This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: UwKB9vPPfzqBd7w4w1ZIBG++mu2kWgXEkc3ENKpNNEk= Subject key identifier: 99:D3:38:4B:8A:DF:2F:BC:53:E8:11:76:B3:1D:E0:00:7D:D0:4E:69 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 4DC8D3F071AA039055C9595F8667ECFF9F21EA18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 01DE Signing time: Tue 20 Jan 2026 12:51:23 +0000 Manifest this update: Tue 20 Jan 2026 12:46:23 +0000 Manifest next update: Fri 23 Jan 2026 16:18:23 +0000 Files and hashes: 1: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: 9rc509rdg4FTkJ7KyqQtNu1+jR5ORpZWyOq81rX6GiM=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 16:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:d3:f0:71:aa:03:90:55:c9:59:5f:86:67:ec:ff:9f:21:ea:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Jan 20 12:46:23 2026 GMT Not After : Jan 23 16:18:23 2026 GMT Subject: CN=99D3384B8ADF2FBC53E81176B31DE0007DD04E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:8c:7e:91:50:ef:79:c9:aa:f1:7f:21:fc: 24:73:59:7c:96:14:7d:60:76:b8:95:79:ac:70:7d: 31:ba:6c:0b:5a:7b:40:bb:9b:a1:53:93:ea:00:e5: c2:37:42:74:82:53:0f:75:d0:4b:10:cc:8e:23:6d: a8:cb:0f:45:e0:50:a2:45:2a:84:56:66:09:e9:85: 39:d0:da:bd:85:12:dd:fd:d8:ce:d6:1a:8b:2a:5d: 18:e0:d1:d6:c2:2b:1c:0f:64:77:ef:8a:e3:9b:7e: 55:5e:72:ab:72:d0:b8:bb:b3:35:17:16:28:79:5a: d2:ed:45:c8:6c:bd:29:77:1a:fa:83:1b:46:75:73: 49:7c:78:20:96:33:cd:86:45:0d:d9:36:1d:31:c8: 42:49:12:8f:eb:e7:f8:88:4b:22:ef:85:95:38:de: a3:e3:5d:bf:7d:39:48:bb:91:d8:a0:19:3f:33:fd: c2:c0:65:54:c2:01:88:7e:f7:10:a1:51:e7:94:1d: d9:6e:44:de:4f:8a:5b:bf:cb:f4:15:58:b7:fb:9c: 70:30:d2:c8:ec:10:33:22:d9:fd:77:5f:9b:9e:81: 8d:3d:ab:b3:8b:22:d5:53:e1:fc:3d:00:36:84:9a: 78:ef:2f:cf:5a:aa:81:09:7d:b9:83:c8:4e:3d:c8: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:38:4B:8A:DF:2F:BC:53:E8:11:76:B3:1D:E0:00:7D:D0:4E:69 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:93:73:9f:7d:e3:ed:0a:d2:b6:aa:b8:36:bf:34:76:ac: 5e:83:da:42:e8:9a:c2:63:ff:15:d1:2a:71:28:a9:bf:a0:ee: d9:20:30:fa:a6:51:f4:3a:3f:82:87:65:0b:40:fa:3e:77:80: 24:d1:d5:b8:47:b5:5e:58:f0:45:17:60:0e:56:af:96:f0:8e: 40:d7:68:02:1d:c9:ef:e2:ca:d4:68:a9:6c:f5:56:b1:da:61: d8:1f:76:82:47:48:61:ae:b8:89:66:1f:77:eb:b1:6a:df:11: 16:b4:66:ee:3a:b3:3b:12:f5:cd:cb:54:6c:58:46:10:d3:e8: 99:c3:14:0f:e1:54:d7:42:4e:4b:9d:08:2d:b9:3e:a2:0a:d3: 1f:bc:8a:0f:ac:7e:09:59:3d:9c:e1:ff:88:1d:5f:b6:72:6f: cf:ae:4a:1e:ad:cd:65:0d:6f:d6:94:3d:eb:91:5e:6a:9d:1b: c3:c7:96:29:aa:19:41:12:e7:af:e5:e0:34:91:e9:0a:16:2d: 40:dc:30:dc:97:33:17:2d:fb:8d:3a:9f:62:05:b0:94:e4:40: 9e:14:98:79:5e:99:22:c1:d3:87:c1:01:74:03:74:17:f9:43: e5:cb:56:90:3a:2f:f1:50:eb:f0:da:5c:2d:d4:91:33:4a:18: 11:95:cd:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcjT8HGqA5BVyVlfhmfs/58h6hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNjAxMjAxMjQ2MjNaFw0yNjAxMjMxNjE4MjNaMDMxMTAvBgNV BAMTKDk5RDMzODRCOEFERjJGQkM1M0U4MTE3NkIzMURFMDAwN0REMDRFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVYx+kVDvecmq8X8h/CRzWXyW FH1gdriVeaxwfTG6bAtae0C7m6FTk+oA5cI3QnSCUw910EsQzI4jbajLD0XgUKJF KoRWZgnphTnQ2r2FEt392M7WGosqXRjg0dbCKxwPZHfviuObflVecqty0Li7szUX Fih5WtLtRchsvSl3GvqDG0Z1c0l8eCCWM82GRQ3ZNh0xyEJJEo/r5/iISyLvhZU4 3qPjXb99OUi7kdigGT8z/cLAZVTCAYh+9xChUeeUHdluRN5Pilu/y/QVWLf7nHAw 0sjsEDMi2f13X5uegY09q7OLItVT4fw9ADaEmnjvL89aqoEJfbmDyE49yKEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdM4S4rfL7xT6BF2sx3gAH3QTmkwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgKk3OffePtCtK2qrg2vzR2rF6D2kLomsJj /xXRKnEoqb+g7tkgMPqmUfQ6P4KHZQtA+j53gCTR1bhHtV5Y8EUXYA5Wr5bwjkDX aAIdye/iytRoqWz1VrHaYdgfdoJHSGGuuIlmH3frsWrfERa0Zu46szsS9c3LVGxY RhDT6JnDFA/hVNdCTkudCC25PqIK0x+8ig+sfglZPZzh/4gdX7Zyb8+uSh6tzWUN b9aUPeuRXmqdG8PHlimqGUES56/l4DSR6QoWLUDcMNyXMxct+406n2IFsJTkQJ4U mHlemSLB04fBAXQDdBf5Q+XLVpA6L/FQ6/DaXC3UkTNKGBGVzZg= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:50 2026 by rpki-client