This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: hKo91mZ0mQWL6hvXJXecimml3aKFvcVDmU+7H6bSZJ0= Subject key identifier: 40:F3:DC:54:F3:F9:1C:DE:82:5F:FB:01:CD:A7:12:84:F0:E6:F7:57 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 247E057ACA49109748BE26D20B997EB2C9447CE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 030D Signing time: Tue 20 Jan 2026 23:30:01 +0000 Manifest this update: Tue 20 Jan 2026 23:25:01 +0000 Manifest next update: Sat 24 Jan 2026 10:29:01 +0000 Files and hashes: 1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: e2maHu55FP5fp6lO5LJsBGEPwnDr2gnnfc83H1faNCM=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: /6WhuPqhiyfGZFj8tX8/LBugVCji264CQtw+2PQuZmY=) 3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 10:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7e:05:7a:ca:49:10:97:48:be:26:d2:0b:99:7e:b2:c9:44:7c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Jan 20 23:25:01 2026 GMT Not After : Jan 24 10:29:01 2026 GMT Subject: CN=40F3DC54F3F91CDE825FFB01CDA71284F0E6F757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:a0:c0:dd:cd:d1:df:a6:86:1e:27:b5:35: 96:b0:91:61:11:96:4c:f2:2a:9f:75:df:5b:d9:72: 12:99:35:65:b6:83:06:4c:21:f6:7f:ee:26:e9:83: 92:3a:9f:fc:87:18:1a:86:57:65:6d:44:00:e3:a0: b9:e3:ff:7d:92:1e:0c:4b:77:a3:7a:b2:c9:7a:0c: de:35:bd:fb:4b:5f:50:bd:f8:06:47:29:ec:22:f7: 3e:a7:8f:76:af:92:d3:05:70:2b:03:09:06:84:8e: 7a:0c:83:04:50:60:ca:cc:ad:8e:b9:3b:e8:72:7d: d6:7a:03:59:9a:6f:9d:3d:11:a7:64:9a:27:ff:00: d9:c0:fb:3c:fa:a8:80:1b:cf:ef:14:00:4d:ca:71: 01:2e:72:c6:7c:32:fc:0a:5c:6c:9a:90:f1:b5:7f: e7:da:07:06:b0:95:a8:06:f2:2b:44:2c:77:00:eb: 4e:55:51:58:17:c7:5c:aa:71:a4:d1:0e:2a:29:73: bb:fe:04:58:21:3a:50:73:2e:df:85:ad:57:0d:14: 62:e5:17:5e:a9:35:ab:22:06:63:f3:94:9a:0b:1b: 7a:cb:fe:e4:7c:f7:13:de:76:01:11:f2:05:5c:dd: dc:43:56:13:b6:60:28:08:33:12:b8:95:e4:a7:ef: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F3:DC:54:F3:F9:1C:DE:82:5F:FB:01:CD:A7:12:84:F0:E6:F7:57 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b3:97:fb:57:16:1a:5c:4c:ea:a2:50:fb:1c:dc:d1:d9:76: da:ce:ed:d1:4b:03:57:72:6e:7b:2c:5d:73:b1:f7:ce:8d:ab: b8:eb:b9:cb:b0:d9:95:b6:fe:8a:35:62:aa:72:ed:cb:da:4d: 0b:50:dc:40:6c:fe:40:2a:62:99:2b:34:0d:f0:37:30:dd:5a: 2a:1f:c5:16:fc:39:a9:34:8a:4e:aa:59:ab:06:56:89:4b:37: 25:07:32:be:47:2e:6c:61:d0:c4:12:05:c9:f3:1d:52:23:fb: 87:69:83:fe:eb:10:9e:00:e0:fe:64:da:58:e4:e2:67:f4:0a: 8b:d6:a7:37:48:a9:4f:c2:07:be:bf:4a:bd:0e:d9:ea:ab:bd: 37:ef:c3:f6:c9:b2:9b:7a:f1:d7:a0:42:38:6e:ff:b4:70:77: 5f:d3:04:fa:15:19:31:f7:f4:af:76:a8:93:15:60:e4:01:03: d4:97:12:a1:bb:66:04:37:32:cf:b4:4d:fd:cb:0e:77:a4:93: c8:3b:c5:f1:05:5d:5e:2c:68:4d:df:24:ec:9c:c4:76:99:5f: 6f:94:14:41:86:e1:50:4d:f7:3f:e6:92:0e:48:8f:d5:75:34: 6a:02:e3:f8:75:20:3e:31:2e:e7:87:5a:e5:a9:65:bf:8d:52: c0:80:b8:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJH4FespJEJdIvibSC5l+sslEfOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNjAxMjAyMzI1MDFaFw0yNjAxMjQxMDI5MDFaMDMxMTAvBgNV BAMTKDQwRjNEQzU0RjNGOTFDREU4MjVGRkIwMUNEQTcxMjg0RjBFNkY3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXaDA3c3R36aGHie1NZawkWER lkzyKp9131vZchKZNWW2gwZMIfZ/7ibpg5I6n/yHGBqGV2VtRADjoLnj/32SHgxL d6N6ssl6DN41vftLX1C9+AZHKewi9z6nj3avktMFcCsDCQaEjnoMgwRQYMrMrY65 O+hyfdZ6A1mab509Eadkmif/ANnA+zz6qIAbz+8UAE3KcQEucsZ8MvwKXGyakPG1 f+faBwawlagG8itELHcA605VUVgXx1yqcaTRDiopc7v+BFghOlBzLt+FrVcNFGLl F16pNasiBmPzlJoLG3rL/uR89xPedgER8gVc3dxDVhO2YCgIMxK4leSn70dLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPPcVPP5HN6CX/sBzacShPDm91cwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWzl/tXFhpcTOqiUPsc3NHZdtrO7dFLA1dy bnssXXOx986Nq7jrucuw2ZW2/oo1Yqpy7cvaTQtQ3EBs/kAqYpkrNA3wNzDdWiof xRb8Oak0ik6qWasGVolLNyUHMr5HLmxh0MQSBcnzHVIj+4dpg/7rEJ4A4P5k2ljk 4mf0CovWpzdIqU/CB76/Sr0O2eqrvTfvw/bJspt68degQjhu/7Rwd1/TBPoVGTH3 9K92qJMVYOQBA9SXEqG7ZgQ3Ms+0Tf3LDnekk8g7xfEFXV4saE3fJOycxHaZX2+U FEGG4VBN9z/mkg5Ij9V1NGoC4/h1ID4xLueHWuWpZb+NUsCAuEY= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:35 2026 by rpki-client