This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: zoBJ5LX7hxwkqjeOBgoQviq+TLyKUD6fdNVPZYx3vjE= Subject key identifier: 90:43:87:AE:DF:1A:AD:4A:82:CF:62:FA:79:AB:06:A5:59:BA:FC:85 Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 012BA35040E231FFDAF6AFD66280360327DD9908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: 0154 Signing time: Sat 31 Jan 2026 23:31:08 +0000 Manifest this update: Sat 31 Jan 2026 23:26:08 +0000 Manifest next update: Wed 04 Feb 2026 03:43:08 +0000 Files and hashes: 1: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: tNZl730piDyzGMNN0/H8qExFphTc3gd+KlMzFdwB/qk=) 2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: FVR7OXRQ9lsqccYbbruNBCZHbMSoocj8hgbL/LfCNK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2b:a3:50:40:e2:31:ff:da:f6:af:d6:62:80:36:03:27:dd:99:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Jan 31 23:26:08 2026 GMT Not After : Feb 4 03:43:08 2026 GMT Subject: CN=904387AEDF1AAD4A82CF62FA79AB06A559BAFC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:f7:53:19:cc:60:a4:7e:09:3d:9d:68:d1: bb:d2:bf:b6:7a:02:42:6a:fa:5c:2d:39:90:f5:75: a6:4e:34:46:d0:01:26:76:87:99:df:dc:1f:87:dc: c8:73:b4:94:17:58:79:ed:b5:a9:28:47:9d:7f:82: 5d:83:ac:bb:0a:d3:b0:2b:43:70:64:b1:f5:b7:9b: 94:a6:30:72:ad:5d:ef:80:04:f1:a2:ca:9b:36:7c: 69:e9:55:94:98:45:76:2d:0f:f8:02:cc:cf:50:af: 09:82:40:30:b1:88:f9:0f:38:95:0e:3a:fa:c5:11: 22:9a:0e:d4:f6:16:b3:2d:a5:42:94:ca:b3:7c:8c: 1a:f4:3d:a2:7e:e0:a5:4a:7d:ca:b9:cc:b9:de:5b: 6e:00:f7:21:59:de:24:39:c0:e3:b4:ba:71:bb:7f: 7b:8a:fb:70:5c:ef:1a:e6:50:48:2a:97:b0:42:d5: 1c:a6:39:8a:53:df:0c:2a:9a:06:9a:90:bc:66:3b: bd:23:3c:87:6a:14:43:75:65:fe:bb:7d:f7:f1:15: 1c:cc:4e:eb:5b:bd:6c:31:ab:fd:9d:ae:1b:d2:0a: 64:6e:1a:ea:c0:04:15:0e:c2:7c:67:53:5d:b8:a3: 4e:19:2d:57:d4:ee:50:91:c3:1b:38:cc:85:95:61: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:43:87:AE:DF:1A:AD:4A:82:CF:62:FA:79:AB:06:A5:59:BA:FC:85 X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0a:41:60:11:b0:49:2c:44:10:a7:8b:62:40:33:9a:0f:ee: 2d:90:22:b0:18:62:29:99:9a:87:9d:e4:e6:0e:90:4f:1b:17: 81:a5:f7:b6:be:d7:53:42:93:e0:c6:67:55:a4:5c:29:03:4a: f8:03:21:8d:f7:12:07:90:6e:a3:3b:4d:5d:91:c1:a7:97:14: e7:16:86:96:2d:97:ad:e9:f2:08:d8:22:c0:3f:20:95:a6:ad: 13:8b:d6:06:a5:73:f7:6c:3f:91:01:5e:8f:a8:e6:68:6a:d8: 65:45:b9:15:b4:e7:c8:40:6e:3c:43:af:82:94:a7:8a:f5:72: c9:c7:15:5c:9a:98:a5:f3:0e:4b:47:27:1e:fc:69:7a:05:2d: 94:ef:33:49:d3:02:8d:d1:ee:b7:38:d0:9e:6c:7e:c1:20:9b: f4:2f:3f:ec:56:3c:2c:29:f4:1b:a8:4e:c2:fc:b6:93:69:26: 0a:be:36:d1:f0:03:23:4f:9a:4e:ec:3b:c1:ef:31:69:29:59: 94:13:f7:d4:4c:cf:b5:0d:2a:4c:2e:c6:d3:8b:49:de:29:16: 30:80:26:2c:b8:17:8c:e4:29:be:73:0d:39:c8:d7:2c:f9:f6: c8:c3:01:b5:6c:94:c6:a8:1f:9b:c9:76:47:e6:f0:06:2f:a6: 6f:2d:fe:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASujUEDiMf/a9q/WYoA2AyfdmQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNjAxMzEyMzI2MDhaFw0yNjAyMDQwMzQzMDhaMDMxMTAvBgNV BAMTKDkwNDM4N0FFREYxQUFENEE4MkNGNjJGQTc5QUIwNkE1NTlCQUZDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGPdTGcxgpH4JPZ1o0bvSv7Z6 AkJq+lwtOZD1daZONEbQASZ2h5nf3B+H3MhztJQXWHnttakoR51/gl2DrLsK07Ar Q3BksfW3m5SmMHKtXe+ABPGiyps2fGnpVZSYRXYtD/gCzM9QrwmCQDCxiPkPOJUO OvrFESKaDtT2FrMtpUKUyrN8jBr0PaJ+4KVKfcq5zLneW24A9yFZ3iQ5wOO0unG7 f3uK+3Bc7xrmUEgql7BC1RymOYpT3wwqmgaakLxmO70jPIdqFEN1Zf67fffxFRzM TutbvWwxq/2drhvSCmRuGurABBUOwnxnU124o04ZLVfU7lCRwxs4zIWVYavjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEOHrt8arUqCz2L6easGpVm6/IUwHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4KQWARsEksRBCni2JAM5oP7i2QIrAYYimZ moed5OYOkE8bF4Gl97a+11NCk+DGZ1WkXCkDSvgDIY33EgeQbqM7TV2RwaeXFOcW hpYtl63p8gjYIsA/IJWmrROL1galc/dsP5EBXo+o5mhq2GVFuRW058hAbjxDr4KU p4r1csnHFVyamKXzDktHJx78aXoFLZTvM0nTAo3R7rc40J5sfsEgm/QvP+xWPCwp 9BuoTsL8tpNpJgq+NtHwAyNPmk7sO8HvMWkpWZQT99RMz7UNKkwuxtOLSd4pFjCA Jiy4F4zkKb5zDTnI1yz59sjDAbVslMaoH5vJdkfm8AYvpm8t/m0= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:10 2026 by rpki-client