This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json) Hash identifier: glIv5iDuE77VH2lZqzFY+8BK1ClwD1hYrcM4sj9YW+s= Subject key identifier: 37:58:42:45:2F:25:05:1B:9D:2B:4B:6A:D3:74:04:4B:DB:AB:9C:C0 Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF Certificate serial: 585DE266AEC9D0256410EC32CC1856CC37A19483 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft Manifest number: 0168 Signing time: Sat 24 Jan 2026 03:22:19 +0000 Manifest this update: Sat 24 Jan 2026 03:17:19 +0000 Manifest next update: Tue 27 Jan 2026 14:00:19 +0000 Files and hashes: 1: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: D/AxGj/5BiNPPb2fJCsBWOU65E70/Gx5TE6P6Apv7I0=) 2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=) 3: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: DYNP1pkQZXlnNBDUWLT0o/w7WroozE34gPyP6ZNIwTM=) 4: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: LEF8YB6t6OYZQZrhwG/4Qw0X6QqLKe1Bpj3LXFZ+/x0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5d:e2:66:ae:c9:d0:25:64:10:ec:32:cc:18:56:cc:37:a1:94:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF Validity Not Before: Jan 24 03:17:19 2026 GMT Not After : Jan 27 14:00:19 2026 GMT Subject: CN=375842452F25051B9D2B4B6AD374044BDBAB9CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:df:97:cc:72:8e:ee:b5:5b:32:97:23:fc: b7:4a:43:eb:eb:7c:a7:6e:63:ed:7e:b0:18:cb:ff: 94:14:b7:f9:34:00:04:fa:b5:47:2c:59:32:8a:b5: 5f:4e:7c:ae:14:1d:c5:eb:fe:99:a4:58:d6:55:a6: 58:83:fa:4b:d6:e2:89:4e:86:3b:65:f0:30:32:cd: 97:4d:a5:5f:a1:33:0b:b2:1a:64:bc:30:a8:7c:2b: ba:cc:9c:08:1c:39:e9:83:12:ce:88:65:00:d4:ae: 83:11:8d:d0:f5:0a:b9:a2:cb:dc:06:fb:75:a3:33: 51:22:7a:9f:50:90:ec:98:6a:7e:e6:ea:0b:cf:12: 5c:ca:16:b7:58:98:ba:e4:96:16:08:39:29:bb:b9: 1e:8c:d0:cc:48:8e:a1:f7:81:66:97:be:c1:f1:8c: be:6d:0d:c5:78:88:98:f1:8d:4a:6a:59:9b:b6:b9: 4f:e2:19:99:ca:b9:07:9b:d9:a6:26:8b:eb:b1:d0: 92:3f:6c:b5:65:b0:94:85:b3:a9:c2:d5:d8:47:f3: b7:9d:67:e2:39:1b:b1:8e:95:36:62:aa:8e:00:2c: 4d:80:00:09:91:32:a2:a1:2f:e1:5c:6f:01:8a:0f: ae:c3:6f:0f:da:fb:30:92:03:00:82:ce:4a:91:93: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:58:42:45:2F:25:05:1B:9D:2B:4B:6A:D3:74:04:4B:DB:AB:9C:C0 X509v3 Authority Key Identifier: keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:f6:a4:a1:2d:8d:ca:6a:a9:29:f3:63:1b:fb:e6:5a:6e: 10:57:db:03:59:fa:a9:1b:d3:05:03:da:53:08:12:61:1e:71: 4c:43:49:a7:63:49:81:d9:0b:d9:2e:c3:83:9f:e5:44:94:da: 07:8d:41:26:71:84:18:30:e9:c2:ff:9e:e1:17:15:e2:b8:c7: 2c:a5:0b:82:0b:bc:c1:0a:c1:85:98:39:fb:16:25:e2:48:bb: a5:1c:ae:33:dd:63:c8:d2:2d:63:5e:72:8e:4c:70:1e:c8:2f: d5:11:92:11:ed:1b:d0:3b:08:95:bc:49:04:32:52:66:c7:0c: 79:0d:f6:4a:9b:89:97:ec:b5:1e:60:38:18:04:f0:ba:21:3c: da:09:3a:a9:df:0f:56:13:06:87:96:11:63:48:ec:1d:b9:ed: c6:52:31:51:88:72:c9:ab:79:24:e9:7c:78:6a:ad:e4:d5:f1: b2:94:00:53:2c:49:7e:91:46:2d:3a:03:76:dd:61:25:7b:c1: 40:d1:46:9d:ff:2d:bf:ff:6a:b7:0d:e2:4e:57:87:4b:17:4f: 44:d9:31:1c:d3:cc:b1:f4:20:6b:71:82:de:58:26:6d:f5:49: ad:aa:13:93:f6:85:92:ec:ed:e8:cb:1e:fd:15:92:b9:0b:80: d1:32:f2:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWF3iZq7J0CVkEOwyzBhWzDehlIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2 Q0E4RDJFRjAeFw0yNjAxMjQwMzE3MTlaFw0yNjAxMjcxNDAwMTlaMDMxMTAvBgNV BAMTKDM3NTg0MjQ1MkYyNTA1MUI5RDJCNEI2QUQzNzQwNDRCREJBQjlDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzN+XzHKO7rVbMpcj/LdKQ+vr fKduY+1+sBjL/5QUt/k0AAT6tUcsWTKKtV9OfK4UHcXr/pmkWNZVpliD+kvW4olO hjtl8DAyzZdNpV+hMwuyGmS8MKh8K7rMnAgcOemDEs6IZQDUroMRjdD1Crmiy9wG +3WjM1Eiep9QkOyYan7m6gvPElzKFrdYmLrklhYIOSm7uR6M0MxIjqH3gWaXvsHx jL5tDcV4iJjxjUpqWZu2uU/iGZnKuQeb2aYmi+ux0JI/bLVlsJSFs6nC1dhH87ed Z+I5G7GOlTZiqo4ALE2AAAmRMqKhL+FcbwGKD67Dbw/a+zCSAwCCzkqRk8UZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1hCRS8lBRudK0tq03QES9urnMAwHwYDVR0j BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4 RDJFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3 MDg2Q0E4RDJFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJum9qShLY3Kaqkp82Mb++ZabhBX2wNZ+qkb 0wUD2lMIEmEecUxDSadjSYHZC9kuw4Of5USU2geNQSZxhBgw6cL/nuEXFeK4xyyl C4ILvMEKwYWYOfsWJeJIu6UcrjPdY8jSLWNeco5McB7IL9URkhHtG9A7CJW8SQQy UmbHDHkN9kqbiZfstR5gOBgE8LohPNoJOqnfD1YTBoeWEWNI7B257cZSMVGIcsmr eSTpfHhqreTV8bKUAFMsSX6RRi06A3bdYSV7wUDRRp3/Lb//arcN4k5Xh0sXT0TZ MRzTzLH0IGtxgt5YJm31Sa2qE5P2hZLs7ejLHv0VkrkLgNEy8uI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:07 2026 by rpki-client