This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json) Hash identifier: 3GFx+6TVHkeiPHXCrS/kt3HXl6nnF16vULofJWZvNwM= Subject key identifier: E9:B0:12:F1:C7:7A:C5:9D:81:49:EB:1C:42:FA:61:CA:38:22:3A:F6 Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 3ACFD0CD6E82E4DEB575E31DE6F4BCA5B0FD6635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft Manifest number: 04A8 Signing time: Tue 20 Jan 2026 21:42:12 +0000 Manifest this update: Tue 20 Jan 2026 21:37:12 +0000 Manifest next update: Sat 24 Jan 2026 02:26:12 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: fILGplhDIU4U8qE+HJJyt+4SNVKoBOrgk1ZojWa+PYM=) 2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: lM92Y8NAq84+9u66XJy1rtkUnS0gYFJFy14ToZCCjs0=) 3: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: 6ga/tyo/vd1JXajqQVRJ3NMU3Wy1vHedEazyTklKCfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 02:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cf:d0:cd:6e:82:e4:de:b5:75:e3:1d:e6:f4:bc:a5:b0:fd:66:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: Jan 20 21:37:12 2026 GMT Not After : Jan 24 02:26:12 2026 GMT Subject: CN=E9B012F1C77AC59D8149EB1C42FA61CA38223AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:d6:ae:da:82:a8:2c:9c:7d:6c:41:25:be: 51:a2:82:12:c4:59:05:02:70:31:67:c7:93:d7:da: a7:c5:0d:cb:da:bf:c2:cf:f1:5c:35:54:42:21:2c: b0:f9:85:ae:08:1a:22:6f:21:3e:b7:90:6e:de:e3: f4:dd:bc:51:49:c1:2b:57:9c:ae:77:54:ac:a5:80: 08:b9:2e:47:f4:18:c7:4b:21:3c:e0:e9:8a:c0:da: cd:ae:20:ec:c7:8b:b1:f7:98:70:72:31:5c:54:6e: 16:3a:2b:cc:8a:d7:3b:3f:dd:f9:17:bf:d7:13:22: 10:db:33:e9:e4:32:41:5e:46:4f:66:11:86:13:e8: 2c:11:56:7e:33:09:6f:9a:e1:90:45:cf:b7:8b:ca: 16:f4:2b:ef:ff:a5:a3:1f:46:3f:82:cb:ba:16:9f: be:11:a4:17:2a:6f:e8:16:f6:57:a0:5e:d4:40:9c: 47:a2:69:4a:a9:ab:51:c0:ca:cb:e2:18:f5:33:56: f8:2c:6a:42:d2:2d:82:38:ef:f5:58:34:90:65:67: 2b:da:41:cf:4c:41:bf:06:c4:c1:9e:06:50:3b:68: 5e:be:4b:ce:e1:df:99:4d:2d:4a:b5:b4:94:75:a0: 96:41:20:b4:bc:d1:af:53:5f:a8:16:27:f8:3b:ff: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:12:F1:C7:7A:C5:9D:81:49:EB:1C:42:FA:61:CA:38:22:3A:F6 X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:79:1e:18:b8:1a:af:02:54:91:bc:d9:66:58:a3:56:43:2a: 8f:14:a8:1e:13:ee:8d:96:42:a9:b4:61:ee:89:18:a7:8a:8c: 03:ae:27:32:39:c3:1d:3a:8c:e3:8f:d3:bc:2e:36:ab:1e:6d: 08:d2:de:e6:59:ff:17:70:f9:0c:0b:91:1b:f9:4a:08:3c:9a: 93:fd:29:c5:58:06:f0:e0:87:30:0b:34:02:c1:ce:f2:14:66: 3a:58:28:1b:5b:fa:61:97:bf:dc:4e:93:91:68:6a:ee:46:b9: 55:3b:b8:d9:f2:a7:7b:4a:eb:40:47:da:49:54:ba:99:c7:8d: b7:32:6f:04:df:ec:51:fd:2f:68:6d:7c:73:ec:00:44:39:10: 1c:1f:54:ed:f2:73:1e:d2:b0:4b:1e:09:8d:20:30:6b:17:18: 7d:f7:55:6c:29:e9:0f:fa:97:48:2e:09:50:a5:7b:d3:86:2e: 34:38:40:09:2d:84:3b:b4:ea:40:f8:3a:40:0f:fb:7e:be:2c: 39:66:67:02:b9:9b:27:d8:d0:0e:8b:b3:84:ab:d0:42:c8:7a: 40:ee:98:44:a9:94:42:c3:64:74:e9:9a:54:e0:ca:c6:86:e1: 5d:d3:c1:6a:cc:a8:46:13:ad:62:ec:ae:b8:9f:8b:90:38:a2: 34:a8:a3:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOs/QzW6C5N61deMd5vS8pbD9ZjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNjAxMjAyMTM3MTJaFw0yNjAxMjQwMjI2MTJaMDMxMTAvBgNV BAMTKEU5QjAxMkYxQzc3QUM1OUQ4MTQ5RUIxQzQyRkE2MUNBMzgyMjNBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbtau2oKoLJx9bEElvlGighLE WQUCcDFnx5PX2qfFDcvav8LP8Vw1VEIhLLD5ha4IGiJvIT63kG7e4/TdvFFJwStX nK53VKylgAi5Lkf0GMdLITzg6YrA2s2uIOzHi7H3mHByMVxUbhY6K8yK1zs/3fkX v9cTIhDbM+nkMkFeRk9mEYYT6CwRVn4zCW+a4ZBFz7eLyhb0K+//paMfRj+Cy7oW n74RpBcqb+gW9legXtRAnEeiaUqpq1HAysviGPUzVvgsakLSLYI47/VYNJBlZyva Qc9MQb8GxMGeBlA7aF6+S87h35lNLUq1tJR1oJZBILS80a9TX6gWJ/g7/x6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bAS8cd6xZ2BSescQvphyjgiOvYwHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFG OEU3MDJGRUFEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ5Hhi4Gq8CVJG82WZYo1ZDKo8UqB4T7o2W Qqm0Ye6JGKeKjAOuJzI5wx06jOOP07wuNqsebQjS3uZZ/xdw+QwLkRv5Sgg8mpP9 KcVYBvDghzALNALBzvIUZjpYKBtb+mGXv9xOk5Foau5GuVU7uNnyp3tK60BH2klU upnHjbcybwTf7FH9L2htfHPsAEQ5EBwfVO3ycx7SsEseCY0gMGsXGH33VWwp6Q/6 l0guCVCle9OGLjQ4QAkthDu06kD4OkAP+36+LDlmZwK5myfY0A6Ls4Sr0ELIekDu mESplELDZHTpmlTgysaG4V3TwWrMqEYTrWLsrrifi5A4ojSoo24= -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:21 2026 by rpki-client