This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: mqjAhYxhmZKgJ2JeYqOvI5FisPeDhDQte6Il8FKfnXA= Subject key identifier: CF:A5:75:77:A5:9E:F4:57:5F:60:8A:86:CD:2C:F3:AF:FF:45:50:11 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 613DDE485A331B7FC7BF723A20BF492A3153B6D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 0202 Signing time: Sun 25 Jan 2026 09:01:51 +0000 Manifest this update: Sun 25 Jan 2026 08:56:51 +0000 Manifest next update: Wed 28 Jan 2026 11:59:51 +0000 Files and hashes: 1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: VeDgjmscz2c2GDi9LXR3/xgRa39Cg2HMYPnz2JwSlVU=) 2: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3d:de:48:5a:33:1b:7f:c7:bf:72:3a:20:bf:49:2a:31:53:b6:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Jan 25 08:56:51 2026 GMT Not After : Jan 28 11:59:51 2026 GMT Subject: CN=CFA57577A59EF4575F608A86CD2CF3AFFF455011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:c3:d7:24:74:6c:65:99:3f:21:44:5b:ed: 5c:a2:47:cb:7b:0e:86:6a:e3:ab:ff:35:23:87:7b: fc:76:69:e9:4e:01:c7:38:84:5f:f3:9a:62:94:99: 8e:d1:be:d6:b5:67:24:8b:4f:af:99:9d:24:fd:f9: a9:3d:23:70:16:06:2c:6f:0c:8d:0d:85:28:91:ed: a4:d3:d9:67:db:56:55:61:f5:f0:41:ac:04:80:1f: a1:4d:d5:b2:86:70:51:9c:28:a9:d5:4f:f5:45:4b: d0:7a:c7:21:e4:bf:6c:46:ff:65:ee:00:b0:20:36: 99:d1:b9:93:47:c8:12:9e:68:a2:d8:dd:09:90:3c: 5b:c8:88:20:eb:c4:d1:cc:e4:25:60:4f:30:e1:99: 1f:2f:32:04:f2:f8:08:48:d6:54:38:fd:9b:33:e2: da:0e:78:f5:05:65:4e:96:bc:3b:8f:2b:a9:35:27: 2b:cf:d4:ba:60:27:1c:c8:8a:15:be:93:df:3f:8b: ba:ae:8a:c8:27:43:a7:db:51:21:40:4a:02:30:10: 63:00:19:db:f4:f4:a0:05:5a:af:39:67:1d:21:b7: 04:59:12:62:72:a9:f8:5e:81:bd:61:15:7f:02:f0: 7a:18:6c:c4:9f:2f:b5:cb:8b:5b:e3:53:ca:ce:dd: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:75:77:A5:9E:F4:57:5F:60:8A:86:CD:2C:F3:AF:FF:45:50:11 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:08:7f:40:e7:82:b7:16:ec:be:8a:8a:c2:4c:d8:01:5c:ef: 43:b7:c8:9a:3b:89:62:f4:6f:96:65:fc:89:2e:9c:1d:bc:ad: ed:97:1a:d7:25:a0:5c:f7:08:c6:9a:e2:2a:fd:8f:3a:4d:63: 1b:70:42:42:3d:80:0e:4a:c6:9c:c6:a9:22:8b:01:18:f7:97: 96:02:9b:f0:63:73:7e:b1:9c:2e:a9:87:32:8c:4b:74:2c:e0: bd:6b:b7:ce:9f:c6:de:35:17:d8:98:55:b0:63:71:05:d9:75: b3:7e:f1:ac:22:b6:5a:af:67:cf:90:eb:6c:68:11:76:0f:a4: 7f:9c:55:5a:60:0d:8a:d5:37:50:fe:b8:2f:2f:8c:a7:a4:f5: 5a:8c:5f:4a:79:a5:e7:6f:a3:1f:6b:ad:67:a2:6d:4d:bf:17: e8:8c:cc:56:0b:41:75:d9:85:72:55:4a:f1:57:f8:07:8d:95: ba:77:99:d7:ce:b1:32:ec:d2:0c:98:18:6e:e6:56:90:b4:55: 76:2b:1b:1b:68:b5:f5:e0:21:1c:f4:20:c8:6b:e0:78:14:0a: 2a:57:c3:a2:9f:c8:60:68:cd:24:b0:ec:67:44:31:ab:6a:5c: f2:d3:40:89:56:f5:31:3b:25:a8:22:aa:28:3c:ed:bd:7c:7d: b2:08:a7:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYT3eSFozG3/Hv3I6IL9JKjFTttYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNjAxMjUwODU2NTFaFw0yNjAxMjgxMTU5NTFaMDMxMTAvBgNV BAMTKENGQTU3NTc3QTU5RUY0NTc1RjYwOEE4NkNEMkNGM0FGRkY0NTUwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+MPXJHRsZZk/IURb7VyiR8t7 DoZq46v/NSOHe/x2aelOAcc4hF/zmmKUmY7Rvta1ZySLT6+ZnST9+ak9I3AWBixv DI0NhSiR7aTT2WfbVlVh9fBBrASAH6FN1bKGcFGcKKnVT/VFS9B6xyHkv2xG/2Xu ALAgNpnRuZNHyBKeaKLY3QmQPFvIiCDrxNHM5CVgTzDhmR8vMgTy+AhI1lQ4/Zsz 4toOePUFZU6WvDuPK6k1JyvP1LpgJxzIihW+k98/i7quisgnQ6fbUSFASgIwEGMA Gdv09KAFWq85Zx0htwRZEmJyqfhegb1hFX8C8HoYbMSfL7XLi1vjU8rO3VhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6V1d6We9FdfYIqGzSzzr/9FUBEwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcIf0DngrcW7L6KisJM2AFc70O3yJo7iWL0 b5Zl/IkunB28re2XGtcloFz3CMaa4ir9jzpNYxtwQkI9gA5KxpzGqSKLARj3l5YC m/Bjc36xnC6phzKMS3Qs4L1rt86fxt41F9iYVbBjcQXZdbN+8awitlqvZ8+Q62xo EXYPpH+cVVpgDYrVN1D+uC8vjKek9VqMX0p5pedvox9rrWeibU2/F+iMzFYLQXXZ hXJVSvFX+AeNlbp3mdfOsTLs0gyYGG7mVpC0VXYrGxtotfXgIRz0IMhr4HgUCipX w6KfyGBozSSw7GdEMatqXPLTQIlW9TE7Jagiqig87b18fbIIp7Q= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:24 2026 by rpki-client