This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: zgEZw+24Rzfw3kAcCq1ew/VYTizPKlHKSwWEi3ZDW+U= Subject key identifier: 86:1F:E8:A3:D0:73:37:00:14:C3:0A:5F:99:71:38:DD:02:28:FD:80 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 74E51877381C4CD398FA70D8EC563626F8AB41C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 0231 Signing time: Fri 23 Jan 2026 20:41:45 +0000 Manifest this update: Fri 23 Jan 2026 20:36:45 +0000 Manifest next update: Tue 27 Jan 2026 08:23:45 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 2: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 3: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: dW/OF9SAEwrqT27nCUCv9bXlQOAn1BahN/3xkK8QUc8=) 4: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e5:18:77:38:1c:4c:d3:98:fa:70:d8:ec:56:36:26:f8:ab:41:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Jan 23 20:36:45 2026 GMT Not After : Jan 27 08:23:45 2026 GMT Subject: CN=861FE8A3D073370014C30A5F997138DD0228FD80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:99:2f:5f:09:90:08:1c:30:83:27:a8:32: 9e:86:ea:3f:85:59:e5:0c:07:b3:c2:b8:3e:06:00: cd:96:ec:f9:1a:bc:eb:cb:57:a6:be:ae:00:5e:ff: 16:08:40:60:c2:d2:39:cc:6c:b5:da:76:e3:96:8d: b2:df:ab:cd:8d:3a:39:08:f0:4e:63:3a:31:75:c5: 17:22:fe:9a:14:24:65:26:d5:e1:f7:35:fc:ee:d1: 06:c2:70:1e:da:25:7d:de:5c:d0:ff:8a:3c:b6:15: 69:bd:14:f4:2f:dd:50:8f:a0:d0:b7:f1:6b:fb:a2: 00:02:5c:33:d2:2e:9f:06:51:bc:54:b4:ef:f8:fd: 2c:d1:74:9e:b7:de:92:47:20:ec:2a:e2:93:39:77: 22:f2:b8:47:1f:a5:d1:60:ac:89:f8:a1:14:0c:aa: d3:b6:bb:72:f7:97:22:1a:cd:cc:cd:49:5d:e2:40: fb:38:72:2a:94:05:24:10:af:fb:b5:58:9b:ea:0c: 03:3d:a6:f8:a8:82:c2:72:69:ec:a7:d0:18:bb:9f: b3:b6:32:54:6b:94:90:4c:db:5a:25:4c:55:d0:8b: 54:96:c9:75:04:f1:9f:0e:1c:cb:ff:75:8e:d8:98: 97:7f:3e:3d:ce:17:ef:9e:31:10:8e:54:da:eb:f8: 7d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:E8:A3:D0:73:37:00:14:C3:0A:5F:99:71:38:DD:02:28:FD:80 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:27:da:ae:fe:43:a2:64:d5:7e:c8:0a:7c:1a:2b:bf:56:8f: 6d:c5:c2:de:de:47:d3:7a:b1:ca:d8:41:63:e0:95:d6:29:d1: 73:ac:35:af:41:10:90:14:f9:29:b6:0a:dd:e3:cf:17:10:12: 45:e1:f9:5e:15:21:91:2d:f0:d9:81:64:bf:b3:d8:eb:c3:4d: 65:ed:b9:f8:ea:ee:30:91:43:29:6e:00:0f:bb:65:10:be:e7: 7d:c0:38:f0:33:d3:d2:58:0a:9f:d7:c9:54:04:df:30:a4:7b: ef:a4:e4:f7:60:34:70:29:e4:58:76:79:f7:90:3b:e8:b5:31: d8:11:fa:ed:3e:f8:52:c8:6a:03:7c:94:c6:31:96:61:a3:7f: a2:8d:a6:f2:72:ec:00:99:f5:ca:a8:3a:fd:55:c0:0a:54:1d: d4:45:b8:cd:d6:5f:a1:ab:11:9f:4b:ed:04:81:b5:7b:9e:33: 3e:00:6d:18:32:5c:7a:a0:1f:a7:b0:8a:fb:3c:d7:db:3f:15: 44:70:b4:9a:54:75:97:5e:20:ea:6f:4a:46:39:77:e4:35:b9: 42:68:70:fe:4b:b9:de:ac:b6:f6:02:90:da:56:44:29:3f:64: c4:61:22:0b:3a:5f:ad:8a:e3:e2:44:46:a8:7a:fc:7a:ce:b8: d5:67:62:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOUYdzgcTNOY+nDY7FY2JvirQcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNjAxMjMyMDM2NDVaFw0yNjAxMjcwODIzNDVaMDMxMTAvBgNV BAMTKDg2MUZFOEEzRDA3MzM3MDAxNEMzMEE1Rjk5NzEzOEREMDIyOEZEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfR5kvXwmQCBwwgyeoMp6G6j+F WeUMB7PCuD4GAM2W7PkavOvLV6a+rgBe/xYIQGDC0jnMbLXaduOWjbLfq82NOjkI 8E5jOjF1xRci/poUJGUm1eH3Nfzu0QbCcB7aJX3eXND/ijy2FWm9FPQv3VCPoNC3 8Wv7ogACXDPSLp8GUbxUtO/4/SzRdJ633pJHIOwq4pM5dyLyuEcfpdFgrIn4oRQM qtO2u3L3lyIazczNSV3iQPs4ciqUBSQQr/u1WJvqDAM9pviogsJyaeyn0Bi7n7O2 MlRrlJBM21olTFXQi1SWyXUE8Z8OHMv/dY7YmJd/Pj3OF++eMRCOVNrr+H0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhh/oo9BzNwAUwwpfmXE43QIo/YAwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQn2q7+Q6Jk1X7ICnwaK79Wj23Fwt7eR9N6 scrYQWPgldYp0XOsNa9BEJAU+Sm2Ct3jzxcQEkXh+V4VIZEt8NmBZL+z2OvDTWXt ufjq7jCRQyluAA+7ZRC+533AOPAz09JYCp/XyVQE3zCke++k5PdgNHAp5Fh2efeQ O+i1MdgR+u0++FLIagN8lMYxlmGjf6KNpvJy7ACZ9cqoOv1VwApUHdRFuM3WX6Gr EZ9L7QSBtXueMz4AbRgyXHqgH6ewivs819s/FURwtJpUdZdeIOpvSkY5d+Q1uUJo cP5Lud6stvYCkNpWRCk/ZMRhIgs6X62K4+JERqh6/HrOuNVnYuo= -----END CERTIFICATE-----Generated at Mon Jan 26 08:05:30 2026 by rpki-client