This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: DVlzJ17Kjldy/09B5gjwkwoWMCRinoVdo+WMh1u1Sn0= Subject key identifier: 59:E7:92:51:5A:93:9E:77:21:43:04:51:1F:35:49:6F:8B:83:09:18 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 17ED5B11DC90EC6F25FC0112E9B15001A9500741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 0229 Signing time: Sat 24 Jan 2026 14:21:14 +0000 Manifest this update: Sat 24 Jan 2026 14:16:14 +0000 Manifest next update: Tue 27 Jan 2026 21:02:14 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: 3qcFu38xxMt8LPo/Ry7+40BG84nVN34C5m6INIcb7Xo=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ed:5b:11:dc:90:ec:6f:25:fc:01:12:e9:b1:50:01:a9:50:07:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Jan 24 14:16:14 2026 GMT Not After : Jan 27 21:02:14 2026 GMT Subject: CN=59E792515A939E77214304511F35496F8B830918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:90:18:e6:bd:80:a4:0a:6e:d9:1c:d7:3c: 73:8b:69:18:53:45:fc:c4:0f:d8:f7:01:5e:93:17: 8f:cc:39:66:a7:e3:aa:14:da:fa:fe:19:a4:8a:21: 71:95:ee:48:70:2c:a1:de:12:83:02:84:73:1c:7a: 43:79:c8:9b:eb:93:62:af:d8:d5:6d:59:49:e6:2d: d3:1e:8d:d0:e8:39:b5:f0:48:91:1b:ed:62:8a:83: 3f:6b:ce:06:54:45:4c:d1:ba:6d:37:e1:80:5a:11: 45:a6:5e:4b:eb:42:65:23:05:4c:01:a4:bb:54:c4: e3:23:22:bd:09:34:de:75:86:53:99:5c:7e:dd:ee: 22:fa:3d:80:7a:ca:60:28:83:57:83:12:e6:52:dc: 3e:7c:88:f6:bb:10:ac:81:c7:56:fd:7f:03:6d:51: 96:68:ed:1e:25:84:89:90:0a:ab:ab:c6:6e:6e:d6: d8:ef:33:ee:34:c9:c4:6c:8b:b2:06:aa:3d:67:57: c9:16:1d:19:a0:40:a6:95:fb:a9:04:2b:87:3e:1b: 42:63:63:c0:b0:b2:10:7b:96:fd:4a:64:9c:e1:6a: cf:04:af:78:9b:11:ea:ca:9c:84:d4:c2:34:4d:ac: b3:40:a7:eb:ed:40:e2:78:c8:04:dd:ce:18:63:9c: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E7:92:51:5A:93:9E:77:21:43:04:51:1F:35:49:6F:8B:83:09:18 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d0:0c:12:00:72:38:7e:fe:87:8e:f7:ba:83:c2:36:af:7a: a4:6a:6b:72:fb:bd:fc:3f:e1:94:38:f4:39:c7:d1:48:38:66: ca:f3:86:91:da:ce:80:ac:02:32:1b:a5:73:92:14:d1:ba:7a: 31:bf:67:bd:d7:f5:ca:8d:5f:f0:0d:9a:4c:0f:61:76:4e:e9: 64:ae:b0:18:f5:1a:b2:5d:99:46:8e:58:73:5c:ae:0c:65:1e: b2:4c:17:0d:35:af:7b:2b:b7:3a:95:75:2f:ab:51:ba:fd:35: 97:44:bc:34:87:90:d4:3b:3e:92:b4:d1:0c:b8:3a:89:74:c1: bb:3e:c5:fe:c2:23:87:59:38:a4:2e:9e:db:2f:0d:9d:20:5d: f4:d6:f4:43:43:53:d6:a1:74:63:a4:6d:33:8c:0b:50:7d:fd: 8e:39:43:34:6c:d5:c8:63:56:bd:55:a1:32:9b:5d:7c:60:bf: 50:95:76:9c:2a:d3:76:40:97:5f:6d:2b:04:d4:b3:5d:4a:5e: 8f:95:7a:09:68:10:ff:37:cc:70:89:4f:15:7f:2a:aa:44:95: 33:c7:f3:31:49:7a:f8:9c:26:89:58:14:08:dd:17:68:82:79: d5:07:14:54:09:9f:48:17:50:73:77:0a:df:c6:3c:87:9d:a5: 7b:47:cc:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+1bEdyQ7G8l/AES6bFQAalQB0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNjAxMjQxNDE2MTRaFw0yNjAxMjcyMTAyMTRaMDMxMTAvBgNV BAMTKDU5RTc5MjUxNUE5MzlFNzcyMTQzMDQ1MTFGMzU0OTZGOEI4MzA5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQpAY5r2ApApu2RzXPHOLaRhT RfzED9j3AV6TF4/MOWan46oU2vr+GaSKIXGV7khwLKHeEoMChHMcekN5yJvrk2Kv 2NVtWUnmLdMejdDoObXwSJEb7WKKgz9rzgZURUzRum034YBaEUWmXkvrQmUjBUwB pLtUxOMjIr0JNN51hlOZXH7d7iL6PYB6ymAog1eDEuZS3D58iPa7EKyBx1b9fwNt UZZo7R4lhImQCqurxm5u1tjvM+40ycRsi7IGqj1nV8kWHRmgQKaV+6kEK4c+G0Jj Y8CwshB7lv1KZJzhas8Er3ibEerKnITUwjRNrLNAp+vtQOJ4yATdzhhjnLebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWeeSUVqTnnchQwRRHzVJb4uDCRgwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/QDBIAcjh+/oeO97qDwjaveqRqa3L7vfw/ 4ZQ49DnH0Ug4ZsrzhpHazoCsAjIbpXOSFNG6ejG/Z73X9cqNX/ANmkwPYXZO6WSu sBj1GrJdmUaOWHNcrgxlHrJMFw01r3srtzqVdS+rUbr9NZdEvDSHkNQ7PpK00Qy4 Ool0wbs+xf7CI4dZOKQuntsvDZ0gXfTW9ENDU9ahdGOkbTOMC1B9/Y45QzRs1chj Vr1VoTKbXXxgv1CVdpwq03ZAl19tKwTUs11KXo+VegloEP83zHCJTxV/KqpElTPH 8zFJevicJolYFAjdF2iCedUHFFQJn0gXUHN3Ct/GPIedpXtHzEc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:31 2026 by rpki-client