This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: /OFsqhwsT+nhwo/L69Oi5WP6yHZ5LwJCLxfEiHHZHB8= Subject key identifier: 56:AE:02:AD:BE:67:A2:85:CD:95:BC:7B:9C:76:5A:7A:2F:6E:79:1A Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 086EDB88366E1AAACEE0A26A60AB96D6E4968659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01E9 Signing time: Sun 25 Jan 2026 07:42:23 +0000 Manifest this update: Sun 25 Jan 2026 07:37:23 +0000 Manifest next update: Wed 28 Jan 2026 19:06:23 +0000 Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=) 2: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: FWr1kskSpbDMNW3ry1gf7cHgMRfSYEBwIGHtTCdrzmQ=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 19:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6e:db:88:36:6e:1a:aa:ce:e0:a2:6a:60:ab:96:d6:e4:96:86:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Jan 25 07:37:23 2026 GMT Not After : Jan 28 19:06:23 2026 GMT Subject: CN=56AE02ADBE67A285CD95BC7B9C765A7A2F6E791A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:4d:ce:1d:88:5b:9a:e0:50:84:c6:31:a8: bb:8c:fc:2b:55:13:c1:d4:1c:d1:34:ba:ec:7f:5e: 84:10:a3:c8:b3:15:0b:01:ce:01:4f:0d:13:22:e6: f8:f9:79:a7:26:c0:f5:fa:2d:31:ad:45:81:1f:15: df:dd:78:0b:39:6f:d5:eb:f1:70:be:7b:39:67:f5: 34:d8:65:b8:15:df:92:ab:67:c9:e2:66:29:c3:a5: 07:b8:f9:b3:be:de:f6:4c:b7:c6:f7:89:1f:4f:7e: 61:8b:fb:36:5a:03:9b:42:77:46:59:58:99:69:7b: 36:1f:d0:d8:27:51:8a:ca:75:29:98:70:a9:aa:b3: c0:d7:b1:8b:62:d0:75:37:22:8b:b4:cb:fd:1a:9d: f1:14:a6:d8:2e:95:8b:30:6d:bd:cf:85:a1:be:b1: ba:1d:e5:fa:2f:9c:b6:86:2f:69:93:4c:8d:62:fa: 69:3e:71:3e:aa:99:04:9d:2e:61:db:69:4b:bd:7e: 6e:ee:fa:f3:ff:b5:aa:a3:c5:25:c0:eb:3c:5e:ba: 84:f2:30:2d:b7:e3:46:ab:cf:14:b4:e1:db:4f:dc: af:13:1d:de:bd:83:b7:67:07:af:a8:13:ab:1e:76: 76:76:70:06:db:96:63:9e:0f:d5:9c:4e:7c:b0:4d: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:02:AD:BE:67:A2:85:CD:95:BC:7B:9C:76:5A:7A:2F:6E:79:1A X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:13:b0:38:ce:8f:80:60:68:ec:e2:f8:c6:a4:28:2d:33:7d: de:41:f9:13:b4:dd:d0:df:b2:f9:e6:56:af:05:b2:64:45:97: d1:49:4f:af:85:17:b5:e1:dc:61:29:0c:54:b6:8f:c4:e3:d3: 58:8b:dc:f2:b9:8f:80:3f:ce:36:7e:29:cb:1d:22:43:c4:66: c5:d7:33:02:df:84:eb:b0:eb:cf:d6:79:55:5f:e9:33:c3:81: 7c:df:ac:2a:8c:df:77:ea:cb:8f:36:60:85:a8:43:31:3b:ec: b4:75:82:3f:24:c6:cd:28:6e:86:3a:f2:cd:a7:29:10:50:fd: 33:2b:4a:bc:a2:82:c7:86:77:da:a0:2b:bf:23:a8:5a:bf:b5: c5:0d:a9:7c:cc:a5:5a:4d:93:8e:57:49:cf:a5:e0:8d:d2:0e: 46:7d:b2:ad:de:f5:8a:cc:2e:75:54:86:94:3d:88:b4:84:8f: bd:cb:f2:4b:d5:7c:01:10:ce:db:38:67:b9:a4:a0:90:60:86: 36:ca:d2:6a:16:8f:01:fc:a9:74:b8:16:eb:77:bf:1a:2c:9d: 6c:20:7a:af:9f:31:4a:c5:64:02:fa:2c:d0:57:06:c7:31:bc: 49:46:19:78:50:f5:3a:0c:f1:63:1c:b9:07:54:be:69:d4:c4: a8:9c:5f:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCG7biDZuGqrO4KJqYKuW1uSWhlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNjAxMjUwNzM3MjNaFw0yNjAxMjgxOTA2MjNaMDMxMTAvBgNV BAMTKDU2QUUwMkFEQkU2N0EyODVDRDk1QkM3QjlDNzY1QTdBMkY2RTc5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQ03OHYhbmuBQhMYxqLuM/CtV E8HUHNE0uux/XoQQo8izFQsBzgFPDRMi5vj5eacmwPX6LTGtRYEfFd/deAs5b9Xr 8XC+ezln9TTYZbgV35KrZ8niZinDpQe4+bO+3vZMt8b3iR9PfmGL+zZaA5tCd0ZZ WJlpezYf0NgnUYrKdSmYcKmqs8DXsYti0HU3Iou0y/0anfEUptgulYswbb3PhaG+ sbod5fovnLaGL2mTTI1i+mk+cT6qmQSdLmHbaUu9fm7u+vP/taqjxSXA6zxeuoTy MC2340arzxS04dtP3K8THd69g7dnB6+oE6sednZ2cAbblmOeD9WcTnywTUmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVq4Crb5nooXNlbx7nHZaei9ueRowHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsTsDjOj4BgaOzi+MakKC0zfd5B+RO03dDf svnmVq8FsmRFl9FJT6+FF7Xh3GEpDFS2j8Tj01iL3PK5j4A/zjZ+KcsdIkPEZsXX MwLfhOuw68/WeVVf6TPDgXzfrCqM33fqy482YIWoQzE77LR1gj8kxs0oboY68s2n KRBQ/TMrSryigseGd9qgK78jqFq/tcUNqXzMpVpNk45XSc+l4I3SDkZ9sq3e9YrM LnVUhpQ9iLSEj73L8kvVfAEQzts4Z7mkoJBghjbK0moWjwH8qXS4Fut3vxosnWwg eq+fMUrFZAL6LNBXBscxvElGGXhQ9ToM8WMcuQdUvmnUxKicXx0= -----END CERTIFICATE-----Generated at Mon Jan 26 07:34:58 2026 by rpki-client