This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: 5M+cdGiEi7/Jw+kgkaOqDvynXlEjOUyxRUhMTUMC0W4= Subject key identifier: AA:03:1E:D6:E0:EB:59:C2:59:01:D9:05:57:EC:B5:F6:BA:04:11:E7 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 4696B2A02B091156C867C7D18AA74D65AAE16350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0541 Signing time: Sat 24 Jan 2026 00:42:34 +0000 Manifest this update: Sat 24 Jan 2026 00:37:34 +0000 Manifest next update: Tue 27 Jan 2026 07:50:34 +0000 Files and hashes: 1: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 2: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: TuweZ0Xr9FAAp7pAwVWnxilyZ/pqghwYW6kCcw6Uzu4=) 3: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 4: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 5: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 6: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:96:b2:a0:2b:09:11:56:c8:67:c7:d1:8a:a7:4d:65:aa:e1:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jan 24 00:37:34 2026 GMT Not After : Jan 27 07:50:34 2026 GMT Subject: CN=AA031ED6E0EB59C25901D90557ECB5F6BA0411E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:43:d1:d8:14:46:2d:3e:29:df:5d:58:6b: 46:d6:8c:c8:37:88:a7:ea:61:36:11:7f:1c:65:51: 26:13:2b:1c:41:f5:67:c2:21:e2:d5:86:98:78:13: 2a:4d:32:aa:52:59:b9:e0:db:92:84:61:fc:67:b2: ed:51:9d:a1:b8:db:8f:c2:dc:57:3a:b8:f1:a4:6d: b7:a4:69:d6:5d:0a:d7:05:6f:1a:c8:3d:3e:f9:d6: bf:ca:56:4f:f1:75:44:bf:60:21:ef:85:ee:47:d3: 80:48:d8:34:39:bc:80:4e:72:0f:ef:90:54:63:9d: 80:15:14:cb:88:60:83:8c:c3:14:08:e3:3d:92:d0: b0:d6:2d:2c:57:f4:eb:ee:d4:14:fc:8e:76:ce:ff: 5b:21:63:60:a3:e2:10:de:22:0e:bd:dd:2d:a5:eb: 4e:30:6c:c8:20:78:23:39:d3:44:7c:dc:a2:3d:e2: c4:22:85:1a:f6:24:7e:ab:f3:22:ab:05:ed:5b:72: 92:c5:f1:4f:3c:2a:fe:ab:dc:28:f3:1b:98:8d:0b: c5:3c:27:47:8b:c5:bb:56:87:4e:03:19:6a:1b:28: 78:32:5f:ed:de:2c:77:f1:7d:9a:14:f6:f4:43:0f: 6a:57:f6:c3:f0:6c:7c:44:a8:b5:d4:43:c3:23:18: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:1E:D6:E0:EB:59:C2:59:01:D9:05:57:EC:B5:F6:BA:04:11:E7 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:01:40:55:51:8f:8a:f5:00:01:ee:c9:1b:d3:b1:a3:5c:c2: 5f:64:a0:5a:c6:aa:2e:ee:76:33:42:c9:df:eb:1d:79:96:72: 24:e2:e2:28:ee:5d:b1:c6:ed:01:a6:cf:75:0f:86:eb:06:e5: 8c:4b:2b:11:aa:33:ed:dc:ca:96:3e:fa:3f:4e:1b:6c:5e:40: df:b2:2d:f3:52:ac:d8:d1:08:1c:e1:aa:62:1e:ba:29:b0:82: 4b:f8:14:cb:cd:54:6d:83:40:96:dd:f7:df:f7:85:1a:1e:8e: df:88:88:93:7e:8b:e4:a9:da:7f:e0:61:ed:57:ec:d1:e4:ca: 6a:0b:3f:b1:90:d1:6e:8b:2b:b0:fb:45:82:43:7f:03:c7:c7: 0a:5e:f8:26:fd:61:7c:04:6a:d5:e2:2f:c7:80:45:2c:c7:53: 78:f5:09:4a:d9:7d:b4:fb:53:55:d3:34:cb:a1:12:35:76:d6: 74:be:1e:3e:ca:54:44:6d:e2:cb:54:7a:66:ab:72:6f:1a:7a: df:cc:49:26:49:1b:d2:8f:14:90:34:61:a6:f1:7f:67:42:aa: 81:9d:52:97:79:6d:43:03:a2:71:c5:e4:75:48:b5:3c:6d:60: d3:65:c8:f7:5d:cb:03:71:e6:5f:32:60:b1:46:1d:66:c6:d0: 56:63:a3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpayoCsJEVbIZ8fRiqdNZarhY1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNjAxMjQwMDM3MzRaFw0yNjAxMjcwNzUwMzRaMDMxMTAvBgNV BAMTKEFBMDMxRUQ2RTBFQjU5QzI1OTAxRDkwNTU3RUNCNUY2QkEwNDExRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJUPR2BRGLT4p311Ya0bWjMg3 iKfqYTYRfxxlUSYTKxxB9WfCIeLVhph4EypNMqpSWbng25KEYfxnsu1RnaG424/C 3Fc6uPGkbbekadZdCtcFbxrIPT751r/KVk/xdUS/YCHvhe5H04BI2DQ5vIBOcg/v kFRjnYAVFMuIYIOMwxQI4z2S0LDWLSxX9Ovu1BT8jnbO/1shY2Cj4hDeIg693S2l 604wbMggeCM500R83KI94sQihRr2JH6r8yKrBe1bcpLF8U88Kv6r3CjzG5iNC8U8 J0eLxbtWh04DGWobKHgyX+3eLHfxfZoU9vRDD2pX9sPwbHxEqLXUQ8MjGKPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgMe1uDrWcJZAdkFV+y19roEEecwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIBQFVRj4r1AAHuyRvTsaNcwl9koFrGqi7u djNCyd/rHXmWciTi4ijuXbHG7QGmz3UPhusG5YxLKxGqM+3cypY++j9OG2xeQN+y LfNSrNjRCBzhqmIeuimwgkv4FMvNVG2DQJbd99/3hRoejt+IiJN+i+Sp2n/gYe1X 7NHkymoLP7GQ0W6LK7D7RYJDfwPHxwpe+Cb9YXwEatXiL8eARSzHU3j1CUrZfbT7 U1XTNMuhEjV21nS+Hj7KVERt4stUemarcm8aet/MSSZJG9KPFJA0Yabxf2dCqoGd Upd5bUMDonHF5HVItTxtYNNlyPddywNx5l8yYLFGHWbG0FZjoyE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:34 2026 by rpki-client