This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: llOnWOa2xDWCyjvhGCmtaaO3Fk6t//rKTA5iMA5+nuU= Subject key identifier: 3B:0F:CD:59:25:A0:33:8A:20:DB:6B:DD:8D:EE:42:4E:3A:62:DA:F5 Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 606A4FEB4827F5C2FC12E300948B85B80DEFF7D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 0141 Signing time: Sun 25 Jan 2026 23:41:48 +0000 Manifest this update: Sun 25 Jan 2026 23:36:48 +0000 Manifest next update: Thu 29 Jan 2026 06:35:48 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: T5HL762VadOCx5wdqmfjREUDrSGUpTbp5fL5B+Y2D90=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: 26Hr94IvTPNWLtyGYpXVN8+IvP+74Uco2RJ0Tu/T2Wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6a:4f:eb:48:27:f5:c2:fc:12:e3:00:94:8b:85:b8:0d:ef:f7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Jan 25 23:36:48 2026 GMT Not After : Jan 29 06:35:48 2026 GMT Subject: CN=3B0FCD5925A0338A20DB6BDD8DEE424E3A62DAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:c5:4c:17:85:ff:24:bd:39:eb:89:49:99: 99:8e:f1:d3:02:d6:73:1e:85:51:66:5d:cb:6f:6b: 40:c7:cc:8d:9f:fd:7e:d1:7d:17:c8:e3:e6:96:86: ae:b5:aa:42:68:3b:f9:09:92:00:b8:bd:26:45:04: d0:8a:23:a6:63:8b:67:8b:71:ed:70:ad:30:d0:65: 85:c6:7d:7b:66:c1:a0:c0:8c:5b:52:ca:85:ef:1c: 60:d7:10:8d:44:47:ad:1b:69:5f:6d:4b:bf:d8:e9: 60:2b:c5:17:1f:05:5a:a2:81:41:ea:39:24:97:e2: 44:7f:20:f9:0b:38:95:70:f7:c6:cd:e5:dc:7d:89: cf:33:c9:c2:58:38:15:e0:9e:2a:42:2e:8e:54:24: 2a:04:25:77:6a:d1:90:06:1b:93:7e:d0:39:c6:c8: 74:51:6d:b7:14:d3:15:24:d0:e8:af:7a:63:9d:ec: 1f:4e:07:94:3c:88:d6:00:5e:b3:66:11:16:30:d1: 9c:b3:0e:38:e8:24:c6:93:ec:cf:58:22:eb:f3:24: a5:97:10:96:24:dd:7d:5e:c5:57:af:f3:04:d2:70: de:ab:bc:a4:1a:81:f0:a1:07:33:8f:1e:b3:33:02: 15:e6:29:b1:03:60:e8:b2:9e:f5:9f:d6:6a:b1:09: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:CD:59:25:A0:33:8A:20:DB:6B:DD:8D:EE:42:4E:3A:62:DA:F5 X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:ab:f6:16:b5:3d:0f:ba:b6:77:62:7b:7e:46:c6:f4:b5:bc: 2b:1c:c0:02:d9:96:2b:9f:e0:4f:03:5c:8a:46:b0:bd:bf:30: a7:7d:2d:6a:96:74:f8:54:4e:fa:bc:7b:5a:92:26:71:1d:b4: f4:16:63:db:8c:5d:90:2b:9e:5b:42:42:5d:6d:42:bb:d0:16: b0:57:8f:24:7e:d5:9f:66:8f:0d:0a:92:bd:92:15:85:0d:89: 97:04:b8:d1:96:eb:9c:cb:44:c5:b3:d7:c4:8b:55:5f:af:c1: 85:e7:f7:17:c3:c8:2c:fc:17:e3:1c:10:92:c4:e0:0e:36:14: cf:d9:ef:25:93:2c:8e:bc:ed:c0:c6:b6:48:d2:95:00:75:35: 28:c2:1d:89:d8:93:65:b8:73:e7:38:73:bb:6e:31:90:4c:5d: 11:9c:5c:a3:71:4c:94:62:57:c9:3a:ad:93:ef:89:6f:19:15: 72:2f:ce:bd:67:71:60:5c:e9:0f:ce:e9:78:f5:67:ae:69:5f: 90:ff:b5:30:6f:31:18:66:1f:10:1b:5c:4a:e3:1d:b9:68:2c: 3b:76:22:50:5a:96:6a:e5:90:46:a2:a3:d6:47:25:91:f5:9f: 73:1f:81:3a:b0:d0:42:96:46:4b:14:ae:3c:3b:52:85:7a:27: f7:b7:96:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGpP60gn9cL8EuMAlIuFuA3v99cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNjAxMjUyMzM2NDhaFw0yNjAxMjkwNjM1NDhaMDMxMTAvBgNV BAMTKDNCMEZDRDU5MjVBMDMzOEEyMERCNkJERDhERUU0MjRFM0E2MkRBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiMVMF4X/JL0564lJmZmO8dMC 1nMehVFmXctva0DHzI2f/X7RfRfI4+aWhq61qkJoO/kJkgC4vSZFBNCKI6Zji2eL ce1wrTDQZYXGfXtmwaDAjFtSyoXvHGDXEI1ER60baV9tS7/Y6WArxRcfBVqigUHq OSSX4kR/IPkLOJVw98bN5dx9ic8zycJYOBXgnipCLo5UJCoEJXdq0ZAGG5N+0DnG yHRRbbcU0xUk0OivemOd7B9OB5Q8iNYAXrNmERYw0ZyzDjjoJMaT7M9YIuvzJKWX EJYk3X1exVev8wTScN6rvKQagfChBzOPHrMzAhXmKbEDYOiynvWf1mqxCf9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOw/NWSWgM4og22vdje5CTjpi2vUwHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN2r9ha1PQ+6tndie35GxvS1vCscwALZliuf 4E8DXIpGsL2/MKd9LWqWdPhUTvq8e1qSJnEdtPQWY9uMXZArnltCQl1tQrvQFrBX jyR+1Z9mjw0Kkr2SFYUNiZcEuNGW65zLRMWz18SLVV+vwYXn9xfDyCz8F+McEJLE 4A42FM/Z7yWTLI687cDGtkjSlQB1NSjCHYnYk2W4c+c4c7tuMZBMXRGcXKNxTJRi V8k6rZPviW8ZFXIvzr1ncWBc6Q/O6Xj1Z65pX5D/tTBvMRhmHxAbXErjHbloLDt2 IlBalmrlkEaio9ZHJZH1n3MfgTqw0EKWRksUrjw7UoV6J/e3lrc= -----END CERTIFICATE-----Generated at Mon Jan 26 05:47:14 2026 by rpki-client