This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: f9QqP02i/dLSJ1p984h43ON96jYARsoXlNbtl4QKfcg= Subject key identifier: C4:48:EF:B0:58:E0:93:E4:8B:78:C7:86:F8:E8:A1:4D:08:EE:0F:82 Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 5A0023C1332D311E622A005A29447C9313EB01E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 96 Signing time: Sat 24 Jan 2026 10:51:24 +0000 Manifest this update: Sat 24 Jan 2026 10:46:24 +0000 Manifest next update: Tue 27 Jan 2026 21:33:24 +0000 Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=) 2: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=) 3: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: AsSpS523K7ovqZjRTfplo4fQkvB2d6RsJvoJEe2Tb1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:00:23:c1:33:2d:31:1e:62:2a:00:5a:29:44:7c:93:13:eb:01:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Jan 24 10:46:24 2026 GMT Not After : Jan 27 21:33:24 2026 GMT Subject: CN=C448EFB058E093E48B78C786F8E8A14D08EE0F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:54:35:c4:4b:17:c9:a0:f8:94:30:96:09: 19:c2:95:e9:86:35:f2:e2:ca:97:2c:51:fb:68:01: ab:bd:54:ed:bc:09:e4:d3:bd:1c:d3:32:a0:f4:18: 18:38:c3:9f:67:c1:da:12:7e:0d:0a:95:91:c1:e2: 2c:9d:2e:92:27:5d:b6:0b:09:47:71:76:97:b4:ca: 38:6b:d1:db:73:2f:6a:4c:f9:c6:3c:55:31:5e:52: 0f:a1:01:2e:f0:c4:5d:76:08:a6:77:40:68:5d:9b: 53:bf:32:7e:a1:77:d7:15:4b:a2:8a:0a:f0:aa:7f: 55:bd:8e:31:70:a2:c7:b2:99:b0:c2:c6:74:f9:d9: c2:cd:2a:9b:cd:3d:39:d5:c2:92:12:03:87:75:e8: 9c:24:31:33:87:ca:5c:be:4a:37:6b:33:26:89:af: 9e:71:43:25:72:13:1c:34:f3:36:c5:6c:d5:34:47: 2a:91:5c:0c:ba:5b:b1:d5:df:9c:e3:5a:3f:43:5b: 20:82:b0:20:7a:46:4e:91:05:45:54:f9:82:33:b0: 29:2a:04:39:fa:bc:99:ec:24:14:48:af:64:16:98: d7:03:f4:c1:85:21:4f:88:0e:44:02:a2:e8:62:33: a8:0b:17:cb:2d:cb:d5:bd:d1:59:b7:98:ab:70:0c: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:48:EF:B0:58:E0:93:E4:8B:78:C7:86:F8:E8:A1:4D:08:EE:0F:82 X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:19:93:0e:8e:4a:91:16:e3:64:3e:a8:f5:cc:52:9d:32:ac: 92:b2:31:a4:6c:53:9f:61:37:49:1c:f8:b8:8f:8a:6d:d0:6b: a6:52:5c:a4:3f:66:a8:68:8e:c4:6b:3b:c4:05:c1:0a:af:c2: 8e:09:23:b0:31:20:c7:9a:59:08:51:d7:3b:73:52:60:ab:f8: 3b:97:43:fa:9b:94:ca:df:ce:23:42:fc:a8:2b:dc:51:25:0b: 08:82:6c:bc:a4:16:a4:33:2f:5a:f3:9a:b5:1d:ef:00:01:f3: 61:21:ee:0f:03:42:70:ce:17:59:49:86:54:2e:75:f6:f2:64: b9:fd:ff:ef:f3:ac:37:8f:91:8b:ea:91:4d:f1:41:3e:95:bc: 2b:35:f8:18:93:73:5c:5f:49:6b:84:d4:1b:fe:e8:af:9c:c8: 2b:f5:7f:18:47:cf:b0:74:a8:cc:08:86:d7:2f:9a:1d:e8:1d: a6:19:93:f9:83:6b:8e:1b:5b:51:2c:5a:66:49:f0:e8:44:2e: ce:c8:94:f4:6f:9e:86:2a:69:1b:01:e6:48:25:7c:cb:f4:92: 91:92:9a:5d:1d:55:6b:af:ca:25:71:19:79:d4:52:95:c9:cc: 3b:f4:ba:73:84:99:5e:66:ef:a2:69:49:00:28:01:72:b4:ff: 82:05:af:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgAjwTMtMR5iKgBaKUR8kxPrAeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNjAxMjQxMDQ2MjRaFw0yNjAxMjcyMTMzMjRaMDMxMTAvBgNV BAMTKEM0NDhFRkIwNThFMDkzRTQ4Qjc4Qzc4NkY4RThBMTREMDhFRTBGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfglQ1xEsXyaD4lDCWCRnClemG NfLiypcsUftoAau9VO28CeTTvRzTMqD0GBg4w59nwdoSfg0KlZHB4iydLpInXbYL CUdxdpe0yjhr0dtzL2pM+cY8VTFeUg+hAS7wxF12CKZ3QGhdm1O/Mn6hd9cVS6KK CvCqf1W9jjFwoseymbDCxnT52cLNKpvNPTnVwpISA4d16JwkMTOHyly+SjdrMyaJ r55xQyVyExw08zbFbNU0RyqRXAy6W7HV35zjWj9DWyCCsCB6Rk6RBUVU+YIzsCkq BDn6vJnsJBRIr2QWmNcD9MGFIU+IDkQCouhiM6gLF8sty9W90Vm3mKtwDHhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEjvsFjgk+SLeMeG+OihTQjuD4IwHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4Zkw6OSpEW42Q+qPXMUp0yrJKyMaRsU59h N0kc+LiPim3Qa6ZSXKQ/ZqhojsRrO8QFwQqvwo4JI7AxIMeaWQhR1ztzUmCr+DuX Q/qblMrfziNC/Kgr3FElCwiCbLykFqQzL1rzmrUd7wAB82Eh7g8DQnDOF1lJhlQu dfbyZLn9/+/zrDePkYvqkU3xQT6VvCs1+BiTc1xfSWuE1Bv+6K+cyCv1fxhHz7B0 qMwIhtcvmh3oHaYZk/mDa44bW1EsWmZJ8OhELs7IlPRvnoYqaRsB5kglfMv0kpGS ml0dVWuvyiVxGXnUUpXJzDv0unOEmV5m76JpSQAoAXK0/4IFr20= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:25 2026 by rpki-client