This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: 7LTceaTtuBrqWGDX/YI0UNUaxSmClS1tTuZ+fjTlPKk= Subject key identifier: F0:B4:08:E5:2B:5C:3A:58:EB:E7:C1:AC:86:FD:F7:6D:42:FE:10:5D Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 6539FF82289E04D0EA2E251A0F2B76D391E41A9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 022C Signing time: Sun 11 Jan 2026 06:31:42 +0000 Manifest this update: Sun 11 Jan 2026 06:26:42 +0000 Manifest next update: Wed 14 Jan 2026 10:20:42 +0000 Files and hashes: 1: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: LBVa9+0ob6ZGupY+2MlsmbPAmxOp0qSsQPLQOBlPbyw=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 09:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:39:ff:82:28:9e:04:d0:ea:2e:25:1a:0f:2b:76:d3:91:e4:1a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Jan 11 06:26:42 2026 GMT Not After : Jan 14 10:20:42 2026 GMT Subject: CN=F0B408E52B5C3A58EBE7C1AC86FDF76D42FE105D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:a4:35:a3:dc:fb:b9:59:8e:d6:28:f2:99: d4:48:8c:0c:30:98:68:73:b3:a1:63:bb:1a:f4:8a: 05:fc:15:4a:1f:89:da:c4:f4:fa:2b:45:14:49:5e: 11:98:a1:b7:08:b4:ea:13:22:b1:4d:24:c9:9e:84: 08:d2:18:af:fb:d6:9d:ba:6c:f4:90:c6:8b:21:38: e1:7c:6b:12:0e:6d:c5:6d:c4:85:18:b6:5d:81:63: 7b:a3:27:2c:0f:b8:8f:88:d6:90:14:44:9f:2b:87: 0a:a8:1d:38:97:9d:5b:32:96:14:d7:e6:99:9b:69: ab:89:2f:28:3a:19:b4:09:24:c5:35:43:c3:55:36: 35:49:48:46:3b:62:4d:13:50:b6:66:d2:73:11:e8: 09:cb:8e:46:2f:15:24:e8:65:22:1a:89:46:ff:40: 8f:6a:51:30:68:67:60:ae:24:b2:41:2f:b7:cc:a8: d5:72:b0:2e:84:0e:ba:95:1f:24:d8:13:0a:6a:3a: 86:7a:36:5d:da:c1:bd:1d:66:2b:72:ee:7c:36:80: fe:69:b6:d7:5d:88:ba:51:7d:31:b0:2e:9a:f1:b8: ae:a6:f1:d0:28:20:e5:87:52:10:a2:a3:6c:71:66: 0f:8f:d8:99:3f:ac:b4:2d:16:50:db:6b:94:37:50: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B4:08:E5:2B:5C:3A:58:EB:E7:C1:AC:86:FD:F7:6D:42:FE:10:5D X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a2:59:5c:43:89:b7:bb:be:96:75:32:fb:97:73:e3:dc:44: fe:fc:f3:36:aa:54:62:6b:ca:00:ee:30:d7:45:5d:7a:d5:53: df:ee:e1:5d:2d:19:8b:14:9b:b9:43:cc:85:c2:55:46:5b:23: 85:b1:d3:43:30:07:c7:a5:87:c1:44:52:0d:5f:36:3d:b4:61: fa:5b:99:ce:a8:0d:77:92:ee:d3:b7:55:26:f8:18:c3:57:58: e5:ae:b5:bf:02:dd:cc:c7:48:61:67:3c:f6:70:ac:d6:f9:c0: fb:33:7f:0f:ec:95:69:8b:a4:f1:62:8c:49:96:c7:6c:18:2c: dd:6d:e2:a8:fc:34:03:b6:a6:7f:ed:ca:c4:15:2c:cb:a9:3f: 54:21:77:b1:32:b1:3e:8a:6d:1f:9c:6e:e2:ed:d6:ab:66:25: ee:68:e2:55:03:fe:c7:d7:91:36:5c:68:97:75:33:56:1a:ea: ec:03:6e:d6:b7:6c:b5:4a:a6:80:d0:cf:16:65:32:a7:28:c2: 1f:22:b6:7b:ef:ca:41:f1:f8:6f:e5:37:1b:35:23:b8:3c:d7: 63:fa:8a:8a:b0:3f:5a:f3:67:89:79:e3:08:6a:9c:2e:b7:be: e8:9f:d6:d9:76:3f:6a:e8:51:9b:5b:98:c4:1c:cd:fe:d2:07: 1f:db:22:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTn/giieBNDqLiUaDyt205HkGpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNjAxMTEwNjI2NDJaFw0yNjAxMTQxMDIwNDJaMDMxMTAvBgNV BAMTKEYwQjQwOEU1MkI1QzNBNThFQkU3QzFBQzg2RkRGNzZENDJGRTEwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSKQ1o9z7uVmO1ijymdRIjAww mGhzs6Fjuxr0igX8FUofidrE9PorRRRJXhGYobcItOoTIrFNJMmehAjSGK/71p26 bPSQxoshOOF8axIObcVtxIUYtl2BY3ujJywPuI+I1pAURJ8rhwqoHTiXnVsylhTX 5pmbaauJLyg6GbQJJMU1Q8NVNjVJSEY7Yk0TULZm0nMR6AnLjkYvFSToZSIaiUb/ QI9qUTBoZ2CuJLJBL7fMqNVysC6EDrqVHyTYEwpqOoZ6Nl3awb0dZity7nw2gP5p ttddiLpRfTGwLprxuK6m8dAoIOWHUhCio2xxZg+P2Jk/rLQtFlDba5Q3UBOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8LQI5StcOljr58Gshv33bUL+EF0wHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+iWVxDibe7vpZ1MvuXc+PcRP788zaqVGJr ygDuMNdFXXrVU9/u4V0tGYsUm7lDzIXCVUZbI4Wx00MwB8elh8FEUg1fNj20Yfpb mc6oDXeS7tO3VSb4GMNXWOWutb8C3czHSGFnPPZwrNb5wPszfw/slWmLpPFijEmW x2wYLN1t4qj8NAO2pn/tysQVLMupP1Qhd7EysT6KbR+cbuLt1qtmJe5o4lUD/sfX kTZcaJd1M1Ya6uwDbta3bLVKpoDQzxZlMqcowh8itnvvykHx+G/lNxs1I7g812P6 ioqwP1rzZ4l54whqnC63vuif1tl2P2roUZtbmMQczf7SBx/bIqk= -----END CERTIFICATE-----Generated at Sun Jan 11 11:26:30 2026 by rpki-client