This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: Wag50l2gQM/n6zFvFHjkpBkERRjQrQeEdiJerZ7Rq0Q= Subject key identifier: BE:77:62:5D:34:03:0A:31:71:01:C4:03:49:8D:6D:56:13:83:C1:8C Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 13E6FD842876B6D4ADFC974CBA0EDD4D29B59BC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 03C1 Signing time: Sun 25 Jan 2026 15:12:01 +0000 Manifest this update: Sun 25 Jan 2026 15:07:01 +0000 Manifest next update: Wed 28 Jan 2026 20:04:01 +0000 Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 2: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) 3: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: qPCRPXtTO9rDFp/CnAfkh24dV2TecWLqpp3fRITxHeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e6:fd:84:28:76:b6:d4:ad:fc:97:4c:ba:0e:dd:4d:29:b5:9b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Jan 25 15:07:01 2026 GMT Not After : Jan 28 20:04:01 2026 GMT Subject: CN=BE77625D34030A317101C403498D6D561383C18C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:22:34:46:2a:49:5b:58:b1:a4:d6:01:fd: 30:00:0a:8c:c2:63:59:24:b2:29:dc:7b:04:46:35: 16:2a:0e:12:8b:73:2d:fe:c5:55:17:81:4d:65:a5: e3:a5:a9:ca:cd:ca:84:93:5e:88:92:48:ff:87:37: 14:60:0b:c9:73:35:7b:bc:60:de:fe:94:03:3b:38: 31:57:64:fb:b4:7c:0e:73:76:6a:12:b7:3d:07:42: f3:47:b0:b0:b9:9b:9b:44:e5:29:b2:bb:23:28:e7: fb:31:38:bd:1b:16:32:6e:e3:7e:64:c4:87:d8:6f: 48:ba:6e:bf:b2:a3:96:c2:a3:32:69:a4:1d:18:0c: 0e:0a:bb:e6:b8:5a:92:50:64:96:15:fe:b8:04:39: 6f:d3:57:d4:83:2c:e3:dc:9e:45:56:e8:31:e9:0a: 0b:47:97:7c:c8:e0:5e:b7:7b:15:70:c1:aa:b9:9b: 10:04:b3:7f:fe:c7:f2:b4:ec:f5:01:06:1c:33:8a: 93:9a:85:03:30:24:ac:53:82:d1:79:26:d5:c7:41: 7e:60:b1:54:cb:e8:32:f6:74:09:c7:82:c0:01:56: 9a:8c:a4:17:01:ca:4b:d2:9e:79:e2:25:86:14:15: f3:05:e7:eb:41:0f:d8:be:8f:f1:a6:26:46:9e:0b: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:77:62:5D:34:03:0A:31:71:01:C4:03:49:8D:6D:56:13:83:C1:8C X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:93:49:06:a7:f9:b2:69:5e:c9:02:e1:ab:c5:34:b7:93:86: 82:a5:c5:7c:0f:e4:01:0f:11:38:74:89:a9:29:07:94:2a:b6: 63:28:da:6b:d3:d4:4b:3d:6c:8f:f7:59:2d:0d:23:f3:af:94: ec:3c:53:02:dc:80:59:5b:c4:c6:b3:f4:f0:ed:07:95:89:01: 1f:35:e1:49:ee:b8:54:e8:49:a2:6c:4f:e0:69:84:19:1b:89: 55:67:8f:4f:5c:79:35:0c:31:6f:02:8e:7d:7f:4c:d7:ee:19: 18:9e:0c:e9:7d:e8:96:76:d4:94:fc:f0:eb:5b:a9:83:43:ec: 27:fc:3d:fa:2a:bc:d3:f0:65:ab:12:42:42:ff:3f:1e:cf:b6: dc:a3:ed:3e:c9:87:45:32:c8:97:2a:d4:94:3d:41:11:ef:2f: 27:4b:af:63:40:04:f1:ec:56:1d:a3:70:38:7b:69:6f:83:30: 99:32:b4:cf:89:0b:93:db:ef:98:dd:3d:58:b4:20:2e:ef:02: d2:ec:f0:7a:39:5f:dc:b9:85:9b:2e:1c:02:65:e4:b0:a3:d0: 53:b4:53:d8:ae:ca:2c:f6:7d:60:87:d0:14:c9:65:ea:89:6b: 0a:a3:f5:9f:bf:89:b3:c4:1d:d2:16:a3:5f:8f:ea:b3:f9:d8: 07:36:21:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+b9hCh2ttSt/JdMug7dTSm1m8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNjAxMjUxNTA3MDFaFw0yNjAxMjgyMDA0MDFaMDMxMTAvBgNV BAMTKEJFNzc2MjVEMzQwMzBBMzE3MTAxQzQwMzQ5OEQ2RDU2MTM4M0MxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnSI0RipJW1ixpNYB/TAACozC Y1kksincewRGNRYqDhKLcy3+xVUXgU1lpeOlqcrNyoSTXoiSSP+HNxRgC8lzNXu8 YN7+lAM7ODFXZPu0fA5zdmoStz0HQvNHsLC5m5tE5SmyuyMo5/sxOL0bFjJu435k xIfYb0i6br+yo5bCozJppB0YDA4Ku+a4WpJQZJYV/rgEOW/TV9SDLOPcnkVW6DHp CgtHl3zI4F63exVwwaq5mxAEs3/+x/K07PUBBhwzipOahQMwJKxTgtF5JtXHQX5g sVTL6DL2dAnHgsABVpqMpBcBykvSnnniJYYUFfMF5+tBD9i+j/GmJkaeCxDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvndiXTQDCjFxAcQDSY1tVhODwYwwHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2TSQan+bJpXskC4avFNLeThoKlxXwP5AEP ETh0iakpB5QqtmMo2mvT1Es9bI/3WS0NI/OvlOw8UwLcgFlbxMaz9PDtB5WJAR81 4UnuuFToSaJsT+BphBkbiVVnj09ceTUMMW8Cjn1/TNfuGRieDOl96JZ21JT88Otb qYND7Cf8PfoqvNPwZasSQkL/Px7Pttyj7T7Jh0UyyJcq1JQ9QRHvLydLr2NABPHs Vh2jcDh7aW+DMJkytM+JC5Pb75jdPVi0IC7vAtLs8Ho5X9y5hZsuHAJl5LCj0FO0 U9iuyiz2fWCH0BTJZeqJawqj9Z+/ibPEHdIWo1+P6rP52Ac2IbE= -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:56 2026 by rpki-client