This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: hUubhnUs4sX6am5WJ6VRMwkvMJKY+EQRmjmbgVUNG90= Subject key identifier: 6E:1E:6A:66:49:4F:A4:DF:BA:4C:AA:90:CE:2F:25:B2:55:3F:11:05 Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 714FF6A69D16E8EE8F252418E7B58755DB6B1325 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 0106 Signing time: Tue 20 Jan 2026 04:42:16 +0000 Manifest this update: Tue 20 Jan 2026 04:37:16 +0000 Manifest next update: Fri 23 Jan 2026 12:29:16 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: iCOcTCxd8RT9runfT5FLLmyZfR0w+w2o+vlRpnqP+yg=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 12:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4f:f6:a6:9d:16:e8:ee:8f:25:24:18:e7:b5:87:55:db:6b:13:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Jan 20 04:37:16 2026 GMT Not After : Jan 23 12:29:16 2026 GMT Subject: CN=6E1E6A66494FA4DFBA4CAA90CE2F25B2553F1105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:4b:ce:65:b4:dd:b1:0c:ea:1b:34:53:dd: f4:25:25:d5:59:86:74:6e:69:29:f0:70:15:38:a5: 6e:ba:58:7d:b0:66:d5:99:ca:2c:4f:00:6b:57:1f: 53:55:a9:0c:c5:b4:58:90:11:8b:ec:72:10:7b:1a: 5f:77:ca:ba:41:4f:2c:b7:49:60:91:39:a5:e9:cb: 9a:3f:f9:b7:1b:e6:05:9f:f6:e4:1c:a6:db:2d:25: 5e:ca:7d:de:a5:f2:11:3a:82:4a:95:f6:bf:85:7e: 90:a0:43:d2:04:b8:80:b4:46:5b:3a:d3:ef:8d:bb: 20:22:a0:ea:f0:c5:e9:65:8c:32:e9:68:aa:09:2e: f5:d8:2a:1b:b2:3e:55:99:6c:2d:d0:21:04:5e:e9: f6:d8:5c:23:d3:9c:c6:91:20:70:68:a9:4a:53:24: ec:e4:37:7b:a8:ac:6b:1d:e4:6e:95:91:7e:b5:53: 44:bb:a3:40:39:99:9f:76:3f:5e:21:5c:6a:03:6d: 56:0b:8d:06:65:fa:c3:df:b0:61:f8:4d:a6:a1:a4: 6d:d3:ec:b4:94:93:75:a1:b6:bd:ba:47:5c:05:78: b4:53:59:9f:55:9b:06:8b:fe:30:21:61:76:00:03: 33:e4:87:84:33:04:85:b8:34:0d:03:32:89:2b:9b: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1E:6A:66:49:4F:A4:DF:BA:4C:AA:90:CE:2F:25:B2:55:3F:11:05 X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:06:95:67:5c:20:1d:eb:00:00:d2:9c:bf:c5:93:20:9e:8a: 17:ca:e7:3c:4b:02:89:70:f0:14:82:9f:c4:26:81:55:fb:d7: 50:c7:c4:83:6a:63:0f:21:d1:5a:eb:bf:ef:13:04:ba:44:c1: a5:11:56:d3:f7:ee:14:c7:bd:18:2d:43:3d:36:b0:15:a4:52: 28:68:95:45:bc:5f:b0:77:6a:e8:d7:67:91:d8:c1:ef:97:a9: 03:04:9f:99:98:eb:5a:bb:fc:02:d0:29:fe:26:cf:fd:44:ca: 9f:95:98:b1:f8:1e:37:69:28:e9:23:8b:73:03:5f:24:1a:0c: 7a:77:8c:9c:e4:fc:aa:56:50:8c:0f:70:89:a6:1f:1a:d4:fe: e9:6d:44:e8:2f:44:b7:b8:f9:da:fa:8a:67:91:d3:3f:61:48: 87:dd:2c:81:df:c1:f2:d1:80:84:57:ed:c6:b8:52:54:3f:e2: ef:1d:3c:f8:e1:9f:ab:64:0f:2b:52:5d:16:97:d7:0f:ca:56: 7b:14:68:f4:b2:49:ba:ab:68:74:6a:9e:1a:7e:97:31:75:dd: ba:53:ed:5d:6d:3f:58:fb:3b:fd:ab:7d:48:91:a6:9c:12:94: ec:ea:ab:25:f7:da:ea:9c:40:b8:5d:a4:9b:73:7e:ff:44:7a: c6:fd:25:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcU/2pp0W6O6PJSQY57WHVdtrEyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNjAxMjAwNDM3MTZaFw0yNjAxMjMxMjI5MTZaMDMxMTAvBgNV BAMTKDZFMUU2QTY2NDk0RkE0REZCQTRDQUE5MENFMkYyNUIyNTUzRjExMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH30vOZbTdsQzqGzRT3fQlJdVZ hnRuaSnwcBU4pW66WH2wZtWZyixPAGtXH1NVqQzFtFiQEYvschB7Gl93yrpBTyy3 SWCROaXpy5o/+bcb5gWf9uQcptstJV7Kfd6l8hE6gkqV9r+FfpCgQ9IEuIC0Rls6 0++NuyAioOrwxelljDLpaKoJLvXYKhuyPlWZbC3QIQRe6fbYXCPTnMaRIHBoqUpT JOzkN3uorGsd5G6VkX61U0S7o0A5mZ92P14hXGoDbVYLjQZl+sPfsGH4TaahpG3T 7LSUk3Whtr26R1wFeLRTWZ9VmwaL/jAhYXYAAzPkh4QzBIW4NA0DMokrm4YdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbh5qZklPpN+6TKqQzi8lslU/EQUwHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkGlWdcIB3rAADSnL/FkyCeihfK5zxLAolw 8BSCn8QmgVX711DHxINqYw8h0Vrrv+8TBLpEwaURVtP37hTHvRgtQz02sBWkUiho lUW8X7B3aujXZ5HYwe+XqQMEn5mY61q7/ALQKf4mz/1Eyp+VmLH4HjdpKOkji3MD XyQaDHp3jJzk/KpWUIwPcImmHxrU/ultROgvRLe4+dr6imeR0z9hSIfdLIHfwfLR gIRX7ca4UlQ/4u8dPPjhn6tkDytSXRaX1w/KVnsUaPSySbqraHRqnhp+lzF13bpT 7V1tP1j7O/2rfUiRppwSlOzqqyX32uqcQLhdpJtzfv9Eesb9JYA= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:20 2026 by rpki-client