This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: niHfnxIkoEzPRTvHdSzBryewjExJVffwDiCtyIuXfAI= Subject key identifier: 9C:48:D0:A9:E3:1C:39:FB:06:F5:5F:1B:97:30:23:08:D3:E4:4E:09 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 3FD005B7865A18029A4051241AA08E3B909405DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 0560 Signing time: Sat 24 Jan 2026 09:00:44 +0000 Manifest this update: Sat 24 Jan 2026 08:55:44 +0000 Manifest next update: Tue 27 Jan 2026 11:16:44 +0000 Files and hashes: 1: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 3: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: DAT7vRbPjUYk/Q4Vyl9/2dbDhEEK7gas/B/bouCgQTM=) 4: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d0:05:b7:86:5a:18:02:9a:40:51:24:1a:a0:8e:3b:90:94:05:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Jan 24 08:55:44 2026 GMT Not After : Jan 27 11:16:44 2026 GMT Subject: CN=9C48D0A9E31C39FB06F55F1B97302308D3E44E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:dc:8a:4b:04:2e:40:75:52:ed:3f:5a:a2: f7:57:44:02:85:77:cc:a8:84:da:c2:39:a3:3d:8d: 83:e8:36:63:fb:29:f2:f9:ff:68:c1:fa:54:66:9c: c8:9f:0b:85:ca:02:e7:8e:fd:2b:74:23:46:f6:b1: cd:48:ab:5e:be:d6:e0:ba:29:50:4f:4d:f9:13:75: 81:16:4a:93:ec:7e:01:03:8f:40:c5:0a:9c:bd:0e: 40:d4:f0:c8:18:9e:cd:3d:87:28:8f:3d:6f:5f:48: 40:c6:2a:76:a2:f3:d9:1d:ee:af:57:33:e1:f8:2a: c0:35:22:44:47:7c:3d:ee:10:93:42:d9:8e:41:ec: 75:7f:71:3c:2f:02:51:f3:99:77:80:f3:86:64:bb: f3:d6:2b:dd:b6:20:0c:e4:0a:cf:d5:3b:60:16:5f: 69:e0:e0:56:31:7e:eb:7e:e8:3f:6f:25:4c:57:08: f9:eb:57:d3:75:b4:7b:3b:0e:55:6a:d6:8b:27:60: 19:3b:bb:81:5f:55:b6:21:5c:1e:45:18:42:16:3a: 46:38:f7:65:c7:97:68:25:38:8c:b7:6d:e8:6d:eb: 38:57:d1:65:c0:77:8b:e4:87:a2:57:a7:16:f8:6b: 51:69:75:58:ff:e3:0a:81:4c:89:54:df:a8:4e:a9: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:D0:A9:E3:1C:39:FB:06:F5:5F:1B:97:30:23:08:D3:E4:4E:09 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:85:94:8a:1e:c8:5b:a3:30:c6:ef:60:a6:20:7d:85:4f:af: cf:87:71:dd:e0:65:9a:28:5b:ce:16:fc:bf:4a:80:72:86:46: 23:15:88:a3:6f:0a:54:b4:43:be:c2:c2:d9:1e:55:4b:db:3d: cb:4c:ad:d2:ab:2d:f7:99:a6:e9:3c:77:83:e8:d0:ba:24:c7: 9b:a3:19:7d:72:2e:bb:f0:96:6b:4a:4f:80:4f:12:f8:a2:b5: b8:45:bb:1e:7b:67:8e:1e:ef:cd:65:bb:d0:a4:e0:db:4f:14: 3c:f1:48:da:6f:2e:0e:f7:e2:23:c9:a3:0a:aa:be:73:91:77: 28:14:2f:9e:2e:1d:8b:14:d7:0a:e4:7b:9c:08:89:23:a3:1a: a9:e5:54:0a:07:6d:36:fb:18:3f:dd:59:ed:1a:4c:1a:a8:dc: 06:df:99:20:6d:e4:0e:81:20:c8:17:ee:12:a1:4f:c6:5d:63: 16:40:ed:88:cf:fb:2a:ca:6a:c0:d9:89:45:92:73:43:ba:82: f7:00:f4:07:90:fc:d2:58:e9:ff:7f:a6:ce:75:fd:b1:37:90: b6:38:a6:b2:00:c0:e1:e7:7b:45:f0:87:7b:4c:50:6f:a3:ff: d6:19:18:84:a1:47:97:9e:e7:3e:30:22:f8:81:9b:1b:d0:ed: 55:0d:6f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9AFt4ZaGAKaQFEkGqCOO5CUBd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNjAxMjQwODU1NDRaFw0yNjAxMjcxMTE2NDRaMDMxMTAvBgNV BAMTKDlDNDhEMEE5RTMxQzM5RkIwNkY1NUYxQjk3MzAyMzA4RDNFNDRFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnNyKSwQuQHVS7T9aovdXRAKF d8yohNrCOaM9jYPoNmP7KfL5/2jB+lRmnMifC4XKAueO/St0I0b2sc1Iq16+1uC6 KVBPTfkTdYEWSpPsfgEDj0DFCpy9DkDU8MgYns09hyiPPW9fSEDGKnai89kd7q9X M+H4KsA1IkRHfD3uEJNC2Y5B7HV/cTwvAlHzmXeA84Zku/PWK922IAzkCs/VO2AW X2ng4FYxfut+6D9vJUxXCPnrV9N1tHs7DlVq1osnYBk7u4FfVbYhXB5FGEIWOkY4 92XHl2glOIy3beht6zhX0WXAd4vkh6JXpxb4a1FpdVj/4wqBTIlU36hOqeMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEjQqeMcOfsG9V8blzAjCNPkTgkwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiFlIoeyFujMMbvYKYgfYVPr8+Hcd3gZZoo W84W/L9KgHKGRiMViKNvClS0Q77CwtkeVUvbPctMrdKrLfeZpuk8d4Po0Lokx5uj GX1yLrvwlmtKT4BPEviitbhFux57Z44e781lu9Ck4NtPFDzxSNpvLg734iPJowqq vnORdygUL54uHYsU1wrke5wIiSOjGqnlVAoHbTb7GD/dWe0aTBqo3AbfmSBt5A6B IMgX7hKhT8ZdYxZA7YjP+yrKasDZiUWSc0O6gvcA9AeQ/NJY6f9/ps51/bE3kLY4 prIAwOHne0Xwh3tMUG+j/9YZGIShR5ee5z4wIviBmxvQ7VUNb7k= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:33 2026 by rpki-client