This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: kTfIOvYTE1ct0bAPStb18GdxkpFSWC4R83YyrTfsa/g= Subject key identifier: 8C:13:64:9B:3D:B1:92:47:19:07:70:C1:8C:F0:76:EE:02:38:CE:8B Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 4517FBCF98BD9E4F517D30AC998D6A7B1D8850C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0221 Signing time: Thu 08 Jan 2026 00:00:49 +0000 Manifest this update: Wed 07 Jan 2026 23:55:49 +0000 Manifest next update: Sun 11 Jan 2026 02:37:49 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 2: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: LRs/i/O75b9oqLyv66WWP2jo36pXVlnH/yj5FEApYLM=) 4: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 02:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:17:fb:cf:98:bd:9e:4f:51:7d:30:ac:99:8d:6a:7b:1d:88:50:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Jan 7 23:55:49 2026 GMT Not After : Jan 11 02:37:49 2026 GMT Subject: CN=8C13649B3DB19247190770C18CF076EE0238CE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:0a:bd:f0:31:08:5b:e1:c9:67:16:91:0e: b6:35:9b:f0:34:9b:d1:08:f9:88:fc:62:11:be:87: 04:05:e1:6e:7a:cc:b7:95:fd:fd:42:4b:ca:05:e8: ef:2a:9c:b6:af:ba:1f:f1:db:3b:7d:57:e5:b2:91: f0:75:e3:94:39:f7:a0:95:8e:51:e4:85:1c:8a:7e: 05:45:16:35:21:a0:d3:ab:12:54:96:f6:1c:b9:f3: 5d:93:af:25:16:08:8b:47:e4:e0:43:f1:34:e8:78: a4:7c:45:a6:0b:06:74:c9:b5:2f:13:ff:4a:1c:e2: 87:36:57:3b:9e:c5:be:41:5b:2b:33:49:78:74:09: 27:5f:fd:f2:dc:4c:34:6a:7a:36:8a:2d:05:ca:c7: a9:e6:d4:59:53:c9:60:8e:72:b7:55:14:e6:f5:62: 94:59:23:39:1a:14:30:fe:cc:38:bb:64:76:bc:de: 7b:02:b5:6e:ee:3a:11:5b:64:ba:b8:d3:ae:ad:98: 6a:33:b2:f1:45:79:a0:4f:5e:60:c9:d9:f7:a0:bb: 2b:b3:64:23:1f:ca:04:ad:9e:85:f9:13:34:02:f2: 1d:f7:d0:be:63:8c:9b:b8:d2:4f:33:ac:d1:d1:34: 45:da:ad:6f:93:1b:22:9e:93:52:fa:d5:bd:ac:19: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:13:64:9B:3D:B1:92:47:19:07:70:C1:8C:F0:76:EE:02:38:CE:8B X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:db:b0:34:a4:08:40:95:fd:68:62:ef:52:8a:bc:cd:a9:70: 23:4e:99:1b:17:8a:7e:fa:10:a3:26:e6:ec:ef:32:ac:bb:cf: cf:49:75:34:51:8d:53:1c:98:c3:32:60:5d:21:9d:8d:eb:43: 9e:8f:47:ec:67:8e:e2:b7:e2:90:97:80:2f:83:ae:7d:7e:c0: 36:ed:81:17:21:a3:39:9a:69:53:06:f1:98:06:cc:5f:a5:e7: 44:0a:1a:8d:e1:76:c4:41:d8:0a:83:9a:86:3f:44:47:1a:9f: ed:1c:ab:8e:3e:9f:37:be:b4:f6:53:3d:ac:99:26:45:69:44: 13:1c:8f:b2:3e:cc:69:33:60:61:fd:be:71:0a:84:d1:3a:a9: 46:85:66:cc:6e:d8:52:4b:3e:fd:d5:d4:e5:31:a8:5b:07:e1: 40:97:2f:38:77:19:c0:04:b9:28:db:33:73:e7:18:b1:3e:c4: ce:21:9f:9c:68:4f:9d:b4:9f:44:90:6e:74:29:31:56:b4:19: bb:e1:db:88:c0:e6:bb:39:89:bc:46:3d:a2:07:05:1e:de:15: 0b:93:ef:c7:6c:fc:2c:35:57:80:fe:6c:8c:20:10:88:49:8b: e3:b9:d9:3d:87:0f:c1:54:b7:14:19:bc:16:e8:4f:07:bf:96: 9d:79:5c:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRf7z5i9nk9RfTCsmY1qex2IUMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNjAxMDcyMzU1NDlaFw0yNjAxMTEwMjM3NDlaMDMxMTAvBgNV BAMTKDhDMTM2NDlCM0RCMTkyNDcxOTA3NzBDMThDRjA3NkVFMDIzOENFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftwq98DEIW+HJZxaRDrY1m/A0 m9EI+Yj8YhG+hwQF4W56zLeV/f1CS8oF6O8qnLavuh/x2zt9V+WykfB145Q596CV jlHkhRyKfgVFFjUhoNOrElSW9hy5812TryUWCItH5OBD8TToeKR8RaYLBnTJtS8T /0oc4oc2Vzuexb5BWyszSXh0CSdf/fLcTDRqejaKLQXKx6nm1FlTyWCOcrdVFOb1 YpRZIzkaFDD+zDi7ZHa83nsCtW7uOhFbZLq4066tmGozsvFFeaBPXmDJ2feguyuz ZCMfygStnoX5EzQC8h330L5jjJu40k8zrNHRNEXarW+TGyKek1L61b2sGQlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBNkmz2xkkcZB3DBjPB27gI4zoswHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/bsDSkCECV/Whi71KKvM2pcCNOmRsXin76 EKMm5uzvMqy7z89JdTRRjVMcmMMyYF0hnY3rQ56PR+xnjuK34pCXgC+Drn1+wDbt gRchozmaaVMG8ZgGzF+l50QKGo3hdsRB2AqDmoY/REcan+0cq44+nze+tPZTPayZ JkVpRBMcj7I+zGkzYGH9vnEKhNE6qUaFZsxu2FJLPv3V1OUxqFsH4UCXLzh3GcAE uSjbM3PnGLE+xM4hn5xoT520n0SQbnQpMVa0Gbvh24jA5rs5ibxGPaIHBR7eFQuT 78ds/Cw1V4D+bIwgEIhJi+O52T2HD8FUtxQZvBboTwe/lp15XHU= -----END CERTIFICATE-----Generated at Fri Jan 9 13:42:30 2026 by rpki-client