This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: XSME0SgYUuOE3x4XsLjVeJYawuRuYKdsNDcuhFB+L3I= Subject key identifier: 62:0D:78:66:23:1D:5F:CF:B3:58:F2:DD:EA:04:E2:7E:EF:D2:49:06 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 654867C1CD2A23AAE7AB2D8A916E7235E34D3DB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 0211 Signing time: Thu 29 Jan 2026 02:02:32 +0000 Manifest this update: Thu 29 Jan 2026 01:57:32 +0000 Manifest next update: Sun 01 Feb 2026 04:21:32 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: PqhSqnKaG0zu95BDtQIKPwOaYyut6r9St8uLIhM6ckc=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:48:67:c1:cd:2a:23:aa:e7:ab:2d:8a:91:6e:72:35:e3:4d:3d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Jan 29 01:57:32 2026 GMT Not After : Feb 1 04:21:32 2026 GMT Subject: CN=620D7866231D5FCFB358F2DDEA04E27EEFD24906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:d2:65:ce:fc:e1:91:a1:d7:5b:ec:90:7b: ea:dd:1d:85:09:87:67:0a:5a:21:39:2d:81:12:bf: 38:e4:fa:c2:06:e2:c0:78:12:0d:40:ce:06:e1:37: 7f:3e:8e:55:1a:75:d1:e3:44:7c:09:cc:c6:36:3b: 91:60:c5:cc:fd:5a:e8:a6:3e:d2:a0:fb:a1:18:39: b8:10:e0:e1:7e:9f:3d:00:f3:25:76:d4:db:6a:86: 0f:c2:1d:41:e6:59:91:c6:5f:34:0c:8c:ae:a2:e3: 0b:a7:48:fe:15:72:aa:89:22:7e:08:67:94:1c:aa: f3:d6:d1:03:fd:f5:90:ff:ba:3f:50:54:d6:ae:4b: 74:dc:c4:84:13:1a:47:99:fb:c1:84:cd:87:72:6b: 01:c6:28:f0:46:ee:8a:4c:39:df:a7:ba:cc:1f:bc: 3c:31:ed:f0:45:bd:94:0e:44:3e:66:24:52:b9:ae: 7c:bb:bf:c7:31:2b:c8:7a:c0:fe:c1:d6:23:f6:4f: 50:c6:e8:f1:21:f6:5d:52:96:0e:29:1d:11:6f:53: 4c:d3:0e:40:dc:67:d0:14:0b:b7:45:58:82:9f:d3: 35:fd:73:4d:46:b1:10:0a:91:24:cb:00:e6:c9:b2: 48:6d:8e:75:b3:8a:a5:25:a0:7d:5a:ad:1b:54:5e: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0D:78:66:23:1D:5F:CF:B3:58:F2:DD:EA:04:E2:7E:EF:D2:49:06 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:74:e2:b6:a5:e6:d3:18:8c:8f:b8:cc:79:a9:10:86:75: 82:76:a8:4c:3e:b7:da:30:8e:a5:b8:92:a8:cc:c1:64:ae:10: cc:4d:65:e5:63:2c:58:68:7f:e5:b1:ee:7f:29:82:28:7b:cd: ad:bc:f2:04:d3:b5:42:8f:0c:bf:72:10:30:7a:91:8b:28:78: 2a:d1:bb:f8:61:7c:a7:f1:5c:04:7a:ac:fc:2f:3e:7c:05:fc: c3:11:71:7e:58:15:22:2e:ad:6a:d9:42:ff:d7:b1:01:5a:ce: 43:a4:cf:a7:a0:c7:5e:e7:7d:3b:bf:ce:49:ab:2c:4d:5e:fe: 0f:5e:38:55:b1:11:6b:60:31:4a:be:24:db:6f:7f:20:60:1d: 35:45:62:3a:b7:3e:dd:6d:c6:ef:42:49:42:bf:fb:dd:ef:be: 40:08:2e:e4:af:46:f3:f8:f1:eb:c8:9c:e4:f8:8d:32:ea:42: 14:e5:ad:15:0f:3f:e6:da:4a:6f:5b:94:b0:14:18:ca:3b:d6: fb:f4:71:f9:a4:66:89:89:9e:46:4b:4c:a2:85:38:69:01:98: 21:6f:e7:c7:99:24:7b:0a:6f:4b:10:5b:6e:c2:f2:c0:e9:96: 25:11:64:a9:5c:1a:49:92:d1:98:b3:5c:34:ff:9a:99:69:68: cb:08:b7:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUhnwc0qI6rnqy2KkW5yNeNNPbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNjAxMjkwMTU3MzJaFw0yNjAyMDEwNDIxMzJaMDMxMTAvBgNV BAMTKDYyMEQ3ODY2MjMxRDVGQ0ZCMzU4RjJEREVBMDRFMjdFRUZEMjQ5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfaNJlzvzhkaHXW+yQe+rdHYUJ h2cKWiE5LYESvzjk+sIG4sB4Eg1AzgbhN38+jlUaddHjRHwJzMY2O5Fgxcz9Wuim PtKg+6EYObgQ4OF+nz0A8yV21Ntqhg/CHUHmWZHGXzQMjK6i4wunSP4VcqqJIn4I Z5QcqvPW0QP99ZD/uj9QVNauS3TcxIQTGkeZ+8GEzYdyawHGKPBG7opMOd+nuswf vDwx7fBFvZQORD5mJFK5rny7v8cxK8h6wP7B1iP2T1DG6PEh9l1Slg4pHRFvU0zT DkDcZ9AUC7dFWIKf0zX9c01GsRAKkSTLAObJskhtjnWziqUloH1arRtUXp8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYg14ZiMdX8+zWPLd6gTifu/SSQYwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNSdOK2pebTGIyPuMx5qRCGdYJ2qEw+t9ow jqW4kqjMwWSuEMxNZeVjLFhof+Wx7n8pgih7za288gTTtUKPDL9yEDB6kYsoeCrR u/hhfKfxXAR6rPwvPnwF/MMRcX5YFSIurWrZQv/XsQFazkOkz6egx17nfTu/zkmr LE1e/g9eOFWxEWtgMUq+JNtvfyBgHTVFYjq3Pt1txu9CSUK/+93vvkAILuSvRvP4 8evInOT4jTLqQhTlrRUPP+baSm9blLAUGMo71vv0cfmkZomJnkZLTKKFOGkBmCFv 58eZJHsKb0sQW27C8sDpliURZKlcGkmS0ZizXDT/mplpaMsIt+w= -----END CERTIFICATE-----Generated at Thu Jan 29 05:23:26 2026 by rpki-client