This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: 3KnBgfWwjZv1QFcDPwwrMFV2AifkIG7/Sw24r0mYjkM= Subject key identifier: FC:E9:02:B7:BB:18:E3:C3:09:D6:30:62:69:30:4E:D2:E0:38:97:E4 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 458BC0B2E8F175E3F1274DAF6509A53F196445E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 014A Signing time: Sat 24 Jan 2026 18:21:04 +0000 Manifest this update: Sat 24 Jan 2026 18:16:04 +0000 Manifest next update: Tue 27 Jan 2026 23:51:04 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: KscxzUQD6bMjCsvvpdZiIR/su7YnmKeEMVHAgyglhWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8b:c0:b2:e8:f1:75:e3:f1:27:4d:af:65:09:a5:3f:19:64:45:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Jan 24 18:16:04 2026 GMT Not After : Jan 27 23:51:04 2026 GMT Subject: CN=FCE902B7BB18E3C309D6306269304ED2E03897E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:ef:de:90:65:f7:5f:f5:16:38:42:84:c9: 6c:f8:36:49:d2:82:87:03:00:7f:db:c3:a4:53:1f: e6:93:7a:d0:ac:b6:a7:33:f4:e5:94:c0:f4:46:30: 31:7e:0a:49:8d:94:10:16:a7:04:b5:70:7b:b2:26: 40:8f:12:69:a6:b8:5b:c3:25:7f:34:e0:f1:e7:fe: 9d:98:ee:fa:58:41:66:1f:e4:58:40:25:3f:cc:00: 64:87:c5:76:d1:d3:e4:c9:d6:f3:b3:0c:9e:38:d5: 47:eb:10:ff:29:99:be:b3:5c:11:8e:a0:cd:f0:6e: 92:c4:ba:4d:1b:9e:f4:d7:b3:3f:64:55:c0:01:70: 98:ed:03:b2:dc:79:9f:ec:48:f2:31:2f:f6:d4:90: 48:1e:0c:4f:fa:26:b0:82:10:df:4e:46:83:68:b7: 73:60:a9:dc:02:f1:dd:95:eb:7f:e5:9e:4a:ba:f5: 3d:7b:0c:1e:57:4e:f8:73:57:43:9d:e8:03:62:0e: c5:d5:57:75:0e:58:1a:8a:ea:2a:57:98:a0:16:7c: 84:40:f1:1e:b9:86:19:cf:aa:6b:e6:97:f6:3a:65: 9d:f7:bf:bd:69:64:a1:57:44:ff:e0:73:69:2c:3f: 29:00:29:e2:9a:1e:cf:b6:80:6a:44:2e:93:73:f5: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:02:B7:BB:18:E3:C3:09:D6:30:62:69:30:4E:D2:E0:38:97:E4 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:a8:6e:e8:dc:8f:52:d4:2d:a8:39:a9:c1:de:d5:7f:0a: 68:09:60:25:1e:14:bb:41:28:07:c6:63:c4:36:69:01:f6:f2: ff:2c:18:b0:86:fb:57:b7:eb:86:cf:b6:6b:ab:18:5c:33:bb: 2d:ff:4a:c5:d0:28:a0:d6:63:90:72:58:92:e3:98:15:3e:32: e0:5b:49:67:28:b1:46:89:66:17:13:64:0e:9a:2b:8f:df:f2: cc:1f:1d:9f:a4:33:a5:ff:70:54:36:4d:06:06:5c:4a:a7:4d: 2f:37:ff:4e:67:38:bc:df:56:d2:65:26:bf:dc:7a:2d:89:f9: e3:2c:50:a9:00:ba:b1:71:b9:9c:c2:41:aa:49:72:e4:8c:66: 98:ea:8e:e6:c8:27:41:c0:35:4a:92:96:bf:ed:76:66:1f:5b: a1:fc:84:db:04:83:75:0e:8b:06:6b:fa:82:64:7e:62:e6:c5: 30:15:19:e2:81:54:bc:60:35:4f:7f:e1:05:d3:15:1f:1e:c6: 1f:d5:6f:13:90:0d:28:b6:1c:aa:82:0e:37:6b:31:ba:21:38: 86:32:a7:28:13:0f:2f:ae:cb:84:e1:1f:59:d7:1b:4c:6e:b1: 35:a3:c4:a4:d3:2d:73:15:1e:d1:72:a1:85:f3:58:6b:d5:85: 5e:ba:20:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYvAsujxdePxJ02vZQmlPxlkReQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNjAxMjQxODE2MDRaFw0yNjAxMjcyMzUxMDRaMDMxMTAvBgNV BAMTKEZDRTkwMkI3QkIxOEUzQzMwOUQ2MzA2MjY5MzA0RUQyRTAzODk3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfu/ekGX3X/UWOEKEyWz4NknS gocDAH/bw6RTH+aTetCstqcz9OWUwPRGMDF+CkmNlBAWpwS1cHuyJkCPEmmmuFvD JX804PHn/p2Y7vpYQWYf5FhAJT/MAGSHxXbR0+TJ1vOzDJ441UfrEP8pmb6zXBGO oM3wbpLEuk0bnvTXsz9kVcABcJjtA7LceZ/sSPIxL/bUkEgeDE/6JrCCEN9ORoNo t3NgqdwC8d2V63/lnkq69T17DB5XTvhzV0Od6ANiDsXVV3UOWBqK6ipXmKAWfIRA 8R65hhnPqmvml/Y6ZZ33v71pZKFXRP/gc2ksPykAKeKaHs+2gGpELpNz9WI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/OkCt7sY48MJ1jBiaTBO0uA4l+QwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAQqG7o3I9S1C2oOanB3tV/CmgJYCUeFLtB KAfGY8Q2aQH28v8sGLCG+1e364bPtmurGFwzuy3/SsXQKKDWY5ByWJLjmBU+MuBb SWcosUaJZhcTZA6aK4/f8swfHZ+kM6X/cFQ2TQYGXEqnTS83/05nOLzfVtJlJr/c ei2J+eMsUKkAurFxuZzCQapJcuSMZpjqjubIJ0HANUqSlr/tdmYfW6H8hNsEg3UO iwZr+oJkfmLmxTAVGeKBVLxgNU9/4QXTFR8exh/VbxOQDSi2HKqCDjdrMbohOIYy pygTDy+uy4ThH1nXG0xusTWjxKTTLXMVHtFyoYXzWGvVhV66ILc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:45 2026 by rpki-client