This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: B3YxsJxKcdF+fgjShfRHUD4f9IRe1suLTMG+hlry8k8= Subject key identifier: FD:8F:84:13:35:B9:C9:A0:84:EB:44:05:C0:87:2B:76:59:63:29:97 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 2F49C02E63ADE5C7D6DE834EC41677EAC63518C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0355 Signing time: Sat 31 Jan 2026 15:11:44 +0000 Manifest this update: Sat 31 Jan 2026 15:06:44 +0000 Manifest next update: Wed 04 Feb 2026 02:03:44 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: ZSuoZd4kFh3WHNxXA1SQDS76uMTMyqDBQQnH2peNj6M=) 3: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:c0:2e:63:ad:e5:c7:d6:de:83:4e:c4:16:77:ea:c6:35:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jan 31 15:06:44 2026 GMT Not After : Feb 4 02:03:44 2026 GMT Subject: CN=FD8F841335B9C9A084EB4405C0872B7659632997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:92:9f:f3:00:ab:8a:1a:b7:91:3e:fb:74: 91:ad:4b:bf:c4:41:62:b6:8c:9a:27:06:2c:0b:36: d7:68:14:9c:b0:33:80:07:09:7c:05:5b:48:a0:eb: 82:74:36:76:7b:56:f9:c8:44:dc:87:a9:74:4d:40: de:3d:53:e0:4b:f9:e7:ff:6f:42:e5:b9:06:c5:5b: 4e:02:b1:33:72:82:06:47:88:02:8b:4e:12:cd:25: 8c:9c:34:40:6e:4e:07:1d:5b:d8:24:c9:f0:7f:c6: 5b:10:0f:7e:b6:af:e0:f2:cc:d3:d8:0a:70:45:b5: 09:ab:32:51:d8:45:b8:fa:aa:73:a8:4b:f4:e9:57: 4f:82:80:62:bb:30:71:0e:bf:48:e2:8d:03:e4:d5: 95:98:8d:09:8e:ee:cb:96:be:ec:91:38:35:31:fb: 96:4b:97:46:5f:9d:b9:a7:72:dd:26:d2:9e:07:49: 37:bf:5d:ce:e4:e1:e3:07:5a:56:a8:53:d5:55:d7: ec:ca:41:a1:95:ad:2d:a8:cf:b4:f4:c3:5c:32:95: c8:f5:c9:ba:97:4f:4d:a0:64:fd:50:67:21:7e:61: 7c:f0:63:1f:8a:65:96:9d:23:0a:fe:2c:9d:96:9a: b6:95:d0:ea:46:fa:66:c5:44:52:1a:d4:6f:b6:40: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8F:84:13:35:B9:C9:A0:84:EB:44:05:C0:87:2B:76:59:63:29:97 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cd:18:b4:80:96:eb:1d:a8:db:2e:01:ac:d0:0c:21:ad:4d: f6:98:fd:67:bc:cd:99:10:db:b0:54:6b:cb:94:a1:04:41:5f: 91:9e:5f:d1:cb:7d:27:54:bd:bb:e8:d8:f3:e2:68:54:36:e8: 1c:c4:4d:24:99:ad:25:33:17:5b:d5:b1:c1:4a:10:16:4a:9f: a8:27:ad:77:f4:29:53:f6:5d:36:27:e7:ad:34:07:8e:46:e3: 2f:d1:cf:3b:99:f1:cf:fd:82:85:d5:51:e4:56:9c:55:ae:62: d3:09:74:a3:42:9a:9e:e9:9c:19:f7:ad:72:47:cc:14:5e:21: 2c:a1:76:ce:52:f5:f6:16:a9:e3:6b:1c:58:73:6b:6e:28:97: 15:ce:75:cd:73:27:6e:6e:39:20:5a:8e:22:40:34:a3:f9:c4: fa:e0:6e:69:53:11:06:b0:5f:c4:79:fb:f7:18:a1:94:20:3f: fb:28:5c:88:33:9f:e0:dd:70:51:7e:6a:e0:01:c3:3e:b7:63: 89:ed:2a:21:32:16:27:ec:0a:18:e6:a6:2b:09:72:00:06:90: 4e:ca:1e:de:ff:68:4f:d5:48:f4:d1:d7:25:f8:de:43:39:4c: 9c:68:ae:8b:40:48:38:ba:ec:5b:e9:eb:40:14:0e:9d:f8:12: 66:8a:f9:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0nALmOt5cfW3oNOxBZ36sY1GMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNjAxMzExNTA2NDRaFw0yNjAyMDQwMjAzNDRaMDMxMTAvBgNV BAMTKEZEOEY4NDEzMzVCOUM5QTA4NEVCNDQwNUMwODcyQjc2NTk2MzI5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJ5Kf8wCrihq3kT77dJGtS7/E QWK2jJonBiwLNtdoFJywM4AHCXwFW0ig64J0NnZ7VvnIRNyHqXRNQN49U+BL+ef/ b0LluQbFW04CsTNyggZHiAKLThLNJYycNEBuTgcdW9gkyfB/xlsQD362r+DyzNPY CnBFtQmrMlHYRbj6qnOoS/TpV0+CgGK7MHEOv0jijQPk1ZWYjQmO7suWvuyRODUx +5ZLl0Zfnbmnct0m0p4HSTe/Xc7k4eMHWlaoU9VV1+zKQaGVrS2oz7T0w1wylcj1 ybqXT02gZP1QZyF+YXzwYx+KZZadIwr+LJ2WmraV0OpG+mbFRFIa1G+2QFihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Y+EEzW5yaCE60QFwIcrdlljKZcwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbNGLSAlusdqNsuAazQDCGtTfaY/We8zZkQ 27BUa8uUoQRBX5GeX9HLfSdUvbvo2PPiaFQ26BzETSSZrSUzF1vVscFKEBZKn6gn rXf0KVP2XTYn5600B45G4y/RzzuZ8c/9goXVUeRWnFWuYtMJdKNCmp7pnBn3rXJH zBReISyhds5S9fYWqeNrHFhza24olxXOdc1zJ25uOSBajiJANKP5xPrgbmlTEQaw X8R5+/cYoZQgP/soXIgzn+DdcFF+auABwz63Y4ntKiEyFifsChjmpisJcgAGkE7K Ht7/aE/VSPTR1yX43kM5TJxorotASDi67Fvp60AUDp34EmaK+c8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:48:04 2026 by rpki-client