This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: wUzRnGHT/o4XOEHBJP7u53fZnvoj0LpuQrrkabl3u2U= Subject key identifier: FF:F7:6E:19:36:B8:92:F2:62:FB:2C:BB:61:D0:70:ED:57:44:74:67 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 724C38110FCE96BEA59C873A4B743879B0E653E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0277 Signing time: Tue 20 Jan 2026 22:31:23 +0000 Manifest this update: Tue 20 Jan 2026 22:26:23 +0000 Manifest next update: Sat 24 Jan 2026 08:55:23 +0000 Files and hashes: 1: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: wK6BprUmpGXau8B3uayk6AGfmq1TAjjEsKqYgXSj+Jg=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 08:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4c:38:11:0f:ce:96:be:a5:9c:87:3a:4b:74:38:79:b0:e6:53:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Jan 20 22:26:23 2026 GMT Not After : Jan 24 08:55:23 2026 GMT Subject: CN=FFF76E1936B892F262FB2CBB61D070ED57447467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:40:77:25:9e:d3:f8:b5:4b:5a:2d:b1:6b: bf:6a:41:63:60:5e:5d:33:30:fe:94:19:27:a5:fd: 47:83:31:9e:49:63:a0:b7:43:65:dc:0d:8f:49:f8: 3e:e3:e8:59:8f:f5:2e:63:f3:f9:56:d3:99:0c:35: f6:4d:af:58:c1:10:af:d3:24:1e:15:05:ec:4f:79: 60:c2:4c:f9:88:d0:f2:8d:af:cf:43:29:53:bc:af: ee:ee:da:fc:ea:3a:ab:a3:14:42:91:10:47:59:c5: fc:39:a9:ee:af:42:62:13:0f:de:d0:a6:d0:d5:ad: 07:f1:bf:b3:6f:62:bb:d1:d1:f5:fe:be:fb:6f:06: 97:95:a6:0e:b0:ba:3f:33:e7:5b:22:c5:81:a9:de: e3:9d:9c:64:9c:d3:ba:d1:e8:e6:a7:a1:d4:6c:3c: 33:2c:41:dc:d5:f8:bc:48:6a:72:1e:06:c8:5c:99: 4e:a0:86:9b:81:77:8b:50:93:38:c3:c0:78:4a:2c: 88:37:e8:17:5f:c1:97:80:9d:af:a8:9c:0b:bc:27: d3:7e:77:fe:11:50:35:2f:8f:be:b7:3d:b7:44:d2: 7e:92:cd:35:1d:40:dd:9a:25:9a:89:b0:c2:f2:16: 40:37:0f:ee:1b:ca:7d:60:aa:69:79:e3:3e:da:07: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F7:6E:19:36:B8:92:F2:62:FB:2C:BB:61:D0:70:ED:57:44:74:67 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:23:b6:29:c2:c3:6b:d4:8d:61:f4:10:92:5e:90:a5:8e: 1f:8f:d1:7a:24:94:d4:03:f2:bb:28:cd:a9:25:aa:d3:53:5a: 5c:57:f8:dc:00:f2:a6:3d:69:5e:1e:72:4d:0a:fe:ba:e8:5f: b5:61:df:a4:73:8c:db:8f:6c:bd:7f:c8:83:64:c9:5b:10:3d: 55:18:2d:41:84:47:da:60:11:70:7a:fd:0c:4f:c7:78:17:8e: 44:fb:81:1d:8a:c4:8b:90:66:c6:e4:08:b8:09:36:8f:f7:d1: b9:46:a0:5b:34:8c:eb:ca:1e:a5:44:cc:84:b2:33:4e:b3:71: 11:bb:33:86:4e:ed:ac:47:c7:96:65:1e:3c:bf:db:db:8c:d7: 05:52:8a:a7:0e:e6:3f:5f:03:bb:5f:e1:a4:66:7e:74:3e:5b: e6:a8:6b:5c:6f:53:95:83:0c:ef:0e:af:2c:ea:4c:8d:c4:7d: 77:29:cf:e6:7e:3e:49:ec:97:d6:46:bc:48:fa:f7:bc:b1:7c: 75:59:bd:cc:81:11:5f:35:c7:31:21:b6:8a:61:bc:f5:b9:26: cd:98:fc:bf:53:6a:1f:7c:6a:b8:c8:05:b8:7c:63:e7:16:81: 67:a6:8a:f8:45:3c:bc:54:43:20:48:e2:6e:5a:cb:5f:24:91: 2a:eb:6c:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckw4EQ/Olr6lnIc6S3Q4ebDmU+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNjAxMjAyMjI2MjNaFw0yNjAxMjQwODU1MjNaMDMxMTAvBgNV BAMTKEZGRjc2RTE5MzZCODkyRjI2MkZCMkNCQjYxRDA3MEVENTc0NDc0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p0B3JZ7T+LVLWi2xa79qQWNg Xl0zMP6UGSel/UeDMZ5JY6C3Q2XcDY9J+D7j6FmP9S5j8/lW05kMNfZNr1jBEK/T JB4VBexPeWDCTPmI0PKNr89DKVO8r+7u2vzqOqujFEKREEdZxfw5qe6vQmITD97Q ptDVrQfxv7NvYrvR0fX+vvtvBpeVpg6wuj8z51sixYGp3uOdnGSc07rR6OanodRs PDMsQdzV+LxIanIeBshcmU6ghpuBd4tQkzjDwHhKLIg36BdfwZeAna+onAu8J9N+ d/4RUDUvj763PbdE0n6SzTUdQN2aJZqJsMLyFkA3D+4byn1gqml54z7aB4XBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//duGTa4kvJi+yy7YdBw7VdEdGcwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElyI7YpwsNr1I1h9BCSXpCljh+P0XoklNQD 8rsozaklqtNTWlxX+NwA8qY9aV4eck0K/rroX7Vh36RzjNuPbL1/yINkyVsQPVUY LUGER9pgEXB6/QxPx3gXjkT7gR2KxIuQZsbkCLgJNo/30blGoFs0jOvKHqVEzISy M06zcRG7M4ZO7axHx5ZlHjy/29uM1wVSiqcO5j9fA7tf4aRmfnQ+W+aoa1xvU5WD DO8OryzqTI3EfXcpz+Z+Pknsl9ZGvEj697yxfHVZvcyBEV81xzEhtophvPW5Js2Y /L9Tah98arjIBbh8Y+cWgWemivhFPLxUQyBI4m5ay18kkSrrbOk= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:49 2026 by rpki-client