This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: Khi6LXVXKF1tgwJi86vFp5seEphbPUEaNqLfuP6j5WI= Subject key identifier: DE:1A:60:61:4B:E7:02:C9:81:AB:11:D0:A0:AA:C2:7E:E7:9F:54:DE Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 7B8BAADB860AA8070F722165EB6A2E000B3B5B45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 0543 Signing time: Sun 25 Jan 2026 15:11:22 +0000 Manifest this update: Sun 25 Jan 2026 15:06:22 +0000 Manifest next update: Wed 28 Jan 2026 21:21:22 +0000 Files and hashes: 1: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=) 2: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: c0N9Zg6YgERmmvYxkHOvVZWJMcJD/HtbG4OhFKlla3o=) 3: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8b:aa:db:86:0a:a8:07:0f:72:21:65:eb:6a:2e:00:0b:3b:5b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Jan 25 15:06:22 2026 GMT Not After : Jan 28 21:21:22 2026 GMT Subject: CN=DE1A60614BE702C981AB11D0A0AAC27EE79F54DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:5f:a1:2d:89:95:e4:02:bd:9b:3a:78:da: 24:58:b5:80:f6:50:5b:40:4d:01:3f:a1:bf:e0:a3: 2a:f6:50:74:ce:e2:29:0d:de:6c:8d:86:93:6f:e1: c3:f2:47:60:6e:a1:9e:23:98:25:0f:fd:51:73:2f: 71:c5:2b:8f:0d:06:da:df:a1:7a:34:58:00:6a:0f: b0:e6:be:79:c3:26:73:06:1d:a9:9b:ab:10:92:90: 88:53:92:d9:ab:bb:d9:8f:9c:06:11:de:38:ee:e7: 22:b9:91:3b:d1:d4:15:55:c8:77:6e:0e:3d:9f:73: d0:89:0d:b5:86:31:ff:c5:b7:9f:ef:d5:67:d3:00: d1:ee:47:c4:50:8a:e0:93:fb:e3:ee:bb:5b:96:14: ed:91:97:8f:70:c0:3e:2b:14:dd:06:4b:0e:b1:27: 6f:ea:ba:bf:97:31:8b:a7:03:67:2c:3a:9b:51:69: c7:e2:44:d7:69:5e:2f:58:ea:fb:e3:2e:bb:5e:a6: 4c:56:09:cc:4f:d1:78:02:a4:82:28:01:d7:a0:f6: 15:85:0d:1e:b5:4c:fe:f1:b4:fb:92:90:f3:3f:6c: 09:a9:4a:cc:d3:4d:68:d5:7f:f4:ff:a8:82:f0:4f: 8d:cd:10:f9:8e:b3:67:08:85:82:91:a9:b3:1c:ce: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:60:61:4B:E7:02:C9:81:AB:11:D0:A0:AA:C2:7E:E7:9F:54:DE X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8c:85:85:ce:d9:72:22:bf:8e:6b:a2:92:7a:b2:05:cd:0b: 1b:13:21:50:f6:0d:9e:c9:19:d8:8c:c7:9b:c8:08:a6:77:49: c8:82:37:10:f0:2b:fb:a0:fc:e9:dd:ae:3a:dd:4b:db:7e:92: dd:96:07:b1:e9:e0:b1:39:99:75:66:36:50:b4:97:b8:43:f9: a4:ad:f9:fd:42:c5:5f:c5:70:1a:2f:78:02:9f:11:40:1f:4d: 12:86:43:c0:93:c0:f9:0d:7d:56:e2:23:3a:03:9d:65:47:1e: 00:11:99:16:81:55:43:ca:03:60:d2:58:6f:f0:eb:32:7a:65: 94:57:1d:47:17:3e:5d:c1:7c:06:67:2d:a0:86:00:9a:33:7f: 1c:0e:f7:7a:94:cc:22:fd:0d:56:7f:83:7b:cc:2d:da:df:86: 24:7a:62:90:51:75:49:53:50:0d:cf:e2:5f:4c:b8:27:ee:d3: e5:42:80:2d:47:60:ac:28:cc:61:68:3e:96:a2:8d:3f:7f:60: 72:c5:b4:a7:50:5d:f6:5c:37:d8:1a:db:21:cc:dc:ec:70:12: 8c:9c:6f:e9:ad:44:72:b4:6a:65:33:0c:ce:36:32:59:bc:e7: 33:cf:bd:64:41:17:e9:7f:3d:83:ea:e8:c6:b8:78:da:f7:e3: 6e:4e:8b:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4uq24YKqAcPciFl62ouAAs7W0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNjAxMjUxNTA2MjJaFw0yNjAxMjgyMTIxMjJaMDMxMTAvBgNV BAMTKERFMUE2MDYxNEJFNzAyQzk4MUFCMTFEMEEwQUFDMjdFRTc5RjU0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3F+hLYmV5AK9mzp42iRYtYD2 UFtATQE/ob/goyr2UHTO4ikN3myNhpNv4cPyR2BuoZ4jmCUP/VFzL3HFK48NBtrf oXo0WABqD7DmvnnDJnMGHambqxCSkIhTktmru9mPnAYR3jju5yK5kTvR1BVVyHdu Dj2fc9CJDbWGMf/Ft5/v1WfTANHuR8RQiuCT++Puu1uWFO2Rl49wwD4rFN0GSw6x J2/qur+XMYunA2csOptRacfiRNdpXi9Y6vvjLrtepkxWCcxP0XgCpIIoAdeg9hWF DR61TP7xtPuSkPM/bAmpSszTTWjVf/T/qILwT43NEPmOs2cIhYKRqbMczg9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hpgYUvnAsmBqxHQoKrCfuefVN4wHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6MhYXO2XIiv45ropJ6sgXNCxsTIVD2DZ7J GdiMx5vICKZ3SciCNxDwK/ug/OndrjrdS9t+kt2WB7Hp4LE5mXVmNlC0l7hD+aSt +f1CxV/FcBoveAKfEUAfTRKGQ8CTwPkNfVbiIzoDnWVHHgARmRaBVUPKA2DSWG/w 6zJ6ZZRXHUcXPl3BfAZnLaCGAJozfxwO93qUzCL9DVZ/g3vMLdrfhiR6YpBRdUlT UA3P4l9MuCfu0+VCgC1HYKwozGFoPpaijT9/YHLFtKdQXfZcN9ga2yHM3OxwEoyc b+mtRHK0amUzDM42Mlm85zPPvWRBF+l/PYPq6Ma4eNr3425Oi7c= -----END CERTIFICATE-----Generated at Sun Jan 25 18:46:18 2026 by rpki-client