This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: M/U8NJTSC5QUBwtgcSXgKqmCsz1B2tsTnHoXoyb9vQs= Subject key identifier: CC:EA:8C:51:9B:AB:42:E1:A4:D9:53:8B:5E:43:A6:45:C8:DB:07:AB Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 716990E59BCF254F5FC58B7B6290EF05C3168F96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 01DB Signing time: Sat 31 Jan 2026 06:11:18 +0000 Manifest this update: Sat 31 Jan 2026 06:06:18 +0000 Manifest next update: Tue 03 Feb 2026 13:25:18 +0000 Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: eFWnZ259O+K+7QRAcpd/pfyHsY7f3liL3YXlHiPuMS0=) 2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: LI4oNjcJfbE/Yzr7G/KxIrW20ZM4hPrDcoUuP8eNTj0=) 3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: 5qf4yfdtRFxDwTXbS5Sd8oS1lIYlWxfJ25SqGelkTSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:69:90:e5:9b:cf:25:4f:5f:c5:8b:7b:62:90:ef:05:c3:16:8f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Jan 31 06:06:18 2026 GMT Not After : Feb 3 13:25:18 2026 GMT Subject: CN=CCEA8C519BAB42E1A4D9538B5E43A645C8DB07AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:69:00:f0:e0:d7:8a:0e:f9:a2:43:2c:4e: e9:d5:ee:1d:85:09:0c:45:b3:63:b8:19:00:fa:17: 3e:4d:a8:1b:43:96:04:df:f6:51:e6:94:1d:d7:bb: 33:7b:ec:03:94:b5:f9:a1:da:ba:c6:98:3f:26:e8: 82:2b:ad:92:62:0e:d6:00:7b:e7:68:b6:2b:3d:4b: b5:e9:dd:07:cd:2c:6f:81:80:a3:f0:3c:2e:df:1b: 13:ad:b9:2c:50:7b:f7:4c:dd:25:57:ea:7c:a0:e4: a9:5c:d3:13:4f:5c:d1:e7:4c:62:7b:a7:b2:57:1c: 71:08:1a:17:ac:46:94:5a:5c:6f:15:d8:0b:0a:fb: d5:48:5a:75:78:ee:66:85:a0:ad:eb:5a:fd:38:0c: e9:5d:f5:94:81:e7:0b:fe:e4:70:2b:20:15:b8:a1: 6b:22:87:05:d9:57:53:73:28:5c:65:b6:b5:83:8c: 57:0c:49:35:22:6c:d5:1d:3d:d9:89:d8:5b:c6:76: ae:70:9a:91:16:e6:37:f7:44:dd:b4:42:c1:64:30: e4:f9:08:b4:66:d6:b4:96:ec:a9:3c:1d:ee:6b:f1: fa:11:0e:0a:17:58:d0:1c:49:a3:f9:c1:5d:bf:84: e4:fe:9a:c9:8b:c8:4b:e7:83:ab:d2:f7:1b:a0:0c: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:8C:51:9B:AB:42:E1:A4:D9:53:8B:5E:43:A6:45:C8:DB:07:AB X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:4e:bf:34:c6:29:01:36:d4:47:2b:59:85:e0:4f:fe:41:7c: fe:f1:f2:7e:b1:62:39:38:2f:cc:25:8c:7a:81:00:10:a9:79: 86:10:a8:e9:7d:49:64:e1:13:75:a3:64:dc:c0:65:af:d9:ca: b2:32:d6:ef:8b:c6:3a:7f:d4:85:60:4e:7f:d3:f7:03:78:d5: f9:a0:ea:b1:c5:74:d5:78:11:1f:24:79:90:ef:49:26:a1:7e: 0f:24:a4:7e:3d:64:eb:21:bf:c3:97:14:7d:9b:fa:c1:76:45: 3c:f1:78:7f:d6:af:e3:d6:62:76:a6:5d:6b:51:30:2c:ac:e9: 74:ad:da:37:cc:5e:3a:e7:b4:25:a4:aa:d9:62:cc:47:49:4e: 02:42:47:dc:59:72:06:28:d8:17:21:68:3c:0d:83:5f:91:ed: 32:48:ab:2b:13:f6:d8:91:ad:86:47:56:77:84:0f:e1:81:59: 1d:06:41:83:49:c8:b6:81:d1:84:07:2b:79:de:9d:42:83:32: 0e:55:f8:12:67:4c:ed:02:38:f9:f9:77:de:93:72:2a:cf:10: 87:34:46:60:95:c4:04:b0:03:35:cd:17:97:99:72:20:00:0a: 43:43:9b:5b:23:74:73:3b:c1:5d:c4:4a:98:49:d2:04:2a:b5: a7:db:13:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWmQ5ZvPJU9fxYt7YpDvBcMWj5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNjAxMzEwNjA2MThaFw0yNjAyMDMxMzI1MThaMDMxMTAvBgNV BAMTKENDRUE4QzUxOUJBQjQyRTFBNEQ5NTM4QjVFNDNBNjQ1QzhEQjA3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabGkA8ODXig75okMsTunV7h2F CQxFs2O4GQD6Fz5NqBtDlgTf9lHmlB3XuzN77AOUtfmh2rrGmD8m6IIrrZJiDtYA e+dotis9S7Xp3QfNLG+BgKPwPC7fGxOtuSxQe/dM3SVX6nyg5Klc0xNPXNHnTGJ7 p7JXHHEIGhesRpRaXG8V2AsK+9VIWnV47maFoK3rWv04DOld9ZSB5wv+5HArIBW4 oWsihwXZV1NzKFxltrWDjFcMSTUibNUdPdmJ2FvGdq5wmpEW5jf3RN20QsFkMOT5 CLRm1rSW7Kk8He5r8foRDgoXWNAcSaP5wV2/hOT+msmLyEvng6vS9xugDNALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOqMUZurQuGk2VOLXkOmRcjbB6swHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFOvzTGKQE21EcrWYXgT/5BfP7x8n6xYjk4 L8wljHqBABCpeYYQqOl9SWThE3WjZNzAZa/ZyrIy1u+Lxjp/1IVgTn/T9wN41fmg 6rHFdNV4ER8keZDvSSahfg8kpH49ZOshv8OXFH2b+sF2RTzxeH/Wr+PWYnamXWtR MCys6XSt2jfMXjrntCWkqtlizEdJTgJCR9xZcgYo2BchaDwNg1+R7TJIqysT9tiR rYZHVneED+GBWR0GQYNJyLaB0YQHK3nenUKDMg5V+BJnTO0COPn5d96TcirPEIc0 RmCVxASwAzXNF5eZciAACkNDm1sjdHM7wV3ESphJ0gQqtafbE3Q= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:04 2026 by rpki-client