This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: BJFg1hUksPm7pFc8oEP/Cv0fKZY+kgJr3Qy46jZG8Do= Subject key identifier: 9E:16:30:19:F6:2E:B4:71:62:40:72:B9:A1:A0:F8:2F:18:EB:78:AC Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 550EA4594D520F9742D4EC58A984A453B5BA259E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 0242 Signing time: Sat 24 Jan 2026 09:01:36 +0000 Manifest this update: Sat 24 Jan 2026 08:56:36 +0000 Manifest next update: Tue 27 Jan 2026 20:56:36 +0000 Files and hashes: 1: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: 1LDE7Q4lYr2SKaCtNmagJxjwCVcZsqkKjtClaRa06Y4=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0e:a4:59:4d:52:0f:97:42:d4:ec:58:a9:84:a4:53:b5:ba:25:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Jan 24 08:56:36 2026 GMT Not After : Jan 27 20:56:36 2026 GMT Subject: CN=9E163019F62EB471624072B9A1A0F82F18EB78AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:ad:4f:95:c5:5d:36:9f:cd:82:bb:0f:3f: 62:9b:99:39:d3:56:4a:3c:42:e0:ae:6f:e4:41:ea: a1:e2:32:88:a6:7c:9e:f2:e8:12:d6:de:5b:2d:a1: ce:8f:5a:cd:6f:47:4f:b9:16:2d:fc:d0:74:25:e8: e0:da:f9:15:0b:64:69:27:69:7c:b5:bd:39:e0:4f: 31:a1:33:71:7a:1e:d0:7b:db:ba:04:67:6f:a3:47: ba:90:00:b7:ac:63:30:63:bf:62:b6:75:53:e2:03: 46:a1:12:a5:07:ef:c4:97:cb:62:79:bf:d4:f8:80: 31:8a:12:cd:09:8f:6b:c3:1f:9b:5e:59:5e:35:46: c9:bb:aa:c3:34:42:52:74:c1:a6:db:85:b5:1e:d5: 63:24:d0:b6:1f:2b:4f:3a:34:02:40:d2:d1:11:a0: 0d:a9:8e:99:37:68:8f:ee:6a:ce:1f:d2:c5:c5:e8: 10:ec:b9:82:90:4c:a4:b5:bc:01:b7:19:07:85:52: df:b0:eb:e8:69:9e:b7:5c:7f:d8:3b:8b:1a:8f:67: 40:f4:57:34:7f:e3:a9:6a:22:b5:05:a1:24:f4:a0: 24:1f:08:3b:39:ee:0f:2d:ae:dc:9e:ef:1c:87:93: c7:e7:40:43:37:fd:c7:32:5f:2c:47:5f:ed:44:ef: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:30:19:F6:2E:B4:71:62:40:72:B9:A1:A0:F8:2F:18:EB:78:AC X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:57:64:36:c0:c8:aa:59:88:8b:f1:eb:f4:a2:fd:30:38:55: 7c:12:e6:da:e6:0c:a8:eb:34:0f:53:12:c9:7b:8a:63:95:c8: 91:1b:1f:f1:63:7f:db:ac:a3:d7:cd:d6:eb:5c:f2:cc:d5:fa: 45:9c:2f:f4:64:93:4c:59:15:b3:88:6e:0b:e2:1b:79:8f:ea: 2c:af:33:8c:7b:42:d2:1a:26:37:ee:23:61:ae:04:ee:c4:1f: e7:29:bf:90:3f:5d:9b:6d:96:d2:cc:32:f0:f8:7c:b9:da:a7: ba:08:c9:b6:cc:21:07:87:33:bc:c8:52:91:07:b6:da:f8:3a: 67:85:b1:2d:c0:8b:5f:09:4d:43:57:28:42:6f:c8:a4:db:af: fd:42:76:05:69:4f:a9:27:64:65:94:78:c7:64:bc:eb:15:df: 1b:06:0e:cd:41:38:47:aa:bd:b8:35:a1:3b:17:1e:73:d5:c7: 95:3e:79:7f:a9:10:68:6f:dc:0f:b1:3c:2b:0b:5b:25:d7:77: 3e:4b:87:54:8c:99:b2:d5:2c:6f:c7:de:59:59:43:07:0f:9a: 56:4e:70:0d:e9:7d:3e:bc:82:88:69:87:a8:86:75:4b:5d:d1: 71:51:47:ab:d6:2e:75:dc:5d:c9:d6:97:ba:3c:04:3f:11:95: 84:8c:f2:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQ6kWU1SD5dC1OxYqYSkU7W6JZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNjAxMjQwODU2MzZaFw0yNjAxMjcyMDU2MzZaMDMxMTAvBgNV BAMTKDlFMTYzMDE5RjYyRUI0NzE2MjQwNzJCOUExQTBGODJGMThFQjc4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjN61PlcVdNp/NgrsPP2KbmTnT Vko8QuCub+RB6qHiMoimfJ7y6BLW3lstoc6PWs1vR0+5Fi380HQl6ODa+RULZGkn aXy1vTngTzGhM3F6HtB727oEZ2+jR7qQALesYzBjv2K2dVPiA0ahEqUH78SXy2J5 v9T4gDGKEs0Jj2vDH5teWV41Rsm7qsM0QlJ0wabbhbUe1WMk0LYfK086NAJA0tER oA2pjpk3aI/uas4f0sXF6BDsuYKQTKS1vAG3GQeFUt+w6+hpnrdcf9g7ixqPZ0D0 VzR/46lqIrUFoST0oCQfCDs57g8trtye7xyHk8fnQEM3/ccyXyxHX+1E71lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnhYwGfYutHFiQHK5oaD4LxjreKwwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERXZDbAyKpZiIvx6/Si/TA4VXwS5trmDKjr NA9TEsl7imOVyJEbH/Fjf9uso9fN1utc8szV+kWcL/Rkk0xZFbOIbgviG3mP6iyv M4x7QtIaJjfuI2GuBO7EH+cpv5A/XZttltLMMvD4fLnap7oIybbMIQeHM7zIUpEH ttr4OmeFsS3Ai18JTUNXKEJvyKTbr/1CdgVpT6knZGWUeMdkvOsV3xsGDs1BOEeq vbg1oTsXHnPVx5U+eX+pEGhv3A+xPCsLWyXXdz5Lh1SMmbLVLG/H3llZQwcPmlZO cA3pfT68gohph6iGdUtd0XFRR6vWLnXcXcnWl7o8BD8RlYSM8jI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:55 2026 by rpki-client