This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: V1vdW7mbEBwKvBHBX7Mn+GCmJ3DyQuaOpf+L4Yp+Us4= Subject key identifier: 63:CA:85:50:FD:3D:2A:8D:9B:9E:C9:3D:7E:22:03:F9:31:BC:FB:63 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 7FDD40083771EC927E0EF15D50D7B02F67FF12A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 020F Signing time: Sat 24 Jan 2026 12:12:33 +0000 Manifest this update: Sat 24 Jan 2026 12:07:33 +0000 Manifest next update: Tue 27 Jan 2026 23:48:33 +0000 Files and hashes: 1: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) 2: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: fi4cahlYh5kfLo/oXT/k7kK2E1LcT6ruLT59iT1eYTU=) 3: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:dd:40:08:37:71:ec:92:7e:0e:f1:5d:50:d7:b0:2f:67:ff:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Jan 24 12:07:33 2026 GMT Not After : Jan 27 23:48:33 2026 GMT Subject: CN=63CA8550FD3D2A8D9B9EC93D7E2203F931BCFB63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:6c:1b:d3:fd:d3:d1:62:a1:c0:1c:f2:11: 8d:fb:7a:48:06:65:ff:ac:6c:a7:9d:69:76:18:be: 38:2d:7f:d1:fa:20:f3:d2:c2:66:b3:91:62:f6:a7: 3c:c6:7b:b9:26:37:5a:49:da:4f:57:ef:15:b1:c8: 93:5d:89:c6:79:60:55:eb:38:d6:3b:63:f3:2a:b6: ba:43:68:62:51:82:b8:e8:b3:20:73:b0:72:cd:18: 90:78:54:fc:d9:d0:5c:b8:d4:6e:59:39:ac:ca:f2: ec:52:b3:0e:97:77:1c:5f:38:30:a7:0e:54:d1:71: 62:ad:4d:c6:8c:35:5b:c2:ab:48:be:3f:81:22:a6: ad:53:4d:cd:59:96:08:c1:c8:5e:10:ec:86:5c:ab: 19:a2:73:25:0d:de:26:0a:fd:32:a4:5d:ec:6d:b2: ae:73:6c:4b:0c:af:a9:4e:96:af:83:f1:1f:26:f5: 63:fc:d3:45:4f:02:08:33:66:f1:8f:34:32:f7:1e: c4:cb:d4:99:d3:f8:b0:1a:ca:3f:69:b2:d1:da:57: d8:7d:ca:95:e9:24:43:64:70:4e:fc:7a:b1:4c:15: 1e:30:6e:77:e6:ea:63:ab:6d:c9:77:13:a2:45:2c: 6c:c7:fe:6a:43:6c:e3:57:f3:8e:57:fd:a6:58:5e: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:85:50:FD:3D:2A:8D:9B:9E:C9:3D:7E:22:03:F9:31:BC:FB:63 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:d0:26:6f:d3:93:e1:f2:46:24:02:eb:41:cd:9f:d2:87: 6e:09:14:5e:26:23:2f:6b:50:23:4b:13:a9:b6:62:d2:67:ca: ed:52:c6:68:cb:2e:ee:54:69:f8:44:21:f0:2d:a3:56:bc:b4: 67:ab:1e:83:78:4d:6d:5d:16:a1:df:b6:b8:b4:da:19:44:ac: c4:1a:fe:1e:82:96:f5:40:5e:2c:4f:e4:a6:fe:8b:85:4f:26: ef:f7:24:b5:17:2c:72:ae:b9:51:53:fa:84:dd:bc:ec:75:05: df:ea:70:27:07:a2:4a:a7:b9:00:f4:90:ff:1c:59:f9:ee:d1: fc:4b:5b:2d:38:27:ff:fe:2d:79:23:6c:e0:55:83:d0:18:af: 7f:37:d4:25:76:f9:e3:e6:9a:3d:d5:e1:7b:c4:ec:b7:1a:ab: 9f:3a:50:90:a2:42:43:ae:be:62:7b:31:16:13:dc:f1:fe:00: 13:7e:b1:66:b8:81:1d:99:9e:b2:c7:11:2c:65:e4:46:90:ea: 9b:b6:98:17:e0:94:9d:67:0e:76:3c:1e:64:7c:c3:71:21:30: 94:7e:42:54:cb:63:c5:f8:f2:b2:01:cf:d4:9d:18:d6:ab:6e: bd:99:44:d7:60:dd:52:93:ba:2a:d6:2c:7f:c2:eb:a0:c5:e3: 0f:18:1f:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf91ACDdx7JJ+DvFdUNewL2f/EqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNjAxMjQxMjA3MzNaFw0yNjAxMjcyMzQ4MzNaMDMxMTAvBgNV BAMTKDYzQ0E4NTUwRkQzRDJBOEQ5QjlFQzkzRDdFMjIwM0Y5MzFCQ0ZCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhImwb0/3T0WKhwBzyEY37ekgG Zf+sbKedaXYYvjgtf9H6IPPSwmazkWL2pzzGe7kmN1pJ2k9X7xWxyJNdicZ5YFXr ONY7Y/MqtrpDaGJRgrjosyBzsHLNGJB4VPzZ0Fy41G5ZOazK8uxSsw6XdxxfODCn DlTRcWKtTcaMNVvCq0i+P4Eipq1TTc1ZlgjByF4Q7IZcqxmicyUN3iYK/TKkXext sq5zbEsMr6lOlq+D8R8m9WP800VPAggzZvGPNDL3HsTL1JnT+LAayj9pstHaV9h9 ypXpJENkcE78erFMFR4wbnfm6mOrbcl3E6JFLGzH/mpDbONX845X/aZYXmflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8qFUP09Ko2bnsk9fiID+TG8+2MwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpt0CZv05Ph8kYkAutBzZ/Sh24JFF4mIy9r UCNLE6m2YtJnyu1SxmjLLu5UafhEIfAto1a8tGerHoN4TW1dFqHftri02hlErMQa /h6ClvVAXixP5Kb+i4VPJu/3JLUXLHKuuVFT+oTdvOx1Bd/qcCcHokqnuQD0kP8c Wfnu0fxLWy04J//+LXkjbOBVg9AYr3831CV2+ePmmj3V4XvE7Lcaq586UJCiQkOu vmJ7MRYT3PH+ABN+sWa4gR2ZnrLHESxl5EaQ6pu2mBfglJ1nDnY8HmR8w3EhMJR+ QlTLY8X48rIBz9SdGNarbr2ZRNdg3VKTuirWLH/C66DF4w8YH6Q= -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:25 2026 by rpki-client