This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: v4Mwy2Vvrbu3nDRDk35liMzDg5secm8HuvAuMrOeERQ= Subject key identifier: 81:74:A7:13:92:53:39:4E:83:68:E5:9D:47:E6:34:93:91:CA:56:C9 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 5FA156B33318E290CBF708CBEBE383EB5DFA0E48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 0116 Signing time: Fri 23 Jan 2026 20:41:06 +0000 Manifest this update: Fri 23 Jan 2026 20:36:06 +0000 Manifest next update: Tue 27 Jan 2026 02:20:06 +0000 Files and hashes: 1: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: 3rYkwFnczJ35w0a/cKtEdEnUBHQkCE5TwKeQD7XPIos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a1:56:b3:33:18:e2:90:cb:f7:08:cb:eb:e3:83:eb:5d:fa:0e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Jan 23 20:36:06 2026 GMT Not After : Jan 27 02:20:06 2026 GMT Subject: CN=8174A7139253394E8368E59D47E6349391CA56C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:92:59:8f:1d:1c:cf:e6:ed:b8:9c:96:c9: 43:89:be:71:31:17:43:52:fd:ca:ee:c4:d9:39:06: 7c:41:17:1a:20:b1:ce:5e:85:1b:cf:8f:c3:7b:92: 6d:ef:e2:3b:a7:55:b3:0a:37:f1:75:fe:64:42:71: 07:44:bf:29:b5:0e:66:6b:e7:1e:1b:bc:0e:2b:72: 9f:4d:85:f4:9e:77:6c:d1:f0:4a:22:e5:c6:aa:a4: f3:85:41:19:ee:9a:c2:4c:05:49:3f:38:c5:9f:99: f9:94:18:a9:e7:a7:a0:19:87:bd:4b:ba:d0:8a:27: cc:b4:80:2f:e4:78:0c:4b:4a:6f:7e:50:4f:9d:72: d0:ab:a2:54:44:6f:6c:ed:5b:9f:01:44:31:02:42: 8e:c3:18:41:1b:bb:52:91:ae:6f:97:7a:27:f7:a6: 34:fa:77:60:e9:5c:b4:8f:c6:2f:54:90:bb:7d:88: b7:5a:26:bc:6b:36:86:2a:37:c1:ff:b8:83:dd:4d: e0:3e:b5:b6:d3:8d:d1:a7:1b:65:d3:f0:ad:c4:3e: ed:7f:6e:df:79:e8:5d:98:45:21:e3:b2:00:4e:75: 9c:3b:cc:b7:ee:b5:3c:9e:ff:94:d8:cd:2c:ab:68: e0:9d:d2:8e:54:63:08:ab:a8:c3:bf:57:56:ba:e1: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:74:A7:13:92:53:39:4E:83:68:E5:9D:47:E6:34:93:91:CA:56:C9 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:07:ca:70:2a:37:4b:cd:11:95:50:a7:23:cb:da:ee:4a:63: 88:9f:5e:9e:88:13:c7:34:91:64:8d:7e:50:51:c5:a6:bd:b0: 33:53:5d:5d:9e:7b:5b:d4:cd:06:ed:ed:4d:61:a9:21:d4:7e: 98:52:20:75:e8:ab:e5:f7:e4:d2:ef:77:62:62:b7:18:9b:57: b4:5d:e2:bd:1d:7e:50:d9:a8:2d:39:ab:b9:28:3d:fc:27:65: 30:66:d9:1e:f3:15:62:dd:2c:6d:8d:6d:8b:b6:52:f5:3d:cd: 5c:7e:be:c3:31:30:63:0e:71:13:8c:19:6b:a0:26:df:95:48: 5e:a2:f6:b5:f1:1a:25:92:8c:58:83:fe:07:51:85:17:2a:94: 44:d0:3e:13:22:35:ca:ef:40:8c:ec:36:8b:d0:87:79:1d:d6: 4a:ed:e9:c6:e9:3d:be:6c:63:ff:93:e2:50:c3:8b:01:8b:33: bf:6a:7c:66:2c:fb:2b:0d:f0:d4:f8:21:f8:7d:4e:22:ff:31: ff:9a:84:ad:b3:31:f8:be:8f:39:58:09:9c:9f:b5:28:6b:18: 45:6a:6f:4b:65:bd:98:f2:1a:af:c0:92:17:a1:4c:51:3c:b0: 3d:8c:26:31:80:2c:f6:98:a0:71:b2:26:0b:5f:c4:db:6d:44: 84:9d:13:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6FWszMY4pDL9wjL6+OD6136DkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNjAxMjMyMDM2MDZaFw0yNjAxMjcwMjIwMDZaMDMxMTAvBgNV BAMTKDgxNzRBNzEzOTI1MzM5NEU4MzY4RTU5RDQ3RTYzNDkzOTFDQTU2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjpJZjx0cz+btuJyWyUOJvnEx F0NS/cruxNk5BnxBFxogsc5ehRvPj8N7km3v4junVbMKN/F1/mRCcQdEvym1DmZr 5x4bvA4rcp9NhfSed2zR8Eoi5caqpPOFQRnumsJMBUk/OMWfmfmUGKnnp6AZh71L utCKJ8y0gC/keAxLSm9+UE+dctCrolREb2ztW58BRDECQo7DGEEbu1KRrm+Xeif3 pjT6d2DpXLSPxi9UkLt9iLdaJrxrNoYqN8H/uIPdTeA+tbbTjdGnG2XT8K3EPu1/ bt956F2YRSHjsgBOdZw7zLfutTye/5TYzSyraOCd0o5UYwirqMO/V1a64WM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgXSnE5JTOU6DaOWdR+Y0k5HKVskwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMHynAqN0vNEZVQpyPL2u5KY4ifXp6IE8c0 kWSNflBRxaa9sDNTXV2ee1vUzQbt7U1hqSHUfphSIHXoq+X35NLvd2JitxibV7Rd 4r0dflDZqC05q7koPfwnZTBm2R7zFWLdLG2NbYu2UvU9zVx+vsMxMGMOcROMGWug Jt+VSF6i9rXxGiWSjFiD/gdRhRcqlETQPhMiNcrvQIzsNovQh3kd1krt6cbpPb5s Y/+T4lDDiwGLM79qfGYs+ysN8NT4Ifh9TiL/Mf+ahK2zMfi+jzlYCZyftShrGEVq b0tlvZjyGq/AkhehTFE8sD2MJjGALPaYoHGyJgtfxNttRISdE2A= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:18 2026 by rpki-client