This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: yQZnygwbVqVM7RNBjm2I7xWse7Yiruc0g3VxUeBHDsM= Subject key identifier: FF:65:2D:60:44:74:37:FF:E0:34:D9:40:43:2C:48:59:4E:C0:8A:1F Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 1E60B34509CDBF3A6787EBD17424BAAE3CDA3B4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 053D Signing time: Thu 08 Jan 2026 04:10:56 +0000 Manifest this update: Thu 08 Jan 2026 04:05:56 +0000 Manifest next update: Sun 11 Jan 2026 06:53:56 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 5: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: 8pzznF7ia6gnLkqjbbBh+TnIim0OYFu2DuggDU6WQC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 06:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:60:b3:45:09:cd:bf:3a:67:87:eb:d1:74:24:ba:ae:3c:da:3b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Jan 8 04:05:56 2026 GMT Not After : Jan 11 06:53:56 2026 GMT Subject: CN=FF652D60447437FFE034D940432C48594EC08A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:2d:c2:86:18:f2:ac:d7:ef:a6:9c:85:01: 6c:ca:cf:79:c6:d5:39:83:24:4c:70:2f:ad:92:bf: 13:2b:3a:7b:b1:ad:a9:4b:a0:0c:8f:2c:06:1f:ee: 26:af:80:60:fe:c2:93:73:e1:22:ad:23:e4:37:1d: f4:ce:0d:40:ab:51:6d:b6:d9:8b:b6:65:ec:4b:3b: 2a:e8:8d:df:30:2d:f0:11:20:05:67:89:8c:18:ce: 1a:4d:9f:3a:61:71:7c:c4:86:d2:19:75:e7:19:4b: c8:b3:b1:d9:af:30:4b:6f:4f:4b:0a:61:84:35:fd: eb:aa:78:33:ee:3c:65:0f:c4:67:7a:85:6b:83:1e: 2c:3f:6f:0d:13:12:07:29:9b:c2:29:11:78:f9:ae: e5:45:61:95:a6:c2:da:87:60:7b:af:94:69:ed:14: 14:95:59:55:51:3f:47:83:a5:49:49:5b:92:6c:3f: 6a:aa:73:36:ff:54:44:e9:7a:d8:3d:8b:15:c8:4c: f8:63:76:48:3a:cc:29:00:5a:48:2a:a1:26:b9:25: fa:02:7e:58:75:5e:73:3f:b1:3a:c7:ad:8b:57:78: 29:f6:8b:bb:0f:50:67:71:5f:5f:76:6a:01:e0:60: 91:cd:11:a9:0d:79:c9:f8:1c:1e:4f:10:35:9b:7c: f2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:2D:60:44:74:37:FF:E0:34:D9:40:43:2C:48:59:4E:C0:8A:1F X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:e6:55:0c:1e:89:f9:10:56:24:44:1f:0a:83:f1:a2:7a: 07:80:f2:57:d3:17:48:cb:f5:29:e1:c0:e3:05:1f:cb:27:92: 76:7e:3c:e4:bd:9e:2c:d7:28:52:52:8d:e8:8b:33:c0:7f:ff: 04:7f:f0:20:18:3a:e4:75:40:16:a4:57:6c:39:6f:4e:39:0e: ec:47:45:45:8e:31:2b:fd:59:8f:d7:8b:8f:b3:e7:e5:c9:bb: 5d:0c:b8:6b:f8:8c:a1:e4:6f:04:65:71:84:df:cf:48:7d:e5: 07:c7:de:c8:82:e0:56:5c:d0:96:e1:01:d0:52:8f:a1:8a:d4: c2:06:31:b7:33:33:7e:49:0a:13:48:0c:57:79:54:72:ff:43: 44:ff:57:3a:82:88:91:05:0b:75:3d:34:bd:cf:a6:c6:87:de: ca:4f:3d:33:2e:60:e9:7e:1e:24:38:ce:dd:1f:e3:1d:7e:1c: 67:60:16:2e:5a:62:c6:6f:78:bd:01:45:7c:a7:4f:c7:cd:7d: ed:66:c7:db:2b:65:83:bf:53:39:55:a5:1c:16:32:4d:e3:55: b1:23:fe:dd:fb:12:9f:99:01:fc:ee:9f:e6:10:77:8b:18:e4: 02:5d:42:80:d9:7a:8c:b7:70:ea:c5:00:39:d6:97:05:64:76: a1:15:2d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmCzRQnNvzpnh+vRdCS6rjzaO0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNjAxMDgwNDA1NTZaFw0yNjAxMTEwNjUzNTZaMDMxMTAvBgNV BAMTKEZGNjUyRDYwNDQ3NDM3RkZFMDM0RDk0MDQzMkM0ODU5NEVDMDhBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5i3ChhjyrNfvppyFAWzKz3nG 1TmDJExwL62SvxMrOnuxralLoAyPLAYf7iavgGD+wpNz4SKtI+Q3HfTODUCrUW22 2Yu2ZexLOyrojd8wLfARIAVniYwYzhpNnzphcXzEhtIZdecZS8izsdmvMEtvT0sK YYQ1/euqeDPuPGUPxGd6hWuDHiw/bw0TEgcpm8IpEXj5ruVFYZWmwtqHYHuvlGnt FBSVWVVRP0eDpUlJW5JsP2qqczb/VETpetg9ixXITPhjdkg6zCkAWkgqoSa5JfoC flh1XnM/sTrHrYtXeCn2i7sPUGdxX192agHgYJHNEakNecn4HB5PEDWbfPItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/2UtYER0N//gNNlAQyxIWU7Aih8wHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN85lUMHon5EFYkRB8Kg/GiegeA8lfTF0jL 9SnhwOMFH8snknZ+POS9nizXKFJSjeiLM8B//wR/8CAYOuR1QBakV2w5b045DuxH RUWOMSv9WY/Xi4+z5+XJu10MuGv4jKHkbwRlcYTfz0h95QfH3siC4FZc0JbhAdBS j6GK1MIGMbczM35JChNIDFd5VHL/Q0T/VzqCiJEFC3U9NL3PpsaH3spPPTMuYOl+ HiQ4zt0f4x1+HGdgFi5aYsZveL0BRXynT8fNfe1mx9srZYO/UzlVpRwWMk3jVbEj /t37Ep+ZAfzun+YQd4sY5AJdQoDZeoy3cOrFADnWlwVkdqEVLdo= -----END CERTIFICATE-----Generated at Fri Jan 9 15:19:37 2026 by rpki-client