This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: JGTITU9SPoJrAwpmRN7tXbWtLN56OgOPRaVld2KSOAU= Subject key identifier: 8F:EC:67:27:79:F9:98:D9:F4:AA:4E:BE:CF:4D:02:4F:99:32:71:28 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 7F4BA087896E98E1E086F10C8E93B41328058860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 0532 Signing time: Sun 25 Jan 2026 06:10:41 +0000 Manifest this update: Sun 25 Jan 2026 06:05:41 +0000 Manifest next update: Wed 28 Jan 2026 08:41:41 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: zNdrqPR7lNaFxaIw0sjo9fY9kgnoO19kpuIMOUG/NWc=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4b:a0:87:89:6e:98:e1:e0:86:f1:0c:8e:93:b4:13:28:05:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Jan 25 06:05:41 2026 GMT Not After : Jan 28 08:41:41 2026 GMT Subject: CN=8FEC672779F998D9F4AA4EBECF4D024F99327128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:4c:04:0b:e7:32:ea:44:4c:5b:2d:0b:c7: fd:00:0e:dc:b6:5c:b8:c9:4e:57:55:af:e9:e3:91: d4:c3:ba:98:dd:89:14:c8:3c:89:60:9f:7a:53:ef: 54:cc:e1:e0:ef:18:34:5a:66:52:4f:6a:80:f2:7e: 76:30:f3:2d:c5:ca:87:28:f7:ae:09:13:af:2b:17: f1:8f:7b:0a:8a:41:6b:2c:d2:c4:9a:e8:8c:fb:33: 2a:6b:23:8d:23:cd:b4:0f:22:62:67:c4:81:90:dc: ce:df:0a:20:08:a2:4b:25:89:43:19:05:cb:75:5b: 47:d3:f4:aa:eb:aa:ca:26:ba:8f:76:74:a5:6a:07: 29:2b:d0:84:ff:29:a3:00:53:1b:ee:66:8b:80:b8: c7:5d:34:8f:6b:78:f8:7a:44:7f:64:c8:15:f2:df: 97:bd:24:85:88:d2:44:fd:36:d1:df:84:4e:64:b6: d9:18:cf:33:33:21:62:3a:0a:c0:91:ae:0b:c9:29: ee:8b:d4:50:fe:40:32:ce:ea:46:46:c0:94:5e:fe: 5b:59:e7:c2:40:d8:2e:aa:fa:a3:ef:b5:fa:f2:83: a7:5f:ba:08:d0:66:c3:69:67:56:a0:13:0a:8d:6e: 28:2e:3f:85:9d:df:d4:a6:49:cf:2f:04:d5:ff:c2: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EC:67:27:79:F9:98:D9:F4:AA:4E:BE:CF:4D:02:4F:99:32:71:28 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b7:22:fe:31:d9:ba:95:a6:d1:71:59:66:db:6d:81:bc:60: 99:fd:07:a8:5b:35:cc:5c:61:fa:1c:51:1a:9c:e9:cb:1e:56: e3:8a:50:b1:73:44:c0:88:5b:1a:c5:cc:3c:4d:0c:c3:87:15: d5:76:4d:f1:bc:51:03:10:f1:6a:ff:0b:aa:3e:82:1a:e4:17: 02:91:6d:18:3f:8d:e3:a9:de:d7:75:09:c7:b4:98:0b:33:ac: 72:6c:66:04:93:c1:f2:0b:94:82:2a:42:29:3b:60:32:bd:51: d7:78:91:41:7f:55:de:b0:6a:b2:6e:71:d7:f8:96:75:df:9d: cd:33:0e:13:37:16:6b:df:38:1a:ce:e0:c3:81:36:bb:e6:59: 5c:d9:2e:58:df:93:69:ca:d0:07:72:fa:a2:f9:6d:8f:ad:9b: 90:d6:86:c2:01:8b:d5:3f:cc:e4:10:47:e0:a3:21:6c:09:ce: 3e:b9:1a:8b:12:bc:18:50:a9:aa:92:e1:4e:1c:37:32:55:5e: 72:df:0c:ec:a7:d7:05:ef:68:c9:fa:15:5a:4f:e4:61:08:12: d7:7f:6c:88:9a:fe:2f:a0:09:3e:e2:8a:41:cc:01:32:21:35: 81:fd:2a:f6:e7:89:97:4c:1c:83:28:93:cb:0d:ae:5e:f2:9c: f8:fa:d1:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0ugh4lumOHghvEMjpO0EygFiGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNjAxMjUwNjA1NDFaFw0yNjAxMjgwODQxNDFaMDMxMTAvBgNV BAMTKDhGRUM2NzI3NzlGOTk4RDlGNEFBNEVCRUNGNEQwMjRGOTkzMjcxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3B0wEC+cy6kRMWy0Lx/0ADty2 XLjJTldVr+njkdTDupjdiRTIPIlgn3pT71TM4eDvGDRaZlJPaoDyfnYw8y3Fyoco 964JE68rF/GPewqKQWss0sSa6Iz7MyprI40jzbQPImJnxIGQ3M7fCiAIoksliUMZ Bct1W0fT9Krrqsomuo92dKVqBykr0IT/KaMAUxvuZouAuMddNI9rePh6RH9kyBXy 35e9JIWI0kT9NtHfhE5kttkYzzMzIWI6CsCRrgvJKe6L1FD+QDLO6kZGwJRe/ltZ 58JA2C6q+qPvtfryg6dfugjQZsNpZ1agEwqNbiguP4Wd39SmSc8vBNX/wrxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+xnJ3n5mNn0qk6+z00CT5kycSgwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF63Iv4x2bqVptFxWWbbbYG8YJn9B6hbNcxc YfocURqc6cseVuOKULFzRMCIWxrFzDxNDMOHFdV2TfG8UQMQ8Wr/C6o+ghrkFwKR bRg/jeOp3td1Cce0mAszrHJsZgSTwfILlIIqQik7YDK9Udd4kUF/Vd6warJucdf4 lnXfnc0zDhM3FmvfOBrO4MOBNrvmWVzZLljfk2nK0Ady+qL5bY+tm5DWhsIBi9U/ zOQQR+CjIWwJzj65GosSvBhQqaqS4U4cNzJVXnLfDOyn1wXvaMn6FVpP5GEIEtd/ bIia/i+gCT7iikHMATIhNYH9KvbniZdMHIMok8sNrl7ynPj60e8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:06 2026 by rpki-client