This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: peC3pFznioh/3XjyGH2EVHjfkpmmiRiGip9AAzIkgis= Subject key identifier: D8:3E:3F:48:14:C8:C6:CE:51:81:DC:CC:AD:8C:66:58:D7:7A:56:DF Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 561E680C49989300CF9F9FD53973FDD738227DFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 0540 Signing time: Sat 24 Jan 2026 19:01:29 +0000 Manifest this update: Sat 24 Jan 2026 18:56:29 +0000 Manifest next update: Tue 27 Jan 2026 19:01:29 +0000 Files and hashes: 1: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: FUNQnIplc/x3MHzjyYknao3NqZXaBXOC3QfKBats+Go=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1e:68:0c:49:98:93:00:cf:9f:9f:d5:39:73:fd:d7:38:22:7d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Jan 24 18:56:29 2026 GMT Not After : Jan 27 19:01:29 2026 GMT Subject: CN=D83E3F4814C8C6CE5181DCCCAD8C6658D77A56DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:b0:32:8b:3c:cb:6f:3b:da:1e:39:e1:1b: 9e:c1:26:fb:51:eb:63:9a:36:e3:60:95:18:2b:b0: 6b:83:1b:cf:c0:64:46:8f:0b:72:df:4e:d2:84:64: b5:c0:a2:17:5d:c4:69:1a:ed:4d:5f:b0:15:22:64: a0:bd:64:58:b5:fb:83:8b:2c:02:ea:1c:2d:ad:5a: 90:16:ab:48:90:99:de:cf:a8:4a:56:2c:f8:75:69: a1:24:25:69:0d:93:0c:ed:ca:b9:f7:45:88:34:7b: 05:fa:ca:a9:7d:3a:8d:a6:90:d7:e6:3c:84:e1:54: 9d:3e:a8:8e:f6:2f:1b:6a:38:7c:18:1e:19:22:0a: 90:a5:4f:44:c7:57:23:60:b5:45:d3:32:40:28:13: 93:93:21:c2:03:fb:e5:94:91:cb:f7:98:77:54:b5: 69:2d:b8:c9:4b:54:d9:0f:01:e0:14:ac:e7:f0:9f: bd:d8:03:be:16:ed:de:bb:04:c2:95:b4:3e:a6:b9: 52:50:42:01:8b:aa:06:85:f0:ea:78:8a:4a:af:b7: 6e:71:61:7a:2a:a6:fc:a3:48:53:43:9d:f1:88:f3: 40:8f:83:8f:c4:46:8f:4f:c6:d3:24:03:ab:a5:f6: 66:ae:0b:ea:da:d7:ed:73:8e:48:63:35:86:50:cc: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3E:3F:48:14:C8:C6:CE:51:81:DC:CC:AD:8C:66:58:D7:7A:56:DF X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a3:88:b8:d2:b8:7a:bd:31:8d:6a:1e:6e:b8:8b:61:a7:61: 8b:06:85:93:a7:0b:04:22:dc:72:fb:8b:7f:0d:17:71:1f:6c: 0c:98:24:cd:be:35:06:de:f6:39:a9:47:7f:51:52:96:e0:bf: 50:0c:ee:ce:52:7a:d2:98:d2:a7:ca:ea:74:98:18:de:3f:d5: 31:e1:df:aa:92:1f:ca:2e:6f:d6:7e:04:b3:0a:03:5e:1c:35: 97:57:a0:e5:89:0b:06:17:a9:1a:25:9c:15:48:90:91:28:5d: 0d:f3:4f:35:23:f6:05:b1:8c:e3:0e:77:7b:51:61:fc:4d:de: c7:9c:9a:e2:05:cf:db:47:8b:ba:19:5c:be:39:a6:90:08:9f: 84:18:b4:9a:e2:89:12:e9:c8:a1:87:59:51:48:30:96:83:4b: 77:ce:5b:e1:fc:52:ef:54:3e:ce:e0:67:65:8c:18:e9:a8:a7: 8b:b0:17:d1:c0:57:56:c0:98:5f:96:7d:93:90:64:b6:f9:35: 87:d2:c2:97:cd:59:55:af:b3:6e:b6:45:6c:d3:f8:a1:c4:3c: eb:e3:97:5e:9e:e9:31:3a:a0:5a:ba:41:b5:6a:28:0d:ce:a2: af:4e:5d:05:03:39:5f:45:58:c1:99:44:c5:7b:97:f7:48:9b: bc:00:b8:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVh5oDEmYkwDPn5/VOXP91zgiffowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNjAxMjQxODU2MjlaFw0yNjAxMjcxOTAxMjlaMDMxMTAvBgNV BAMTKEQ4M0UzRjQ4MTRDOEM2Q0U1MTgxRENDQ0FEOEM2NjU4RDc3QTU2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cbAyizzLbzvaHjnhG57BJvtR 62OaNuNglRgrsGuDG8/AZEaPC3LfTtKEZLXAohddxGka7U1fsBUiZKC9ZFi1+4OL LALqHC2tWpAWq0iQmd7PqEpWLPh1aaEkJWkNkwztyrn3RYg0ewX6yql9Oo2mkNfm PIThVJ0+qI72LxtqOHwYHhkiCpClT0THVyNgtUXTMkAoE5OTIcID++WUkcv3mHdU tWktuMlLVNkPAeAUrOfwn73YA74W7d67BMKVtD6muVJQQgGLqgaF8Op4ikqvt25x YXoqpvyjSFNDnfGI80CPg4/ERo9PxtMkA6ul9mauC+ra1+1zjkhjNYZQzP7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2D4/SBTIxs5RgdzMrYxmWNd6Vt8wHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+jiLjSuHq9MY1qHm64i2GnYYsGhZOnCwQi 3HL7i38NF3EfbAyYJM2+NQbe9jmpR39RUpbgv1AM7s5SetKY0qfK6nSYGN4/1THh 36qSH8oub9Z+BLMKA14cNZdXoOWJCwYXqRolnBVIkJEoXQ3zTzUj9gWxjOMOd3tR YfxN3secmuIFz9tHi7oZXL45ppAIn4QYtJriiRLpyKGHWVFIMJaDS3fOW+H8Uu9U Ps7gZ2WMGOmop4uwF9HAV1bAmF+WfZOQZLb5NYfSwpfNWVWvs262RWzT+KHEPOvj l16e6TE6oFq6QbVqKA3Ooq9OXQUDOV9FWMGZRMV7l/dIm7wAuDY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:25 2026 by rpki-client