This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: 2GP/WO/Q6NEUH84ygqYWjSKJ9hkqlNn3ixwgLMoKsG8= Subject key identifier: 99:C3:77:4A:A6:F2:2C:9D:F5:8F:11:1D:6A:A6:A1:3A:12:73:88:30 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 649E804CA790D2ABE84C2CAC7BF044DD02ABA2D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 0247 Signing time: Fri 23 Jan 2026 18:30:55 +0000 Manifest this update: Fri 23 Jan 2026 18:25:55 +0000 Manifest next update: Mon 26 Jan 2026 22:45:55 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: eq28eFx2hvDlIQh/I2a7BXQy/lLdRThxUYGSiYXfH0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9e:80:4c:a7:90:d2:ab:e8:4c:2c:ac:7b:f0:44:dd:02:ab:a2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Jan 23 18:25:55 2026 GMT Not After : Jan 26 22:45:55 2026 GMT Subject: CN=99C3774AA6F22C9DF58F111D6AA6A13A12738830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2b:5a:a5:e0:fc:f1:1e:86:bc:2a:05:c7:f8: be:45:76:26:db:74:00:57:ba:27:b3:23:a8:b2:4d: a4:0a:4d:11:fa:db:57:70:d8:e0:63:79:4a:1b:63: 17:e4:58:9c:8a:60:be:dc:f3:85:85:18:26:da:b6: f9:0a:18:34:9e:f4:a2:18:06:33:63:8f:0f:1c:4b: eb:ac:64:2c:6e:39:26:a9:7e:cd:28:87:d4:88:03: 0e:d7:2a:31:be:89:24:55:bd:3f:51:42:d2:67:7c: 71:b7:1d:7d:e1:f4:81:b5:84:98:5a:ab:8b:a8:1b: bc:e9:9e:41:d2:92:08:d8:54:44:72:76:41:59:20: 4a:0f:45:59:0e:c8:3f:c0:93:05:f2:dc:c7:98:da: b2:f5:d7:8c:73:bf:ae:93:31:a0:a9:07:b8:e1:52: 89:61:66:6f:8f:37:96:a2:c1:23:ca:47:ff:81:4e: 04:eb:76:7a:8b:cd:9d:9f:72:5d:db:c6:9f:f6:df: 97:ca:c1:7e:5a:fe:72:96:98:39:cf:ba:e0:ce:74: ce:96:ce:ec:8e:b9:14:fb:24:c4:6e:36:8b:a6:7c: 5e:fa:1c:4f:32:dd:28:6b:3e:31:d2:57:65:ad:7a: 94:55:6e:93:54:ef:1e:69:ef:bc:81:a2:90:79:4e: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C3:77:4A:A6:F2:2C:9D:F5:8F:11:1D:6A:A6:A1:3A:12:73:88:30 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:62:c0:ff:f8:cb:1b:00:7b:0c:3f:e1:a0:f6:81:9d:f3:5e: 92:4e:27:dd:ac:1f:5c:20:0d:ad:e9:e6:8e:e1:f1:c9:9a:7e: 8b:1c:6b:fb:bf:7a:84:37:a1:34:bf:eb:49:1e:1c:22:b3:79: 0b:bc:d2:75:b3:de:1a:0b:f5:d9:e7:27:9c:a0:7c:98:b3:20: 7b:ce:a7:55:77:08:6f:89:33:40:7f:49:d9:1b:2c:c9:ab:16: 68:b9:b1:bb:12:5e:ce:b8:b0:ee:b3:6d:b0:8c:5c:33:2c:20: 2d:40:24:02:53:b4:d7:00:8a:a2:c8:4f:83:83:91:ec:7d:68: c4:91:46:3a:c7:90:bb:62:ca:e6:ad:98:90:f8:22:56:7a:46: 7a:35:a5:2b:83:d7:d1:4a:96:29:f8:7d:4c:f0:8e:1b:ad:e1: 27:9d:4f:3a:c2:29:1f:3a:00:df:5e:c7:4b:c2:9d:e7:1a:8d: a9:91:72:20:c6:26:cf:17:b9:ea:e6:5b:81:44:9f:a7:5c:9c: a7:39:36:cb:be:e2:2b:8b:e3:b3:3f:84:cb:60:2c:c3:5d:a9: d4:77:46:22:b9:c1:ba:be:c8:49:da:81:26:58:ba:65:d7:b5: 25:7f:a0:0d:ea:53:d6:02:14:c2:c7:8e:c1:61:82:aa:f2:eb: 77:56:00:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJ6ATKeQ0qvoTCyse/BE3QKrotcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNjAxMjMxODI1NTVaFw0yNjAxMjYyMjQ1NTVaMDMxMTAvBgNV BAMTKDk5QzM3NzRBQTZGMjJDOURGNThGMTExRDZBQTZBMTNBMTI3Mzg4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOK1ql4PzxHoa8KgXH+L5Fdibb dABXuiezI6iyTaQKTRH621dw2OBjeUobYxfkWJyKYL7c84WFGCbatvkKGDSe9KIY BjNjjw8cS+usZCxuOSapfs0oh9SIAw7XKjG+iSRVvT9RQtJnfHG3HX3h9IG1hJha q4uoG7zpnkHSkgjYVERydkFZIEoPRVkOyD/AkwXy3MeY2rL114xzv66TMaCpB7jh UolhZm+PN5aiwSPKR/+BTgTrdnqLzZ2fcl3bxp/235fKwX5a/nKWmDnPuuDOdM6W zuyOuRT7JMRuNoumfF76HE8y3ShrPjHSV2WtepRVbpNU7x5p77yBopB5TrlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmcN3SqbyLJ31jxEdaqahOhJziDAwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtiwP/4yxsAeww/4aD2gZ3zXpJOJ92sH1wg Da3p5o7h8cmafosca/u/eoQ3oTS/60keHCKzeQu80nWz3hoL9dnnJ5ygfJizIHvO p1V3CG+JM0B/SdkbLMmrFmi5sbsSXs64sO6zbbCMXDMsIC1AJAJTtNcAiqLIT4OD kex9aMSRRjrHkLtiyuatmJD4IlZ6Rno1pSuD19FKlin4fUzwjhut4SedTzrCKR86 AN9ex0vCnecajamRciDGJs8XuermW4FEn6dcnKc5Nsu+4iuL47M/hMtgLMNdqdR3 RiK5wbq+yEnagSZYumXXtSV/oA3qU9YCFMLHjsFhgqry63dWAA0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:18 2026 by rpki-client