This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: p6qiQM/+TQGb4O/521S8o3205PjQ75i8Le16bj4kEI4= Subject key identifier: 70:3F:0D:5F:54:5B:F0:F0:DF:DA:3C:03:35:2F:5F:9C:39:15:89:15 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 01565CA41B713A46A04262F5A0DE005C31A2BDC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0267 Signing time: Sat 24 Jan 2026 18:00:02 +0000 Manifest this update: Sat 24 Jan 2026 17:55:02 +0000 Manifest next update: Tue 27 Jan 2026 22:20:02 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: xfBxO1cpwHLH3mPIYYSSSWYs4NXVE5RlSEpIHuIsrj0=) 2: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: Fx4/wARzHvuNX5jPTIZPxbAZj01cE6jeENB6Y0XiJpU=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: 3ORUUmkJ+o4nnE20LKRWQpDfQUx6WFMnIqRqb1dCAcA=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: PNalk4vA/Rkbr+Ga9Voh4gRAWTRSepvHB28AsR/h9Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:56:5c:a4:1b:71:3a:46:a0:42:62:f5:a0:de:00:5c:31:a2:bd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Jan 24 17:55:02 2026 GMT Not After : Jan 27 22:20:02 2026 GMT Subject: CN=703F0D5F545BF0F0DFDA3C03352F5F9C39158915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:c0:35:2e:e8:85:b3:eb:0f:f9:3c:a1:67: 18:40:55:fb:2f:66:5f:ac:d5:75:63:ab:f5:c7:e2: c7:44:c7:c7:4f:4b:35:8c:d1:8a:36:c9:01:9e:5c: 6b:65:d8:f9:ca:59:d8:38:97:be:7e:17:23:f5:64: 61:28:b4:9a:77:7a:90:b0:aa:20:94:d5:03:d6:eb: e9:ef:43:78:bd:96:b8:c5:76:17:64:f0:ab:b9:c8: e4:7c:03:f9:d7:a6:83:6d:19:5b:32:2b:2f:8e:1a: 73:3f:bb:56:88:cb:a0:71:5f:69:42:bb:c5:58:c2: 1d:db:9e:3f:55:fe:db:ab:ba:6e:53:f6:e2:61:5f: 74:be:ea:50:b3:7b:64:ab:47:50:fe:30:89:23:a7: 86:d8:76:e2:d5:d1:cb:92:d5:db:3b:67:6d:4b:7d: 32:f9:bb:88:fa:7f:bf:87:36:92:d8:37:1a:3f:c3: be:6e:e2:b3:5b:1c:44:9a:10:75:8c:75:5d:68:b0: ab:6b:a5:27:68:df:f0:83:6f:33:60:f2:95:e1:6c: 4d:3b:f2:b4:89:78:f4:ba:9b:cb:8e:82:60:6a:7b: 8a:af:70:f0:44:38:f4:ed:f4:89:32:38:4d:e7:74: 74:3a:9a:74:7f:20:82:b6:11:bb:96:48:1c:9e:71: 77:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3F:0D:5F:54:5B:F0:F0:DF:DA:3C:03:35:2F:5F:9C:39:15:89:15 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b5:16:f4:39:c5:a0:92:58:e4:90:38:5e:80:57:a5:bb:3d: d7:1f:e2:23:be:f3:23:87:cc:91:b5:e2:15:2f:12:6e:28:d5: b8:6c:0c:52:b9:13:34:2f:34:ec:ca:17:bf:e4:17:d0:92:53: 29:16:19:ff:df:54:ac:5b:b8:69:59:1e:15:b3:89:c5:94:45: db:d0:c6:b9:d9:29:a1:82:70:6d:64:45:9e:36:9a:f4:2a:a6: 80:e9:50:f3:77:c2:19:25:1c:ae:11:a9:52:83:13:72:3c:80: 4a:be:4c:b5:a8:b6:ba:7c:92:46:e9:74:66:68:1f:d5:ee:8d: be:26:6e:12:b5:d7:b8:10:45:b7:e1:75:68:1f:95:ed:f7:b7: 1d:08:96:93:32:19:ea:d8:22:76:73:f0:34:00:d2:d5:7b:b1: 8d:0f:47:6f:38:33:05:70:40:f3:b5:38:72:df:d2:be:dc:a2: d1:8b:6d:7a:1b:48:7b:b6:97:ac:69:88:97:19:90:50:cb:53: 14:fc:16:3b:25:81:4b:b8:39:e3:23:a8:0c:8f:20:c8:de:65: 85:94:dd:56:e1:be:96:69:e1:c2:41:71:ae:94:99:26:07:7c: 10:9e:8c:4f:a0:3d:36:cc:47:46:cf:ba:ea:ac:67:03:74:cf: 56:b8:a4:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVZcpBtxOkagQmL1oN4AXDGivcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNjAxMjQxNzU1MDJaFw0yNjAxMjcyMjIwMDJaMDMxMTAvBgNV BAMTKDcwM0YwRDVGNTQ1QkYwRjBERkRBM0MwMzM1MkY1RjlDMzkxNTg5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzcA1LuiFs+sP+TyhZxhAVfsv Zl+s1XVjq/XH4sdEx8dPSzWM0Yo2yQGeXGtl2PnKWdg4l75+FyP1ZGEotJp3epCw qiCU1QPW6+nvQ3i9lrjFdhdk8Ku5yOR8A/nXpoNtGVsyKy+OGnM/u1aIy6BxX2lC u8VYwh3bnj9V/turum5T9uJhX3S+6lCze2SrR1D+MIkjp4bYduLV0cuS1ds7Z21L fTL5u4j6f7+HNpLYNxo/w75u4rNbHESaEHWMdV1osKtrpSdo3/CDbzNg8pXhbE07 8rSJePS6m8uOgmBqe4qvcPBEOPTt9IkyOE3ndHQ6mnR/IIK2EbuWSByecXcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcD8NX1Rb8PDf2jwDNS9fnDkViRUwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC1FvQ5xaCSWOSQOF6AV6W7Pdcf4iO+8yOH zJG14hUvEm4o1bhsDFK5EzQvNOzKF7/kF9CSUykWGf/fVKxbuGlZHhWzicWURdvQ xrnZKaGCcG1kRZ42mvQqpoDpUPN3whklHK4RqVKDE3I8gEq+TLWotrp8kkbpdGZo H9Xujb4mbhK117gQRbfhdWgfle33tx0IlpMyGerYInZz8DQA0tV7sY0PR284MwVw QPO1OHLf0r7cotGLbXobSHu2l6xpiJcZkFDLUxT8FjslgUu4OeMjqAyPIMjeZYWU 3VbhvpZp4cJBca6UmSYHfBCejE+gPTbMR0bPuuqsZwN0z1a4pOM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:58 2026 by rpki-client