This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: h6mvX3n9Y/oXqKqjYlw0dpcdoHIzKtF5nq+1iXyAgAk= Subject key identifier: BD:48:1F:E2:BA:BE:55:42:7F:45:88:98:23:27:63:1B:CE:8A:3B:FE Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 691E296A3AF7E33FF28DE072A5633C204CA1EA4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: E1 Signing time: Sat 24 Jan 2026 16:01:34 +0000 Manifest this update: Sat 24 Jan 2026 15:56:34 +0000 Manifest next update: Tue 27 Jan 2026 17:47:34 +0000 Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) 2: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: ZwbComFU728Gpfy4o+qWT0L3S8UucoigKZ4ZaC46KGU=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) 4: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) 5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1e:29:6a:3a:f7:e3:3f:f2:8d:e0:72:a5:63:3c:20:4c:a1:ea:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Jan 24 15:56:34 2026 GMT Not After : Jan 27 17:47:34 2026 GMT Subject: CN=BD481FE2BABE55427F4588982327631BCE8A3BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:97:54:52:54:50:ab:4d:e2:1c:0b:f3:61: 82:35:3d:fd:d0:78:e2:38:18:76:35:aa:5f:76:79: 65:3a:6f:a6:8b:f4:82:8f:68:49:3e:1e:85:3e:7b: 80:08:16:b0:d1:44:69:d1:66:32:f5:22:4b:80:ac: 29:26:92:fb:98:ee:1c:df:7d:87:9b:04:5d:fd:51: ae:14:a3:16:35:60:d5:a7:a5:a1:95:60:97:38:f9: 5b:f6:9a:b1:3c:eb:bf:5a:51:e8:d6:a7:2a:0f:6b: fa:23:7e:06:24:eb:55:45:0e:df:71:06:2e:3e:1c: d8:19:19:c5:04:f9:8b:69:9f:67:28:73:c1:35:b0: 54:05:9d:e3:65:56:19:60:9b:6d:a6:f9:9e:a9:66: 84:3c:35:dd:64:0c:4c:d6:4b:d8:c8:d7:bb:dd:61: 99:b5:f1:69:73:ca:f4:af:d4:7b:ab:6c:5d:8b:66: e7:c7:6e:d3:9a:14:5a:e4:0b:79:bc:28:5a:48:2b: c3:f6:e6:e9:13:5a:82:34:6c:fc:4f:bb:77:3b:b5: 6b:b9:8d:7a:a7:7e:98:04:69:b4:61:7e:d8:f5:70: 6f:10:56:43:16:d8:74:7d:94:b0:cd:b3:01:37:d5: 30:06:ba:5d:e8:0c:45:a7:65:e1:4a:10:d3:65:68: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:1F:E2:BA:BE:55:42:7F:45:88:98:23:27:63:1B:CE:8A:3B:FE X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7b:f0:6a:43:97:67:a6:d9:42:a2:f9:63:23:78:87:17:c5: 89:12:54:3a:96:de:42:43:db:61:dd:35:0e:83:29:43:02:50: c9:80:d2:7c:48:76:b4:b5:28:98:e5:90:c9:fc:e5:df:36:1a: 5d:14:93:e0:21:23:8d:7c:1b:1e:a9:87:6b:ef:62:e3:ab:3e: cf:40:d6:de:3a:c2:bc:bd:88:37:e9:db:10:fb:c0:a6:c2:a5: 15:3d:3b:3a:13:11:70:d9:d5:00:34:93:23:12:ea:ca:69:51: 9d:da:96:51:25:40:b6:99:e4:25:6b:1c:5b:63:f3:d5:8f:60: 0e:bf:3e:d7:0b:c8:dc:27:f8:37:ed:c1:94:10:68:7c:0c:aa: 26:67:5c:ea:5d:52:8a:06:15:4d:dc:01:8b:53:e2:dc:fa:2e: 7e:b0:4a:14:4a:94:d7:fc:5f:82:6c:af:0f:ca:36:55:67:c0: a4:c2:a7:07:ef:a4:cf:1d:78:49:d3:d1:55:5c:21:b6:d4:6d: 85:c7:73:0b:ed:3a:9d:c8:dd:c9:b9:72:87:f9:25:bd:20:de: 3f:d8:cd:da:b6:5d:d3:f7:3d:b6:13:ae:61:3f:37:b2:83:52: 56:ad:50:0e:6c:d8:db:8a:b8:bc:8e:f1:d0:b4:20:9f:73:09: 8f:ce:cd:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaR4pajr34z/yjeBypWM8IEyh6k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNjAxMjQxNTU2MzRaFw0yNjAxMjcxNzQ3MzRaMDMxMTAvBgNV BAMTKEJENDgxRkUyQkFCRTU1NDI3RjQ1ODg5ODIzMjc2MzFCQ0U4QTNCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPpdUUlRQq03iHAvzYYI1Pf3Q eOI4GHY1ql92eWU6b6aL9IKPaEk+HoU+e4AIFrDRRGnRZjL1IkuArCkmkvuY7hzf fYebBF39Ua4UoxY1YNWnpaGVYJc4+Vv2mrE8679aUejWpyoPa/ojfgYk61VFDt9x Bi4+HNgZGcUE+Ytpn2coc8E1sFQFneNlVhlgm22m+Z6pZoQ8Nd1kDEzWS9jI17vd YZm18WlzyvSv1HurbF2LZufHbtOaFFrkC3m8KFpIK8P25ukTWoI0bPxPu3c7tWu5 jXqnfpgEabRhftj1cG8QVkMW2HR9lLDNswE31TAGul3oDEWnZeFKENNlaHlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvUgf4rq+VUJ/RYiYIydjG86KO/4wHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADF78GpDl2em2UKi+WMjeIcXxYkSVDqW3kJD 22HdNQ6DKUMCUMmA0nxIdrS1KJjlkMn85d82Gl0Uk+AhI418Gx6ph2vvYuOrPs9A 1t46wry9iDfp2xD7wKbCpRU9OzoTEXDZ1QA0kyMS6sppUZ3allElQLaZ5CVrHFtj 89WPYA6/PtcLyNwn+DftwZQQaHwMqiZnXOpdUooGFU3cAYtT4tz6Ln6wShRKlNf8 X4Jsrw/KNlVnwKTCpwfvpM8deEnT0VVcIbbUbYXHcwvtOp3I3cm5cof5Jb0g3j/Y zdq2XdP3PbYTrmE/N7KDUlatUA5s2NuKuLyO8dC0IJ9zCY/OzYQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:59 2026 by rpki-client