This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: L1RLsI3pt3TjmhLo518fmnjjGh60NwHUdT8aZ4CCWTA= Subject key identifier: 16:24:16:9D:5A:20:91:E3:68:92:7F:F1:41:9A:67:31:8A:50:05:89 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 4467B7F277402667B4AF8FFAE39021F7C9525E4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03C3 Signing time: Fri 23 Jan 2026 21:01:54 +0000 Manifest this update: Fri 23 Jan 2026 20:56:54 +0000 Manifest next update: Tue 27 Jan 2026 02:06:54 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: WZ8DOqrzVBAJP2CO2PsD2HrjNVMzt5L6nkSlE2AXuXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:67:b7:f2:77:40:26:67:b4:af:8f:fa:e3:90:21:f7:c9:52:5e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Jan 23 20:56:54 2026 GMT Not After : Jan 27 02:06:54 2026 GMT Subject: CN=1624169D5A2091E368927FF1419A67318A500589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:e0:95:48:cd:a0:13:53:b8:be:9b:5f:ee: 1a:99:c6:43:75:2d:b0:f9:e3:74:ee:24:60:4c:1d: f4:36:46:90:2d:d2:11:8e:11:f1:b1:a3:6d:b3:04: 56:00:ee:e6:25:c6:2b:b0:20:45:3c:b8:6c:00:83: d4:54:30:6a:ea:5e:7f:cf:a4:d9:18:fe:1c:8f:17: 1f:73:c5:e1:3d:00:22:0a:eb:30:18:a0:d2:fb:a7: 0e:b7:b8:8a:e1:b0:e3:3d:8e:a6:d7:68:a8:3a:6c: 33:f0:82:cf:bd:9c:a5:6e:cb:78:ba:e8:dc:5f:6d: 11:d8:52:e3:c7:64:0b:2b:14:95:a0:8a:da:54:ce: 65:fb:ef:c0:f6:bf:92:ca:10:e7:fd:e6:ea:d0:8d: 10:07:68:c8:5d:fc:e3:c2:26:5c:e3:a4:ce:2e:48: 1e:26:30:32:93:4f:df:3f:50:c4:7e:2a:22:5c:ee: 05:97:c5:e4:8a:cb:38:23:22:ac:ea:a1:cc:36:f7: cd:5e:ef:6e:ed:2e:b4:0e:d8:87:0f:36:cb:d5:e6: c2:52:bd:23:4b:e1:de:19:41:71:ac:72:98:2b:58: f3:3a:e5:43:dd:62:11:ac:59:04:c7:e5:2f:c4:71: eb:01:fb:8b:ba:6d:ab:56:15:4f:0c:a4:6f:af:d5: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:24:16:9D:5A:20:91:E3:68:92:7F:F1:41:9A:67:31:8A:50:05:89 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:45:e0:d6:18:4a:ab:55:24:29:cf:2b:ae:da:a5:df:6e:80: f0:3a:5f:2f:dc:e6:63:54:82:5b:c4:9a:0c:d5:6c:2b:31:ba: 23:aa:c2:a8:73:2c:0b:7e:ce:d0:35:c3:d0:c6:80:52:d1:d7: 51:d7:ff:21:37:e2:fe:51:f0:c5:4a:ed:0f:03:3d:5e:33:83: 6e:61:f3:98:ae:79:b1:f4:41:0b:66:f1:0e:ae:c1:e8:3b:e2: 94:d3:32:8b:23:35:4c:33:5c:54:84:29:ff:85:e7:38:ad:d3: fc:e0:51:6d:b2:71:f7:21:49:38:2a:76:42:d8:58:39:a6:2c: 21:d1:35:23:24:fd:da:2f:c0:cd:0f:d5:05:1d:fa:86:26:4e: 52:65:3a:66:6b:38:bb:c1:fb:53:6d:19:e8:43:d1:68:69:eb: d1:6f:25:93:9c:89:64:40:55:96:f7:fd:a5:aa:77:a4:a1:cc: ec:a7:d0:d1:6d:0c:69:4f:c4:a1:cd:03:2c:98:14:b6:b8:58: e7:7b:54:95:92:14:33:31:0e:1e:35:46:9c:32:e4:63:5f:a8: 69:83:6a:7f:34:14:a0:63:fb:29:e4:fb:c1:53:ae:01:1d:86: ee:47:72:4e:39:1d:34:a7:16:66:0b:0f:34:6c:9d:88:4d:02: 4f:df:55:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGe38ndAJme0r4/645Ah98lSXk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNjAxMjMyMDU2NTRaFw0yNjAxMjcwMjA2NTRaMDMxMTAvBgNV BAMTKDE2MjQxNjlENUEyMDkxRTM2ODkyN0ZGMTQxOUE2NzMxOEE1MDA1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfuCVSM2gE1O4vptf7hqZxkN1 LbD543TuJGBMHfQ2RpAt0hGOEfGxo22zBFYA7uYlxiuwIEU8uGwAg9RUMGrqXn/P pNkY/hyPFx9zxeE9ACIK6zAYoNL7pw63uIrhsOM9jqbXaKg6bDPwgs+9nKVuy3i6 6NxfbRHYUuPHZAsrFJWgitpUzmX778D2v5LKEOf95urQjRAHaMhd/OPCJlzjpM4u SB4mMDKTT98/UMR+KiJc7gWXxeSKyzgjIqzqocw2981e727tLrQO2IcPNsvV5sJS vSNL4d4ZQXGscpgrWPM65UPdYhGsWQTH5S/EcesB+4u6batWFU8MpG+v1Y4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFiQWnVogkeNokn/xQZpnMYpQBYkwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxF4NYYSqtVJCnPK67apd9ugPA6Xy/c5mNU glvEmgzVbCsxuiOqwqhzLAt+ztA1w9DGgFLR11HX/yE34v5R8MVK7Q8DPV4zg25h 85iuebH0QQtm8Q6uweg74pTTMosjNUwzXFSEKf+F5zit0/zgUW2ycfchSTgqdkLY WDmmLCHRNSMk/dovwM0P1QUd+oYmTlJlOmZrOLvB+1NtGehD0Whp69FvJZOciWRA VZb3/aWqd6ShzOyn0NFtDGlPxKHNAyyYFLa4WOd7VJWSFDMxDh41Rpwy5GNfqGmD an80FKBj+ynk+8FTrgEdhu5Hck45HTSnFmYLDzRsnYhNAk/fVdw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:57 2026 by rpki-client