This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: CrhAl/LIWmTNlM9DVM9vOAdUL2GelVnufswfwg0LqIs= Subject key identifier: 88:EF:1E:31:5F:8C:59:9A:C2:FA:E4:94:1C:FC:B8:F8:72:61:5E:DA Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 61CE5CA38A169FA725722A632A6AB05385687D05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: D1 Signing time: Tue 20 Jan 2026 06:50:59 +0000 Manifest this update: Tue 20 Jan 2026 06:45:59 +0000 Manifest next update: Fri 23 Jan 2026 15:15:59 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: 0794mM3P/jTA/P+YV7s8R0ZJ+JNY5QrlkL0KrMBVrL4=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 15:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ce:5c:a3:8a:16:9f:a7:25:72:2a:63:2a:6a:b0:53:85:68:7d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Jan 20 06:45:59 2026 GMT Not After : Jan 23 15:15:59 2026 GMT Subject: CN=88EF1E315F8C599AC2FAE4941CFCB8F872615EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:20:66:a9:03:3a:73:3c:22:bc:64:4c:e7: 3f:22:6c:3c:f9:e1:ff:c8:ee:ed:38:46:74:72:41: 4d:c2:8e:2d:cc:46:e3:26:31:8e:cc:3b:70:fa:35: bc:16:7b:db:d1:e1:47:d2:72:03:5e:da:68:1c:ca: 38:c5:7f:d0:34:91:27:a7:8a:1d:62:fd:ef:8a:fc: 6c:1a:17:09:ac:23:4d:f7:26:6a:9b:e2:2c:b8:d9: 0e:47:92:ef:11:f2:47:73:6e:e4:1b:04:c7:7f:5f: cd:26:b1:cb:df:79:55:3b:c1:20:7e:ca:03:c0:b1: 46:68:18:ec:8c:97:29:a5:d6:62:6f:95:40:38:2a: 29:d6:a5:b7:65:05:35:06:e3:96:a8:e7:c0:ce:e3: b6:dc:0a:ad:d8:b4:7c:1f:02:5f:44:e2:2f:7b:cc: da:a5:bb:c9:99:94:e8:7f:4d:e0:7c:d5:36:a3:5a: 7b:9e:33:b5:de:c5:e9:67:86:a3:08:17:f5:06:c2: 0f:9a:05:e5:31:8a:9e:53:20:13:1d:61:4f:43:14: eb:15:9f:a8:2e:99:fb:42:b9:8f:96:fb:f4:35:03: 5e:4a:4d:c1:03:6e:06:e5:6f:86:8c:95:76:17:df: b7:42:88:cf:51:b3:25:64:b4:fe:6f:f2:2a:c1:cf: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:1E:31:5F:8C:59:9A:C2:FA:E4:94:1C:FC:B8:F8:72:61:5E:DA X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:65:18:e1:31:1c:e7:b9:85:b5:70:45:a0:bb:dd:af:82:84: 7c:83:19:ea:9e:0d:3b:70:44:9a:65:53:88:3b:17:f4:00:d5: 4f:0f:cc:05:de:7c:2d:6b:b7:88:b9:80:ae:2c:e7:3c:80:e3: cf:d3:cd:ca:d8:6f:a4:af:53:c4:79:80:5b:c3:13:5d:c4:17: cc:c2:06:74:34:77:64:35:88:32:f2:f0:1c:2e:48:10:9c:fc: ec:c0:c3:b4:f8:fe:a2:a9:39:1e:7f:00:4d:dc:b5:ba:aa:8b: 80:c3:0e:24:d9:07:f6:c4:e2:94:59:d2:9e:1f:42:ac:a1:fe: 9a:67:d2:81:a7:9f:dc:a8:e3:da:38:ba:1d:7c:76:e5:4a:a3: 1b:e3:8c:0b:7a:e7:a3:38:36:61:29:34:a3:70:22:b9:1d:13: a9:71:c5:af:14:f5:97:fe:b3:8b:8a:0a:35:50:8b:73:d9:63: ef:24:5d:e4:55:63:b3:eb:8f:e7:e6:9f:b5:53:32:e1:95:1c: ce:15:91:8b:be:b8:f3:69:a4:d0:93:32:06:ba:54:20:28:c7: 25:10:15:1c:a7:94:28:b3:76:ee:9e:4c:31:e7:cd:40:00:d2: 2a:72:21:5f:68:19:9b:9b:7a:4b:ee:ff:59:f7:8d:fb:af:8a: d4:14:0f:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYc5co4oWn6clcipjKmqwU4VofQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNjAxMjAwNjQ1NTlaFw0yNjAxMjMxNTE1NTlaMDMxMTAvBgNV BAMTKDg4RUYxRTMxNUY4QzU5OUFDMkZBRTQ5NDFDRkNCOEY4NzI2MTVFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5iBmqQM6czwivGRM5z8ibDz5 4f/I7u04RnRyQU3Cji3MRuMmMY7MO3D6NbwWe9vR4UfScgNe2mgcyjjFf9A0kSen ih1i/e+K/GwaFwmsI033Jmqb4iy42Q5Hku8R8kdzbuQbBMd/X80mscvfeVU7wSB+ ygPAsUZoGOyMlyml1mJvlUA4KinWpbdlBTUG45ao58DO47bcCq3YtHwfAl9E4i97 zNqlu8mZlOh/TeB81TajWnueM7XexelnhqMIF/UGwg+aBeUxip5TIBMdYU9DFOsV n6gumftCuY+W+/Q1A15KTcEDbgblb4aMlXYX37dCiM9RsyVktP5v8irBzxZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiO8eMV+MWZrC+uSUHPy4+HJhXtowHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMllGOExHOe5hbVwRaC73a+ChHyDGeqeDTtw RJplU4g7F/QA1U8PzAXefC1rt4i5gK4s5zyA48/TzcrYb6SvU8R5gFvDE13EF8zC BnQ0d2Q1iDLy8BwuSBCc/OzAw7T4/qKpOR5/AE3ctbqqi4DDDiTZB/bE4pRZ0p4f Qqyh/ppn0oGnn9yo49o4uh18duVKoxvjjAt656M4NmEpNKNwIrkdE6lxxa8U9Zf+ s4uKCjVQi3PZY+8kXeRVY7Prj+fmn7VTMuGVHM4VkYu+uPNppNCTMga6VCAoxyUQ FRynlCizdu6eTDHnzUAA0ipyIV9oGZubekvu/1n3jfuvitQUDx8= -----END CERTIFICATE-----Generated at Wed Jan 21 17:54:34 2026 by rpki-client