This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: v8VrnBiTNgczUAcbD7NVhhd+3olxRKzqwyWK2sXFByw= Subject key identifier: 5E:1F:0D:5A:C5:F2:A5:89:33:28:CF:FF:F1:A0:FB:49:EC:FF:A3:4A Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 1733DFE6DCE37ED87213FB9931D72E7017AB348D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 02CD Signing time: Sun 25 Jan 2026 07:01:11 +0000 Manifest this update: Sun 25 Jan 2026 06:56:11 +0000 Manifest next update: Wed 28 Jan 2026 18:17:11 +0000 Files and hashes: 1: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: CX/9vvr5gAOW0vSlwkKXyggw+NRVWstndo4UcTU2E0g=) 2: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 3: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 4: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 5: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 6: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 7: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:33:df:e6:dc:e3:7e:d8:72:13:fb:99:31:d7:2e:70:17:ab:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Jan 25 06:56:11 2026 GMT Not After : Jan 28 18:17:11 2026 GMT Subject: CN=5E1F0D5AC5F2A5893328CFFFF1A0FB49ECFFA34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:df:47:1d:bf:9c:43:be:ee:d1:e0:cf:79: 44:62:00:b7:11:77:ed:77:3d:87:5b:45:d3:1a:6c: c5:00:80:1e:a7:88:60:17:9e:0d:0d:24:4d:87:74: 11:5a:a9:95:d3:e0:46:a6:dc:80:70:07:01:02:a8: d3:89:79:ab:06:9a:63:38:aa:c7:4e:36:a9:6d:7f: 88:f3:c0:fc:09:aa:9e:77:9a:ed:c5:ee:24:b5:66: 7b:f4:05:bb:bb:71:3d:35:a5:5f:36:69:a9:71:14: 0d:ff:b3:40:a1:a7:8a:cc:f3:e1:f9:65:bb:2d:71: 49:1b:9d:f2:ca:ac:0e:ca:21:71:26:73:65:c2:05: 8f:37:66:05:cd:f8:7f:23:87:8f:5b:6b:9f:2d:50: c1:00:31:52:16:bc:3b:84:9b:c2:e1:f6:3c:a4:1d: aa:b9:cb:00:4a:95:ff:05:19:fb:0e:92:c6:a3:be: 19:73:bb:93:63:65:74:d8:65:00:ad:b8:06:c7:86: a1:20:2f:fe:65:da:46:e5:60:15:3c:61:a4:63:81: b0:fe:f0:f0:9b:87:19:52:79:ad:ee:ed:b5:57:76: df:8d:a0:f2:a8:03:ab:72:57:fe:b7:d2:70:04:61: 5c:7f:6c:b1:8a:ff:f7:f3:57:9f:21:1e:f4:ef:8e: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:0D:5A:C5:F2:A5:89:33:28:CF:FF:F1:A0:FB:49:EC:FF:A3:4A X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7e:9f:45:ee:4a:72:f4:3f:58:d3:0a:ed:5b:bf:cb:76:fc: ff:88:45:a0:27:fa:8b:54:80:0a:5b:71:f7:ef:57:99:83:2d: 02:d1:ef:ed:04:fa:11:56:09:87:44:88:22:1b:59:07:55:5c: b0:71:d4:28:72:a1:7f:88:73:71:78:04:49:6c:95:d8:95:db: a6:1b:80:fc:2d:d6:1f:27:d3:8c:a3:39:b2:38:ef:ed:f8:2a: 4e:a4:05:17:fe:04:97:a5:37:64:37:f6:b6:f5:a8:cb:fb:16: 48:51:20:f0:9b:f6:b3:e5:83:c0:1d:dd:48:43:0d:4c:a9:c0: c9:54:4d:2d:6e:ae:31:b0:f6:5b:06:97:f5:56:16:df:83:25: 79:eb:5f:c7:92:e8:5d:d1:ac:7a:92:e9:90:c2:e9:94:17:cd: ea:f0:e7:a7:35:a9:90:77:5a:81:cc:ea:bb:86:a5:c5:d5:4d: f0:42:dd:99:59:bb:ce:5c:ca:02:92:96:40:e3:c1:81:11:ae: 3e:f9:af:8c:5a:e9:f2:7c:31:88:09:b6:6e:40:5f:57:2b:5e: 8f:a7:d4:8a:11:f6:3d:cc:a3:61:cd:60:75:e4:79:b0:f4:e8: 15:9a:da:4a:d5:61:4d:42:36:99:f0:e8:4f:aa:82:87:9d:89: e2:d6:f1:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzPf5tzjfthyE/uZMdcucBerNI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNjAxMjUwNjU2MTFaFw0yNjAxMjgxODE3MTFaMDMxMTAvBgNV BAMTKDVFMUYwRDVBQzVGMkE1ODkzMzI4Q0ZGRkYxQTBGQjQ5RUNGRkEzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxN9HHb+cQ77u0eDPeURiALcR d+13PYdbRdMabMUAgB6niGAXng0NJE2HdBFaqZXT4Eam3IBwBwECqNOJeasGmmM4 qsdONqltf4jzwPwJqp53mu3F7iS1Znv0Bbu7cT01pV82aalxFA3/s0Chp4rM8+H5 ZbstcUkbnfLKrA7KIXEmc2XCBY83ZgXN+H8jh49ba58tUMEAMVIWvDuEm8Lh9jyk Haq5ywBKlf8FGfsOksajvhlzu5NjZXTYZQCtuAbHhqEgL/5l2kblYBU8YaRjgbD+ 8PCbhxlSea3u7bVXdt+NoPKoA6tyV/630nAEYVx/bLGK//fzV58hHvTvjhaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXh8NWsXypYkzKM//8aD7Sez/o0owHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZ+n0XuSnL0P1jTCu1bv8t2/P+IRaAn+otU gApbcffvV5mDLQLR7+0E+hFWCYdEiCIbWQdVXLBx1ChyoX+Ic3F4BElsldiV26Yb gPwt1h8n04yjObI47+34Kk6kBRf+BJelN2Q39rb1qMv7FkhRIPCb9rPlg8Ad3UhD DUypwMlUTS1urjGw9lsGl/VWFt+DJXnrX8eS6F3RrHqS6ZDC6ZQXzerw56c1qZB3 WoHM6ruGpcXVTfBC3ZlZu85cygKSlkDjwYERrj75r4xa6fJ8MYgJtm5AX1crXo+n 1IoR9j3Mo2HNYHXkebD06BWa2krVYU1CNpnw6E+qgoedieLW8bo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:51 2026 by rpki-client