This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: iZBTbyvOoOYKT6ddUEhidlTIGHOJ6aLM+1dPW42Yd70= Subject key identifier: 9E:8D:8E:9D:3E:08:95:EE:BA:80:71:A7:A5:9E:52:11:91:2D:7D:D8 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 63DBC4981CDB298A03507D56035E6BD437025D1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0289 Signing time: Sat 31 Jan 2026 08:40:42 +0000 Manifest this update: Sat 31 Jan 2026 08:35:42 +0000 Manifest next update: Tue 03 Feb 2026 15:01:42 +0000 Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: UUXX68rEdiUGXCvzYJC9dZezXPPq8jHzXrRKLCWiOwM=) 2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:db:c4:98:1c:db:29:8a:03:50:7d:56:03:5e:6b:d4:37:02:5d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Jan 31 08:35:42 2026 GMT Not After : Feb 3 15:01:42 2026 GMT Subject: CN=9E8D8E9D3E0895EEBA8071A7A59E5211912D7DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:49:36:56:40:42:60:d1:c7:4c:6b:13:0b: 3e:4c:e6:18:a6:e9:46:bf:1f:61:2d:54:a6:8f:11: ee:5b:4b:1f:1a:8e:61:9a:ce:f0:eb:76:8c:33:00: 33:4f:70:d0:94:e2:49:08:ff:d6:b5:3e:f2:f2:77: 85:e8:50:4e:5f:09:ba:99:d9:82:78:4c:0e:9e:2e: 0e:c5:97:42:bd:6a:0a:77:3d:da:9b:48:c3:08:37: 20:6a:7f:02:87:81:3a:6f:99:c2:fc:9c:c9:66:23: 73:ae:13:b3:90:20:85:1a:ac:39:de:89:1f:9d:e3: 3c:24:d5:41:96:fd:2e:18:ca:a0:1d:27:50:47:86: f6:67:14:f5:18:68:05:e0:8b:c0:2a:21:b2:7f:6c: 1a:ec:28:c5:a5:7b:af:32:f0:b4:55:74:8e:7f:ea: 0b:a9:3b:a6:76:d4:25:dd:e1:b4:84:83:6e:b8:c9: a7:24:df:38:38:97:70:10:52:a0:49:af:4d:ef:d3: 8a:f3:6c:3a:59:01:6c:df:46:78:44:de:7e:99:1b: 8a:61:6c:35:7f:3d:17:42:73:4d:94:8c:23:09:8d: 52:d2:30:96:63:40:58:6d:54:ff:66:ce:61:a7:df: 93:43:a1:41:ad:7e:59:3b:87:6c:96:99:25:93:e5: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:8E:9D:3E:08:95:EE:BA:80:71:A7:A5:9E:52:11:91:2D:7D:D8 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bc:84:81:80:a8:7e:10:39:42:8e:4c:78:56:5c:14:bc:fe: 4e:29:23:25:c2:04:01:3f:db:68:e0:1a:c3:d1:19:98:ab:b6: 6e:21:64:6b:8d:a3:8f:09:ca:19:8d:4c:d3:ed:b6:8b:9f:c2: d1:50:45:93:c7:d9:6a:ea:72:28:23:fc:3e:3e:31:bd:93:92: ea:7b:1e:00:9c:57:f8:62:53:16:fd:84:cc:a4:66:5c:24:c0: 5d:be:68:7f:75:c8:a5:f8:d9:49:4e:3a:37:65:78:65:ca:97: 0e:4a:9b:76:fe:5b:ff:e8:28:c1:28:29:52:50:8a:c3:fc:63: 9d:8e:8b:1e:cf:c3:73:35:44:4b:a7:5b:63:c9:ff:fa:c4:f6: 64:5e:35:e3:4b:cb:16:72:3c:bc:60:96:24:37:3b:6c:59:01: b5:f1:1a:ad:aa:71:5a:51:1f:75:40:b6:49:84:de:74:a9:31: 6f:85:de:69:21:a1:5e:32:3f:41:24:8a:82:05:6a:ed:76:e1: d0:6d:42:66:88:10:75:86:48:26:93:72:4f:10:37:f7:08:20: c4:ed:94:7d:ae:c1:95:50:af:b0:7d:ef:f2:0b:98:40:53:a8: 03:f1:c5:a3:44:19:35:1e:8c:a3:af:16:9e:ae:dd:5e:ba:d8: e7:b3:b9:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9vEmBzbKYoDUH1WA15r1DcCXR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNjAxMzEwODM1NDJaFw0yNjAyMDMxNTAxNDJaMDMxMTAvBgNV BAMTKDlFOEQ4RTlEM0UwODk1RUVCQTgwNzFBN0E1OUU1MjExOTEyRDdERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZ0k2VkBCYNHHTGsTCz5M5him 6Ua/H2EtVKaPEe5bSx8ajmGazvDrdowzADNPcNCU4kkI/9a1PvLyd4XoUE5fCbqZ 2YJ4TA6eLg7Fl0K9agp3PdqbSMMINyBqfwKHgTpvmcL8nMlmI3OuE7OQIIUarDne iR+d4zwk1UGW/S4YyqAdJ1BHhvZnFPUYaAXgi8AqIbJ/bBrsKMWle68y8LRVdI5/ 6gupO6Z21CXd4bSEg264yack3zg4l3AQUqBJr03v04rzbDpZAWzfRnhE3n6ZG4ph bDV/PRdCc02UjCMJjVLSMJZjQFhtVP9mzmGn35NDoUGtflk7h2yWmSWT5SPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUno2OnT4Ile66gHGnpZ5SEZEtfdgwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABS8hIGAqH4QOUKOTHhWXBS8/k4pIyXCBAE/ 22jgGsPRGZirtm4hZGuNo48JyhmNTNPttoufwtFQRZPH2Wrqcigj/D4+Mb2Tkup7 HgCcV/hiUxb9hMykZlwkwF2+aH91yKX42UlOOjdleGXKlw5Km3b+W//oKMEoKVJQ isP8Y52Oix7Pw3M1REunW2PJ//rE9mReNeNLyxZyPLxgliQ3O2xZAbXxGq2qcVpR H3VAtkmE3nSpMW+F3mkhoV4yP0EkioIFau124dBtQmaIEHWGSCaTck8QN/cIIMTt lH2uwZVQr7B97/ILmEBTqAPxxaNEGTUejKOvFp6u3V662OezuYw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:15 2026 by rpki-client