This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: VoIzhs01uMAqJ9+VBnwH98hhQ96XFH8PXXojpRlsgcI= Subject key identifier: A8:F7:C8:8F:8C:43:AB:F6:D6:45:20:72:80:14:0C:A5:1A:F7:04:C7 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 39C2E6EE27EA4EB75E164DDF3F5B061CA07E650D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 0205 Signing time: Sun 01 Feb 2026 20:01:23 +0000 Manifest this update: Sun 01 Feb 2026 19:56:23 +0000 Manifest next update: Thu 05 Feb 2026 03:36:23 +0000 Files and hashes: 1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=) 2: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=) 3: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: Ul/nsaP3Pioy3khkq9E4XK+dAR8A3ASWgk2DxhqINHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c2:e6:ee:27:ea:4e:b7:5e:16:4d:df:3f:5b:06:1c:a0:7e:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Feb 1 19:56:23 2026 GMT Not After : Feb 5 03:36:23 2026 GMT Subject: CN=A8F7C88F8C43ABF6D645207280140CA51AF704C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:9a:13:b5:11:4d:63:35:a9:8c:06:c4:e2: f3:04:e5:38:72:98:09:04:08:c5:c6:fa:a9:b5:a6: 50:de:55:17:4b:b9:c5:d8:27:ba:e0:67:4d:79:da: 05:4d:00:a0:ba:e2:02:24:3e:ed:c9:77:a8:da:a7: 30:47:d9:84:ae:53:90:98:5b:2d:46:8f:b2:85:11: 13:f2:5c:75:b3:25:87:00:4d:d3:4d:e1:7b:77:04: c2:38:ef:a4:91:45:ed:fe:40:de:6f:3f:15:03:c8: 72:ce:6b:dc:5e:1f:cc:a2:30:2c:61:ba:cc:d0:b5: 6c:04:52:e6:d3:2c:8f:77:91:e1:f3:08:d5:e9:d4: 0b:8a:53:a2:b9:7d:9c:f5:a6:fd:e2:40:ee:79:da: 66:7e:7d:37:8a:0d:f4:53:13:6e:13:a1:2e:cb:37: e5:54:7a:e7:7e:8e:19:9e:e3:ac:ff:1e:32:f1:9f: a5:83:2a:61:bf:a8:a9:47:4f:e0:b5:9a:7e:2f:9d: 9d:b4:65:23:03:51:ef:1c:3c:6d:84:23:8b:29:5e: 29:5b:fa:e9:64:6f:32:3d:1f:53:22:93:b4:03:c0: ef:f6:14:2b:07:6d:ac:d1:7e:5b:df:46:9e:f5:41: 0e:e1:13:f3:db:21:16:b8:7e:66:8b:13:a4:f6:51: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:C8:8F:8C:43:AB:F6:D6:45:20:72:80:14:0C:A5:1A:F7:04:C7 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:74:ff:74:3a:be:13:46:89:03:83:39:3b:a2:e1:11:ee:b0: bb:0c:8d:d1:f6:ef:f4:c6:31:4f:dd:c9:28:13:87:57:5f:71: 76:57:af:05:82:cf:af:56:a8:f0:91:26:1b:0d:f2:ef:72:8f: 05:6b:33:fa:81:c5:7c:6b:f5:4d:e6:08:5e:6b:b7:ca:65:9f: e0:24:49:e1:d1:8c:c1:14:1d:69:0a:1f:0f:ef:e9:2f:c4:3b: 76:55:79:cd:e4:00:88:a9:db:33:99:ee:d8:be:e8:51:c5:3e: bd:c7:91:67:d7:5c:77:75:ca:d1:f0:cd:29:45:bd:cf:be:21: 49:87:53:14:e6:0c:e8:af:e8:1c:46:54:3b:70:80:13:c1:cc: 43:58:14:66:fa:a9:a0:c6:a5:92:83:ca:ad:3a:43:05:81:41: a4:46:7a:9e:1f:3e:44:2b:76:6b:3f:e8:8c:2e:52:bd:62:6c: 67:b9:46:76:ec:89:38:b4:a6:f6:03:f1:84:c6:99:cb:e8:85: 97:5f:af:f0:5a:be:1d:a7:78:b7:75:20:79:19:96:48:9c:86: fa:e4:17:2f:97:03:3d:cc:a1:83:9a:7d:9f:c6:6b:cc:35:e4: 76:32:2a:1a:dc:6a:50:7a:32:19:8a:c9:7a:68:20:6c:0e:82: cd:32:a1:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcLm7ifqTrdeFk3fP1sGHKB+ZQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNjAyMDExOTU2MjNaFw0yNjAyMDUwMzM2MjNaMDMxMTAvBgNV BAMTKEE4RjdDODhGOEM0M0FCRjZENjQ1MjA3MjgwMTQwQ0E1MUFGNzA0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC585oTtRFNYzWpjAbE4vME5Thy mAkECMXG+qm1plDeVRdLucXYJ7rgZ0152gVNAKC64gIkPu3Jd6japzBH2YSuU5CY Wy1Gj7KFERPyXHWzJYcATdNN4Xt3BMI476SRRe3+QN5vPxUDyHLOa9xeH8yiMCxh uszQtWwEUubTLI93keHzCNXp1AuKU6K5fZz1pv3iQO552mZ+fTeKDfRTE24ToS7L N+VUeud+jhme46z/HjLxn6WDKmG/qKlHT+C1mn4vnZ20ZSMDUe8cPG2EI4spXilb +ulkbzI9H1Mik7QDwO/2FCsHbazRflvfRp71QQ7hE/PbIRa4fmaLE6T2Ue8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqPfIj4xDq/bWRSBygBQMpRr3BMcwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN0/3Q6vhNGiQODOTui4RHusLsMjdH27/TG MU/dySgTh1dfcXZXrwWCz69WqPCRJhsN8u9yjwVrM/qBxXxr9U3mCF5rt8pln+Ak SeHRjMEUHWkKHw/v6S/EO3ZVec3kAIip2zOZ7ti+6FHFPr3HkWfXXHd1ytHwzSlF vc++IUmHUxTmDOiv6BxGVDtwgBPBzENYFGb6qaDGpZKDyq06QwWBQaRGep4fPkQr dms/6IwuUr1ibGe5RnbsiTi0pvYD8YTGmcvohZdfr/Bavh2neLd1IHkZlkichvrk Fy+XAz3MoYOafZ/Ga8w15HYyKhrcalB6MhmKyXpoIGwOgs0yoSA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:04 2026 by rpki-client