This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: YJypvhzhucxMrKdECK7VQFHT2Z1te5di/9DMg22zbxg= Subject key identifier: 4F:AA:43:B8:C9:34:36:4E:58:A9:85:AC:22:3B:A4:1A:0C:14:05:59 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 63F67F8A21B83B8800A4ABB1AD5464DF829FED36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: C5 Signing time: Sun 25 Jan 2026 00:30:52 +0000 Manifest this update: Sun 25 Jan 2026 00:25:51 +0000 Manifest next update: Wed 28 Jan 2026 10:14:51 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 4: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: QYFExtLpWFefAu92/eqx/D27pKk6N7hFhuaSFZRGVug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f6:7f:8a:21:b8:3b:88:00:a4:ab:b1:ad:54:64:df:82:9f:ed:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Jan 25 00:25:51 2026 GMT Not After : Jan 28 10:14:51 2026 GMT Subject: CN=4FAA43B8C934364E58A985AC223BA41A0C140559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:3c:c6:39:a3:7e:3d:fc:90:d5:c7:06:92: dd:f6:de:04:10:57:25:2b:8f:55:e5:af:e3:c6:43: bb:97:a2:01:4f:ad:a1:4b:21:df:e6:24:88:c9:c5: 08:ea:c8:42:cf:15:09:aa:a5:e3:f3:92:ce:a3:4c: 80:da:37:4c:e1:65:3e:1d:e8:8d:ac:78:d3:73:06: 04:4b:42:46:d4:15:19:cb:1f:af:27:25:c7:72:2b: f1:b9:9c:c6:32:f1:b4:e0:7b:28:75:8d:b6:13:3a: dc:8a:74:7d:6d:1c:ca:59:85:8a:e2:fd:a3:69:78: 86:4e:93:85:98:e2:81:b1:3a:bb:22:35:57:fe:26: 1f:b9:35:1c:f3:ee:3d:17:85:bd:8e:e0:d1:a7:b8: 58:46:ec:15:ee:69:7f:63:39:16:ff:5d:96:05:1e: 0c:a5:a3:9c:1f:71:f3:68:2b:92:6f:72:af:78:1e: 61:d5:59:eb:46:c4:74:2b:ca:79:88:fe:37:0a:e1: 0d:de:26:dc:56:a6:93:8d:2f:c9:f0:e8:15:87:63: c3:70:ae:43:dc:7f:86:92:82:fc:01:d6:d9:7f:28: d2:44:40:72:2e:f0:94:71:2d:4c:de:88:c7:d0:e9: 7b:e9:0c:0d:fd:7e:f7:35:a9:b8:33:84:7f:a9:7f: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AA:43:B8:C9:34:36:4E:58:A9:85:AC:22:3B:A4:1A:0C:14:05:59 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:52:ec:ed:d1:4d:ca:69:5b:66:7b:aa:df:2d:f2:cb:62:ba: b8:58:c5:c8:c4:46:2e:86:ca:cf:c5:19:a6:75:fb:7b:18:3f: 8a:39:75:bc:1d:c0:04:46:6c:a0:7b:96:87:85:68:48:06:aa: 3a:c7:59:a4:7f:12:bb:0e:e0:63:2e:08:ca:00:c6:ec:c5:8c: cc:f6:17:e3:20:a2:73:d1:69:e2:ec:bf:4f:af:38:39:83:0a: ef:ba:48:0a:23:80:c5:02:55:59:d0:68:1d:15:61:cd:01:ff: 06:74:f1:a3:79:80:91:36:8e:ec:31:b5:d8:0f:a2:4a:11:98: 61:fb:48:b3:08:8a:7c:01:fa:d1:e9:46:90:a6:55:34:58:16: 97:99:59:7d:fd:cf:36:f7:20:62:d9:93:2f:8f:82:23:b2:63: ae:21:31:d9:ff:84:1d:19:e1:c1:6b:54:47:89:31:25:53:db: 45:8a:28:ff:70:6c:19:2e:a3:63:00:78:83:be:88:da:64:c2: ef:ae:5c:4d:79:bb:66:ea:a9:84:29:54:7e:cb:d2:f0:f2:25: 1f:eb:88:31:59:eb:07:f9:85:50:7c:c0:a3:f3:51:15:c9:ad: 81:46:a9:93:b5:d5:8d:05:23:c5:bf:8b:bb:cc:11:32:ca:f2: e6:da:34:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/Z/iiG4O4gApKuxrVRk34Kf7TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjAxMjUwMDI1NTFaFw0yNjAxMjgxMDE0NTFaMDMxMTAvBgNV BAMTKDRGQUE0M0I4QzkzNDM2NEU1OEE5ODVBQzIyM0JBNDFBMEMxNDA1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CzzGOaN+PfyQ1ccGkt323gQQ VyUrj1Xlr+PGQ7uXogFPraFLId/mJIjJxQjqyELPFQmqpePzks6jTIDaN0zhZT4d 6I2seNNzBgRLQkbUFRnLH68nJcdyK/G5nMYy8bTgeyh1jbYTOtyKdH1tHMpZhYri /aNpeIZOk4WY4oGxOrsiNVf+Jh+5NRzz7j0Xhb2O4NGnuFhG7BXuaX9jORb/XZYF Hgylo5wfcfNoK5Jvcq94HmHVWetGxHQrynmI/jcK4Q3eJtxWppONL8nw6BWHY8Nw rkPcf4aSgvwB1tl/KNJEQHIu8JRxLUzeiMfQ6XvpDA39fvc1qbgzhH+pf1gLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6pDuMk0Nk5YqYWsIjukGgwUBVkwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJS7O3RTcppW2Z7qt8t8stiurhYxcjERi6G ys/FGaZ1+3sYP4o5dbwdwARGbKB7loeFaEgGqjrHWaR/ErsO4GMuCMoAxuzFjMz2 F+MgonPRaeLsv0+vODmDCu+6SAojgMUCVVnQaB0VYc0B/wZ08aN5gJE2juwxtdgP okoRmGH7SLMIinwB+tHpRpCmVTRYFpeZWX39zzb3IGLZky+PgiOyY64hMdn/hB0Z 4cFrVEeJMSVT20WKKP9wbBkuo2MAeIO+iNpkwu+uXE15u2bqqYQpVH7L0vDyJR/r iDFZ6wf5hVB8wKPzURXJrYFGqZO11Y0FI8W/i7vMETLK8ubaNM8= -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:39 2026 by rpki-client