This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: //UWVJlmnofduhcHN5NRfaZ7LY/SYY+KjSEojp3qQ6g= Subject key identifier: 5B:CE:09:67:9E:B4:7A:7D:4F:2D:CC:C7:49:CB:F3:46:2A:D7:D4:5C Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 29A4862735C3099BFB241006F4E4FCDB6956250E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: F2 Signing time: Tue 20 Jan 2026 07:35:39 +0000 Manifest this update: Tue 20 Jan 2026 07:30:39 +0000 Manifest next update: Fri 23 Jan 2026 07:51:39 +0000 Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: BQBRdtLnbvY1HxDQJYEcPAHWlZLllDRB4jrhGDHSyTI=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 07:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a4:86:27:35:c3:09:9b:fb:24:10:06:f4:e4:fc:db:69:56:25:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Jan 20 07:30:39 2026 GMT Not After : Jan 23 07:51:39 2026 GMT Subject: CN=5BCE09679EB47A7D4F2DCCC749CBF3462AD7D45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ed:d5:64:31:6d:19:dc:3d:1b:22:f8:68:f8: f6:ab:04:46:06:f8:11:fb:f0:95:f0:94:14:52:95: b0:2f:37:bd:3a:7b:e1:16:cb:3f:9f:da:49:12:81: 0b:63:22:50:d2:60:84:ee:86:b2:c2:d8:fe:db:5a: 7f:c9:d2:c7:e2:70:89:af:f9:3a:9b:83:f2:1b:8d: 26:c2:9b:76:a3:5a:f7:33:e6:56:4d:24:fa:b8:c7: 3c:df:1e:c3:b6:fd:80:e4:e2:37:c0:d5:86:84:cb: c4:c3:51:8b:8f:ec:2f:b4:73:2c:e3:7a:46:ae:0f: 1b:cc:83:86:a1:85:07:47:86:4a:d9:a5:80:19:c7: 6d:4f:87:f3:d2:b4:21:be:5f:15:9a:30:4a:d0:a0: fa:aa:1a:c1:66:03:37:8c:e1:3b:56:12:78:3a:21: 94:31:1f:c0:b4:98:cc:53:e3:06:55:0a:5a:84:b3: d9:14:57:ce:b6:41:15:6a:93:12:70:f4:cb:b8:5f: 6d:29:23:25:5d:61:19:ed:49:01:d9:59:a2:19:a5: 4d:20:ae:f1:9a:5b:b1:fb:a3:00:09:10:a2:f9:c4: a1:65:42:7c:79:f0:f4:46:7b:93:17:46:58:61:0e: 7c:06:35:68:c0:9b:26:a8:6a:bf:39:7c:19:e2:2d: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CE:09:67:9E:B4:7A:7D:4F:2D:CC:C7:49:CB:F3:46:2A:D7:D4:5C X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2f:5e:78:2e:cc:e3:94:70:65:b1:4d:7a:73:46:40:6d:cb: 58:54:48:d4:54:2c:57:ce:03:19:fe:79:e2:49:e6:47:55:ce: 5c:66:8f:c6:99:5d:69:a5:c1:16:07:70:6d:1b:21:1a:2c:14: 3c:a8:85:21:34:c8:d9:82:48:01:9e:db:72:85:2f:18:72:98: 60:98:b8:82:8e:ab:ca:f8:c1:0a:2c:5a:0d:9d:e6:68:86:2f: 48:4c:f9:bc:60:8e:fb:a1:42:1c:72:b8:c2:b0:1b:a5:6a:99: 8f:60:85:59:b1:cc:a3:cf:8c:9a:ac:07:14:96:12:b0:fc:b6: bf:1b:34:ee:15:a2:e4:f8:25:57:1d:b5:22:23:78:5c:12:7a: 32:4f:63:75:33:c2:72:31:22:12:2d:9c:de:db:5e:63:89:30: b3:ff:d3:d4:12:b4:c2:c9:7a:2e:13:71:da:79:18:53:14:1a: 36:f1:07:f7:88:8b:c1:2a:d7:4c:40:52:7c:e8:72:ca:ce:56: 14:e5:cf:7b:57:3a:af:ca:9c:ea:f5:09:e5:d4:fa:f1:87:4e: ae:ae:23:97:50:a5:f4:2b:d4:72:a3:7c:74:97:9e:80:e9:96: 47:e7:0f:cd:21:ba:63:6e:4f:e5:84:ad:8f:fd:d1:f5:a8:ee: 13:93:c9:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaSGJzXDCZv7JBAG9OT822lWJQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNjAxMjAwNzMwMzlaFw0yNjAxMjMwNzUxMzlaMDMxMTAvBgNV BAMTKDVCQ0UwOTY3OUVCNDdBN0Q0RjJEQ0NDNzQ5Q0JGMzQ2MkFEN0Q0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt7dVkMW0Z3D0bIvho+ParBEYG +BH78JXwlBRSlbAvN706e+EWyz+f2kkSgQtjIlDSYITuhrLC2P7bWn/J0sficImv +Tqbg/IbjSbCm3ajWvcz5lZNJPq4xzzfHsO2/YDk4jfA1YaEy8TDUYuP7C+0cyzj ekauDxvMg4ahhQdHhkrZpYAZx21Ph/PStCG+XxWaMErQoPqqGsFmAzeM4TtWEng6 IZQxH8C0mMxT4wZVClqEs9kUV862QRVqkxJw9Mu4X20pIyVdYRntSQHZWaIZpU0g rvGaW7H7owAJEKL5xKFlQnx58PRGe5MXRlhhDnwGNWjAmyaoar85fBniLZkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW84JZ560en1PLczHScvzRirX1FwwHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkvXnguzOOUcGWxTXpzRkBty1hUSNRULFfO Axn+eeJJ5kdVzlxmj8aZXWmlwRYHcG0bIRosFDyohSE0yNmCSAGe23KFLxhymGCY uIKOq8r4wQosWg2d5miGL0hM+bxgjvuhQhxyuMKwG6VqmY9ghVmxzKPPjJqsBxSW ErD8tr8bNO4VouT4JVcdtSIjeFwSejJPY3UzwnIxIhItnN7bXmOJMLP/09QStMLJ ei4Tcdp5GFMUGjbxB/eIi8Eq10xAUnzocsrOVhTlz3tXOq/KnOr1CeXU+vGHTq6u I5dQpfQr1HKjfHSXnoDplkfnD80humNuT+WErY/90fWo7hOTyf0= -----END CERTIFICATE-----Generated at Wed Jan 21 12:14:31 2026 by rpki-client