This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: Pfu/Y6UnsMbjbR6Ey8tAoOKwD8Xdec8Kt5AovvkOqzU= Subject key identifier: 73:42:91:12:1F:47:EE:3E:D2:E2:93:A1:31:80:6F:DA:50:6A:13:A5 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 2A300E18756C1785E8355155B569773FC55C14C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0254 Signing time: Sat 24 Jan 2026 22:11:23 +0000 Manifest this update: Sat 24 Jan 2026 22:06:23 +0000 Manifest next update: Tue 27 Jan 2026 23:40:23 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: BggS2kwrF1wot9/y3zRY32YXHPw5qTZ25TRQLtufFRk=) 3: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: 35nS32yJTNLhbcgUZmALVqr3JvPHwEeFfQkvwvwc4sA=) 4: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 5: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) 6: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: sszPSEpM2XoycChEYZOW3rQoirrCsDREG30y2mUo9m8=) 7: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: InGQY3MZTXdBzVl9f/6b6mok5SVj3un8F20uI5Xn2z0=) 8: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 9: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:30:0e:18:75:6c:17:85:e8:35:51:55:b5:69:77:3f:c5:5c:14:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Jan 24 22:06:23 2026 GMT Not After : Jan 27 23:40:23 2026 GMT Subject: CN=734291121F47EE3ED2E293A131806FDA506A13A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:f5:bb:6d:49:d0:9c:5a:25:2c:3e:ba:5f: 97:11:dd:c1:02:c2:b4:c9:66:d6:94:67:da:2d:1e: b4:ec:a3:b3:2b:90:36:3a:f3:07:54:17:22:96:10: 75:21:a9:52:b6:ec:ca:76:8b:ec:79:05:e4:d9:b6: ea:a8:77:93:4a:cd:8b:03:cd:07:0d:6c:dd:71:2b: de:c1:e0:a9:0b:33:d8:d6:46:73:c0:38:f5:62:8e: 93:a0:5c:59:bc:fe:5d:13:97:a8:b3:c4:52:4d:e6: db:26:da:a8:fb:ce:c8:d6:4c:0f:5a:56:86:28:b0: 74:f9:02:88:8d:30:0d:42:2e:3f:8c:66:1a:1b:e1: eb:32:6d:ad:bb:f0:82:4f:b1:09:77:ca:03:73:6a: 88:55:9d:2e:0d:0c:e0:27:45:ff:00:59:bd:fd:e5: c1:c3:a6:64:66:ce:10:ea:84:1e:7f:68:c3:57:0b: ef:2d:5c:73:53:43:7c:fd:45:7d:c8:ce:8e:82:63: e4:c6:56:a2:75:55:39:43:be:5d:91:9b:b1:04:21: 30:e4:96:04:00:8e:80:14:d0:f5:c1:a7:07:3f:8a: 77:cb:5e:c4:fa:df:b8:d6:dc:e0:10:1f:c3:47:38: 5a:51:b1:6a:5c:e5:48:de:f8:1e:ef:6d:f9:d8:99: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:42:91:12:1F:47:EE:3E:D2:E2:93:A1:31:80:6F:DA:50:6A:13:A5 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:51:7a:58:6c:b2:50:0c:57:17:1e:18:c4:fc:28:8c:30:f8: f0:43:71:2c:3f:05:36:41:9d:9f:5b:8d:28:d1:a5:4a:1a:7f: 7d:9e:f3:bf:f6:14:4e:75:23:31:5a:75:24:07:f3:48:76:fe: a2:34:77:c3:48:df:0f:98:03:55:36:f9:9e:e7:b9:ea:d4:ab: 2f:ce:26:84:12:96:ae:68:84:06:d3:2e:73:89:9e:3a:59:a9: 89:6f:cf:75:57:60:36:ec:fd:31:c2:e5:5d:df:bb:01:91:42: be:8b:87:db:b6:e5:fe:39:8a:d2:67:91:42:7c:2f:be:2f:b2: 56:34:f4:f0:ef:cc:46:cc:2c:a4:39:81:2b:f1:ba:e6:cd:50: 92:a0:00:d6:04:89:e7:c1:92:9b:84:f3:93:5b:9c:37:8f:a5: ce:70:5f:2f:5e:de:d2:6c:86:ac:23:38:ea:4b:fd:64:f2:b0: e0:d5:57:6a:72:c9:5d:7f:3e:6c:52:48:02:b4:6f:37:00:f8: 68:c3:6a:ab:f9:d9:8e:97:47:26:0e:ea:a5:83:a5:ec:43:4a: b7:f0:45:01:bb:6f:4e:1c:01:79:e7:b2:5c:6e:8e:b6:99:c3: 92:e8:ab:e8:7c:d6:2c:0c:af:bf:72:3e:97:aa:bb:8a:53:f6: fc:41:82:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjAOGHVsF4XoNVFVtWl3P8VcFMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNjAxMjQyMjA2MjNaFw0yNjAxMjcyMzQwMjNaMDMxMTAvBgNV BAMTKDczNDI5MTEyMUY0N0VFM0VEMkUyOTNBMTMxODA2RkRBNTA2QTEzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWL/W7bUnQnFolLD66X5cR3cEC wrTJZtaUZ9otHrTso7MrkDY68wdUFyKWEHUhqVK27Mp2i+x5BeTZtuqod5NKzYsD zQcNbN1xK97B4KkLM9jWRnPAOPVijpOgXFm8/l0Tl6izxFJN5tsm2qj7zsjWTA9a VoYosHT5AoiNMA1CLj+MZhob4esyba278IJPsQl3ygNzaohVnS4NDOAnRf8AWb39 5cHDpmRmzhDqhB5/aMNXC+8tXHNTQ3z9RX3Izo6CY+TGVqJ1VTlDvl2Rm7EEITDk lgQAjoAU0PXBpwc/infLXsT637jW3OAQH8NHOFpRsWpc5Uje+B7vbfnYmWW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0KREh9H7j7S4pOhMYBv2lBqE6UwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlRelhsslAMVxceGMT8KIww+PBDcSw/BTZB nZ9bjSjRpUoaf32e87/2FE51IzFadSQH80h2/qI0d8NI3w+YA1U2+Z7nuerUqy/O JoQSlq5ohAbTLnOJnjpZqYlvz3VXYDbs/THC5V3fuwGRQr6Lh9u25f45itJnkUJ8 L74vslY09PDvzEbMLKQ5gSvxuubNUJKgANYEiefBkpuE85NbnDePpc5wXy9e3tJs hqwjOOpL/WTysODVV2pyyV1/PmxSSAK0bzcA+GjDaqv52Y6XRyYO6qWDpexDSrfw RQG7b04cAXnnslxujraZw5Loq+h81iwMr79yPpequ4pT9vxBglE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:35 2026 by rpki-client