This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: YmPS1n99h9qvDX5ZUy68hRoVoB9tjCdGKv1qRLIo9QU= Subject key identifier: 65:30:0F:30:3E:DC:DC:E5:63:47:CF:75:2B:FF:DF:14:25:E6:78:66 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 587381B165B9CA401187BA1718BEECE4994B0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0256 Signing time: Sat 31 Jan 2026 18:52:28 +0000 Manifest this update: Sat 31 Jan 2026 18:47:28 +0000 Manifest next update: Wed 04 Feb 2026 01:53:28 +0000 Files and hashes: 1: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: iQWBLlqIhDVaQel1mjDud9rhiarI0+EVMzv8EoEyA1M=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: 9oeTCMbeqc+NHjNAK48/OMRyosgftSuB2aiS/HumS7s=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:73:81:b1:65:b9:ca:40:11:87:ba:17:18:be:ec:e4:99:4b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Jan 31 18:47:28 2026 GMT Not After : Feb 4 01:53:28 2026 GMT Subject: CN=65300F303EDCDCE56347CF752BFFDF1425E67866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:9f:f7:64:06:82:75:88:81:29:35:a0:24: 7e:35:96:2e:27:fe:60:bb:1c:c1:50:cf:6f:0f:d1: 10:9c:1d:5f:4f:ad:32:22:bd:49:a5:ce:6d:7f:0b: 4f:7b:eb:50:84:46:47:c4:e3:e4:f6:0e:5c:a6:82: 67:53:70:8f:07:49:ae:6e:50:f4:a7:f4:e4:17:81: 2a:8a:16:8f:70:21:01:4c:82:d8:7a:57:a5:d3:aa: f3:ab:6c:5f:70:3c:48:70:49:78:66:2a:e8:19:91: 06:82:8a:5d:c6:88:32:51:18:c1:cf:99:b1:a9:28: 6b:bb:19:48:fd:6d:08:37:c6:a1:96:0d:ed:ff:d0: a5:e3:ca:27:71:ef:af:4a:83:f8:97:47:ae:f2:22: 46:0d:0d:a5:ba:a1:b5:b9:e1:22:a3:02:53:80:1e: f4:97:0a:a3:b1:80:e9:68:41:35:36:94:ec:7b:8e: e2:c4:b9:d7:e6:99:e9:fe:b9:4b:f0:1a:f5:83:40: 5c:31:88:e2:38:3c:d1:93:b9:45:c8:82:60:a4:2f: f3:f4:78:d3:fe:0d:89:7b:87:e1:6c:5c:fc:82:4a: fe:a3:d4:50:15:37:f8:00:36:8d:2a:23:3e:09:44: a6:44:33:be:f3:a9:ad:83:1b:e7:55:c5:24:4e:67: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:30:0F:30:3E:DC:DC:E5:63:47:CF:75:2B:FF:DF:14:25:E6:78:66 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4b:d5:1b:2d:08:a7:1b:49:f8:7a:67:a7:d9:72:8b:37:12: 46:05:40:0d:fb:c1:38:6e:a5:22:1b:f3:8f:a0:63:ec:e4:f5: 25:16:26:6c:5d:8f:ae:16:94:15:75:a1:ce:07:4f:4a:d5:7c: 01:0e:c8:e0:93:9c:92:ea:3d:91:b3:a6:2d:fa:4f:11:76:16: 38:01:32:d7:47:c6:d2:17:aa:e3:5d:5c:5d:6c:1f:1b:db:d0: 6b:5a:79:9f:e4:61:3e:5b:13:0c:a3:dd:44:ef:67:bb:48:71: ba:41:17:6b:1d:5f:1a:3c:22:27:86:76:3e:77:c3:7f:20:47: 02:4b:20:e1:f4:b7:74:6a:40:f7:d1:ae:15:04:f7:9b:b6:15: b4:5c:0c:b6:e0:93:e3:7a:5b:ad:ce:95:1d:d4:ef:51:e6:f9: cc:c2:92:10:8f:31:57:ab:7e:06:ba:70:81:c3:43:22:35:52: d8:1c:84:86:71:53:61:39:99:b4:c0:cb:20:fb:f6:fd:19:30: b7:ea:18:87:39:23:c5:46:b7:2f:33:91:19:6b:be:64:39:3a: c2:5f:61:ba:6b:60:fc:b9:1b:2d:bc:0a:f7:1c:2a:b9:01:e1: b2:33:0c:6c:e7:20:a3:d0:c7:e1:32:75:d1:8c:34:54:8f:0e: e5:c5:a1:37 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITWHOBsWW5ykARh7oXGL7s5JlLDTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDOUY0NEU2MURENjk1OUFDQThCMEIwQkU5QzUxNkY1QjY4 M0VENzI4MB4XDTI2MDEzMTE4NDcyOFoXDTI2MDIwNDAxNTMyOFowMzExMC8GA1UE AxMoNjUzMDBGMzAzRURDRENFNTYzNDdDRjc1MkJGRkRGMTQyNUU2Nzg2NjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJ3n/dkBoJ1iIEpNaAkfjWWLif+ YLscwVDPbw/REJwdX0+tMiK9SaXObX8LT3vrUIRGR8Tj5PYOXKaCZ1NwjwdJrm5Q 9Kf05BeBKooWj3AhAUyC2HpXpdOq86tsX3A8SHBJeGYq6BmRBoKKXcaIMlEYwc+Z sakoa7sZSP1tCDfGoZYN7f/QpePKJ3Hvr0qD+JdHrvIiRg0NpbqhtbnhIqMCU4Ae 9JcKo7GA6WhBNTaU7HuO4sS51+aZ6f65S/Aa9YNAXDGI4jg80ZO5RciCYKQv8/R4 0/4NiXuH4Wxc/IJK/qPUUBU3+AA2jSojPglEpkQzvvOprYMb51XFJE5n1AkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRlMA8wPtzc5WNHz3Ur/98UJeZ4ZjAfBgNVHSME GDAWgBTJ9E5h3WlZrKiwsL6cUW9baD7XKDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBi YTBiOGY4LTRmY2YtNGI5Yi05Nzk0LWNkM2I0ZTQwNmVhYi8wL0M5RjQ0RTYxREQ2 OTU5QUNBOEIwQjBCRTlDNTE2RjVCNjgzRUQ3MjguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DOUY0NEU2MURENjk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VE NzI4LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8wYmEwYjhmOC00ZmNmLTRiOWItOTc5 NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURENjk1OUFDQThCMEIwQkU5QzUxNkY1 QjY4M0VENzI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAiUvVGy0IpxtJ+Hpnp9lyizcSRgVADfvBOG6l Ihvzj6Bj7OT1JRYmbF2PrhaUFXWhzgdPStV8AQ7I4JOckuo9kbOmLfpPEXYWOAEy 10fG0heq411cXWwfG9vQa1p5n+RhPlsTDKPdRO9nu0hxukEXax1fGjwiJ4Z2PnfD fyBHAksg4fS3dGpA99GuFQT3m7YVtFwMtuCT43pbrc6VHdTvUeb5zMKSEI8xV6t+ BrpwgcNDIjVS2ByEhnFTYTmZtMDLIPv2/Rkwt+oYhzkjxUa3LzORGWu+ZDk6wl9h umtg/LkbLbwK9xwquQHhsjMMbOcgo9DH4TJ10Yw0VI8O5cWhNw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:25 2026 by rpki-client