This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: +eJEnqc0+wvY/cqgP/siWKH/4gXANYoFNNRdm5S0OUA= Subject key identifier: 38:C4:75:D4:15:E5:15:5D:7C:A3:6E:1F:18:D6:01:A0:4B:92:E7:4C Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 2A07B00F6C6A794454ECC4B17932C19551AE5CB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 04E9 Signing time: Sun 01 Feb 2026 16:40:39 +0000 Manifest this update: Sun 01 Feb 2026 16:35:39 +0000 Manifest next update: Wed 04 Feb 2026 20:10:39 +0000 Files and hashes: 1: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: vO9En9EgbxDnyI/Kqi5Ln37XytMK4FKhWaNGfrV8pMo=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: iAHJXG4K6+3EiEQSytu2MEfHZRYK05stg/Yr8f+Zlv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 20:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:07:b0:0f:6c:6a:79:44:54:ec:c4:b1:79:32:c1:95:51:ae:5c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Feb 1 16:35:39 2026 GMT Not After : Feb 4 20:10:39 2026 GMT Subject: CN=38C475D415E5155D7CA36E1F18D601A04B92E74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:18:40:b1:99:d7:04:b4:3b:be:49:cb:28: 83:5d:34:35:ff:57:fc:3e:1f:0c:90:aa:88:9c:8e: 55:52:6d:a9:15:50:a1:1c:81:1e:b2:e5:16:4f:f4: 6e:b8:64:47:39:21:2a:c4:e9:0b:56:eb:3d:09:ed: bf:af:f3:5f:14:ab:41:c9:be:f7:45:9f:6d:68:df: 1c:3c:59:74:1f:b3:96:a3:55:c2:bf:51:03:9c:e3: a0:23:b1:8b:e0:58:02:43:c9:a2:7c:9f:7f:74:5a: a7:7f:b0:e8:7b:58:00:8f:50:fc:f5:4d:43:dd:ff: c5:9c:66:52:56:a5:b5:23:ad:14:b1:29:9d:36:59: b1:53:27:4c:0f:b0:5f:e0:f7:d2:7e:de:ff:5d:50: 79:59:51:3f:a2:2e:51:e6:f4:2a:78:c9:78:1c:e8: 1a:2d:ec:b2:69:ff:a0:47:74:e7:af:6d:7a:55:c3: 45:87:27:e5:04:a0:8b:ad:05:ac:7c:7e:69:9c:7f: 5f:46:6d:21:84:da:67:bc:c4:3e:10:8c:f7:92:ed: 97:93:da:41:fc:95:4c:d3:45:cd:53:80:d4:c8:96: f1:8c:35:52:62:81:1a:4a:5d:9f:1c:75:ae:c1:e4: 3e:fd:fb:3d:44:13:c0:89:13:37:1b:d5:04:7e:20: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C4:75:D4:15:E5:15:5D:7C:A3:6E:1F:18:D6:01:A0:4B:92:E7:4C X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ac:26:8e:5f:77:80:4f:5d:e6:4d:5d:11:58:44:1c:ef:ed: ba:86:b3:ef:9e:13:1d:12:cc:a0:58:5a:64:e0:5a:48:a2:46: 5e:85:98:85:eb:1a:6c:9d:29:75:58:81:5f:b6:20:21:c2:73: ce:e4:66:5e:56:da:99:86:55:00:2d:bd:84:c9:97:fd:7a:fe: f4:77:fc:aa:36:a5:82:c7:91:38:18:6f:34:e1:71:83:37:ad: 88:d1:27:e9:bb:67:7e:95:3e:e9:bf:1c:21:05:38:6c:8d:b1: 4e:93:65:ce:ae:1e:e5:b5:85:88:d7:e3:ed:dc:e8:6e:37:9f: 66:3d:a3:cb:f9:47:32:6b:1f:c6:0d:22:d1:c9:8b:5a:52:71: c2:ea:11:ae:5f:8b:a2:3e:85:59:6d:aa:ae:71:fd:bc:0f:c2: be:4d:4a:11:88:5d:db:fd:aa:f4:d1:82:d7:3f:bf:20:3f:eb: ba:8b:53:79:c1:3c:d7:14:af:a1:21:38:81:f8:a5:76:c3:9d: d4:19:6e:30:5d:e7:d1:4d:9e:eb:2b:ae:82:df:e9:1a:42:32: 71:9c:bc:2b:2b:25:1f:4c:4d:63:7e:83:d7:3d:17:c2:cc:d1: 0a:5d:d2:fc:3f:8a:b9:3e:a8:4b:77:6d:01:7f:6d:f2:09:a5: f9:7f:de:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgewD2xqeURU7MSxeTLBlVGuXLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNjAyMDExNjM1MzlaFw0yNjAyMDQyMDEwMzlaMDMxMTAvBgNV BAMTKDM4QzQ3NUQ0MTVFNTE1NUQ3Q0EzNkUxRjE4RDYwMUEwNEI5MkU3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ5hhAsZnXBLQ7vknLKINdNDX/ V/w+HwyQqoicjlVSbakVUKEcgR6y5RZP9G64ZEc5ISrE6QtW6z0J7b+v818Uq0HJ vvdFn21o3xw8WXQfs5ajVcK/UQOc46AjsYvgWAJDyaJ8n390Wqd/sOh7WACPUPz1 TUPd/8WcZlJWpbUjrRSxKZ02WbFTJ0wPsF/g99J+3v9dUHlZUT+iLlHm9Cp4yXgc 6Bot7LJp/6BHdOevbXpVw0WHJ+UEoIutBax8fmmcf19GbSGE2me8xD4QjPeS7ZeT 2kH8lUzTRc1TgNTIlvGMNVJigRpKXZ8cda7B5D79+z1EE8CJEzcb1QR+INYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOMR11BXlFV18o24fGNYBoEuS50wwHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6sJo5fd4BPXeZNXRFYRBzv7bqGs++eEx0S zKBYWmTgWkiiRl6FmIXrGmydKXVYgV+2ICHCc87kZl5W2pmGVQAtvYTJl/16/vR3 /Ko2pYLHkTgYbzThcYM3rYjRJ+m7Z36VPum/HCEFOGyNsU6TZc6uHuW1hYjX4+3c 6G43n2Y9o8v5RzJrH8YNItHJi1pSccLqEa5fi6I+hVltqq5x/bwPwr5NShGIXdv9 qvTRgtc/vyA/67qLU3nBPNcUr6EhOIH4pXbDndQZbjBd59FNnusrroLf6RpCMnGc vCsrJR9MTWN+g9c9F8LM0Qpd0vw/irk+qEt3bQF/bfIJpfl/3hA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:38 2026 by rpki-client