This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: 0w/PYSlo6dhguzY2f3dO9pga859T0/5OiQwFPtJm5wo= Subject key identifier: 0A:FC:BC:49:64:58:B3:2E:2C:E2:E3:35:85:34:CD:E2:88:43:DD:12 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: BE593551A590DE930EBDC9F06AF62D1615641F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 0227 Signing time: Fri 23 Jan 2026 10:11:47 +0000 Manifest this update: Fri 23 Jan 2026 10:06:47 +0000 Manifest next update: Mon 26 Jan 2026 21:38:47 +0000 Files and hashes: 1: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) 2: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: lIPUpVfO6aP6vXzB+5GbquBMEN/5FRAD3mRlgOCMxQE=) 3: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) 4: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 9YIt3S9f2TckOIHLJingGQoR7QpEu3PnRMAwc6NgmOA=) 5: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: b6fruH9Pkg0tQtl5YFYqPR73UwekDQbIDYYtyH1Ta2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: be:59:35:51:a5:90:de:93:0e:bd:c9:f0:6a:f6:2d:16:15:64:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Jan 23 10:06:47 2026 GMT Not After : Jan 26 21:38:47 2026 GMT Subject: CN=0AFCBC496458B32E2CE2E3358534CDE28843DD12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:62:c4:0c:8b:5c:10:4d:8f:47:b5:bc:ee: 10:f6:28:af:80:fe:b9:62:16:bc:96:7f:7f:5a:8a: 93:2f:64:4f:98:79:7f:a7:92:b2:9c:63:50:c5:19: 5d:7d:81:0c:d6:88:b6:69:c6:e1:18:06:dd:db:5f: 86:26:4f:8b:d0:98:c0:41:e6:7c:8a:cb:26:cb:9c: 45:02:0e:01:68:8b:10:22:f5:d4:2a:71:46:b6:b9: b4:f0:a4:a9:82:92:6f:d8:24:76:d7:ca:fb:1b:0e: 02:fb:b7:37:60:0b:ca:af:31:f5:8e:11:12:82:94: b0:6e:2b:5a:97:45:77:ae:fe:dd:c9:b7:b2:ef:5c: ed:35:69:3b:71:d5:f8:e5:9a:70:20:82:ce:74:bc: 05:a8:cd:e6:46:a5:c4:1b:59:e9:8b:0b:56:5f:42: f3:5d:e9:27:29:be:14:a5:ee:55:4b:cf:ed:41:6f: b2:05:d4:05:84:76:79:2c:69:53:8e:af:f8:4e:16: 3e:6d:1b:95:18:24:eb:78:a3:79:31:f8:3b:cd:61: e2:af:81:13:00:4a:a2:55:4e:09:33:87:e2:a1:78: a6:8b:f1:f1:3a:f5:a7:0e:5d:be:c5:93:2b:90:13: 36:ea:06:c1:7f:bc:b1:80:3b:84:6b:53:8a:83:27: 5f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:BC:49:64:58:B3:2E:2C:E2:E3:35:85:34:CD:E2:88:43:DD:12 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:42:8b:7e:b5:3d:54:e1:82:27:12:27:7c:d1:e3:28:c5:1f: ce:7e:9e:32:d3:d5:2a:cb:9c:a1:d9:5d:45:ca:8a:4a:75:b3: c5:77:a1:b7:c2:28:a4:ba:dd:46:64:6f:78:b3:d4:0b:53:6f: 21:30:74:49:57:5a:98:eb:b3:57:68:b1:cb:14:9d:f5:71:1b: 67:fc:37:c5:a5:50:f6:7e:78:2b:10:9f:5b:4e:c6:33:c3:ac: be:c0:d1:c7:92:28:89:fe:8e:0a:9f:16:1a:62:24:a2:74:a4: 64:4c:cc:35:ed:8b:c7:15:13:2a:81:fe:a5:8c:c2:a2:70:6e: 43:eb:4b:49:4d:8b:01:ab:35:c7:81:45:81:7c:e0:37:23:1e: a5:5a:9d:1b:4f:7d:90:cd:f2:01:b0:5b:c8:bc:47:a5:64:d2: 32:72:0f:02:01:85:fb:f8:48:a8:0c:a1:55:80:c9:dc:35:81: 38:2c:07:d6:3e:35:62:59:2d:e7:1a:31:a5:20:5b:6f:f3:39: ec:b3:01:59:07:2f:9f:57:85:80:12:0a:b5:65:9c:03:aa:a2: af:99:0d:19:4b:04:73:cf:cf:8d:e4:59:e4:86:e9:cf:99:d0: 57:94:e6:54:64:f5:39:9b:95:f2:98:37:62:ba:e8:40:5b:5e: 17:e9:fa:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAL5ZNVGlkN6TDr3J8Gr2LRYVZB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNjAxMjMxMDA2NDdaFw0yNjAxMjYyMTM4NDdaMDMxMTAvBgNV BAMTKDBBRkNCQzQ5NjQ1OEIzMkUyQ0UyRTMzNTg1MzRDREUyODg0M0REMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EGLEDItcEE2PR7W87hD2KK+A /rliFryWf39aipMvZE+YeX+nkrKcY1DFGV19gQzWiLZpxuEYBt3bX4YmT4vQmMBB 5nyKyybLnEUCDgFoixAi9dQqcUa2ubTwpKmCkm/YJHbXyvsbDgL7tzdgC8qvMfWO ERKClLBuK1qXRXeu/t3Jt7LvXO01aTtx1fjlmnAggs50vAWozeZGpcQbWemLC1Zf QvNd6ScpvhSl7lVLz+1Bb7IF1AWEdnksaVOOr/hOFj5tG5UYJOt4o3kx+DvNYeKv gRMASqJVTgkzh+KheKaL8fE69acOXb7FkyuQEzbqBsF/vLGAO4RrU4qDJ1+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvy8SWRYsy4s4uM1hTTN4ohD3RIwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVCi361PVThgicSJ3zR4yjFH85+njLT1SrL nKHZXUXKikp1s8V3obfCKKS63UZkb3iz1AtTbyEwdElXWpjrs1doscsUnfVxG2f8 N8WlUPZ+eCsQn1tOxjPDrL7A0ceSKIn+jgqfFhpiJKJ0pGRMzDXti8cVEyqB/qWM wqJwbkPrS0lNiwGrNceBRYF84DcjHqVanRtPfZDN8gGwW8i8R6Vk0jJyDwIBhfv4 SKgMoVWAydw1gTgsB9Y+NWJZLecaMaUgW2/zOeyzAVkHL59XhYASCrVlnAOqoq+Z DRlLBHPPz43kWeSG6c+Z0FeU5lRk9TmblfKYN2K66EBbXhfp+qY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:46 2026 by rpki-client