This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: ZDrTWWU1Z9JDJdjwAxtRzls6xLPvd/j481bZG2/NUuA= Subject key identifier: 24:B8:75:3F:94:71:5F:13:A5:00:19:E5:EC:8C:0D:06:85:F0:0E:EE Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 33D0672BCE005B41620C834F85D71FAD9FDBB559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 0245 Signing time: Sun 25 Jan 2026 14:51:20 +0000 Manifest this update: Sun 25 Jan 2026 14:46:20 +0000 Manifest next update: Wed 28 Jan 2026 19:03:20 +0000 Files and hashes: 1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 2: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 3: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: JUGklsHCeHLKoOvsSOP/lugW0qL9ISCIZhOqxNcH0bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d0:67:2b:ce:00:5b:41:62:0c:83:4f:85:d7:1f:ad:9f:db:b5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Jan 25 14:46:20 2026 GMT Not After : Jan 28 19:03:20 2026 GMT Subject: CN=24B8753F94715F13A50019E5EC8C0D0685F00EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:cf:a7:84:a2:9b:be:4a:01:57:ad:d3:ae: d0:91:31:ba:b3:b8:65:a7:fe:a3:d4:4d:11:af:8a: 39:23:81:fe:a5:42:59:ef:70:39:21:dd:07:13:73: 29:59:69:bc:19:e8:d9:2b:7f:d0:1b:21:f2:7b:ab: 62:7f:ca:fe:77:92:c0:36:f5:0e:dc:6a:7d:c9:2d: 30:dd:d2:f7:d7:1c:1e:ce:75:b7:03:4c:14:d7:e8: 35:93:96:b3:f2:d9:23:4d:5c:b7:e9:32:7b:00:94: 49:2b:b2:c0:18:8c:2f:0a:71:65:cd:7c:d8:fe:39: 4c:d3:66:a9:f1:e2:09:2b:cd:03:e5:e5:08:fe:43: f8:84:62:04:1a:1c:22:29:5c:de:de:63:54:8a:72: a5:0a:03:28:06:66:ef:e0:5c:a3:81:b1:a1:7f:5c: bc:1f:45:76:75:d3:4f:5d:fd:56:15:9c:8e:1a:92: fc:3e:00:19:d2:95:53:e9:43:1c:d1:b2:d6:27:67: 7d:60:16:b9:cf:d2:a4:d6:f9:19:2b:38:eb:3a:97: 53:99:fb:c2:c0:9d:4a:59:8b:df:91:09:e8:b7:0a: d9:31:a2:38:80:b6:7b:f8:f0:be:60:04:f1:df:44: c9:7d:06:6f:d8:b5:61:b5:cf:31:7c:23:34:7c:18: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:75:3F:94:71:5F:13:A5:00:19:E5:EC:8C:0D:06:85:F0:0E:EE X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:ef:bb:f4:ac:21:4c:60:5f:a3:d1:f2:82:9d:13:da:2f: 76:60:40:6e:1f:f4:30:1d:fe:37:d6:64:7e:9f:37:0f:6e:17: 47:80:27:56:63:69:08:71:fd:97:51:76:0e:6b:78:fb:69:ce: ae:73:59:d5:24:a0:e5:e1:3f:d2:a4:48:32:86:b7:53:0a:43: 96:8b:c6:3e:6e:c6:66:d6:d5:65:70:c1:28:4c:2e:8d:17:b1: b8:94:14:44:7e:c3:73:39:62:60:3d:1a:4c:1a:54:1f:d3:f3: 72:98:7d:c3:70:37:9f:6e:54:dd:e4:3b:78:30:ce:09:d3:b2: f0:4c:bf:ca:81:e4:cb:7a:8f:29:dc:51:c2:71:a9:da:d5:78: 7c:bd:36:43:b3:f8:ba:8e:1d:f2:7c:35:2b:46:76:c7:32:df: 5a:04:ae:6f:50:9d:30:d2:f2:4a:20:22:3c:11:fd:d4:a6:a6: 83:d8:74:d5:8e:77:96:e3:3a:79:ee:1b:33:d3:ae:1c:10:a2: 8b:4a:f1:f3:bf:91:9a:3c:15:24:d4:53:38:d4:0c:f7:b6:01: 98:5e:c8:8f:83:25:ef:f3:cd:1e:b5:b4:62:48:ce:d6:7e:3e: 19:e0:c4:1d:52:40:d6:d7:d1:6d:75:69:2f:d1:59:99:cf:2f: 3b:06:3c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9BnK84AW0FiDINPhdcfrZ/btVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNjAxMjUxNDQ2MjBaFw0yNjAxMjgxOTAzMjBaMDMxMTAvBgNV BAMTKDI0Qjg3NTNGOTQ3MTVGMTNBNTAwMTlFNUVDOEMwRDA2ODVGMDBFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbS8+nhKKbvkoBV63TrtCRMbqz uGWn/qPUTRGvijkjgf6lQlnvcDkh3QcTcylZabwZ6Nkrf9AbIfJ7q2J/yv53ksA2 9Q7can3JLTDd0vfXHB7OdbcDTBTX6DWTlrPy2SNNXLfpMnsAlEkrssAYjC8KcWXN fNj+OUzTZqnx4gkrzQPl5Qj+Q/iEYgQaHCIpXN7eY1SKcqUKAygGZu/gXKOBsaF/ XLwfRXZ1009d/VYVnI4akvw+ABnSlVPpQxzRstYnZ31gFrnP0qTW+RkrOOs6l1OZ +8LAnUpZi9+RCei3CtkxojiAtnv48L5gBPHfRMl9Bm/YtWG1zzF8IzR8GPIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJLh1P5RxXxOlABnl7IwNBoXwDu4wHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVR77v0rCFMYF+j0fKCnRPaL3ZgQG4f9DAd /jfWZH6fNw9uF0eAJ1ZjaQhx/ZdRdg5rePtpzq5zWdUkoOXhP9KkSDKGt1MKQ5aL xj5uxmbW1WVwwShMLo0XsbiUFER+w3M5YmA9GkwaVB/T83KYfcNwN59uVN3kO3gw zgnTsvBMv8qB5Mt6jyncUcJxqdrVeHy9NkOz+LqOHfJ8NStGdscy31oErm9QnTDS 8kogIjwR/dSmpoPYdNWOd5bjOnnuGzPTrhwQootK8fO/kZo8FSTUUzjUDPe2AZhe yI+DJe/zzR61tGJIztZ+PhngxB1SQNbX0W11aS/RWZnPLzsGPOU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:52 2026 by rpki-client