This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: wthQgco4jsGZSUirtStuml4pIyLtrNPQQWOzKVoVuto= Subject key identifier: 6F:72:7D:73:E1:3E:3B:7A:8A:A9:FE:D0:32:B5:71:52:93:3F:3C:1D Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 3685BC3CA5CE4218F8E48A21ABCB65A59AA7C5AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 0302 Signing time: Tue 20 Jan 2026 07:05:13 +0000 Manifest this update: Tue 20 Jan 2026 07:00:13 +0000 Manifest next update: Fri 23 Jan 2026 15:45:13 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 2: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: V1V0YdnHpG/epnakH8GZnXLYT6t+r1TdC4s/tpcaKb4=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 15:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:85:bc:3c:a5:ce:42:18:f8:e4:8a:21:ab:cb:65:a5:9a:a7:c5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Jan 20 07:00:13 2026 GMT Not After : Jan 23 15:45:13 2026 GMT Subject: CN=6F727D73E13E3B7A8AA9FED032B57152933F3C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:2d:07:a7:2e:67:16:b2:6f:98:b5:25:61: 98:93:8a:6a:ba:6d:43:e3:51:1b:b3:f8:38:90:f5: 5b:25:a2:cb:03:aa:fe:90:66:87:c0:73:cf:4d:d7: db:66:fb:0e:2c:24:e4:f4:64:b3:5b:33:90:b1:c6: d3:6f:ed:7c:3c:ab:ac:a9:3b:6c:10:b7:64:9a:18: 00:14:d2:e6:53:d1:35:ae:9b:7d:bf:ec:0e:21:da: b8:34:26:97:40:1a:7f:9a:64:07:4e:97:98:72:90: 15:f4:12:7d:96:6b:63:bf:29:91:46:a2:22:46:4c: a3:b9:53:f5:4f:f4:29:95:69:74:17:27:4e:39:d2: 8e:86:eb:08:55:3c:21:72:c5:cf:05:7b:e3:29:65: a1:5b:34:68:d8:f3:3a:a0:0b:ac:16:3d:9e:74:c6: e9:25:3b:a2:84:09:97:43:4f:4e:b1:17:82:ca:82: 64:da:8a:ec:8c:8f:e8:07:ea:1b:1c:e4:c4:48:d7: e1:57:cc:c8:d2:4b:05:3e:f4:60:ad:84:6e:c5:6b: a5:56:82:23:d1:cc:53:42:e9:c4:76:00:5a:4d:b4: 6e:87:07:fb:93:81:6b:f7:33:77:97:ac:5c:64:e4: 16:88:59:85:37:85:b5:34:da:fb:cb:56:c1:43:27: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:72:7D:73:E1:3E:3B:7A:8A:A9:FE:D0:32:B5:71:52:93:3F:3C:1D X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ec:a7:eb:b6:29:57:c9:81:ea:d8:63:45:14:8f:20:5b:fc: 2e:ae:05:86:16:80:f5:a9:c5:64:7b:7a:4d:dc:22:70:e9:f3: db:02:0f:89:21:9d:eb:a0:14:58:92:cb:39:6c:1e:5e:1d:82: 43:d7:6f:2b:52:a5:05:23:52:a8:c2:fd:6b:a0:3c:d9:4e:86: d9:67:0c:78:2d:c7:58:c9:32:0e:d2:6f:d6:90:dd:d1:62:48: 3c:ae:df:85:7d:3c:ae:00:5a:ee:37:11:45:0b:3e:d8:b3:a0: 84:d2:34:f7:5f:2e:fe:82:3b:c5:b4:93:49:ed:35:cb:83:6e: 23:39:00:09:00:47:32:64:ea:72:f2:7f:49:5e:6b:3a:76:26: b3:da:20:f7:ab:78:e8:19:2a:17:75:ea:84:b7:0a:25:c3:6f: bf:a2:58:02:6f:48:ee:35:f2:44:f3:0b:e8:42:de:75:f9:59: 28:3c:d4:b0:f2:51:75:5a:59:43:ff:62:2e:bf:d8:ed:b1:51: 84:d6:d3:53:f6:c5:92:59:b5:df:35:4c:13:0b:fe:ac:7a:ac: b1:cf:18:44:40:65:f6:92:5e:3b:9b:11:93:12:28:f1:f7:ba: be:2d:08:46:c0:6f:42:cf:03:5d:b4:a7:71:c5:b0:06:55:ac: 0b:db:1d:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoW8PKXOQhj45Iohq8tlpZqnxaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNjAxMjAwNzAwMTNaFw0yNjAxMjMxNTQ1MTNaMDMxMTAvBgNV BAMTKDZGNzI3RDczRTEzRTNCN0E4QUE5RkVEMDMyQjU3MTUyOTMzRjNDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TC0Hpy5nFrJvmLUlYZiTimq6 bUPjURuz+DiQ9VslossDqv6QZofAc89N19tm+w4sJOT0ZLNbM5CxxtNv7Xw8q6yp O2wQt2SaGAAU0uZT0TWum32/7A4h2rg0JpdAGn+aZAdOl5hykBX0En2Wa2O/KZFG oiJGTKO5U/VP9CmVaXQXJ0450o6G6whVPCFyxc8Fe+MpZaFbNGjY8zqgC6wWPZ50 xuklO6KECZdDT06xF4LKgmTaiuyMj+gH6hsc5MRI1+FXzMjSSwU+9GCthG7Fa6VW giPRzFNC6cR2AFpNtG6HB/uTgWv3M3eXrFxk5BaIWYU3hbU02vvLVsFDJ/65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3J9c+E+O3qKqf7QMrVxUpM/PB0wHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbsp+u2KVfJgerYY0UUjyBb/C6uBYYWgPWp xWR7ek3cInDp89sCD4khneugFFiSyzlsHl4dgkPXbytSpQUjUqjC/WugPNlOhtln DHgtx1jJMg7Sb9aQ3dFiSDyu34V9PK4AWu43EUULPtizoITSNPdfLv6CO8W0k0nt NcuDbiM5AAkARzJk6nLyf0leazp2JrPaIPereOgZKhd16oS3CiXDb7+iWAJvSO41 8kTzC+hC3nX5WSg81LDyUXVaWUP/Yi6/2O2xUYTW01P2xZJZtd81TBML/qx6rLHP GERAZfaSXjubEZMSKPH3ur4tCEbAb0LPA120p3HFsAZVrAvbHd8= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:32 2026 by rpki-client