This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: W5QteTf+oa5WaOprw1t/FxiB8Zmdy3nbP2jgLDAC/j4= Subject key identifier: 05:A8:50:3E:0F:C0:C1:24:A9:E2:1C:97:8A:D3:BC:41:2E:79:E3:3B Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 6F92DF300B50CFD59193EED648F3FF1A3685D7A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02DC Signing time: Sun 25 Jan 2026 16:12:05 +0000 Manifest this update: Sun 25 Jan 2026 16:07:05 +0000 Manifest next update: Wed 28 Jan 2026 19:41:05 +0000 Files and hashes: 1: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) 2: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 3: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) 4: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: 6mJyqxxNefronuSY+quCwkkZssGb5xBYtKF5apn4P8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:92:df:30:0b:50:cf:d5:91:93:ee:d6:48:f3:ff:1a:36:85:d7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Jan 25 16:07:05 2026 GMT Not After : Jan 28 19:41:05 2026 GMT Subject: CN=05A8503E0FC0C124A9E21C978AD3BC412E79E33B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:1a:9f:4c:e2:24:39:87:fd:5d:49:ab:6b: fd:a6:e7:17:05:e8:d6:00:b5:08:8d:6e:d6:23:27: 57:3f:b4:e7:f9:5c:18:33:c5:06:01:ef:95:7c:14: e9:0f:c9:25:12:93:54:ed:59:68:49:57:d8:29:f7: 6a:8f:1b:ef:53:4d:9b:1d:84:d8:a1:71:f0:5d:7e: 8c:f5:82:ad:44:b4:de:d4:a5:7f:e6:26:a6:bb:c7: 89:a6:50:6f:c6:6a:b1:2a:e7:8c:37:e8:be:b0:01: 27:8a:00:52:2a:a6:c2:ba:dd:a3:b5:7d:4e:67:c6: 4c:d2:86:d8:82:c3:80:8e:35:30:58:6f:46:f8:82: 62:36:44:7c:2d:6a:2a:93:2e:f2:77:db:ee:c5:de: 3e:cc:e9:cf:98:e5:13:f9:bf:b5:a9:8b:04:21:b1: 8d:5c:46:1e:58:04:c7:62:b5:46:ec:3d:d5:b1:38: 03:64:7e:a4:9d:10:d5:ea:a3:c2:da:16:11:64:ae: d6:03:7b:61:74:8b:d2:d6:d6:72:f4:38:3c:10:35: c1:96:e8:99:8c:1f:48:97:7a:c7:a9:bd:cd:d1:b6: fd:da:38:e8:e6:e6:9f:72:9c:ce:f4:6a:da:49:4a: 4e:dc:f4:07:d1:4b:df:a5:dd:a1:fc:09:ea:4e:e7: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A8:50:3E:0F:C0:C1:24:A9:E2:1C:97:8A:D3:BC:41:2E:79:E3:3B X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d8:95:ec:8b:b6:e7:4e:fe:6c:c2:98:73:42:f2:00:9d:f2: 90:fc:f8:62:13:7b:01:66:75:8e:2e:37:e7:c4:1a:55:69:1b: 5c:94:9c:bb:75:a4:ba:a1:3b:af:04:18:f2:c0:64:eb:93:7e: 49:a0:15:7e:f2:f4:9e:74:2c:73:20:a1:d9:e9:7d:05:6e:1a: ad:58:9d:cf:ec:34:8d:9f:13:ae:38:fe:d0:63:7e:0e:91:a8: cb:6f:a5:8a:1f:23:e6:87:9b:04:3a:74:aa:63:36:72:44:9d: b8:12:ca:8b:17:5f:d2:6a:06:89:e9:8b:c3:fc:e4:fb:41:d5: 57:4c:9b:fa:b5:8d:e4:46:fa:83:d1:3e:d8:d1:85:e6:c2:fa: 96:ae:9d:8f:ca:4b:29:c8:e2:14:74:8f:42:fe:b6:3e:d6:34: 27:32:55:02:08:9e:44:1c:83:39:b7:6c:04:75:0e:e4:e4:c7: eb:66:a6:9e:a6:d6:ce:5f:bc:2c:ba:99:8a:35:e3:f2:cd:d1: e5:fe:73:60:64:93:28:72:9e:9a:80:a3:57:51:39:70:73:61: fa:66:7b:55:d2:92:97:f2:5b:74:a7:18:fb:23:ea:ab:81:30: b3:d9:7e:11:fe:32:c2:1d:51:f1:8b:01:74:cd:5b:1a:ee:d7: a4:54:c3:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5LfMAtQz9WRk+7WSPP/GjaF16gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNjAxMjUxNjA3MDVaFw0yNjAxMjgxOTQxMDVaMDMxMTAvBgNV BAMTKDA1QTg1MDNFMEZDMEMxMjRBOUUyMUM5NzhBRDNCQzQxMkU3OUUzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuxqfTOIkOYf9XUmra/2m5xcF 6NYAtQiNbtYjJ1c/tOf5XBgzxQYB75V8FOkPySUSk1TtWWhJV9gp92qPG+9TTZsd hNihcfBdfoz1gq1EtN7UpX/mJqa7x4mmUG/GarEq54w36L6wASeKAFIqpsK63aO1 fU5nxkzShtiCw4CONTBYb0b4gmI2RHwtaiqTLvJ32+7F3j7M6c+Y5RP5v7WpiwQh sY1cRh5YBMditUbsPdWxOANkfqSdENXqo8LaFhFkrtYDe2F0i9LW1nL0ODwQNcGW 6JmMH0iXesepvc3Rtv3aOOjm5p9ynM70atpJSk7c9AfRS9+l3aH8CepO51eBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBahQPg/AwSSp4hyXitO8QS554zswHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/YleyLtudO/mzCmHNC8gCd8pD8+GITewFm dY4uN+fEGlVpG1yUnLt1pLqhO68EGPLAZOuTfkmgFX7y9J50LHMgodnpfQVuGq1Y nc/sNI2fE644/tBjfg6RqMtvpYofI+aHmwQ6dKpjNnJEnbgSyosXX9JqBonpi8P8 5PtB1VdMm/q1jeRG+oPRPtjRhebC+paunY/KSynI4hR0j0L+tj7WNCcyVQIInkQc gzm3bAR1DuTkx+tmpp6m1s5fvCy6mYo14/LN0eX+c2BkkyhynpqAo1dROXBzYfpm e1XSkpfyW3SnGPsj6quBMLPZfhH+MsIdUfGLAXTNWxru16RUw2A= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:51 2026 by rpki-client