This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: 4Ilxgu3U9v0dzdYubuF6A4aYtlWgrV7VsoTYsXzaYvU= Subject key identifier: 14:95:31:02:BB:C2:5D:08:B3:B7:98:87:B4:D1:CF:F6:42:03:91:A4 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 149EECB654085BAD602ECD2E6F72F8E329CD4CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 0101 Signing time: Tue 20 Jan 2026 11:40:41 +0000 Manifest this update: Tue 20 Jan 2026 11:35:41 +0000 Manifest next update: Fri 23 Jan 2026 16:10:41 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 3: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: iOfwTVAn6wlPuS+5xfO/VcQlPeEUOnGi6uZY262EmXk=) 4: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 16:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9e:ec:b6:54:08:5b:ad:60:2e:cd:2e:6f:72:f8:e3:29:cd:4c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Jan 20 11:35:41 2026 GMT Not After : Jan 23 16:10:41 2026 GMT Subject: CN=14953102BBC25D08B3B79887B4D1CFF6420391A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:45:90:47:cc:55:f5:85:58:d7:22:1f:fa: b4:dd:81:2c:87:0c:38:70:3a:0b:4f:5e:94:d6:58: 7a:4c:38:42:5c:7a:9c:2c:5f:a8:87:4b:9c:93:5c: 7f:6f:ec:d3:f7:50:06:25:16:fe:8b:25:8a:af:ae: c3:57:03:d4:a2:dd:a8:56:24:2e:a0:62:ac:79:12: bc:d1:f6:81:16:24:e6:56:97:62:a0:8f:eb:1b:dc: d6:5d:97:68:6d:d9:90:a7:f9:82:56:87:3c:76:a4: 49:8b:de:eb:a5:1d:43:56:4a:b5:e4:64:1a:7c:c1: ae:44:52:1f:4c:77:e1:b2:1b:45:7e:2c:7d:da:e0: 19:d8:e9:1a:fa:ab:49:5d:f4:f2:28:5d:88:a7:7a: 17:4d:dd:31:3c:70:cc:28:2d:f1:80:b5:c2:78:75: ae:dc:82:83:17:83:0e:01:46:a0:ca:8f:be:10:db: 70:0d:b1:dc:7b:0e:0d:0a:26:2d:f6:f4:6e:8f:2f: d9:e9:4e:1e:74:f4:47:cd:c6:6f:f7:cd:c4:21:b4: 78:32:48:26:3a:96:7c:37:6c:06:8b:67:96:1f:a3: 07:9a:3b:fc:9a:8f:d2:d7:db:f2:f0:2f:0d:a5:9d: 9a:2c:bd:70:84:c7:78:21:00:2f:87:c9:6b:b0:31: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:31:02:BB:C2:5D:08:B3:B7:98:87:B4:D1:CF:F6:42:03:91:A4 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:95:f6:b0:3f:49:2c:7a:ea:e8:1d:ac:e1:2a:d3:36:89:f7: 5d:92:f4:66:d4:9c:b6:52:65:56:58:7d:4f:09:64:75:f4:c5: 8b:e1:43:18:35:23:4e:18:98:34:72:46:b2:a0:e6:81:12:72: 05:0c:b3:6c:6f:04:4a:6b:64:12:fb:b5:65:6a:c6:ab:e1:d2: c7:ef:ae:ca:c4:cf:cd:db:ac:c5:b0:a5:fd:41:8d:fe:f5:1a: d2:95:0a:4d:ed:66:97:01:0a:8f:54:e7:5d:c8:09:cd:d2:17: c3:7b:06:c8:69:f0:da:cc:aa:dd:f1:92:2b:f0:45:59:f1:6f: 46:f3:96:90:f0:03:59:96:2d:39:76:57:4c:07:3c:9d:15:e6: 11:1d:13:72:8a:a6:7f:89:45:59:2b:b2:61:4d:1e:10:98:bd: 32:7b:41:a6:1c:18:4b:9d:ee:29:06:54:64:82:7c:6e:62:c8: bc:54:95:ae:d8:29:70:8b:84:3a:43:22:15:78:2e:e4:e6:a2: 71:c2:e3:2a:43:36:d7:63:67:f2:df:b2:29:69:fb:ec:fe:17: 37:d5:2a:fb:04:e3:b3:59:5a:e6:76:d8:df:91:31:ea:ab:1e: 2c:e6:3d:3d:4f:81:11:ef:14:9e:be:dd:30:e2:fc:2f:dd:af: c5:12:67:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJ7stlQIW61gLs0ub3L44ynNTO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNjAxMjAxMTM1NDFaFw0yNjAxMjMxNjEwNDFaMDMxMTAvBgNV BAMTKDE0OTUzMTAyQkJDMjVEMDhCM0I3OTg4N0I0RDFDRkY2NDIwMzkxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gkWQR8xV9YVY1yIf+rTdgSyH DDhwOgtPXpTWWHpMOEJcepwsX6iHS5yTXH9v7NP3UAYlFv6LJYqvrsNXA9Si3ahW JC6gYqx5ErzR9oEWJOZWl2Kgj+sb3NZdl2ht2ZCn+YJWhzx2pEmL3uulHUNWSrXk ZBp8wa5EUh9Md+GyG0V+LH3a4BnY6Rr6q0ld9PIoXYinehdN3TE8cMwoLfGAtcJ4 da7cgoMXgw4BRqDKj74Q23ANsdx7Dg0KJi329G6PL9npTh509EfNxm/3zcQhtHgy SCY6lnw3bAaLZ5YfoweaO/yaj9LX2/LwLw2lnZosvXCEx3ghAC+HyWuwMbB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJUxArvCXQizt5iHtNHP9kIDkaQwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeV9rA/SSx66ugdrOEq0zaJ912S9GbUnLZS ZVZYfU8JZHX0xYvhQxg1I04YmDRyRrKg5oEScgUMs2xvBEprZBL7tWVqxqvh0sfv rsrEz83brMWwpf1Bjf71GtKVCk3tZpcBCo9U513ICc3SF8N7Bshp8NrMqt3xkivw RVnxb0bzlpDwA1mWLTl2V0wHPJ0V5hEdE3KKpn+JRVkrsmFNHhCYvTJ7QaYcGEud 7ikGVGSCfG5iyLxUla7YKXCLhDpDIhV4LuTmonHC4ypDNtdjZ/Lfsilp++z+FzfV KvsE47NZWuZ22N+RMeqrHizmPT1PgRHvFJ6+3TDi/C/dr8USZ/Y= -----END CERTIFICATE-----Generated at Wed Jan 21 12:17:04 2026 by rpki-client