This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: uD3j8vWhTW8PqnpY4Mt2CXglD4/u5n3Q9wz0WP3qsoc= Subject key identifier: AD:A5:E2:D8:A4:4B:FE:83:F1:4A:41:FC:1A:8B:29:96:9A:E8:CB:F3 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 09FCCA3BA07685FA76E609D8D9A129B6C3132ED8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 0203 Signing time: Sat 31 Jan 2026 22:12:31 +0000 Manifest this update: Sat 31 Jan 2026 22:07:31 +0000 Manifest next update: Wed 04 Feb 2026 08:59:31 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: EHLzmpbXd+AhvXtOCnZKuJjIy9hTF9a7xgFLEy8lNxg=) 2: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) 3: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fc:ca:3b:a0:76:85:fa:76:e6:09:d8:d9:a1:29:b6:c3:13:2e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Jan 31 22:07:31 2026 GMT Not After : Feb 4 08:59:31 2026 GMT Subject: CN=ADA5E2D8A44BFE83F14A41FC1A8B29969AE8CBF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:6f:19:74:9a:e2:f9:a0:9c:a7:72:61:39: b2:c8:95:ed:8f:37:30:63:f8:ff:bd:32:ec:c7:a7: 99:9b:15:76:8b:ea:8f:c8:a8:5d:40:2a:6a:6a:1d: 70:39:27:79:dd:6c:12:0f:46:03:d0:d7:ac:58:50: 7f:7e:05:a9:81:8d:57:13:12:1d:24:eb:85:77:3a: 26:c2:b8:16:77:69:1a:6e:ca:b4:ea:4b:cd:45:b3: a9:e4:62:97:a4:ce:b6:a5:24:5c:91:47:c3:7b:ae: b1:89:da:bc:0a:93:77:c8:ac:57:ec:b8:d4:f7:d2: 71:55:e0:49:ad:ab:6b:f6:a5:5f:45:81:c3:81:89: d4:e0:80:73:aa:38:60:4e:2d:71:c6:60:fa:e1:9b: 71:45:a0:fe:76:a6:3d:9e:85:ba:ff:00:c7:df:e4: 2f:30:49:30:09:7a:0b:a3:9b:5d:39:34:23:89:5c: 1f:f3:f0:bd:9a:79:67:93:14:78:39:1a:d2:91:32: 96:7a:f9:f1:f6:09:f2:45:43:dd:b5:0d:77:91:42: 4c:bf:8b:55:1a:7b:2a:bd:b3:f2:6f:c7:2b:43:ab: 76:49:59:d8:c6:75:7e:4f:c0:28:6a:83:63:fc:98: fb:f4:54:6e:e9:6d:a4:46:55:97:36:1f:45:09:90: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:E2:D8:A4:4B:FE:83:F1:4A:41:FC:1A:8B:29:96:9A:E8:CB:F3 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:33:bc:5d:9b:82:17:40:1a:4f:bd:8c:ec:dd:55:9a:5d:0e: 24:44:26:e9:6b:20:75:6a:ea:1c:fa:cf:8a:31:87:91:e7:82: 66:09:3f:af:ac:00:b6:89:ab:ef:d7:d0:a0:c4:ef:c1:e2:f7: a3:d9:fb:0f:84:15:19:19:85:97:bc:c4:19:d4:7a:dc:3d:dd: ef:43:6c:c2:45:9c:35:90:40:27:07:b9:63:3e:ce:8d:bc:14: 63:c3:55:99:9c:a1:03:57:7f:4d:d1:eb:2e:3b:e0:e0:6d:eb: 6c:3b:05:01:18:57:48:4e:3c:d6:5f:c0:4f:90:fc:f9:ee:2e: 72:0e:c8:e7:57:93:d1:01:42:73:aa:89:e5:2b:f1:2b:5d:b8: 5e:55:42:46:e5:e6:b2:a5:4c:de:d0:9b:4f:28:1b:ee:3f:64: 0f:6f:a2:72:b2:2e:89:c1:f8:61:81:e8:f1:7e:d9:d0:dc:b4: 27:c2:5f:4f:d7:b5:b7:13:fe:0d:fc:da:67:8d:79:62:72:3c: 92:c7:1a:b9:f7:b4:e5:38:f9:e3:f1:74:fa:56:5e:c4:ff:76: 12:a5:d9:1e:06:29:37:d9:1f:47:05:23:84:34:d5:68:cb:68: 05:39:c1:18:d2:c9:e3:3e:06:28:cd:3a:2d:7f:10:b1:b5:b7: 8a:a4:bf:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfzKO6B2hfp25gnY2aEptsMTLtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNjAxMzEyMjA3MzFaFw0yNjAyMDQwODU5MzFaMDMxMTAvBgNV BAMTKEFEQTVFMkQ4QTQ0QkZFODNGMTRBNDFGQzFBOEIyOTk2OUFFOENCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/G8ZdJri+aCcp3JhObLIle2P NzBj+P+9MuzHp5mbFXaL6o/IqF1AKmpqHXA5J3ndbBIPRgPQ16xYUH9+BamBjVcT Eh0k64V3OibCuBZ3aRpuyrTqS81Fs6nkYpekzralJFyRR8N7rrGJ2rwKk3fIrFfs uNT30nFV4Emtq2v2pV9FgcOBidTggHOqOGBOLXHGYPrhm3FFoP52pj2ehbr/AMff 5C8wSTAJegujm105NCOJXB/z8L2aeWeTFHg5GtKRMpZ6+fH2CfJFQ921DXeRQky/ i1Uaeyq9s/JvxytDq3ZJWdjGdX5PwChqg2P8mPv0VG7pbaRGVZc2H0UJkGNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraXi2KRL/oPxSkH8Gosplproy/MwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgzvF2bghdAGk+9jOzdVZpdDiREJulrIHVq 6hz6z4oxh5HngmYJP6+sALaJq+/X0KDE78Hi96PZ+w+EFRkZhZe8xBnUetw93e9D bMJFnDWQQCcHuWM+zo28FGPDVZmcoQNXf03R6y474OBt62w7BQEYV0hOPNZfwE+Q /PnuLnIOyOdXk9EBQnOqieUr8StduF5VQkbl5rKlTN7Qm08oG+4/ZA9vonKyLonB +GGB6PF+2dDctCfCX0/XtbcT/g382meNeWJyPJLHGrn3tOU4+ePxdPpWXsT/dhKl 2R4GKTfZH0cFI4Q01WjLaAU5wRjSyeM+BijNOi1/ELG1t4qkv5E= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:51 2026 by rpki-client