This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: hOqf0HqBUFMB1+ryfGPW6BzPfqo8l5WEi20+qIZJ2vs= Subject key identifier: CE:F7:B6:42:59:A2:C5:4E:2F:3F:6E:22:68:79:2D:10:16:83:0D:63 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 2DDA422DE4CD19257CFDE62CD022978067BA1512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: CC Signing time: Sat 24 Jan 2026 19:52:10 +0000 Manifest this update: Sat 24 Jan 2026 19:47:10 +0000 Manifest next update: Tue 27 Jan 2026 22:25:10 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: aI3dJdPE77qzOtT04uBJrG0PeHnKluDOxKxmRv5qlgI=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:da:42:2d:e4:cd:19:25:7c:fd:e6:2c:d0:22:97:80:67:ba:15:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Jan 24 19:47:10 2026 GMT Not After : Jan 27 22:25:10 2026 GMT Subject: CN=CEF7B64259A2C54E2F3F6E2268792D1016830D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:f6:64:41:8e:2f:cd:70:99:6e:be:8f:5e: 8e:83:91:7a:ce:f8:14:18:22:80:fd:eb:6a:0d:0e: 7b:cb:60:be:57:8b:db:c9:ac:2f:23:aa:7e:ad:a9: 13:e9:0a:a1:a9:9a:a8:ff:11:39:ed:4e:7b:90:84: d9:3b:f1:f8:a5:dc:fb:4a:50:97:a3:97:63:42:a6: 21:94:b7:b0:eb:f7:2d:ba:8b:f3:74:5e:8c:44:f6: c2:f2:e5:b8:ee:84:ea:2e:12:c9:7f:f1:8a:03:b9: b7:e5:d6:8e:21:f6:19:1e:05:9e:58:64:ad:74:11: 34:c5:9a:70:b5:45:2f:bb:2b:e1:6a:6c:f4:1d:ca: 5c:6e:f4:48:6a:50:86:90:3e:2e:51:a3:fc:7d:58: 99:3c:0d:e3:ea:7a:11:6c:c2:0e:b8:05:c3:d1:ac: 45:07:88:f9:ab:ed:20:98:56:13:40:27:8a:c2:0a: 79:d4:6e:12:8e:73:d3:c3:53:c1:e0:76:e0:ec:fb: c9:b5:16:83:29:85:c9:08:ce:16:29:81:17:d9:2f: b8:c9:04:73:28:f4:12:13:2e:08:4e:2b:ec:2d:df: 99:be:1c:71:51:ba:95:4b:f9:ad:51:ff:f3:ab:41: 7b:6b:8e:6c:34:3a:08:f3:1d:ba:4f:f1:8c:ec:e2: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F7:B6:42:59:A2:C5:4E:2F:3F:6E:22:68:79:2D:10:16:83:0D:63 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b7:4c:57:07:bc:67:f3:16:42:3d:d0:b2:6f:ce:a7:15:e5: 40:67:36:d2:68:6c:e3:d3:68:b5:c1:aa:68:0c:b9:d1:c8:4a: 91:d1:35:ab:40:28:b6:c7:06:3b:de:73:70:b3:97:ec:7c:b2: 37:44:74:d6:c1:72:46:ee:65:39:2c:d4:7c:68:4f:2a:42:37: 5c:07:54:fc:73:4e:2f:b9:78:73:4c:7f:00:14:bb:34:32:75: 5f:be:30:bb:33:e9:e1:2a:a6:43:55:08:01:78:9d:8d:c3:6d: 4c:4a:e2:60:7e:8d:ad:87:30:f6:31:a7:ae:92:19:ba:f6:14: c2:46:a3:4c:79:eb:6e:da:38:1e:79:81:f3:3d:40:17:d8:8f: a2:bc:9f:63:fa:fa:37:74:9b:e8:59:55:4f:a6:d3:9e:f0:b4: 44:77:e2:21:3d:ec:f0:c0:2b:aa:34:3f:38:ed:3a:26:45:5b: 4e:c2:0a:37:3a:0f:3d:94:b0:58:6e:c1:7b:70:4b:44:1f:46: 05:f4:6a:ae:db:37:00:4b:77:dd:14:f6:49:53:35:b8:16:b9: 24:2f:ed:b9:67:9a:0d:4d:0d:cd:10:1c:79:d9:06:95:b9:fd: 6e:e3:d5:67:48:33:7d:df:27:b2:d3:a7:d1:ba:2f:b0:bc:ce: 12:54:0f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdpCLeTNGSV8/eYs0CKXgGe6FRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNjAxMjQxOTQ3MTBaFw0yNjAxMjcyMjI1MTBaMDMxMTAvBgNV BAMTKENFRjdCNjQyNTlBMkM1NEUyRjNGNkUyMjY4NzkyRDEwMTY4MzBENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZPZkQY4vzXCZbr6PXo6DkXrO +BQYIoD962oNDnvLYL5Xi9vJrC8jqn6tqRPpCqGpmqj/ETntTnuQhNk78fil3PtK UJejl2NCpiGUt7Dr9y26i/N0XoxE9sLy5bjuhOouEsl/8YoDubfl1o4h9hkeBZ5Y ZK10ETTFmnC1RS+7K+FqbPQdylxu9EhqUIaQPi5Ro/x9WJk8DePqehFswg64BcPR rEUHiPmr7SCYVhNAJ4rCCnnUbhKOc9PDU8HgduDs+8m1FoMphckIzhYpgRfZL7jJ BHMo9BITLghOK+wt35m+HHFRupVL+a1R//OrQXtrjmw0OgjzHbpP8Yzs4h7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzve2QlmixU4vP24iaHktEBaDDWMwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm3TFcHvGfzFkI90LJvzqcV5UBnNtJobOPT aLXBqmgMudHISpHRNatAKLbHBjvec3Czl+x8sjdEdNbBckbuZTks1HxoTypCN1wH VPxzTi+5eHNMfwAUuzQydV++MLsz6eEqpkNVCAF4nY3DbUxK4mB+ja2HMPYxp66S Gbr2FMJGo0x5627aOB55gfM9QBfYj6K8n2P6+jd0m+hZVU+m057wtER34iE97PDA K6o0PzjtOiZFW07CCjc6Dz2UsFhuwXtwS0QfRgX0aq7bNwBLd90U9klTNbgWuSQv 7blnmg1NDc0QHHnZBpW5/W7j1WdIM33fJ7LTp9G6L7C8zhJUD4I= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:25 2026 by rpki-client