE1CwpPGV+L1Bdrs6XMSG1Kn9efDPWmrf2mbLZV0dw= Subject key identifier: C4:89:1E:AF:D0:48:66:49:B7:7E:45:C9:A0:9D:3C:40:1C:4E:51:16 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 357E57DF54FA8CACC4300FB8BD8C70BFA141111E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: C8 Signing time: Sun 25 Jan 2026 04:51:09 +0000 Manifest this update: Sun 25 Jan 2026 04:46:09 +0000 Manifest next update: Wed 28 Jan 2026 09:54:09 +0000 Files and hashes: 1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 2: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) 3: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: ggNR6J4QySxzfsZe4wttwC0T8ZAPB83EG0U1+hZRQVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7e:57:df:54:fa:8c:ac:c4:30:0f:b8:bd:8c:70:bf:a1:41:11:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jan 25 04:46:09 2026 GMT Not After : Jan 28 09:54:09 2026 GMT Subject: CN=C4891EAFD0486649B77E45C9A09D3C401C4E5116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:35:d3:af:00:17:37:5c:8d:b4:07:ea:48: 7c:44:fd:63:56:ed:99:c6:18:35:23:5b:af:7b:7c: a1:0c:a0:73:f2:a7:9d:bc:11:f3:f0:be:fc:33:19: b5:fe:3e:95:1a:cc:fc:e4:6a:db:e4:d1:21:68:e7: de:f2:56:8f:0c:3b:2b:a7:67:5b:55:3f:a6:24:24: 0c:fb:e8:57:28:54:39:e7:66:03:a1:fc:9c:59:65: a8:53:95:48:80:93:1b:a4:c6:bb:d1:f1:7d:ad:ed: 6d:ca:85:44:81:64:31:86:f8:e5:4d:6d:3d:bf:c8: 61:8d:f8:62:f3:13:cd:a4:3a:92:47:06:15:55:e3: 4a:a2:0c:18:4c:4e:30:ea:e9:fd:a8:b0:ad:c0:c5: 20:4c:16:7b:a4:ff:e6:33:69:7c:37:49:5e:eb:99: ce:b8:52:89:b8:4a:73:ac:17:17:47:34:fd:8d:88: 4d:f8:75:db:0f:55:5d:a3:0c:c8:17:15:0d:1e:4f: b4:e3:c2:b6:d6:6b:e2:4b:c3:71:c4:9a:9b:de:94: 0a:24:34:ef:cd:1f:75:fa:2c:c2:53:88:7f:76:79: 9e:c8:48:e2:21:6c:94:73:e3:eb:71:30:3a:19:e8: 48:ba:49:78:f1:c1:a7:17:66:fd:d3:17:23:f5:c2: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:89:1E:AF:D0:48:66:49:B7:7E:45:C9:A0:9D:3C:40:1C:4E:51:16 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:95:76:30:34:eb:b8:b8:b3:98:18:df:08:ae:11:07:1a:ac: 45:9b:da:ad:45:53:9d:be:36:e4:45:89:18:79:21:dd:fc:6b: 13:06:e4:4e:10:cb:18:d2:ed:69:91:32:ae:f6:20:4a:24:14: bf:6e:18:cc:64:c1:94:b9:2f:a4:55:de:5e:35:53:a6:11:cb: 64:a7:8c:9a:c3:86:30:90:cc:d4:db:67:db:c5:b5:b4:80:cf: 01:ff:89:44:6e:31:ae:1d:60:86:45:c7:10:04:cf:b1:5a:78: 33:2e:47:34:47:f7:ef:b7:68:10:df:df:c0:d1:bd:ed:c6:fc: 8d:ef:97:ea:6a:d5:5e:56:04:1d:a2:bc:be:72:d0:f0:c2:74: 66:27:d4:70:5f:cc:3b:1a:2b:99:58:e6:db:8d:fb:e9:a3:01: c6:94:1d:df:27:93:64:cd:2e:97:5a:42:72:af:6f:b2:37:45: ab:aa:e8:b2:20:0f:de:02:26:3f:c6:af:bf:31:40:ab:f8:24: f3:ce:57:2f:81:12:61:2f:c5:0e:c5:83:90:93:1d:8e:5f:2e: 80:c9:35:93:c8:46:d2:7d:ef:13:66:51:83:eb:e8:7c:65:ba: 2f:72:0b:83:bb:9e:e6:a1:cf:42:34:73:06:0f:0f:df:06:e5: 47:ea:0f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNX5X31T6jKzEMA+4vYxwv6FBER4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNjAxMjUwNDQ2MDlaFw0yNjAxMjgwOTU0MDlaMDMxMTAvBgNV BAMTKEM0ODkxRUFGRDA0ODY2NDlCNzdFNDVDOUEwOUQzQzQwMUM0RTUxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBTXTrwAXN1yNtAfqSHxE/WNW 7ZnGGDUjW697fKEMoHPyp528EfPwvvwzGbX+PpUazPzkatvk0SFo597yVo8MOyun Z1tVP6YkJAz76FcoVDnnZgOh/JxZZahTlUiAkxukxrvR8X2t7W3KhUSBZDGG+OVN bT2/yGGN+GLzE82kOpJHBhVV40qiDBhMTjDq6f2osK3AxSBMFnuk/+YzaXw3SV7r mc64Uom4SnOsFxdHNP2NiE34ddsPVV2jDMgXFQ0eT7TjwrbWa+JLw3HEmpvelAok NO/NH3X6LMJTiH92eZ7ISOIhbJRz4+txMDoZ6Ei6SXjxwacXZv3TFyP1wm35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIker9BIZkm3fkXJoJ08QBxOURYwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGVdjA067i4s5gY3wiuEQcarEWb2q1FU52+ NuRFiRh5Id38axMG5E4QyxjS7WmRMq72IEokFL9uGMxkwZS5L6RV3l41U6YRy2Sn jJrDhjCQzNTbZ9vFtbSAzwH/iURuMa4dYIZFxxAEz7FaeDMuRzRH9++3aBDf38DR ve3G/I3vl+pq1V5WBB2ivL5y0PDCdGYn1HBfzDsaK5lY5tuN++mjAcaUHd8nk2TN LpdaQnKvb7I3Rauq6LIgD94CJj/Gr78xQKv4JPPOVy+BEmEvxQ7Fg5CTHY5fLoDJ NZPIRtJ97xNmUYPr6Hxlui9yC4O7nuahz0I0cwYPD98G5UfqD80= -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:20 2026 by rpki-client