This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: S/V1Gzb1zUmhX/gPFkAAt3Xetya+i4+1EcO1Ltkwxjw= Subject key identifier: 27:8D:BE:BA:52:2A:72:23:CD:C3:CD:3D:E4:90:2F:E2:66:63:83:0B Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 4CC255116FA21A9CD80DA166BCE5975408EF6F9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0352 Signing time: Sun 25 Jan 2026 04:21:43 +0000 Manifest this update: Sun 25 Jan 2026 04:16:43 +0000 Manifest next update: Wed 28 Jan 2026 07:53:43 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: YhtfsNUPoqbVJk5AG4io1U3MtxMWC1kBF1s8E5pS/NA=) 2: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 3: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c2:55:11:6f:a2:1a:9c:d8:0d:a1:66:bc:e5:97:54:08:ef:6f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jan 25 04:16:43 2026 GMT Not After : Jan 28 07:53:43 2026 GMT Subject: CN=278DBEBA522A7223CDC3CD3DE4902FE26663830B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:34:32:5a:4e:e6:19:ce:a6:ee:3f:29:15: ef:77:73:6c:08:c5:08:c5:96:db:46:86:eb:90:6c: 98:07:a5:5d:68:5f:c8:e5:b2:94:27:81:71:c6:67: 04:21:34:70:41:d9:96:c6:e9:51:56:01:ad:05:da: fb:47:b1:0f:42:12:86:b9:73:aa:58:b6:1e:ad:39: 38:ee:67:f0:7b:9d:71:47:ca:0b:a5:b7:96:4f:19: 0e:54:a5:25:52:5b:08:fe:1d:53:30:0b:45:00:92: ac:cf:39:a5:ed:0c:69:90:8e:74:44:04:da:49:03: 32:68:9c:ac:cc:95:dc:df:ce:fd:67:79:16:c1:13: 6a:d4:47:1c:29:51:41:06:f6:35:e1:b0:ec:09:cd: cb:81:3c:c0:55:5e:69:a8:0d:38:6c:52:52:1d:63: c7:bf:ab:e6:a4:71:aa:28:96:08:7e:dd:55:5e:50: 73:01:f5:c2:60:c4:97:83:b4:95:9d:23:e6:7c:48: e6:98:62:30:1e:5c:71:69:f7:da:86:8c:1b:62:a2: 40:02:fb:45:f2:1f:77:9e:d9:ed:1d:55:92:2a:8e: 86:6c:0f:e6:1e:75:3c:52:c9:e3:4e:0f:72:58:22: bd:5c:5e:59:8a:4a:5c:8e:97:1f:99:22:96:a5:39: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:BE:BA:52:2A:72:23:CD:C3:CD:3D:E4:90:2F:E2:66:63:83:0B X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:4f:03:1c:82:13:ce:b3:3d:36:80:dd:cb:78:10:df:89: 23:04:d5:bc:80:d1:90:34:2e:6f:c6:94:14:b5:5e:62:60:c4: d1:79:73:2f:8f:74:ad:aa:76:50:14:d6:0e:d5:d0:3d:ad:36: 8a:c1:4b:0d:5a:9c:97:35:f8:e5:c8:e4:bc:81:88:35:68:be: a3:81:16:8c:d4:fa:31:14:f2:9b:74:79:8c:67:8f:b1:be:b7: 42:24:d4:52:b4:e8:e0:1e:0c:01:ba:14:56:9f:07:4a:c7:3e: 32:e9:7a:ef:d7:16:3d:51:df:93:2f:5f:37:a4:73:a7:c1:c0: 7c:ef:0e:51:14:f9:30:f0:e7:4a:50:06:49:f3:aa:69:df:8c: 4d:e9:44:ee:94:4a:16:8f:07:cb:a3:7a:27:17:23:bc:31:c1: 8f:55:75:48:ba:2a:27:47:ec:a8:d8:a7:6c:ab:cf:a4:1c:ab: 14:8c:99:a4:2b:3c:6c:29:10:33:cb:9f:5a:d8:1a:0f:b0:5b: 3a:71:19:10:3a:d1:dc:26:f7:9b:99:52:2e:6e:d7:9a:bc:f2: ab:6e:d8:46:8b:60:a5:2f:dc:2a:b4:1a:01:81:1a:82:0f:b7: 9e:35:91:de:88:7e:73:78:45:ad:cd:df:b9:33:9d:f0:a6:8c: 54:56:5a:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMJVEW+iGpzYDaFmvOWXVAjvb58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNjAxMjUwNDE2NDNaFw0yNjAxMjgwNzUzNDNaMDMxMTAvBgNV BAMTKDI3OERCRUJBNTIyQTcyMjNDREMzQ0QzREU0OTAyRkUyNjY2MzgzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKDQyWk7mGc6m7j8pFe93c2wI xQjFlttGhuuQbJgHpV1oX8jlspQngXHGZwQhNHBB2ZbG6VFWAa0F2vtHsQ9CEoa5 c6pYth6tOTjuZ/B7nXFHygult5ZPGQ5UpSVSWwj+HVMwC0UAkqzPOaXtDGmQjnRE BNpJAzJonKzMldzfzv1neRbBE2rURxwpUUEG9jXhsOwJzcuBPMBVXmmoDThsUlId Y8e/q+akcaoolgh+3VVeUHMB9cJgxJeDtJWdI+Z8SOaYYjAeXHFp99qGjBtiokAC +0XyH3ee2e0dVZIqjoZsD+YedTxSyeNOD3JYIr1cXlmKSlyOlx+ZIpalOZBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ42+ulIqciPNw8095JAv4mZjgwswHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbITwMcghPOsz02gN3LeBDfiSME1byA0ZA0 Lm/GlBS1XmJgxNF5cy+PdK2qdlAU1g7V0D2tNorBSw1anJc1+OXI5LyBiDVovqOB FozU+jEU8pt0eYxnj7G+t0Ik1FK06OAeDAG6FFafB0rHPjLpeu/XFj1R35MvXzek c6fBwHzvDlEU+TDw50pQBknzqmnfjE3pRO6UShaPB8ujeicXI7wxwY9VdUi6KidH 7KjYp2yrz6QcqxSMmaQrPGwpEDPLn1rYGg+wWzpxGRA60dwm95uZUi5u15q88qtu 2EaLYKUv3Cq0GgGBGoIPt541kd6IfnN4Ra3N37kznfCmjFRWWvg= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:22 2026 by rpki-client