This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: yTGnb7jjnLegETekLLNAY/VtxSPXfURGfLs5ySoY1ns= Subject key identifier: 48:E9:2F:62:9C:26:E4:69:F9:CD:06:D8:36:98:00:8E:24:9C:B6:9F Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 2E9B43509BCB8A0BF99765C8F673355D1E020CB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: 0128 Signing time: Mon 19 Jan 2026 10:51:59 +0000 Manifest this update: Mon 19 Jan 2026 10:46:59 +0000 Manifest next update: Thu 22 Jan 2026 20:51:59 +0000 Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) 2: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: NSDatGedL5k6pLLwB45kMIFPBMncSxc8X08yvug0LL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 20:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9b:43:50:9b:cb:8a:0b:f9:97:65:c8:f6:73:35:5d:1e:02:0c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Jan 19 10:46:59 2026 GMT Not After : Jan 22 20:51:59 2026 GMT Subject: CN=48E92F629C26E469F9CD06D83698008E249CB69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9a:ac:66:26:b6:3f:3c:f4:aa:3d:7f:63:6f: 68:aa:c7:6a:73:af:27:3e:7f:82:a1:3a:25:bb:3f: ae:fa:66:a1:60:5f:ec:8b:6a:9e:1a:21:92:8d:03: 03:34:b9:82:15:20:c2:d5:3c:85:ab:ef:ab:c5:08: 11:cb:66:db:98:2e:9b:46:95:65:5b:f5:5a:0b:00: 68:91:c5:bd:81:df:76:d3:15:54:7a:ef:fd:27:55: 78:86:96:c6:8b:af:0d:63:b2:84:ca:44:ba:d9:5b: c3:54:b1:2a:0c:67:af:20:d9:ed:c6:bf:f7:4f:06: 94:b2:82:96:d3:5a:6c:08:21:52:ba:66:91:8e:81: 7f:ad:ab:da:36:e1:b5:1c:08:65:79:08:ab:1f:32: f6:98:d2:6f:3f:1b:af:03:83:73:08:be:3d:7e:5f: ef:7b:10:9b:70:a5:13:f2:06:d6:04:b6:59:a3:03: b5:09:2a:1a:a0:97:76:f5:97:04:c9:8c:1b:35:45: f7:ee:1c:4f:46:fd:47:8d:bc:87:1f:40:7f:2d:a7: 87:20:22:62:55:6e:eb:6f:47:13:6a:2c:2c:94:e2: 74:34:79:01:fb:32:e5:17:53:58:cf:70:1b:6b:45: f6:48:f3:18:b2:b4:7d:6c:15:f5:38:08:31:ad:15: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E9:2F:62:9C:26:E4:69:F9:CD:06:D8:36:98:00:8E:24:9C:B6:9F X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:05:9b:c6:8d:b4:28:b7:8a:d5:2b:82:53:fd:1e:b6:49:36: b9:96:5a:b0:99:be:cc:4d:b7:a8:d0:84:59:b1:a6:85:7f:5d: 12:9d:9d:60:25:f0:f4:6f:c6:d9:96:58:24:a5:ca:92:61:63: 9d:61:31:de:03:d9:ec:9d:f5:96:a9:b0:2f:f4:03:0c:cf:28: 0e:d2:d0:c0:80:1f:ff:33:3d:22:4b:4b:89:bd:c0:16:25:2e: a5:eb:26:c3:d3:2c:5c:7c:7f:18:8d:60:d2:f0:48:d5:cc:eb: 39:17:e8:57:37:a9:70:51:be:b5:fc:67:1a:a3:99:50:e1:bf: 64:a6:4d:5f:b4:01:e5:b2:bf:9d:2b:cd:97:66:5a:ee:57:db: f8:93:91:38:ea:00:c4:f2:15:c4:45:24:b5:46:04:b6:14:26: f7:ae:8f:87:5b:87:af:f4:aa:e1:7e:d1:df:70:1c:4f:41:4e: 76:69:dc:23:37:e3:eb:d1:59:03:d8:fd:16:bf:79:09:cf:0e: b1:54:d0:ab:a7:cf:51:ee:78:f7:20:e9:a2:c2:ab:24:10:72: 2f:24:23:85:95:79:9b:3e:c9:fb:10:13:ff:17:cc:20:59:04: 69:f0:1c:72:09:b3:77:50:11:13:08:28:ce:18:56:b0:e1:18: 72:c5:92:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULptDUJvLigv5l2XI9nM1XR4CDLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNjAxMTkxMDQ2NTlaFw0yNjAxMjIyMDUxNTlaMDMxMTAvBgNV BAMTKDQ4RTkyRjYyOUMyNkU0NjlGOUNEMDZEODM2OTgwMDhFMjQ5Q0I2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXmqxmJrY/PPSqPX9jb2iqx2pz ryc+f4KhOiW7P676ZqFgX+yLap4aIZKNAwM0uYIVIMLVPIWr76vFCBHLZtuYLptG lWVb9VoLAGiRxb2B33bTFVR67/0nVXiGlsaLrw1jsoTKRLrZW8NUsSoMZ68g2e3G v/dPBpSygpbTWmwIIVK6ZpGOgX+tq9o24bUcCGV5CKsfMvaY0m8/G68Dg3MIvj1+ X+97EJtwpRPyBtYEtlmjA7UJKhqgl3b1lwTJjBs1RffuHE9G/UeNvIcfQH8tp4cg ImJVbutvRxNqLCyU4nQ0eQH7MuUXU1jPcBtrRfZI8xiytH1sFfU4CDGtFVsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOkvYpwm5Gn5zQbYNpgAjiSctp8wHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYFm8aNtCi3itUrglP9HrZJNrmWWrCZvsxN t6jQhFmxpoV/XRKdnWAl8PRvxtmWWCSlypJhY51hMd4D2eyd9ZapsC/0AwzPKA7S 0MCAH/8zPSJLS4m9wBYlLqXrJsPTLFx8fxiNYNLwSNXM6zkX6Fc3qXBRvrX8Zxqj mVDhv2SmTV+0AeWyv50rzZdmWu5X2/iTkTjqAMTyFcRFJLVGBLYUJveuj4dbh6/0 quF+0d9wHE9BTnZp3CM34+vRWQPY/Ra/eQnPDrFU0Kunz1HuePcg6aLCqyQQci8k I4WVeZs+yfsQE/8XzCBZBGnwHHIJs3dQERMIKM4YVrDhGHLFks8= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:33 2026 by rpki-client