This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: EqgJj2b6fvtlY6h/Bh2C8J6ADZDbCkIhmjqjW5o4wZk= Subject key identifier: 90:79:AF:48:FB:24:B5:C6:44:BA:32:D0:C3:88:59:1E:10:88:C6:98 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 61061EC9C43D9A468558D4556E1D006EB9F2C644 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 0218 Signing time: Tue 20 Jan 2026 09:31:51 +0000 Manifest this update: Tue 20 Jan 2026 09:26:51 +0000 Manifest next update: Fri 23 Jan 2026 20:19:51 +0000 Files and hashes: 1: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: 3HgiMpNNj0kU9FQXsb/odlZJY5XlbDycWOSOQ1zRFUA=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 20:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:06:1e:c9:c4:3d:9a:46:85:58:d4:55:6e:1d:00:6e:b9:f2:c6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Jan 20 09:26:51 2026 GMT Not After : Jan 23 20:19:51 2026 GMT Subject: CN=9079AF48FB24B5C644BA32D0C388591E1088C698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:d4:ff:12:9f:c0:ea:b9:6d:23:0c:36:ba: 3e:dd:05:2e:29:9a:ef:34:17:42:84:c9:82:1a:97: 7b:8e:58:53:41:f5:82:b0:1a:6f:7c:f2:d4:11:97: da:f1:9c:55:78:41:1e:ed:00:9d:a5:40:8e:d4:c7: 40:47:5f:cc:32:1a:8b:b3:dd:31:8e:ec:43:bf:9d: 3e:1d:e7:29:14:65:ad:c8:9f:76:78:44:cf:8a:1d: d8:46:1c:fd:36:52:82:ec:6e:e4:e3:d8:cb:e6:7c: 55:c9:fb:02:88:02:91:79:69:ca:14:0a:17:a5:67: c5:ca:24:80:b1:f1:ce:40:9d:34:b2:ec:72:cd:41: 16:ce:e2:04:15:d9:65:12:64:6f:63:db:b9:87:ef: 65:03:4b:26:73:8d:c6:82:7c:54:65:ed:5d:00:8f: 00:2b:0c:d6:5c:1c:ea:c5:b7:30:4a:58:4d:9e:0c: 45:4b:5c:7b:30:3c:ae:90:14:ae:21:eb:61:b8:f2: c3:50:c8:b7:5e:0d:d1:0b:13:93:9b:e8:11:c0:e8: 84:12:f4:80:3e:f2:c2:e7:ed:a4:c8:4b:84:4e:36: 19:98:45:61:42:cc:01:f7:0e:5f:94:af:99:fe:75: c6:4a:3c:3f:ee:cc:29:eb:a7:fa:d3:74:18:4b:b0: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:79:AF:48:FB:24:B5:C6:44:BA:32:D0:C3:88:59:1E:10:88:C6:98 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:42:9f:a9:a2:ea:92:a6:0a:7b:fc:05:d6:96:b1:6d:95:8a: 3a:88:54:ea:b7:2b:80:36:eb:90:30:e9:27:c2:47:8d:d9:67: 15:95:78:3d:67:45:97:a6:00:62:b4:f8:b5:09:e8:cf:82:45: 21:fa:9d:2b:bf:00:3d:8e:6a:1f:09:27:72:11:03:79:e9:ba: 37:18:2a:b0:17:aa:84:0e:b9:e3:d1:28:c0:e2:cc:e5:30:ac: d6:c5:d1:97:64:1d:8e:b9:9e:c9:ef:a6:63:2b:b6:1f:1f:ec: 32:58:5e:4d:fb:83:6b:b9:25:60:c0:18:f2:f4:a0:5f:b3:68: ef:b8:10:2b:13:29:98:2f:9f:73:4f:65:77:e8:78:84:84:7a: 67:8d:fa:db:19:33:88:7c:85:8b:9d:fd:76:06:86:98:93:ed: 2b:5e:d5:63:0b:b1:6f:ee:cd:44:06:c2:c7:f2:e5:5b:98:db: 9b:c0:b4:82:ae:54:b5:b2:60:b0:3a:ab:54:3c:7a:4d:46:e3: cd:8f:2d:b3:21:c2:3e:92:ee:76:89:dd:e6:99:cb:c2:3d:47: 4e:92:61:57:e2:6d:5c:35:78:f8:9d:5d:99:28:ee:9b:01:80: 71:67:51:97:e4:14:73:6e:67:40:ae:51:0f:08:0e:13:ce:a4: 24:cb:97:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQYeycQ9mkaFWNRVbh0AbrnyxkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjAxMjAwOTI2NTFaFw0yNjAxMjMyMDE5NTFaMDMxMTAvBgNV BAMTKDkwNzlBRjQ4RkIyNEI1QzY0NEJBMzJEMEMzODg1OTFFMTA4OEM2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJ9T/Ep/A6rltIww2uj7dBS4p mu80F0KEyYIal3uOWFNB9YKwGm988tQRl9rxnFV4QR7tAJ2lQI7Ux0BHX8wyGouz 3TGO7EO/nT4d5ykUZa3In3Z4RM+KHdhGHP02UoLsbuTj2MvmfFXJ+wKIApF5acoU ChelZ8XKJICx8c5AnTSy7HLNQRbO4gQV2WUSZG9j27mH72UDSyZzjcaCfFRl7V0A jwArDNZcHOrFtzBKWE2eDEVLXHswPK6QFK4h62G48sNQyLdeDdELE5Ob6BHA6IQS 9IA+8sLn7aTIS4RONhmYRWFCzAH3Dl+Ur5n+dcZKPD/uzCnrp/rTdBhLsD6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHmvSPsktcZEujLQw4hZHhCIxpgwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdCn6mi6pKmCnv8BdaWsW2VijqIVOq3K4A2 65Aw6SfCR43ZZxWVeD1nRZemAGK0+LUJ6M+CRSH6nSu/AD2Oah8JJ3IRA3npujcY KrAXqoQOuePRKMDizOUwrNbF0ZdkHY65nsnvpmMrth8f7DJYXk37g2u5JWDAGPL0 oF+zaO+4ECsTKZgvn3NPZXfoeISEemeN+tsZM4h8hYud/XYGhpiT7Ste1WMLsW/u zUQGwsfy5VuY25vAtIKuVLWyYLA6q1Q8ek1G482PLbMhwj6S7naJ3eaZy8I9R06S YVfibVw1ePidXZko7psBgHFnUZfkFHNuZ0CuUQ8IDhPOpCTLl98= -----END CERTIFICATE-----Generated at Wed Jan 21 18:10:53 2026 by rpki-client