This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: jDnvxXLaxhkYKoObAhU1ymcTqHpSAZIGQr9JZJQ0r/4= Subject key identifier: 68:76:B3:B2:E1:E6:14:BD:2D:C9:C5:DC:A1:58:46:E2:D9:5D:FD:F0 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 10C4B8D781EE227F66F889BA323F774ADDEDF780 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: A1 Signing time: Fri 23 Jan 2026 18:11:17 +0000 Manifest this update: Fri 23 Jan 2026 18:06:17 +0000 Manifest next update: Tue 27 Jan 2026 01:20:17 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: iGO64FxgacSdTV53j7004JWhMncwVkKgnS9SevkP9nY=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 3AL9wnFX7NUdd15jINa43wjhnEOlPugDH4MAafaXB/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c4:b8:d7:81:ee:22:7f:66:f8:89:ba:32:3f:77:4a:dd:ed:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Jan 23 18:06:17 2026 GMT Not After : Jan 27 01:20:17 2026 GMT Subject: CN=6876B3B2E1E614BD2DC9C5DCA15846E2D95DFDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:3e:f9:6d:e1:46:74:15:09:48:61:2a:44: fa:aa:32:72:b4:91:18:1b:a4:5e:c6:12:3d:e4:fb: 9a:b8:8b:4f:e4:27:7d:86:72:39:18:90:bc:bb:cc: 0b:0a:f5:eb:ca:aa:6a:ac:17:f7:96:82:9a:60:59: 2e:ed:68:20:15:e1:e7:1c:ce:3b:41:8a:21:34:6f: 90:58:08:56:ea:ab:b5:98:33:85:5e:7c:33:45:ea: 09:e5:21:64:34:56:c4:4c:1b:b1:bd:ed:0d:13:11: 4b:3e:cf:cd:bd:fe:b7:2f:d6:28:ef:f7:be:fa:0d: 9f:51:30:cb:9b:cc:43:55:0e:af:57:20:39:ac:68: 83:ec:1c:88:eb:88:ad:d8:f1:ba:f1:5c:04:21:4e: 3e:a5:51:b5:eb:d6:57:a5:d3:66:70:a2:86:42:c7: 3b:ab:f9:9f:c4:db:92:80:a7:89:36:c1:93:66:fe: 7c:5d:29:aa:03:48:6e:6a:97:b7:04:5a:32:d9:96: fa:97:ba:e6:ad:96:63:1f:2b:de:69:c6:18:9d:cf: 04:9e:c8:50:ba:a7:35:33:ec:43:fd:f1:76:78:c8: 40:80:87:62:f1:81:9d:e5:7c:9f:a6:68:ea:7d:1b: 82:62:15:16:66:3e:e4:f5:4d:4c:8f:91:00:d1:4a: 2b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:76:B3:B2:E1:E6:14:BD:2D:C9:C5:DC:A1:58:46:E2:D9:5D:FD:F0 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:be:3c:e0:5a:f1:36:00:46:a8:ae:20:a3:80:8a:08:93: 37:1b:b3:12:cb:6e:34:01:32:6c:d0:34:ab:77:2a:3b:a7:04: 66:ac:7b:0f:22:31:47:32:c2:c6:20:98:8e:7b:5e:58:78:1c: 31:d5:08:6d:02:9e:52:4a:1a:e1:55:68:11:63:55:2e:0e:9c: 09:fd:38:94:e5:8c:e1:2f:59:1d:b8:fb:36:ba:29:be:73:63: f2:bc:9f:0f:be:be:4d:b6:8c:87:12:0c:b8:ec:65:5a:7e:93: f3:47:4e:5d:2a:0b:81:b1:97:3d:7a:5d:3e:28:7a:d4:de:8f: ca:ad:81:bb:fa:93:1d:a9:63:73:01:9c:99:e2:a4:ce:87:ab: df:d8:db:39:f7:74:cb:44:bb:04:af:ce:9f:58:84:66:d8:0d: a4:68:29:39:08:d6:6d:ca:41:ff:3c:3b:36:eb:06:0b:2a:1e: da:b4:39:91:00:56:b1:6b:41:1d:14:c5:f8:a7:c7:e9:32:16: e7:76:44:0d:05:15:28:17:c2:e0:0d:52:87:63:b1:7b:3e:69: 00:8e:fa:ab:ad:8a:d4:14:84:4e:76:d3:4a:0d:6a:8b:77:ac: 7f:7c:92:88:c1:b0:9e:0c:6c:61:5c:29:95:ed:68:e3:b1:50: bd:9a:8d:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMS414HuIn9m+Im6Mj93St3t94AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNjAxMjMxODA2MTdaFw0yNjAxMjcwMTIwMTdaMDMxMTAvBgNV BAMTKDY4NzZCM0IyRTFFNjE0QkQyREM5QzVEQ0ExNTg0NkUyRDk1REZERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6D75beFGdBUJSGEqRPqqMnK0 kRgbpF7GEj3k+5q4i0/kJ32GcjkYkLy7zAsK9evKqmqsF/eWgppgWS7taCAV4ecc zjtBiiE0b5BYCFbqq7WYM4VefDNF6gnlIWQ0VsRMG7G97Q0TEUs+z829/rcv1ijv 9776DZ9RMMubzENVDq9XIDmsaIPsHIjriK3Y8brxXAQhTj6lUbXr1lel02ZwooZC xzur+Z/E25KAp4k2wZNm/nxdKaoDSG5ql7cEWjLZlvqXuuatlmMfK95pxhidzwSe yFC6pzUz7EP98XZ4yECAh2LxgZ3lfJ+maOp9G4JiFRZmPuT1TUyPkQDRSisBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaHazsuHmFL0tycXcoVhG4tld/fAwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/LvjzgWvE2AEaoriCjgIoIkzcbsxLLbjQB MmzQNKt3KjunBGasew8iMUcywsYgmI57Xlh4HDHVCG0CnlJKGuFVaBFjVS4OnAn9 OJTljOEvWR24+za6Kb5zY/K8nw++vk22jIcSDLjsZVp+k/NHTl0qC4Gxlz16XT4o etTej8qtgbv6kx2pY3MBnJnipM6Hq9/Y2zn3dMtEuwSvzp9YhGbYDaRoKTkI1m3K Qf88OzbrBgsqHtq0OZEAVrFrQR0Uxfinx+kyFud2RA0FFSgXwuANUodjsXs+aQCO +qutitQUhE5200oNaot3rH98kojBsJ4MbGFcKZXtaOOxUL2ajWk= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:10 2026 by rpki-client