This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: UqENKGk0LdH/lzahzxN8vWCcSelm7vrMASLe0sS4pB8= Subject key identifier: 10:95:EF:29:87:44:3F:F6:5A:F1:D7:B1:9D:D3:4F:1B:FE:C4:DA:B8 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 3CE0B2A6E765AFC37FA1FC210C6CAB05DBD7CC96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 0545 Signing time: Sun 25 Jan 2026 12:50:55 +0000 Manifest this update: Sun 25 Jan 2026 12:45:55 +0000 Manifest next update: Thu 29 Jan 2026 00:06:55 +0000 Files and hashes: 1: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: VoT1+9WAM8o6rq2AZcUT7m1IHIWTO6zORllg3raAcmI=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e0:b2:a6:e7:65:af:c3:7f:a1:fc:21:0c:6c:ab:05:db:d7:cc:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Jan 25 12:45:55 2026 GMT Not After : Jan 29 00:06:55 2026 GMT Subject: CN=1095EF2987443FF65AF1D7B19DD34F1BFEC4DAB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:24:69:5f:98:fb:59:69:49:90:f7:d2:aa: 56:3e:ee:b0:6c:b9:66:64:9f:bf:dd:3a:59:92:1c: 45:c7:d5:58:7e:90:f6:2f:d2:aa:29:c5:62:ce:c2: e3:89:3d:02:9c:65:01:62:14:73:51:7b:0b:a1:ca: fd:86:66:f7:86:e4:cc:1a:c2:06:c6:3d:10:d4:6e: 54:f8:cf:60:36:df:44:0c:83:51:98:16:c1:b1:c6: 7b:36:c5:a4:68:f2:58:bb:35:12:a4:9c:5a:a7:dd: ce:82:aa:39:81:a0:8c:7b:aa:6a:55:84:1f:d6:8d: 86:4f:21:9d:4f:1a:27:29:9d:e7:bb:c6:00:b5:8c: 07:5b:d3:32:93:a8:ea:d7:10:cf:89:5e:66:8b:a2: 56:53:50:65:3e:e0:40:3f:6f:d7:11:e3:17:6f:be: 34:eb:1b:f5:22:2d:17:d4:52:90:d5:cb:0d:28:7e: 5a:85:cb:c8:1c:8a:e4:71:68:f3:77:b0:27:27:8b: 65:7f:54:2c:8a:02:10:50:fc:6c:ea:7b:65:f2:5b: d0:88:cb:79:64:bb:40:75:90:94:25:cb:e1:4c:49: ad:25:d7:f9:7a:e4:3e:7e:50:45:c8:ec:cc:a9:2e: ca:8d:57:62:31:7a:a0:bf:e7:46:6d:6f:3f:d1:ac: 04:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:EF:29:87:44:3F:F6:5A:F1:D7:B1:9D:D3:4F:1B:FE:C4:DA:B8 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:18:c6:3a:30:cb:92:b7:3c:a2:7c:4f:e3:4e:eb:99:09:90: 2d:09:37:19:ab:9c:bb:d7:b7:f8:83:a4:d0:b9:de:f0:55:ee: ab:e7:8d:42:65:48:18:04:8d:37:c8:da:91:5b:ad:8f:62:3e: 49:58:e6:e0:22:bb:05:b7:cf:98:c6:db:df:3d:1c:02:37:d0: e9:de:31:4f:bc:0f:1d:18:87:a5:20:53:af:21:d9:1c:eb:1e: a0:2b:b1:8e:e9:6d:a6:22:df:6c:46:a6:c9:cf:13:f5:51:07: 90:65:38:8d:cb:d1:bf:c4:ed:04:e0:31:ba:0a:b1:f1:2d:bf: 5d:0e:b6:64:29:12:fd:bb:e4:0f:a2:db:cc:54:6c:28:52:02: d9:5b:de:79:ca:de:40:a1:2b:55:d7:5b:da:27:73:72:dc:a0: 61:98:31:29:de:61:27:02:df:10:2b:ef:3d:a8:3e:66:30:1e: 84:fa:b8:7f:0f:60:d2:a0:e9:40:44:6a:b4:24:aa:67:4c:1c: 96:65:78:a9:8c:27:9e:cc:89:f9:55:2b:ed:9a:53:70:9f:83: 2d:09:1e:65:e5:fe:cc:20:a5:9f:11:c2:1c:82:30:5b:af:b9: b5:c3:1e:b1:b5:96:40:f6:d8:a5:ea:65:ef:4d:99:bb:a5:2a: aa:bf:8b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOCypudlr8N/ofwhDGyrBdvXzJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNjAxMjUxMjQ1NTVaFw0yNjAxMjkwMDA2NTVaMDMxMTAvBgNV BAMTKDEwOTVFRjI5ODc0NDNGRjY1QUYxRDdCMTlERDM0RjFCRkVDNERBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfCRpX5j7WWlJkPfSqlY+7rBs uWZkn7/dOlmSHEXH1Vh+kPYv0qopxWLOwuOJPQKcZQFiFHNRewuhyv2GZveG5Mwa wgbGPRDUblT4z2A230QMg1GYFsGxxns2xaRo8li7NRKknFqn3c6CqjmBoIx7qmpV hB/WjYZPIZ1PGicpnee7xgC1jAdb0zKTqOrXEM+JXmaLolZTUGU+4EA/b9cR4xdv vjTrG/UiLRfUUpDVyw0oflqFy8gciuRxaPN3sCcni2V/VCyKAhBQ/Gzqe2XyW9CI y3lku0B1kJQly+FMSa0l1/l65D5+UEXI7MypLsqNV2IxeqC/50Ztbz/RrARTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEJXvKYdEP/Za8dexndNPG/7E2rgwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwYxjowy5K3PKJ8T+NO65kJkC0JNxmrnLvX t/iDpNC53vBV7qvnjUJlSBgEjTfI2pFbrY9iPklY5uAiuwW3z5jG2989HAI30One MU+8Dx0Yh6UgU68h2RzrHqArsY7pbaYi32xGpsnPE/VRB5BlOI3L0b/E7QTgMboK sfEtv10OtmQpEv275A+i28xUbChSAtlb3nnK3kChK1XXW9onc3LcoGGYMSneYScC 3xAr7z2oPmYwHoT6uH8PYNKg6UBEarQkqmdMHJZleKmMJ57MiflVK+2aU3Cfgy0J HmXl/swgpZ8RwhyCMFuvubXDHrG1lkD22KXqZe9NmbulKqq/i9o= -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:31 2026 by rpki-client