This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: DJTgymDHj04HfL5rHZMngG+10zdreCxNpahs0dfHvzY= Subject key identifier: E6:E1:3A:94:03:4C:3B:81:CB:ED:E3:7A:42:F4:CD:4F:F8:E3:D0:B9 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 5FA7408AAE4896364EAE2998015E346119E1A4B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: E5 Signing time: Sat 03 Jan 2026 22:50:00 +0000 Manifest this update: Sat 03 Jan 2026 22:45:00 +0000 Manifest next update: Wed 07 Jan 2026 06:51:00 +0000 Files and hashes: 1: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 2: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) 3: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: yJdBKSY7kSrNqs1ZTS+9sofOi6iCl/b/jvS9Lc8wjKU=) 4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a7:40:8a:ae:48:96:36:4e:ae:29:98:01:5e:34:61:19:e1:a4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Jan 3 22:45:00 2026 GMT Not After : Jan 7 06:51:00 2026 GMT Subject: CN=E6E13A94034C3B81CBEDE37A42F4CD4FF8E3D0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:0d:2c:3a:ac:5c:1f:61:84:38:ef:11:ae: a8:32:02:d5:f8:15:92:f7:37:58:a2:6a:eb:77:16: e2:59:5c:77:4d:b7:89:c9:35:a9:f5:05:b5:ef:c2: 84:cc:a1:7f:ad:ff:f5:ac:ef:c2:4a:dc:33:3e:a9: 7c:3b:d8:2a:2e:2e:1e:d0:5c:b6:57:c4:96:5c:61: 6f:8f:34:58:fc:8c:97:93:d9:77:82:c9:d7:cd:db: dd:41:8a:87:a7:b9:e4:f1:bb:64:01:b7:f4:f8:f4: be:ab:8b:28:a4:c5:3f:59:5b:1b:4d:02:e8:85:0c: 66:b7:42:e1:f4:76:33:59:5f:cb:95:ed:9e:bf:6c: 89:c2:53:69:2a:23:42:f9:b7:6a:da:68:28:b9:43: bd:52:da:d4:9f:d2:7b:e2:73:27:76:63:d7:24:b6: 69:22:70:03:0c:7b:9d:ff:47:2e:d6:7d:42:e8:9c: a7:78:54:55:8c:ce:82:9e:0b:c5:c5:82:cf:6a:51: 99:78:db:35:3d:65:ff:30:81:74:b6:58:c7:ae:a8: 5d:27:cb:e0:15:bb:0d:d5:4c:71:63:5c:b3:0a:33: 08:f9:b9:ae:36:30:b7:be:9f:c3:3f:fa:00:4a:5e: 4e:9c:f5:17:33:d2:2d:64:d2:06:84:11:45:b7:b7: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:3A:94:03:4C:3B:81:CB:ED:E3:7A:42:F4:CD:4F:F8:E3:D0:B9 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bf:ad:7a:aa:fe:fd:e8:98:c5:ad:81:da:37:21:f2:bd:dc: 50:ed:b5:a5:a9:22:a4:d5:03:db:81:53:05:8a:b8:62:f9:02: e7:62:ec:72:82:59:62:eb:56:8e:fd:56:8e:c0:f1:a8:7e:ba: 3a:4f:c5:82:66:13:1b:25:db:bf:d6:45:3b:23:25:a7:0c:15: cb:96:08:87:c7:89:28:92:6a:39:1e:7f:35:63:89:9c:aa:a4: 26:ef:d0:c8:f6:7d:a3:29:d7:84:4c:dd:bc:61:91:67:ed:db: a1:89:03:1c:30:c3:8a:5f:34:12:87:39:27:c7:8e:60:7f:d6: 6b:c4:b8:3e:a0:54:ab:17:7e:96:3d:15:ba:56:7e:35:8e:c7: f0:fb:33:da:33:14:d7:7b:4d:26:e3:84:ce:9e:50:58:bf:94: 74:f4:ca:63:23:45:5d:f4:14:d6:24:c7:b5:f6:72:9b:06:ad: 25:f7:f1:83:1c:d6:9b:71:ff:16:95:63:3f:61:db:f8:2a:f7: 0f:c2:09:75:15:bc:64:b5:5f:c8:11:0e:28:87:a6:8e:dc:33: 4a:1b:29:63:2e:8d:d8:1b:8b:ed:81:54:9b:5b:df:af:29:30: f6:15:c1:82:b9:a4:25:57:15:13:69:93:b3:70:e7:c1:f3:1b: 3e:30:80:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6dAiq5IljZOrimYAV40YRnhpLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNjAxMDMyMjQ1MDBaFw0yNjAxMDcwNjUxMDBaMDMxMTAvBgNV BAMTKEU2RTEzQTk0MDM0QzNCODFDQkVERTM3QTQyRjRDRDRGRjhFM0QwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGQ0sOqxcH2GEOO8RrqgyAtX4 FZL3N1iiaut3FuJZXHdNt4nJNan1BbXvwoTMoX+t//Ws78JK3DM+qXw72CouLh7Q XLZXxJZcYW+PNFj8jJeT2XeCydfN291BioenueTxu2QBt/T49L6riyikxT9ZWxtN AuiFDGa3QuH0djNZX8uV7Z6/bInCU2kqI0L5t2raaCi5Q71S2tSf0nvicyd2Y9ck tmkicAMMe53/Ry7WfULonKd4VFWMzoKeC8XFgs9qUZl42zU9Zf8wgXS2WMeuqF0n y+AVuw3VTHFjXLMKMwj5ua42MLe+n8M/+gBKXk6c9Rcz0i1k0gaEEUW3t9MFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uE6lANMO4HL7eN6QvTNT/jj0LkwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2/rXqq/v3omMWtgdo3IfK93FDttaWpIqTV A9uBUwWKuGL5Audi7HKCWWLrVo79Vo7A8ah+ujpPxYJmExsl27/WRTsjJacMFcuW CIfHiSiSajkefzVjiZyqpCbv0Mj2faMp14RM3bxhkWft26GJAxwww4pfNBKHOSfH jmB/1mvEuD6gVKsXfpY9FbpWfjWOx/D7M9ozFNd7TSbjhM6eUFi/lHT0ymMjRV30 FNYkx7X2cpsGrSX38YMc1ptx/xaVYz9h2/gq9w/CCXUVvGS1X8gRDiiHpo7cM0ob KWMujdgbi+2BVJtb368pMPYVwYK5pCVXFRNpk7Nw58HzGz4wgB0= -----END CERTIFICATE-----Generated at Mon Jan 5 03:05:25 2026 by rpki-client