This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: HufMhlVW4jpjPGuZu2ZBnNbFuZ/uTcJRwQaMPWUZ9fE= Subject key identifier: 4C:79:96:F9:64:01:4B:6E:38:8C:86:3D:33:51:2B:F6:C3:2C:27:62 Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 60E103899BB71F2E41C45E4B8854FB0CC085B305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 0235 Signing time: Fri 30 Jan 2026 23:41:43 +0000 Manifest this update: Fri 30 Jan 2026 23:36:43 +0000 Manifest next update: Tue 03 Feb 2026 08:46:43 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: RwjxMSL+HvyUfPOpcqJZiWBWd616gLRwvZ1t9uO6y5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e1:03:89:9b:b7:1f:2e:41:c4:5e:4b:88:54:fb:0c:c0:85:b3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Jan 30 23:36:43 2026 GMT Not After : Feb 3 08:46:43 2026 GMT Subject: CN=4C7996F964014B6E388C863D33512BF6C32C2762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:21:56:72:f1:3c:45:60:22:0e:3d:53:b8: 34:2b:af:88:a8:0c:b9:c2:b1:4b:d6:71:99:db:b3: e8:e3:2f:26:dc:56:1b:61:b7:51:5a:7b:a2:40:b5: c2:db:da:05:93:e0:95:b7:86:69:8b:cf:7a:4c:7e: 93:1a:59:2b:e9:ae:e0:d8:41:50:e4:47:b3:d3:57: be:c2:8e:d1:3f:a8:89:d8:2d:ef:26:46:58:51:a7: f8:6c:78:98:68:96:3f:42:43:a8:06:52:b0:5c:55: d2:9d:c0:31:93:44:53:da:ce:f8:11:ef:bc:a6:85: 0e:11:e7:10:f6:8a:5c:e1:ae:e7:d7:4a:c0:e2:ed: a1:aa:26:d7:2f:df:96:d9:c7:a2:f2:95:9e:3e:e0: 7f:55:bf:0b:a9:38:90:80:06:33:2e:96:d3:90:a1: ca:42:ec:b6:a3:7c:a1:26:a9:95:77:10:9f:a4:56: 43:f4:eb:97:bc:f5:57:6d:64:d3:a4:34:b5:c3:19: 84:2a:0c:15:1f:5c:dd:18:87:79:8e:cb:6e:14:fd: 25:6e:a6:34:3c:34:05:be:04:8f:88:a5:7d:6d:94: f2:af:de:21:86:0a:04:c2:5a:fb:da:5e:d9:88:f1: 54:fd:fb:1d:03:96:d7:fd:6c:c2:51:00:44:62:0f: dc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:79:96:F9:64:01:4B:6E:38:8C:86:3D:33:51:2B:F6:C3:2C:27:62 X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:57:f4:68:32:6d:56:8c:d9:b8:c4:20:36:a5:79:ee:56:bc: af:65:97:dd:0f:6a:4a:b4:9a:d9:62:a4:02:f5:77:87:24:6b: 51:50:c3:71:fd:7c:37:c8:9f:85:0e:9f:db:1e:9d:5a:22:08: ff:b2:85:e8:0d:ef:ed:a7:ee:fd:a1:70:40:a1:33:3a:44:a5: 21:56:bf:fc:04:2f:dd:d4:e3:35:46:81:9b:82:6d:bf:e5:2d: 5d:6d:26:86:9c:17:9c:ac:d4:a0:1d:05:b4:ac:51:30:d7:63: 5d:53:f7:10:df:82:6b:1f:41:5f:2b:d6:b4:b5:0c:52:b0:06: 06:64:a5:d1:84:e0:0b:a2:1d:1c:5b:b4:0d:50:5f:37:f1:2d: 64:f0:c4:4c:ba:4a:f6:79:19:9f:17:60:19:40:11:b0:8a:38: 56:ac:5e:0f:b4:a0:a0:25:80:81:84:7e:d4:7b:09:e0:5c:6e: f0:ec:87:d5:e7:f3:71:c6:a3:79:c6:53:a1:fd:d5:ee:dd:74: b5:c0:ac:d8:bb:44:9e:cf:03:6e:65:21:ae:4c:5d:48:51:c1: c7:1e:d7:66:14:5c:a9:5c:1c:ae:cb:d5:54:09:a6:1c:03:f7: 14:c4:d5:fe:c8:90:ad:75:f3:c7:77:19:08:11:2a:c2:84:3f: ea:f2:eb:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOEDiZu3Hy5BxF5LiFT7DMCFswUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNjAxMzAyMzM2NDNaFw0yNjAyMDMwODQ2NDNaMDMxMTAvBgNV BAMTKDRDNzk5NkY5NjQwMTRCNkUzODhDODYzRDMzNTEyQkY2QzMyQzI3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jiFWcvE8RWAiDj1TuDQrr4io DLnCsUvWcZnbs+jjLybcVhtht1Fae6JAtcLb2gWT4JW3hmmLz3pMfpMaWSvpruDY QVDkR7PTV77CjtE/qInYLe8mRlhRp/hseJholj9CQ6gGUrBcVdKdwDGTRFPazvgR 77ymhQ4R5xD2ilzhrufXSsDi7aGqJtcv35bZx6LylZ4+4H9VvwupOJCABjMultOQ ocpC7LajfKEmqZV3EJ+kVkP065e89VdtZNOkNLXDGYQqDBUfXN0Yh3mOy24U/SVu pjQ8NAW+BI+IpX1tlPKv3iGGCgTCWvvaXtmI8VT9+x0Dltf9bMJRAERiD9wfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTHmW+WQBS244jIY9M1Er9sMsJ2IwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdX9GgybVaM2bjEIDalee5WvK9ll90Pakq0 mtlipAL1d4cka1FQw3H9fDfIn4UOn9senVoiCP+yhegN7+2n7v2hcEChMzpEpSFW v/wEL93U4zVGgZuCbb/lLV1tJoacF5ys1KAdBbSsUTDXY11T9xDfgmsfQV8r1rS1 DFKwBgZkpdGE4AuiHRxbtA1QXzfxLWTwxEy6SvZ5GZ8XYBlAEbCKOFasXg+0oKAl gIGEftR7CeBcbvDsh9Xn83HGo3nGU6H91e7ddLXArNi7RJ7PA25lIa5MXUhRwcce 12YUXKlcHK7L1VQJphwD9xTE1f7IkK1188d3GQgRKsKEP+ry69Q= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:52 2026 by rpki-client