This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: c8sDdf+x+tCN8OL7f6aWJ+Ok6gRG9VICuGKKxemRN4I= Subject key identifier: 06:93:D1:CD:4F:87:00:C1:6B:FF:69:F3:8B:C1:23:D0:4A:16:E5:D0 Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 6A9EA490DF53F14E600D318112235C89DC787553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 0232 Signing time: Sat 24 Jan 2026 17:01:42 +0000 Manifest this update: Sat 24 Jan 2026 16:56:42 +0000 Manifest next update: Tue 27 Jan 2026 18:45:42 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: cYhK3GJqIhodTR7JcFdrgi7KFah821sd+x1gmWcWGgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9e:a4:90:df:53:f1:4e:60:0d:31:81:12:23:5c:89:dc:78:75:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Jan 24 16:56:42 2026 GMT Not After : Jan 27 18:45:42 2026 GMT Subject: CN=0693D1CD4F8700C16BFF69F38BC123D04A16E5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:67:4d:1b:9a:11:cc:a2:b1:60:bb:d5:f2: 25:c2:49:1d:66:52:81:62:e9:80:0f:af:dc:82:d3: c1:35:5a:2e:90:2a:a2:bb:40:51:93:46:e9:e6:86: ef:fb:c6:f4:75:06:e2:96:3b:47:ef:08:93:7c:28: 1b:31:d2:9d:70:d1:bd:3a:d8:4e:f4:54:49:ec:fc: ad:4e:0f:d3:e9:48:5a:57:c1:85:20:c1:e9:f9:eb: 5d:e7:34:88:a1:db:6f:ef:1e:36:fd:dc:d0:b2:43: 9e:60:d8:d1:37:60:22:99:69:49:5d:33:e2:71:78: e6:49:a5:9d:3f:be:f3:26:a5:e2:e2:12:81:5f:5e: 1e:bf:f2:57:97:ba:4c:93:6e:a2:93:bf:fd:b2:fe: ac:0f:a3:54:bf:24:18:91:ad:8b:51:24:97:87:97: b3:f4:22:2e:ee:d0:00:58:a8:90:ee:a7:68:df:03: 30:46:8e:bc:2f:e9:9d:30:0b:c7:3b:e5:13:74:b5: 25:6e:bb:8c:14:e5:a5:e9:59:9b:f5:a6:b1:d4:4b: 2c:1f:36:ed:fc:61:11:08:e5:b4:10:31:e5:dd:ac: fc:62:a9:7e:bc:37:a4:b6:8f:e7:93:d2:00:f1:03: dd:fc:50:ea:9f:30:55:d0:fe:cb:c6:29:c1:5d:2a: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:93:D1:CD:4F:87:00:C1:6B:FF:69:F3:8B:C1:23:D0:4A:16:E5:D0 X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:8a:76:d8:02:a6:85:a5:40:c6:41:49:bc:c5:cd:31:28: ec:70:6e:df:a8:e3:d3:f6:83:a1:2d:f8:07:d6:4c:ba:d4:14: 00:de:da:70:27:65:4f:57:bb:70:4e:6b:e9:81:f9:dd:72:80: 32:0a:68:16:87:00:38:87:8e:ea:4d:68:73:30:58:c0:24:b1: 7f:65:13:52:d4:79:db:6f:10:8b:0c:48:2a:ab:7c:6d:b5:9e: be:4c:f2:a4:39:87:be:4d:4c:f5:2d:1d:1b:83:64:ec:0f:b7: 48:73:2b:ab:08:8d:ef:49:5a:17:72:26:72:f6:8c:eb:4e:c9: d3:d9:34:09:b9:72:c7:ed:b6:a6:e8:72:ef:9b:4c:e5:d4:55: 6d:d2:98:47:82:e5:24:8e:66:39:21:bd:a9:ed:41:80:5c:e0: 9e:76:0a:e1:c4:94:6b:d5:13:08:b3:87:45:59:56:85:3f:ee: f1:e3:d5:0a:32:cd:c7:2a:2f:2e:0a:2d:69:2d:cd:de:bf:d0: 2f:a3:a4:90:13:9c:69:57:a1:62:9b:94:c5:11:7b:e6:c9:8b: 7a:02:94:1f:c9:ea:5c:a8:e8:9f:2d:ce:3b:fc:1a:5e:5b:1c: 5f:50:f2:82:62:c5:7d:04:6a:19:9d:23:a4:f1:13:be:16:cf: d9:a4:fd:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUap6kkN9T8U5gDTGBEiNcidx4dVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNjAxMjQxNjU2NDJaFw0yNjAxMjcxODQ1NDJaMDMxMTAvBgNV BAMTKDA2OTNEMUNENEY4NzAwQzE2QkZGNjlGMzhCQzEyM0QwNEExNkU1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTw2dNG5oRzKKxYLvV8iXCSR1m UoFi6YAPr9yC08E1Wi6QKqK7QFGTRunmhu/7xvR1BuKWO0fvCJN8KBsx0p1w0b06 2E70VEns/K1OD9PpSFpXwYUgwen5613nNIih22/vHjb93NCyQ55g2NE3YCKZaUld M+JxeOZJpZ0/vvMmpeLiEoFfXh6/8leXukyTbqKTv/2y/qwPo1S/JBiRrYtRJJeH l7P0Ii7u0ABYqJDup2jfAzBGjrwv6Z0wC8c75RN0tSVuu4wU5aXpWZv1prHUSywf Nu38YREI5bQQMeXdrPxiqX68N6S2j+eT0gDxA938UOqfMFXQ/svGKcFdKrOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBpPRzU+HAMFr/2nzi8Ej0EoW5dAwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSYinbYAqaFpUDGQUm8xc0xKOxwbt+o49P2 g6Et+AfWTLrUFADe2nAnZU9Xu3BOa+mB+d1ygDIKaBaHADiHjupNaHMwWMAksX9l E1LUedtvEIsMSCqrfG21nr5M8qQ5h75NTPUtHRuDZOwPt0hzK6sIje9JWhdyJnL2 jOtOydPZNAm5csfttqbocu+bTOXUVW3SmEeC5SSOZjkhvantQYBc4J52CuHElGvV Ewizh0VZVoU/7vHj1QoyzccqLy4KLWktzd6/0C+jpJATnGlXoWKblMURe+bJi3oC lB/J6lyo6J8tzjv8Gl5bHF9Q8oJixX0EahmdI6TxE74Wz9mk/Zw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:31 2026 by rpki-client