This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: QMcE+t08oBBIfJ3hx2BJOOhU/7JchcZRS2Gsb+Qzk10= Subject key identifier: 1A:51:51:C4:14:36:09:65:E4:BB:60:4C:1E:4F:EE:E8:C7:2E:8D:A8 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 204D39610F843348EFF3098D9ED99C2A5F78BAEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: 0115 Signing time: Fri 23 Jan 2026 21:41:22 +0000 Manifest this update: Fri 23 Jan 2026 21:36:22 +0000 Manifest next update: Tue 27 Jan 2026 09:38:22 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 2: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 3: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: TABf46FJmffeVAvk9voqAnUx2t0NNewcweJi9oCJMTs=) 4: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4d:39:61:0f:84:33:48:ef:f3:09:8d:9e:d9:9c:2a:5f:78:ba:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Jan 23 21:36:22 2026 GMT Not After : Jan 27 09:38:22 2026 GMT Subject: CN=1A5151C414360965E4BB604C1E4FEEE8C72E8DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:9f:a3:5b:29:70:e9:a9:20:ec:b8:d3:cb: 51:63:34:38:b8:bf:7c:79:5c:d8:0e:35:70:22:0b: b4:70:28:c0:73:1b:d0:51:f0:15:a6:4c:46:0e:8c: 1f:61:f9:c5:3b:ad:f6:24:ca:9f:88:e3:0c:47:02: 4b:4f:37:41:1f:1c:4e:20:f1:0a:11:6b:88:04:38: 10:f1:be:76:bb:e5:9b:e1:a8:fb:1a:87:1f:2d:be: a3:b9:6d:49:10:2a:55:83:26:8e:df:3c:aa:af:b1: 69:05:f4:29:5a:38:cb:ff:c6:30:a3:9e:f7:96:f4: 55:c4:4a:16:47:37:44:48:4d:59:d3:23:5e:1f:d6: bb:ef:b6:00:7d:d3:cc:50:2a:1f:ea:9d:44:77:e4: df:30:16:b1:c5:97:1f:38:e5:24:47:45:3b:56:cb: 6e:2d:cb:47:2f:6d:5e:a4:3d:4f:09:a2:58:4a:36: e6:a2:74:80:1d:a7:b8:e1:14:6b:bd:4a:7a:07:97: 7a:a1:c2:46:a7:fb:60:bf:86:90:4d:6b:2d:f3:a5: 08:5a:ed:87:7d:63:ae:e8:58:7c:77:a7:f0:56:a6: d7:de:eb:01:f8:c9:ee:4b:33:c0:83:4e:14:2e:43: 40:8c:e5:bc:ad:05:53:ff:39:78:c8:5c:17:86:44: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:51:C4:14:36:09:65:E4:BB:60:4C:1E:4F:EE:E8:C7:2E:8D:A8 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:27:74:1a:57:1a:79:d7:ca:e3:6b:c0:b4:bc:bd:77:ef: 2b:35:f1:04:ea:3e:e1:86:33:6f:4c:29:7d:e6:b5:a3:09:6c: 7d:45:0d:55:8d:37:4a:be:e5:5d:31:01:5d:d3:19:3e:d3:d9: ff:4e:b0:f6:2f:a1:fd:cd:bb:b4:0e:9b:78:c1:a2:ca:c6:42: b5:63:c9:f4:b7:2e:3d:35:a3:9e:19:7b:1f:60:13:ad:9c:c3: 48:ef:bf:80:3b:83:65:e8:0e:16:c4:8d:7a:2c:35:2c:da:af: b3:b8:33:72:01:28:b6:70:ae:64:ad:96:83:2e:9d:09:4a:dd: 7d:70:e4:08:db:4c:cc:90:4e:f1:44:3a:98:06:ec:53:3d:a6: e2:39:86:2c:7c:8a:8d:9f:d7:c6:60:df:6d:60:ae:9f:61:9b: d7:d5:20:d4:e5:21:33:fe:a4:73:86:a3:ff:60:94:f5:5d:68: 8a:6d:78:90:af:82:ac:17:61:ed:86:d1:be:d7:47:b9:e4:78: ec:1d:a9:49:c8:ea:54:81:d5:0d:44:a1:1e:2f:80:7f:df:d3: f9:b2:c4:30:55:05:23:22:ee:a4:0a:4d:f4:13:43:00:40:6a: c1:2d:8f:47:c5:0f:f3:8c:4e:5e:a7:96:ba:01:79:51:4c:c6: 94:e0:a0:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE05YQ+EM0jv8wmNntmcKl94uu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNjAxMjMyMTM2MjJaFw0yNjAxMjcwOTM4MjJaMDMxMTAvBgNV BAMTKDFBNTE1MUM0MTQzNjA5NjVFNEJCNjA0QzFFNEZFRUU4QzcyRThEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK5+jWylw6akg7LjTy1FjNDi4 v3x5XNgONXAiC7RwKMBzG9BR8BWmTEYOjB9h+cU7rfYkyp+I4wxHAktPN0EfHE4g 8QoRa4gEOBDxvna75ZvhqPsahx8tvqO5bUkQKlWDJo7fPKqvsWkF9ClaOMv/xjCj nveW9FXEShZHN0RITVnTI14f1rvvtgB908xQKh/qnUR35N8wFrHFlx845SRHRTtW y24ty0cvbV6kPU8JolhKNuaidIAdp7jhFGu9SnoHl3qhwkan+2C/hpBNay3zpQha 7Yd9Y67oWHx3p/BWptfe6wH4ye5LM8CDThQuQ0CM5bytBVP/OXjIXBeGROcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlFRxBQ2CWXku2BMHk/u6McujagwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU9J3QaVxp518rja8C0vL137ys18QTqPuGG M29MKX3mtaMJbH1FDVWNN0q+5V0xAV3TGT7T2f9OsPYvof3Nu7QOm3jBosrGQrVj yfS3Lj01o54Zex9gE62cw0jvv4A7g2XoDhbEjXosNSzar7O4M3IBKLZwrmStloMu nQlK3X1w5AjbTMyQTvFEOpgG7FM9puI5hix8io2f18Zg321grp9hm9fVINTlITP+ pHOGo/9glPVdaIpteJCvgqwXYe2G0b7XR7nkeOwdqUnI6lSB1Q1EoR4vgH/f0/my xDBVBSMi7qQKTfQTQwBAasEtj0fFD/OMTl6nlroBeVFMxpTgoLo= -----END CERTIFICATE-----Generated at Sun Jan 25 14:01:26 2026 by rpki-client