This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: /SNfakQTuX3B4BqoIj19xSs3dIBRhIc5in/0qX/l4dA= Subject key identifier: A0:7F:F5:8E:FA:03:5C:1B:B5:19:87:42:B1:62:77:BF:C2:84:8B:90 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 48FB5BDC05FCC0A4631C49DF0901B2948BA8C018 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: C3 Signing time: Tue 20 Jan 2026 19:30:52 +0000 Manifest this update: Tue 20 Jan 2026 19:25:52 +0000 Manifest next update: Fri 23 Jan 2026 20:05:52 +0000 Files and hashes: 1: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: M9hRYrZQBbWf/GTPrxs2oDJxBVww3K/mVAJsDWIc2Vk=) 2: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 4: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 20:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fb:5b:dc:05:fc:c0:a4:63:1c:49:df:09:01:b2:94:8b:a8:c0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Jan 20 19:25:52 2026 GMT Not After : Jan 23 20:05:52 2026 GMT Subject: CN=A07FF58EFA035C1BB5198742B16277BFC2848B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:31:56:03:fa:68:a3:dc:b5:58:f8:ba:ca: be:5a:30:a9:92:c0:67:3f:61:44:2b:9d:60:d6:d7: 49:48:fe:97:e4:fb:8d:f9:94:a4:46:b6:f3:e1:16: 57:80:01:d6:47:14:3e:1e:5c:8c:cc:9a:ea:b9:cb: 1e:b2:8d:15:b9:68:f9:01:e4:3c:b4:0b:48:7f:63: ad:17:40:48:7e:06:3b:46:23:a3:cc:85:0d:df:a9: 33:c0:dd:a8:92:ca:c9:8a:d7:95:88:82:e8:56:b7: dd:89:41:61:df:79:3c:25:17:72:22:be:e4:53:92: e3:74:96:51:b6:94:a2:9f:47:b9:ca:33:46:00:52: b8:28:ed:58:53:c9:74:d5:dc:a3:c5:db:17:40:e9: d5:d9:13:11:2c:30:62:5d:71:8f:42:51:b9:23:28: eb:3a:db:17:44:4e:1b:bf:3c:21:85:20:b3:8f:b4: f7:fe:70:5a:1d:1f:13:a2:c8:4a:1b:a4:7f:c5:7d: e5:bf:e1:c5:4e:da:7e:f4:2d:2a:b3:a9:c8:88:15: 5e:b6:6b:c0:56:68:3d:96:9f:74:7d:61:14:ef:8b: c0:5f:2e:8d:02:c3:0e:e1:cf:f6:49:67:16:03:30: 0d:56:ec:3b:73:9e:f1:db:db:05:34:03:55:3c:6b: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:F5:8E:FA:03:5C:1B:B5:19:87:42:B1:62:77:BF:C2:84:8B:90 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:66:21:5c:a7:34:5b:06:04:e4:fa:67:ce:31:90:5a:92:23: 06:32:5d:7b:45:2c:d9:86:93:d0:ee:ad:bc:8d:ed:b5:3b:50: 1d:3c:a2:5d:b9:bf:cc:fe:a2:19:ff:4a:b8:8c:27:3c:7b:0e: f6:05:52:b3:78:fc:51:63:2e:61:20:38:e9:8d:b7:19:94:a7: 30:9b:8e:c7:ed:2c:c3:07:3e:82:d3:5e:05:29:25:b8:d2:c8: f2:49:5e:4e:d2:ca:f9:b7:15:eb:e7:11:9d:11:eb:22:23:cb: ed:0f:c0:e6:52:3f:4d:a8:ea:a0:27:59:64:13:32:c2:a9:d9: da:1d:82:4f:da:9f:2e:b6:78:41:1f:be:b7:8a:87:fe:d8:e2: 24:e7:87:87:40:d0:2c:2b:c4:d9:f7:d6:e0:a7:4d:b9:71:df: a8:c0:82:a3:b9:f7:d1:fa:0b:61:e0:2b:5c:ab:62:3c:85:66: 45:0b:2d:4c:94:9d:bb:b9:8a:3b:20:27:66:48:c0:79:35:d0: fb:e3:4a:98:35:e9:56:e7:80:f3:6b:77:22:4b:98:0e:6b:97: dd:12:fa:23:1b:d6:02:82:e5:75:37:fe:b3:e6:4b:51:37:7e: 15:69:65:18:83:d5:f6:e0:a8:75:34:e0:d1:66:46:3d:ea:26: ca:31:4b:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPtb3AX8wKRjHEnfCQGylIuowBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjAxMjAxOTI1NTJaFw0yNjAxMjMyMDA1NTJaMDMxMTAvBgNV BAMTKEEwN0ZGNThFRkEwMzVDMUJCNTE5ODc0MkIxNjI3N0JGQzI4NDhCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2TFWA/poo9y1WPi6yr5aMKmS wGc/YUQrnWDW10lI/pfk+435lKRGtvPhFleAAdZHFD4eXIzMmuq5yx6yjRW5aPkB 5Dy0C0h/Y60XQEh+BjtGI6PMhQ3fqTPA3aiSysmK15WIguhWt92JQWHfeTwlF3Ii vuRTkuN0llG2lKKfR7nKM0YAUrgo7VhTyXTV3KPF2xdA6dXZExEsMGJdcY9CUbkj KOs62xdEThu/PCGFILOPtPf+cFodHxOiyEobpH/FfeW/4cVO2n70LSqzqciIFV62 a8BWaD2Wn3R9YRTvi8BfLo0Cww7hz/ZJZxYDMA1W7DtznvHb2wU0A1U8a8wDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoH/1jvoDXBu1GYdCsWJ3v8KEi5AwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5mIVynNFsGBOT6Z84xkFqSIwYyXXtFLNmG k9DurbyN7bU7UB08ol25v8z+ohn/SriMJzx7DvYFUrN4/FFjLmEgOOmNtxmUpzCb jsftLMMHPoLTXgUpJbjSyPJJXk7Syvm3FevnEZ0R6yIjy+0PwOZSP02o6qAnWWQT MsKp2dodgk/any62eEEfvreKh/7Y4iTnh4dA0CwrxNn31uCnTblx36jAgqO599H6 C2HgK1yrYjyFZkULLUyUnbu5ijsgJ2ZIwHk10PvjSpg16VbngPNrdyJLmA5rl90S +iMb1gKC5XU3/rPmS1E3fhVpZRiD1fbgqHU04NFmRj3qJsoxS3E= -----END CERTIFICATE-----Generated at Wed Jan 21 12:14:47 2026 by rpki-client