This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: 3jH65bn5c6+ecY2+IVc4josUjDLbf08WFEfbPma0+v4= Subject key identifier: 6C:6D:75:75:74:4A:A3:05:D1:8A:52:04:EB:76:A1:8F:EE:29:36:1F Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 32C89EC06EEDB97689BFF43D6F5F4D95C93A228B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0545 Signing time: Sat 31 Jan 2026 08:02:20 +0000 Manifest this update: Sat 31 Jan 2026 07:57:20 +0000 Manifest next update: Tue 03 Feb 2026 12:45:20 +0000 Files and hashes: 1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: hw19qxlLfskh42/0MYl2iz9CDVdIdXSmG3Yvo45p9C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c8:9e:c0:6e:ed:b9:76:89:bf:f4:3d:6f:5f:4d:95:c9:3a:22:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Jan 31 07:57:20 2026 GMT Not After : Feb 3 12:45:20 2026 GMT Subject: CN=6C6D7575744AA305D18A5204EB76A18FEE29361F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:ef:a7:0c:c7:8c:a5:78:43:e0:50:d2:d6: 37:73:ba:45:65:09:55:c5:a3:7b:cf:38:6a:93:20: f7:46:16:7d:f2:31:70:a5:e4:30:93:ef:56:da:bc: 9a:86:55:12:a4:66:c0:8a:dc:fb:12:8b:62:08:e8: 2d:88:22:d0:e5:2b:f8:9d:e7:95:2f:12:48:6b:f8: 3e:6e:9b:2c:1d:f9:a5:74:e5:18:fd:8f:e0:16:9d: f4:3e:39:59:b1:04:53:22:b2:67:6e:d0:5d:bf:72: 2b:02:ea:3f:55:e3:d3:e2:9f:12:92:1a:70:fe:4a: 36:76:f0:40:77:81:a1:c2:c2:8d:2b:e3:be:22:f2: 3e:d2:f8:f8:45:6c:fe:78:14:55:c2:17:2b:5d:cf: 88:cb:7a:84:c0:b7:da:19:1c:fc:c3:16:f3:dd:2e: 9b:3c:60:88:b0:f6:f8:83:b1:d2:59:87:2c:c4:49: 9e:c1:ec:7c:f2:59:3c:dd:f0:1b:6e:3e:ec:b5:5e: 57:c6:fb:c2:e5:73:f8:34:da:60:16:af:52:7b:c3: fe:1a:78:d0:52:54:ac:0e:ef:b2:3d:84:31:03:a6: be:84:58:51:fa:0d:9f:e2:89:ab:24:5e:be:48:9c: a8:db:5c:6b:51:c2:79:76:3f:9c:3a:ee:bf:29:2e: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6D:75:75:74:4A:A3:05:D1:8A:52:04:EB:76:A1:8F:EE:29:36:1F X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ef:15:89:ef:3b:40:9d:92:67:8d:5f:f6:be:1f:5e:92:36: 22:09:56:f5:45:b7:be:5f:cf:1b:ba:a0:96:14:f1:15:f3:26: d1:17:e7:53:4f:85:49:39:a8:87:6b:78:83:c6:d8:e1:f9:08: c2:b5:2a:a0:0b:4f:3c:86:c7:21:a7:1a:74:1f:35:3e:32:7f: 5f:e3:b1:24:a3:58:9d:01:c2:ea:0e:7a:e6:e4:4b:94:12:69: 31:1a:37:1f:af:a1:fb:fa:9e:d7:71:64:77:79:57:12:5a:44: 35:30:17:a6:8d:43:0c:60:fc:66:8a:d3:0c:ab:cb:3b:1d:a4: 42:cf:44:c6:bf:ed:d2:d5:41:c7:a5:36:84:2a:10:e9:92:93: 30:38:6c:37:94:64:6e:36:df:6b:46:93:94:0e:a4:35:79:c4: 3b:b5:57:81:98:23:ae:e1:02:9d:a5:be:94:05:9e:27:bd:be: 7a:8e:03:a7:b5:23:22:92:a3:aa:f9:4d:3b:a2:d2:28:87:f7: e0:81:f5:35:60:10:d5:50:19:c1:2f:cc:82:b5:0e:fd:c8:34: 7a:a4:1b:57:eb:2c:35:ad:6e:d2:d0:ff:ef:4a:59:6d:7f:cd: d6:37:cd:0f:22:e7:69:76:9e:60:b0:09:24:5d:ef:12:e2:df: 43:cc:fd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsiewG7tuXaJv/Q9b19Nlck6IoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNjAxMzEwNzU3MjBaFw0yNjAyMDMxMjQ1MjBaMDMxMTAvBgNV BAMTKDZDNkQ3NTc1NzQ0QUEzMDVEMThBNTIwNEVCNzZBMThGRUUyOTM2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6++nDMeMpXhD4FDS1jdzukVl CVXFo3vPOGqTIPdGFn3yMXCl5DCT71bavJqGVRKkZsCK3PsSi2II6C2IItDlK/id 55UvEkhr+D5umywd+aV05Rj9j+AWnfQ+OVmxBFMismdu0F2/cisC6j9V49PinxKS GnD+SjZ28EB3gaHCwo0r474i8j7S+PhFbP54FFXCFytdz4jLeoTAt9oZHPzDFvPd Lps8YIiw9viDsdJZhyzESZ7B7HzyWTzd8BtuPuy1XlfG+8Llc/g02mAWr1J7w/4a eNBSVKwO77I9hDEDpr6EWFH6DZ/iiaskXr5InKjbXGtRwnl2P5w67r8pLoV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbG11dXRKowXRilIE63ahj+4pNh8wHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/vFYnvO0CdkmeNX/a+H16SNiIJVvVFt75f zxu6oJYU8RXzJtEX51NPhUk5qIdreIPG2OH5CMK1KqALTzyGxyGnGnQfNT4yf1/j sSSjWJ0BwuoOeubkS5QSaTEaNx+vofv6ntdxZHd5VxJaRDUwF6aNQwxg/GaK0wyr yzsdpELPRMa/7dLVQcelNoQqEOmSkzA4bDeUZG4232tGk5QOpDV5xDu1V4GYI67h Ap2lvpQFnie9vnqOA6e1IyKSo6r5TTui0iiH9+CB9TVgENVQGcEvzIK1Dv3INHqk G1frLDWtbtLQ/+9KWW1/zdY3zQ8i52l2nmCwCSRd7xLi30PM/XU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:10 2026 by rpki-client