This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: jwSn7S9A0h9hMY2H0xdTmfKpUOgdw4IZbyrnlz/jvEs= Subject key identifier: F0:81:B5:98:CF:F1:CE:D0:BF:78:CB:2A:8F:E6:C2:D7:32:4D:E2:C8 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 6BB28DEBCAA2D6702E7C52BB0F5B09F6124E4FF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: C6 Signing time: Tue 20 Jan 2026 22:31:08 +0000 Manifest this update: Tue 20 Jan 2026 22:26:08 +0000 Manifest next update: Fri 23 Jan 2026 23:18:08 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: 9VBeIBLbD3+klT6SSfbhWOdoz3sSzjq/oBcercPWluY=) 2: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 23:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b2:8d:eb:ca:a2:d6:70:2e:7c:52:bb:0f:5b:09:f6:12:4e:4f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jan 20 22:26:08 2026 GMT Not After : Jan 23 23:18:08 2026 GMT Subject: CN=F081B598CFF1CED0BF78CB2A8FE6C2D7324DE2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:31:9d:76:06:f6:fd:e3:f2:46:e3:0e:01: 3a:9d:3c:06:16:c8:6b:f0:b3:03:01:5c:e9:aa:2f: f4:d1:60:ce:85:c4:8f:68:15:23:31:3b:2c:6a:a9: 15:80:c3:44:d2:19:3a:6b:eb:57:e5:a1:3f:05:0d: 31:d0:08:9d:d5:ab:92:1e:ca:67:42:42:42:6d:aa: cc:89:6e:a2:13:22:7f:8e:c8:6b:3d:3a:c8:ef:d5: 95:87:6a:de:9b:7e:4f:a1:27:42:f2:da:8a:7b:a7: 35:61:19:e9:7b:c1:26:8d:66:29:27:f2:bb:3b:1f: 20:95:11:b7:76:28:0f:a4:15:71:10:02:c8:38:14: d2:0e:c0:eb:ce:01:14:c0:e1:b4:10:ba:5d:ff:15: ff:90:09:8e:a8:4b:2d:ee:5a:bd:e6:fb:ef:02:3e: 17:3d:de:c2:e7:8f:54:01:82:73:60:7a:90:e1:55: 06:8e:b8:5b:1b:da:fb:28:c5:d3:cc:ca:91:04:5c: 49:09:67:0b:9b:87:1f:28:43:20:46:91:45:82:43: 75:9e:d5:6b:86:27:c0:bf:bf:89:cf:e4:69:5e:b0: be:bb:15:1e:c2:1c:c9:8a:4c:cb:39:8b:b9:d7:81: 71:b7:7d:6d:52:c4:ac:51:6d:99:ec:b0:77:f8:95: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:B5:98:CF:F1:CE:D0:BF:78:CB:2A:8F:E6:C2:D7:32:4D:E2:C8 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:25:73:50:e7:4e:24:c5:c8:26:09:aa:04:68:85:02:ad: 31:11:eb:af:3b:32:b1:d4:f1:10:41:25:c7:5a:0f:1e:ca:1f: c8:be:e9:7b:f7:c7:1a:74:c1:1c:d9:f6:56:f0:15:80:bc:22: b4:0c:6a:e3:a5:d5:3d:23:8f:ed:40:89:00:8b:f5:cf:d4:07: 40:1b:18:25:44:db:52:43:9d:3d:a4:fa:a9:7b:20:7b:b8:ff: 6f:d9:33:9d:3b:b7:c6:cc:c0:73:4d:95:61:d0:69:46:5f:ba: 58:c2:d1:86:62:9f:7e:f7:de:25:8e:38:4f:4d:15:c6:a1:67: e4:9b:26:ff:ec:d5:40:12:1a:aa:89:de:73:03:d1:65:a3:cc: 47:75:e5:54:26:93:c7:1e:76:13:f4:1a:a2:df:2f:70:c8:71: 29:a1:9d:04:50:62:68:a2:c2:73:be:89:30:30:ea:44:38:1a: fe:1f:b1:63:e8:d2:04:5f:19:af:03:21:38:9d:d9:c6:b1:aa: b8:5b:59:8c:4b:a3:f4:fe:d5:b3:bc:68:2b:7b:38:5e:d7:c9: 32:0f:40:9d:99:86:7a:bd:29:c8:6a:a3:4b:1c:e3:e2:4d:37: 25:b1:d0:76:f1:8e:4b:b0:7e:33:1c:b8:84:9a:8d:ff:84:b1: 47:ac:86:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7KN68qi1nAufFK7D1sJ9hJOT/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNjAxMjAyMjI2MDhaFw0yNjAxMjMyMzE4MDhaMDMxMTAvBgNV BAMTKEYwODFCNTk4Q0ZGMUNFRDBCRjc4Q0IyQThGRTZDMkQ3MzI0REUyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VTGddgb2/ePyRuMOATqdPAYW yGvwswMBXOmqL/TRYM6FxI9oFSMxOyxqqRWAw0TSGTpr61floT8FDTHQCJ3Vq5Ie ymdCQkJtqsyJbqITIn+OyGs9Osjv1ZWHat6bfk+hJ0Ly2op7pzVhGel7wSaNZikn 8rs7HyCVEbd2KA+kFXEQAsg4FNIOwOvOARTA4bQQul3/Ff+QCY6oSy3uWr3m++8C Phc93sLnj1QBgnNgepDhVQaOuFsb2vsoxdPMypEEXEkJZwubhx8oQyBGkUWCQ3We 1WuGJ8C/v4nP5GlesL67FR7CHMmKTMs5i7nXgXG3fW1SxKxRbZnssHf4ld97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8IG1mM/xztC/eMsqj+bC1zJN4sgwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpYJXNQ504kxcgmCaoEaIUCrTER6687MrHU 8RBBJcdaDx7KH8i+6Xv3xxp0wRzZ9lbwFYC8IrQMauOl1T0jj+1AiQCL9c/UB0Ab GCVE21JDnT2k+ql7IHu4/2/ZM507t8bMwHNNlWHQaUZfuljC0YZin3733iWOOE9N FcahZ+SbJv/s1UASGqqJ3nMD0WWjzEd15VQmk8cedhP0GqLfL3DIcSmhnQRQYmii wnO+iTAw6kQ4Gv4fsWPo0gRfGa8DITid2caxqrhbWYxLo/T+1bO8aCt7OF7XyTIP QJ2Zhnq9Kchqo0sc4+JNNyWx0HbxjkuwfjMcuISajf+EsUeshrQ= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:30 2026 by rpki-client