This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: 1W4BGzfM359R/Z0yJ5CcC+3GME/3MbYfW4n6rg2RZRA= Subject key identifier: B1:E8:57:DC:A7:D4:57:1E:49:52:0D:7B:72:28:BE:92:C9:CA:36:A0 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 48288A8BCBA83E1053035A673FEED55B9F12D2CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0240 Signing time: Sat 31 Jan 2026 20:21:57 +0000 Manifest this update: Sat 31 Jan 2026 20:16:57 +0000 Manifest next update: Tue 03 Feb 2026 23:39:57 +0000 Files and hashes: 1: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 2: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 3: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 4: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 5: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 6: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 7: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 8: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 9: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 10: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 11: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 12: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: 8YlfmAXgks6CtRDPQdzyuGd1RRarRQG5lr3Bi4mnQHg=) 13: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 14: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 15: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 16: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 17: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 23:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:28:8a:8b:cb:a8:3e:10:53:03:5a:67:3f:ee:d5:5b:9f:12:d2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jan 31 20:16:57 2026 GMT Not After : Feb 3 23:39:57 2026 GMT Subject: CN=B1E857DCA7D4571E49520D7B7228BE92C9CA36A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:67:d4:90:4a:f3:59:8b:2a:cf:ff:22:d5: 54:15:c1:8f:5d:02:ec:ee:cc:73:88:81:eb:75:bc: ca:2d:af:df:53:8b:62:2b:6c:14:98:0c:0c:9f:c9: 9e:2a:ed:2a:2d:35:d4:28:5e:89:e7:f0:ab:41:34: db:fe:93:5b:2e:80:45:5f:a0:6e:1e:59:ab:61:13: 78:b8:bb:98:ba:26:7c:5c:0e:fc:27:6e:df:64:91: 12:de:08:a8:39:5d:c0:8f:c8:ad:ce:56:03:aa:d8: 82:e1:4a:55:53:5b:2b:6b:fe:ea:95:b0:f2:48:8d: a5:db:86:e5:e8:fb:a7:2a:e7:5d:37:70:48:27:82: ba:0b:0f:d3:b2:6f:84:ba:06:37:06:e7:71:af:4b: 21:b2:a2:11:a2:77:d8:63:e0:6c:29:f6:99:0c:00: c7:12:e9:df:26:fe:7e:77:2a:9b:93:93:0d:d2:bd: 50:88:02:08:9c:03:b8:31:dd:e5:f4:b4:8a:31:8e: 85:b3:bc:ec:72:17:59:1c:fb:07:0c:1f:15:0e:2d: 07:6f:8c:3c:20:f5:90:5e:bc:e1:4f:e3:fb:6d:f5: bd:12:80:dc:45:bd:c6:62:7a:18:f3:fa:fc:44:42: f0:60:dc:69:5d:cd:4b:8b:87:a2:4e:25:16:0c:c1: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E8:57:DC:A7:D4:57:1E:49:52:0D:7B:72:28:BE:92:C9:CA:36:A0 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:13:5b:9a:3b:f3:07:e6:8f:79:27:ec:93:74:f7:54:3c:84: 9b:b8:31:5c:06:63:99:1a:3c:65:fa:22:15:12:25:8a:78:02: fd:8c:48:56:50:16:2c:36:2d:12:7d:88:ed:9e:ea:b6:8d:29: d6:5e:b0:85:11:29:07:19:f6:e9:c1:75:2d:49:a3:2b:2d:e6: 64:63:47:e3:91:b5:27:c0:c9:b0:9e:15:95:fb:ec:b9:62:d0: 48:1c:c9:30:19:9a:ca:25:be:c1:94:7a:85:79:e0:57:d8:7a: 56:ff:45:36:32:b6:10:32:c6:cf:7b:83:82:8d:4f:ac:40:c5: 85:52:92:95:20:76:57:1c:84:d4:44:64:24:08:28:1a:b1:9f: 12:a5:5b:ea:5c:1e:e9:e4:26:fe:99:d6:7f:de:49:bb:ca:ce: 93:23:fd:61:f9:1c:a2:d4:2a:21:10:7b:4c:e9:18:47:99:f2: 91:f9:0e:df:ae:98:4b:56:47:dc:20:b4:a6:41:86:a6:58:4f: 35:74:18:29:4d:29:da:ef:0a:b0:a7:f3:5a:d3:fb:73:a8:d1: 4d:23:58:a3:19:bb:26:8f:90:31:2e:3b:b1:18:4d:2c:02:f8: 32:ff:60:c6:a5:55:fc:a5:8c:33:c3:3b:28:74:7d:50:d5:43: b5:ae:25:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCiKi8uoPhBTA1pnP+7VW58S0swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjAxMzEyMDE2NTdaFw0yNjAyMDMyMzM5NTdaMDMxMTAvBgNV BAMTKEIxRTg1N0RDQTdENDU3MUU0OTUyMEQ3QjcyMjhCRTkyQzlDQTM2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVI2fUkErzWYsqz/8i1VQVwY9d AuzuzHOIget1vMotr99Ti2IrbBSYDAyfyZ4q7SotNdQoXonn8KtBNNv+k1sugEVf oG4eWathE3i4u5i6JnxcDvwnbt9kkRLeCKg5XcCPyK3OVgOq2ILhSlVTWytr/uqV sPJIjaXbhuXo+6cq5103cEgngroLD9Oyb4S6BjcG53GvSyGyohGid9hj4Gwp9pkM AMcS6d8m/n53KpuTkw3SvVCIAgicA7gx3eX0tIoxjoWzvOxyF1kc+wcMHxUOLQdv jDwg9ZBevOFP4/tt9b0SgNxFvcZiehjz+vxEQvBg3GldzUuLh6JOJRYMwT+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsehX3KfUVx5JUg17cii+ksnKNqAwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4TW5o78wfmj3kn7JN091Q8hJu4MVwGY5ka PGX6IhUSJYp4Av2MSFZQFiw2LRJ9iO2e6raNKdZesIURKQcZ9unBdS1Joyst5mRj R+ORtSfAybCeFZX77Lli0EgcyTAZmsolvsGUeoV54FfYelb/RTYythAyxs97g4KN T6xAxYVSkpUgdlcchNREZCQIKBqxnxKlW+pcHunkJv6Z1n/eSbvKzpMj/WH5HKLU KiEQe0zpGEeZ8pH5Dt+umEtWR9wgtKZBhqZYTzV0GClNKdrvCrCn81rT+3Oo0U0j WKMZuyaPkDEuO7EYTSwC+DL/YMalVfyljDPDOyh0fVDVQ7WuJZE= -----END CERTIFICATE-----Generated at Mon Feb 2 15:57:52 2026 by rpki-client