This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: LnrTdk9cxVICTVk/eJa/8Se0eJb5t+zgt7erqzJBAz8= Subject key identifier: E6:88:51:55:DA:0E:4B:DD:10:87:F0:8E:56:37:54:D7:34:E9:E1:1D Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 4E9B35B1CFA53E799FD18C8A8D5318574C41B44C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 02AB Signing time: Tue 27 Jan 2026 01:51:56 +0000 Manifest this update: Tue 27 Jan 2026 01:46:56 +0000 Manifest next update: Fri 30 Jan 2026 03:27:56 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) 2: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) 3: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: FP7M51tnomfVYzs4B23Bck9n6h8iZ+qjl74yU2zl9JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9b:35:b1:cf:a5:3e:79:9f:d1:8c:8a:8d:53:18:57:4c:41:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Jan 27 01:46:56 2026 GMT Not After : Jan 30 03:27:56 2026 GMT Subject: CN=E6885155DA0E4BDD1087F08E563754D734E9E11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:9a:3c:03:57:5f:8e:20:a9:e5:3c:c0:aa: 2a:3d:fa:42:23:c4:f7:97:35:2f:ba:8d:b8:f3:f7: 8a:36:f9:73:46:92:38:1a:74:b0:87:54:ce:a1:85: a1:79:ea:9c:ec:6f:07:35:4e:ca:14:45:7e:8f:4c: a7:30:38:3c:ed:57:0a:94:f1:91:22:f8:a6:46:d6: b8:11:2e:b3:48:96:0a:78:05:54:8b:bd:33:2f:fc: 3a:06:f3:28:5a:df:8c:39:ff:0e:2d:ac:ef:c0:0b: c4:8b:75:0c:0a:34:c8:dd:fb:9a:6c:41:67:cc:c4: 1c:f3:49:ac:73:ab:cb:d0:ff:a1:85:7e:33:88:1d: 7f:1a:a4:0a:ff:ca:3e:9b:00:6c:fa:ea:f6:a4:ce: 7f:98:12:5d:84:99:6a:54:79:76:4d:b7:66:87:3b: f5:97:6d:a1:ef:70:32:e8:6f:9a:d1:21:47:ee:3c: 08:4a:4d:08:68:3c:00:73:b8:46:9e:2d:5a:1b:0a: c0:69:fe:56:5f:45:43:20:9d:a6:c1:34:d5:f0:0e: c6:c0:42:c3:4e:b2:53:a6:a8:15:7b:0d:70:c3:38: d7:de:46:6d:a2:86:e6:eb:5a:ae:8e:e3:75:39:42: 9b:0a:60:31:f3:79:ee:ad:f0:4c:a1:af:3e:98:fe: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:88:51:55:DA:0E:4B:DD:10:87:F0:8E:56:37:54:D7:34:E9:E1:1D X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:93:73:82:11:4f:cf:a1:46:b8:eb:0e:48:0c:fa:d7:87:d5: c9:29:a8:e8:41:fd:ea:af:df:08:83:26:84:a4:e5:0b:57:6a: b3:9d:a0:8b:c7:6c:e4:4e:85:b1:dd:1e:3b:4c:d8:cf:3c:8f: 06:8c:18:0e:79:96:e5:e8:8f:e7:40:0f:db:ba:c9:dd:3c:0c: f1:0d:0e:72:d0:4c:e4:db:c0:0b:83:db:d5:b6:2a:4d:07:c7: a0:08:c7:8c:9a:c5:6c:e4:ac:12:9d:61:8c:6f:04:d4:a9:29: 73:e1:66:6a:fa:fe:f2:98:74:ad:eb:18:b6:58:0f:77:c4:a3: 01:f0:33:94:40:d8:ee:dc:3a:f2:23:05:7e:2b:00:71:cd:c0: 7a:5d:ee:95:a2:9b:e9:58:7d:a6:ae:51:70:f1:96:03:64:66: aa:91:ae:8b:14:57:07:18:d3:61:38:b1:e4:2e:d5:f4:ba:6b: 98:d1:a0:8c:a1:49:9f:bf:38:37:50:f6:a5:34:19:8b:a2:d5: ee:81:72:19:6d:03:68:2d:d5:e7:40:44:68:a0:39:ee:c9:3a: 5e:7f:5b:76:4c:18:60:fa:5f:8a:fb:42:73:33:45:1e:3a:91: 2c:a3:07:cb:82:6a:fa:5b:d6:3b:90:63:0c:8e:53:da:5e:57: cb:6c:c5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTps1sc+lPnmf0YyKjVMYV0xBtEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNjAxMjcwMTQ2NTZaFw0yNjAxMzAwMzI3NTZaMDMxMTAvBgNV BAMTKEU2ODg1MTU1REEwRTRCREQxMDg3RjA4RTU2Mzc1NEQ3MzRFOUUxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaa5o8A1dfjiCp5TzAqio9+kIj xPeXNS+6jbjz94o2+XNGkjgadLCHVM6hhaF56pzsbwc1TsoURX6PTKcwODztVwqU 8ZEi+KZG1rgRLrNIlgp4BVSLvTMv/DoG8yha34w5/w4trO/AC8SLdQwKNMjd+5ps QWfMxBzzSaxzq8vQ/6GFfjOIHX8apAr/yj6bAGz66vakzn+YEl2EmWpUeXZNt2aH O/WXbaHvcDLob5rRIUfuPAhKTQhoPABzuEaeLVobCsBp/lZfRUMgnabBNNXwDsbA QsNOslOmqBV7DXDDONfeRm2ihubrWq6O43U5QpsKYDHzee6t8Eyhrz6Y/olBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ohRVdoOS90Qh/COVjdU1zTp4R0wHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaTc4IRT8+hRrjrDkgM+teH1ckpqOhB/eqv 3wiDJoSk5QtXarOdoIvHbOROhbHdHjtM2M88jwaMGA55luXoj+dAD9u6yd08DPEN DnLQTOTbwAuD29W2Kk0Hx6AIx4yaxWzkrBKdYYxvBNSpKXPhZmr6/vKYdK3rGLZY D3fEowHwM5RA2O7cOvIjBX4rAHHNwHpd7pWim+lYfaauUXDxlgNkZqqRrosUVwcY 02E4seQu1fS6a5jRoIyhSZ+/ODdQ9qU0GYui1e6BchltA2gt1edARGigOe7JOl5/ W3ZMGGD6X4r7QnMzRR46kSyjB8uCavpb1juQYwyOU9peV8tsxQ4= -----END CERTIFICATE-----Generated at Wed Jan 28 18:41:14 2026 by rpki-client