This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: Ghi8q7BiBMijEh/CGTDwZC1lPghDfAalj1qZFD2DzDA= Subject key identifier: 9D:B1:6D:5E:11:22:58:D6:D7:33:8E:E4:BC:26:B7:C7:E9:F5:83:70 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 62D558C94075DD28E8A191CEA0034E587DFDE65F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0256 Signing time: Sun 25 Jan 2026 18:20:49 +0000 Manifest this update: Sun 25 Jan 2026 18:15:49 +0000 Manifest next update: Wed 28 Jan 2026 23:10:49 +0000 Files and hashes: 1: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 2: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) 3: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: htYcfgOqhVF1hci9/DtzwTRJMNTNXLLgXyYAnEFX4nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 23:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d5:58:c9:40:75:dd:28:e8:a1:91:ce:a0:03:4e:58:7d:fd:e6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Jan 25 18:15:49 2026 GMT Not After : Jan 28 23:10:49 2026 GMT Subject: CN=9DB16D5E112258D6D7338EE4BC26B7C7E9F58370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:02:e0:d9:76:e7:34:38:4d:ff:ae:95:e4: d8:47:6f:75:e5:31:a9:fd:15:ae:1b:30:08:73:7b: f5:da:ff:c0:11:af:21:5e:90:e5:36:4c:4c:68:e3: 77:de:45:a2:d4:48:d5:68:47:ab:b4:18:36:3a:5d: ff:7a:f9:a3:db:bc:7d:85:d1:76:65:2b:02:99:f1: b9:62:0d:60:4b:ea:b7:06:95:87:1b:62:0c:17:9d: 98:9d:71:d4:70:02:db:f2:32:9f:76:9f:a9:c2:50: d9:d0:aa:4f:b1:d6:b1:8c:01:5a:2c:ac:71:1a:2a: c7:54:64:44:19:66:d5:4f:e6:c4:5c:9c:0c:2c:4b: 13:8a:ef:29:6b:76:2f:3d:74:77:55:ce:32:2b:64: 11:e4:b4:bd:96:be:50:30:0a:5c:2e:5d:15:42:eb: 93:43:5e:8f:fe:3b:cd:de:b3:2f:d6:1a:e0:7c:ef: eb:44:0c:76:e8:58:c4:5d:fa:b9:f8:93:2f:63:3f: d4:6d:bd:43:94:a3:b0:50:b7:24:36:da:d3:8b:22: e0:c6:cb:cc:de:09:3c:96:be:ba:6c:56:ec:e4:48: 1f:c3:69:7f:e0:cc:c2:49:6c:25:42:19:3c:71:19: 46:7a:b5:0f:64:21:e0:22:1f:2d:b2:4a:2f:b2:0a: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B1:6D:5E:11:22:58:D6:D7:33:8E:E4:BC:26:B7:C7:E9:F5:83:70 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b8:d1:18:a7:ac:86:dd:e4:34:c6:cf:7d:b2:66:86:3a:9f: 2a:b1:f4:79:09:b9:23:2b:29:65:a8:88:c8:03:0d:94:7c:82: 38:f8:bc:7b:46:6e:e6:72:ee:ed:cc:48:5e:a9:18:5e:87:78: 67:a4:7b:d9:5a:b2:e3:f8:f3:4b:ce:47:3a:78:36:b3:67:24: 18:0e:13:44:2c:d0:7d:6d:11:d2:41:21:da:1e:aa:6e:31:99: 5d:1f:78:8c:e5:e7:a6:97:73:34:76:f6:4a:ed:16:61:2d:dd: 89:d2:eb:86:8a:c1:0a:d8:fd:4b:ae:91:e0:16:1b:0e:a9:7a: 9c:b7:19:8f:ea:d7:a7:6a:5d:42:91:ab:51:68:99:13:8b:67: ff:d1:a5:94:5f:de:65:31:dc:19:05:02:11:b9:51:eb:a4:21: 69:75:87:f0:99:6a:52:2f:12:db:f3:f7:9f:fa:ec:6f:e3:6a: eb:1b:80:c8:aa:ce:09:30:5c:72:5d:00:c8:91:ff:b4:65:3b: 44:81:a6:a6:19:94:81:45:41:c8:d3:45:8b:20:53:84:ed:45: ae:40:7a:d4:d5:65:9b:d4:01:b5:a4:19:a8:cd:fb:86:48:04: d2:04:12:ee:3d:cd:6a:d9:0a:cf:44:18:60:1f:6c:a4:ba:86: 15:fe:58:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtVYyUB13SjooZHOoANOWH395l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNjAxMjUxODE1NDlaFw0yNjAxMjgyMzEwNDlaMDMxMTAvBgNV BAMTKDlEQjE2RDVFMTEyMjU4RDZENzMzOEVFNEJDMjZCN0M3RTlGNTgzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAALg2XbnNDhN/66V5NhHb3Xl Man9Fa4bMAhze/Xa/8ARryFekOU2TExo43feRaLUSNVoR6u0GDY6Xf96+aPbvH2F 0XZlKwKZ8bliDWBL6rcGlYcbYgwXnZidcdRwAtvyMp92n6nCUNnQqk+x1rGMAVos rHEaKsdUZEQZZtVP5sRcnAwsSxOK7ylrdi89dHdVzjIrZBHktL2WvlAwClwuXRVC 65NDXo/+O83esy/WGuB87+tEDHboWMRd+rn4ky9jP9RtvUOUo7BQtyQ22tOLIuDG y8zeCTyWvrpsVuzkSB/DaX/gzMJJbCVCGTxxGUZ6tQ9kIeAiHy2ySi+yCt8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnbFtXhEiWNbXM47kvCa3x+n1g3AwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy40RinrIbd5DTGz32yZoY6nyqx9HkJuSMr KWWoiMgDDZR8gjj4vHtGbuZy7u3MSF6pGF6HeGeke9lasuP480vORzp4NrNnJBgO E0Qs0H1tEdJBIdoeqm4xmV0feIzl56aXczR29krtFmEt3YnS64aKwQrY/UuukeAW Gw6pepy3GY/q16dqXUKRq1FomROLZ//RpZRf3mUx3BkFAhG5UeukIWl1h/CZalIv Etvz95/67G/jausbgMiqzgkwXHJdAMiR/7RlO0SBpqYZlIFFQcjTRYsgU4TtRa5A etTVZZvUAbWkGajN+4ZIBNIEEu49zWrZCs9EGGAfbKS6hhX+WM8= -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:11 2026 by rpki-client