This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: IhztIUpjo8KwmJJnzkGBNwM7rkES/+5bnWpTz3WqODk= Subject key identifier: D3:96:CE:AF:FB:C5:75:A0:5D:73:2D:BF:E2:BA:EC:A4:7D:B9:F7:FB Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 1BC76ABDA9E1E8B21C8379679EA32EC16E843EF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 0219 Signing time: Sun 25 Jan 2026 03:50:54 +0000 Manifest this update: Sun 25 Jan 2026 03:45:54 +0000 Manifest next update: Wed 28 Jan 2026 07:48:54 +0000 Files and hashes: 1: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: ud0rm7NJrw3tkHGHEKsf4SnTq3zWIy8EUz6TubCb2Gs=) 2: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ=) 3: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: emqMUOls2kr2mjR0EZaG0tEWg+r2CdoFy8mDNqcuDlk=) 4: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: wwz6ba6TxyJFQBFDyZrzQvQsc6tcIn83i8QBsYFEwr4=) 5: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: K7I7X7V48aE6/5u83vWBkZ5nD0P/zd145TmQLmzpqzo=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: D08BFYTRnMd/bNThD9Kffk2jZOcvuFviPOLMtrY2nyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c7:6a:bd:a9:e1:e8:b2:1c:83:79:67:9e:a3:2e:c1:6e:84:3e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Jan 25 03:45:54 2026 GMT Not After : Jan 28 07:48:54 2026 GMT Subject: CN=D396CEAFFBC575A05D732DBFE2BAECA47DB9F7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:2c:a1:76:9e:76:28:52:2f:e8:55:f5:10: 8e:7c:d9:08:43:2f:84:df:a3:ad:80:83:11:74:72: 69:c0:bc:4a:ee:df:07:c1:79:59:cd:6f:fe:3d:b0: 23:84:ad:fb:75:c3:2b:85:a1:8f:5d:34:b4:2b:1f: 69:72:7e:b4:38:c6:e3:0c:22:a5:b3:5c:39:aa:ee: 30:48:1f:80:b4:bd:39:d9:ad:bd:16:2f:ec:3a:4c: 54:6d:8b:b5:85:5a:8c:0f:b8:d6:57:ef:bd:52:88: db:3c:a0:e4:40:1d:19:0b:bf:e3:fa:b5:e9:26:eb: 1b:ae:c7:7b:15:f8:e4:99:f9:6c:66:5b:f6:2c:01: 28:d5:bd:5e:40:f1:4e:a1:f1:cf:75:53:35:e0:aa: 05:e9:72:b3:98:f6:37:77:5a:f3:db:22:52:26:46: c2:06:d0:9b:bb:e9:a7:1b:79:a3:f2:ab:9f:99:98: 90:65:3c:d9:50:b7:79:d3:60:0f:6c:24:e8:d2:81: dd:48:b7:45:47:5e:bc:7b:09:4f:ba:a7:c9:c8:27: 41:ac:3f:d3:b4:f9:b6:17:c9:ae:ea:37:65:66:24: 5c:fb:28:3f:4f:11:57:46:83:cd:62:e8:c8:58:aa: 3e:2f:82:da:46:65:ec:d5:c0:f8:6e:e2:f3:6e:cd: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:96:CE:AF:FB:C5:75:A0:5D:73:2D:BF:E2:BA:EC:A4:7D:B9:F7:FB X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:63:62:c4:b8:3b:a7:a8:2a:2d:94:13:b5:03:31:83:c1:e9: 2c:59:2d:80:66:6a:62:78:5c:68:a8:c4:cf:fa:c0:7f:4d:5d: 25:06:c2:67:44:89:e3:5c:dc:de:8f:80:48:f8:63:fd:36:65: 5f:36:96:b1:4b:a7:f8:ad:b4:23:a2:ee:5d:95:3b:c8:8d:1d: 58:e2:72:76:c5:67:e4:1b:ec:ea:ce:40:1f:f7:45:3a:7f:e5: 37:13:f9:f8:28:00:f7:cd:af:17:ef:71:0d:a9:56:1d:57:0f: 0d:30:01:a4:c7:3f:b4:d5:ab:93:a3:98:5f:fb:01:37:39:5d: 09:f9:3f:b1:ee:3f:f8:de:b2:ce:7e:ad:a8:f2:0b:31:aa:a3: d7:c3:d6:04:43:00:7d:6d:fa:ec:ef:af:5f:34:c3:99:34:44: 0a:38:30:ed:fb:0b:e5:0c:99:a7:c8:93:f6:62:cc:22:bf:07: b4:7f:43:bd:b7:6c:c2:5b:61:0c:0c:ef:cd:a8:43:e4:0f:40: 08:08:b1:e1:07:9e:18:df:6d:63:7d:c2:7c:19:dc:d5:9c:8f: 23:b6:2b:07:06:74:95:b5:73:d0:ef:7d:57:d9:32:58:3a:1b: 56:a8:5e:6a:b5:0f:af:b3:a0:44:48:e8:5f:fc:9f:e1:73:d0: fa:1f:57:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8dqvanh6LIcg3lnnqMuwW6EPvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNjAxMjUwMzQ1NTRaFw0yNjAxMjgwNzQ4NTRaMDMxMTAvBgNV BAMTKEQzOTZDRUFGRkJDNTc1QTA1RDczMkRCRkUyQkFFQ0E0N0RCOUY3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPESyhdp52KFIv6FX1EI582QhD L4Tfo62AgxF0cmnAvEru3wfBeVnNb/49sCOErft1wyuFoY9dNLQrH2lyfrQ4xuMM IqWzXDmq7jBIH4C0vTnZrb0WL+w6TFRti7WFWowPuNZX771SiNs8oORAHRkLv+P6 tekm6xuux3sV+OSZ+WxmW/YsASjVvV5A8U6h8c91UzXgqgXpcrOY9jd3WvPbIlIm RsIG0Ju76acbeaPyq5+ZmJBlPNlQt3nTYA9sJOjSgd1It0VHXrx7CU+6p8nIJ0Gs P9O0+bYXya7qN2VmJFz7KD9PEVdGg81i6MhYqj4vgtpGZezVwPhu4vNuzRyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05bOr/vFdaBdcy2/4rrspH259/swHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVjYsS4O6eoKi2UE7UDMYPB6SxZLYBmamJ4 XGioxM/6wH9NXSUGwmdEieNc3N6PgEj4Y/02ZV82lrFLp/ittCOi7l2VO8iNHVji cnbFZ+Qb7OrOQB/3RTp/5TcT+fgoAPfNrxfvcQ2pVh1XDw0wAaTHP7TVq5OjmF/7 ATc5XQn5P7HuP/jess5+rajyCzGqo9fD1gRDAH1t+uzvr180w5k0RAo4MO37C+UM mafIk/ZizCK/B7R/Q723bMJbYQwM782oQ+QPQAgIseEHnhjfbWN9wnwZ3NWcjyO2 KwcGdJW1c9DvfVfZMlg6G1aoXmq1D6+zoERI6F/8n+Fz0PofV9Q= -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:29 2026 by rpki-client