This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: 2GpGXja8cilH02Ml47Dn+E5LqceLgvC3JNwJuBwpHtA= Subject key identifier: F6:8B:81:44:0C:E6:0A:01:77:39:47:1A:48:95:11:86:AC:6F:C6:6D Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 08FD804AA67B74E27383EA2312FF42DE1B27A887 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01FD Signing time: Wed 07 Jan 2026 06:20:55 +0000 Manifest this update: Wed 07 Jan 2026 06:15:55 +0000 Manifest next update: Sat 10 Jan 2026 09:38:55 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) 2: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: W1xAFBEEST66AdXV7mYbYJwSVSkDnheeXl4mzoF65Uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 09:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fd:80:4a:a6:7b:74:e2:73:83:ea:23:12:ff:42:de:1b:27:a8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Jan 7 06:15:55 2026 GMT Not After : Jan 10 09:38:55 2026 GMT Subject: CN=F68B81440CE60A017739471A48951186AC6FC66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:a7:4b:c2:21:49:e4:c2:95:fc:b2:98:fd: 94:3d:7f:5b:ba:6d:bd:b4:fc:54:02:ab:df:d8:76: 47:a6:a4:90:83:f0:35:c2:d0:24:94:0d:43:1f:6f: a1:71:97:c3:78:e2:76:56:66:bf:5f:e5:a1:64:94: 4d:da:ab:d0:d1:3b:79:f9:07:f1:30:0c:04:37:3a: f4:be:f3:78:45:e6:c9:6e:f3:a9:50:1b:8c:c4:03: 89:be:b5:7b:90:25:e3:21:43:4a:03:47:c9:c9:bf: ea:0c:cf:ba:9a:80:79:02:c5:63:f8:f6:32:51:d0: 23:b9:98:a5:c2:ce:d4:ec:33:90:b7:2f:6f:05:de: c2:3d:b7:2c:27:34:f4:dd:16:d4:6b:e6:46:b3:83: d8:37:cd:d6:42:f0:d2:da:49:42:f6:4f:40:0e:26: 29:68:1d:42:04:0f:9d:0f:db:5e:26:7d:04:87:f9: e5:c5:74:ae:fc:af:dc:be:06:a7:4c:a2:e4:6e:50: 6c:55:73:1b:72:9b:99:04:5c:1e:af:2b:f7:24:22: 1c:0c:8a:fb:86:0e:0c:0d:e8:7b:3d:a0:e6:e2:bb: 0d:5e:17:ea:68:5c:3c:84:87:82:47:7d:39:3d:76: 4f:f1:89:05:7c:9d:74:a1:0b:cf:c4:cb:34:a1:30: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8B:81:44:0C:E6:0A:01:77:39:47:1A:48:95:11:86:AC:6F:C6:6D X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:d3:c5:cf:73:91:11:71:ee:f4:9f:fd:e9:8e:94:57:5e: 22:24:f4:d4:75:4a:b9:21:97:57:51:fd:f3:2f:be:f9:2c:c8: 83:39:59:f6:99:70:51:a5:ca:a6:a7:06:74:7b:49:8a:0e:dc: 3a:5c:d5:16:31:a4:83:98:58:ad:df:87:9f:2c:99:cb:d9:37: 16:fa:4d:c5:51:9c:34:68:ad:2f:f5:f5:ad:d6:b4:bd:47:bf: 17:bd:51:2f:83:04:44:53:57:27:e0:80:e3:d3:5e:71:e8:2f: 54:f0:7f:9a:fc:6b:77:e3:f3:c5:6b:5b:da:72:a0:8d:0b:a7: 24:1e:b5:ac:ff:58:21:f3:05:41:1d:dc:18:2d:ec:b7:c6:d3: 79:9e:af:dd:8d:f8:e8:a2:80:a8:f2:7f:cb:fb:4a:90:d9:f9: 87:5b:86:da:76:0b:f4:e6:43:4a:8d:1d:4b:da:85:d9:4f:a8: ac:a2:bb:2d:31:95:46:14:13:e7:e0:16:e7:75:a7:96:3e:d7: 5e:84:08:1c:4d:50:d4:23:54:06:f7:97:58:71:df:34:d7:4d: c8:fe:b4:fa:01:7b:a6:77:4c:0e:9e:53:28:cc:87:0f:de:52: e3:b1:1c:97:77:36:57:55:c6:d7:4d:ce:85:85:7a:82:93:57: 95:7d:fa:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCP2ASqZ7dOJzg+ojEv9C3hsnqIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNjAxMDcwNjE1NTVaFw0yNjAxMTAwOTM4NTVaMDMxMTAvBgNV BAMTKEY2OEI4MTQ0MENFNjBBMDE3NzM5NDcxQTQ4OTUxMTg2QUM2RkM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmadLwiFJ5MKV/LKY/ZQ9f1u6 bb20/FQCq9/YdkempJCD8DXC0CSUDUMfb6Fxl8N44nZWZr9f5aFklE3aq9DRO3n5 B/EwDAQ3OvS+83hF5slu86lQG4zEA4m+tXuQJeMhQ0oDR8nJv+oMz7qagHkCxWP4 9jJR0CO5mKXCztTsM5C3L28F3sI9tywnNPTdFtRr5kazg9g3zdZC8NLaSUL2T0AO JiloHUIED50P214mfQSH+eXFdK78r9y+BqdMouRuUGxVcxtym5kEXB6vK/ckIhwM ivuGDgwN6Hs9oObiuw1eF+poXDyEh4JHfTk9dk/xiQV8nXShC8/EyzShMEkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ouBRAzmCgF3OUcaSJURhqxvxm0wHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa608XPc5ERce70n/3pjpRXXiIk9NR1Srkh l1dR/fMvvvksyIM5WfaZcFGlyqanBnR7SYoO3Dpc1RYxpIOYWK3fh58smcvZNxb6 TcVRnDRorS/19a3WtL1Hvxe9US+DBERTVyfggOPTXnHoL1Twf5r8a3fj88VrW9py oI0LpyQetaz/WCHzBUEd3Bgt7LfG03mer92N+OiigKjyf8v7SpDZ+Ydbhtp2C/Tm Q0qNHUvahdlPqKyiuy0xlUYUE+fgFud1p5Y+116ECBxNUNQjVAb3l1hx3zTXTcj+ tPoBe6Z3TA6eUyjMhw/eUuOxHJd3NldVxtdNzoWFeoKTV5V9+hY= -----END CERTIFICATE-----Generated at Thu Jan 8 17:28:34 2026 by rpki-client