This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: eZY5M1fqpaKZrwOJhkJGeJe6Vsx75RHqpAepWu0cPPQ= Subject key identifier: FC:23:DB:E4:90:2E:2C:64:29:7F:F3:62:43:03:93:32:52:B0:EF:32 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 54989DC4428E711E556B12912C74B0008EA62D42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: 010E Signing time: Thu 08 Jan 2026 07:01:19 +0000 Manifest this update: Thu 08 Jan 2026 06:56:19 +0000 Manifest next update: Sun 11 Jan 2026 15:22:19 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 2: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: QktLWViJiZnQu6MhbnPMxlP7XGb2CSfItppZtMVmemw=) 3: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 4: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 13:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:98:9d:c4:42:8e:71:1e:55:6b:12:91:2c:74:b0:00:8e:a6:2d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Jan 8 06:56:19 2026 GMT Not After : Jan 11 15:22:19 2026 GMT Subject: CN=FC23DBE4902E2C64297FF3624303933252B0EF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:f1:00:ce:10:31:6e:f3:5e:ab:d2:e8:01: 64:1d:6b:86:89:97:75:16:e2:f7:bb:da:f3:3f:25: e2:97:90:90:d4:9a:c4:9f:d7:29:ec:61:46:98:cb: 9e:43:d7:12:a0:db:41:94:9c:0e:8e:35:d2:6e:0f: ed:3a:30:c3:15:15:0c:94:70:9a:08:54:21:2a:69: d7:59:71:eb:06:a2:c4:d3:29:4b:16:62:52:6a:47: af:cc:34:cf:00:12:87:03:e8:14:10:0e:97:5c:73: 39:37:6a:be:9e:da:51:5b:79:6b:2f:36:e6:50:22: 85:6f:f8:18:28:a5:96:83:36:ce:06:e7:5b:f6:c3: 67:20:cf:6e:e0:88:3e:16:a2:44:e8:82:ef:dd:79: 7b:f8:98:e2:97:77:98:cd:04:a9:f8:42:59:ea:9d: fa:0b:8b:a4:31:01:d1:0c:c5:0e:ea:99:31:be:44: 53:03:4d:5e:7b:57:b2:99:1d:fc:53:68:13:13:91: cf:42:bd:9b:5e:b1:9e:8f:34:eb:57:df:d6:82:91: 47:73:4c:e4:7b:2a:6f:f8:ce:fa:4d:80:0e:26:e1: 88:12:34:58:ca:1d:cf:bc:a4:94:5d:78:42:b6:f3: 2e:fd:87:35:75:cd:43:f5:50:bc:3f:08:91:a1:26: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:23:DB:E4:90:2E:2C:64:29:7F:F3:62:43:03:93:32:52:B0:EF:32 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8c:02:c7:7f:f1:18:bb:69:c1:20:32:11:f0:e2:f0:4c:84: d8:01:66:ec:24:e1:f3:e1:86:82:09:a2:45:98:4a:1c:97:b0: f5:78:2c:c0:95:9d:bb:8b:cd:5f:27:f3:c5:e3:04:e8:c3:c5: 3b:5a:b3:12:5a:90:51:12:96:11:31:61:e9:d9:d0:a9:73:95: fc:7b:35:df:53:ff:44:b8:bb:31:6a:1d:f5:ba:36:9a:9b:0a: 1b:7c:03:1d:05:2a:94:6b:ea:b2:94:bc:d8:1a:c0:0f:3a:e9: 63:d0:a0:ac:20:01:38:d3:ed:50:bc:f0:76:f3:a2:ad:81:ec: 86:7f:96:a9:c3:2a:5b:83:16:92:5f:23:b2:48:61:ce:23:bb: 15:66:37:e0:e0:28:27:03:0b:b0:4a:f5:5c:30:93:ea:0d:cd: 49:1e:0f:5f:ad:f6:68:9f:74:f1:10:fd:69:80:f8:74:27:5c: b6:92:9b:62:e6:c3:87:97:30:98:49:d2:c2:c5:38:d1:25:d7: bb:5b:b8:fb:52:0e:5e:73:4c:a6:3d:d2:17:82:39:fc:7d:b6: ee:c6:85:4d:0b:9c:6d:a3:e3:de:f0:96:78:3f:90:02:96:71: fe:fe:06:48:5e:31:98:fe:89:1e:3e:0b:9a:2f:94:18:74:a8: 41:ba:49:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJidxEKOcR5VaxKRLHSwAI6mLUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNjAxMDgwNjU2MTlaFw0yNjAxMTExNTIyMTlaMDMxMTAvBgNV BAMTKEZDMjNEQkU0OTAyRTJDNjQyOTdGRjM2MjQzMDM5MzMyNTJCMEVGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrK/EAzhAxbvNeq9LoAWQda4aJ l3UW4ve72vM/JeKXkJDUmsSf1ynsYUaYy55D1xKg20GUnA6ONdJuD+06MMMVFQyU cJoIVCEqaddZcesGosTTKUsWYlJqR6/MNM8AEocD6BQQDpdcczk3ar6e2lFbeWsv NuZQIoVv+BgopZaDNs4G51v2w2cgz27giD4WokTogu/deXv4mOKXd5jNBKn4Qlnq nfoLi6QxAdEMxQ7qmTG+RFMDTV57V7KZHfxTaBMTkc9CvZtesZ6PNOtX39aCkUdz TOR7Km/4zvpNgA4m4YgSNFjKHc+8pJRdeEK28y79hzV1zUP1ULw/CJGhJo+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/CPb5JAuLGQpf/NiQwOTMlKw7zIwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6MAsd/8Ri7acEgMhHw4vBMhNgBZuwk4fPh hoIJokWYShyXsPV4LMCVnbuLzV8n88XjBOjDxTtasxJakFESlhExYenZ0Klzlfx7 Nd9T/0S4uzFqHfW6NpqbCht8Ax0FKpRr6rKUvNgawA866WPQoKwgATjT7VC88Hbz oq2B7IZ/lqnDKluDFpJfI7JIYc4juxVmN+DgKCcDC7BK9Vwwk+oNzUkeD1+t9mif dPEQ/WmA+HQnXLaSm2Lmw4eXMJhJ0sLFONEl17tbuPtSDl5zTKY90heCOfx9tu7G hU0LnG2j497wlng/kAKWcf7+BkheMZj+iR4+C5ovlBh0qEG6SdM= -----END CERTIFICATE-----Generated at Fri Jan 9 00:54:00 2026 by rpki-client