This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: dzEhv9kQaPbaUIue+74dt/mIauas8qxz32JD2nyJFzs= Subject key identifier: 35:57:94:B2:4C:B2:96:46:4C:65:FD:8E:D6:5C:D7:60:59:D3:FA:11 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 52FDD8DAA070D56F5C80454A6254629B47AD7C89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01EE Signing time: Sun 25 Jan 2026 01:10:05 +0000 Manifest this update: Sun 25 Jan 2026 01:05:05 +0000 Manifest next update: Wed 28 Jan 2026 05:47:05 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=) 2: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=) 3: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: UxYNhJvNdDFejOhm8F4BW8bWUk0XKYeIrLvP8fY/ZOU=) 4: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 05:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fd:d8:da:a0:70:d5:6f:5c:80:45:4a:62:54:62:9b:47:ad:7c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Jan 25 01:05:05 2026 GMT Not After : Jan 28 05:47:05 2026 GMT Subject: CN=355794B24CB296464C65FD8ED65CD76059D3FA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:89:40:14:7a:fe:1c:21:82:c3:4a:be:43: ef:0b:ce:e6:89:71:24:0e:db:5e:d8:9e:5e:97:c5: aa:11:07:9f:64:b6:ab:e8:ee:f8:65:f0:1b:b5:6c: 7e:25:e9:fd:56:6b:78:b0:86:3d:25:66:59:d6:0e: 44:06:85:53:9f:c9:c4:99:7b:95:30:73:be:5f:40: 0f:9f:f1:96:df:67:24:5a:ed:7d:4c:8d:a5:9f:ed: 80:c4:30:9f:85:0c:8e:8d:6e:61:b7:fa:8d:98:56: 2b:de:72:2a:f9:8a:75:1c:5c:9e:89:7b:9f:41:8d: ae:37:b5:50:83:e2:8e:ec:06:e4:e9:7d:4e:de:d8: 44:6e:61:a6:54:6c:c1:57:16:c7:4b:2e:a5:51:8b: 62:2a:6f:7a:32:88:b9:81:ed:64:e4:54:9e:ae:1f: a8:93:77:48:86:7c:80:51:83:17:67:bf:87:45:96: 49:ab:d3:e7:c4:a4:b7:75:bd:bf:15:cc:7c:04:84: 28:aa:11:1e:d1:70:93:fe:a7:3a:e8:f5:3b:07:ec: df:86:c8:6d:50:c1:d8:78:b2:63:ae:5f:f3:d8:5e: dd:7a:86:a9:e1:2c:09:88:ce:86:56:1a:7a:9d:f9: e2:9c:ec:5e:4c:e7:3d:62:a7:00:fb:20:af:1d:28: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:94:B2:4C:B2:96:46:4C:65:FD:8E:D6:5C:D7:60:59:D3:FA:11 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:44:de:35:56:39:fa:ac:d3:34:2d:74:f9:c4:cd:11:dd:df: 26:75:b4:be:84:ca:8c:42:2e:d6:a7:0b:16:dc:dd:5e:7e:f3: 17:c0:91:c4:a9:bb:c4:61:a7:af:d3:bf:19:82:07:e2:70:f4: b6:0c:a8:ce:38:f1:4a:a7:15:96:14:fd:64:21:43:17:4c:3e: 23:12:07:88:11:a2:82:2c:4d:8b:4f:e0:db:e5:bb:e1:c9:c4: 82:9b:59:2b:28:56:4f:ac:3e:c4:06:bb:ee:ae:5b:20:e1:66: c4:f5:7f:bc:bb:64:b2:3c:19:9a:8a:6c:41:db:c8:d5:c1:5f: 33:11:5d:35:40:33:84:44:09:bd:de:7d:70:ca:4b:22:a8:3f: 30:28:3c:13:e2:02:da:7c:12:10:60:bb:22:46:5e:80:29:ba: f6:1a:64:5a:e8:2f:92:9c:b5:15:5f:80:20:8c:05:c3:b8:e7: d6:9b:01:a4:78:05:06:2c:0a:1d:ae:6c:ad:26:3a:5b:31:86: ce:93:ff:44:88:da:6b:9b:f0:43:20:e5:b2:e3:95:fb:24:d1: c4:e5:dd:a5:7b:d4:cd:78:43:47:a2:61:66:4f:36:86:84:7c: 65:5c:92:53:bf:b6:42:b3:fb:a9:bc:65:5d:65:64:60:e6:09: a8:71:73:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUv3Y2qBw1W9cgEVKYlRim0etfIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNjAxMjUwMTA1MDVaFw0yNjAxMjgwNTQ3MDVaMDMxMTAvBgNV BAMTKDM1NTc5NEIyNENCMjk2NDY0QzY1RkQ4RUQ2NUNENzYwNTlEM0ZBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJ4lAFHr+HCGCw0q+Q+8LzuaJ cSQO217Ynl6XxaoRB59ktqvo7vhl8Bu1bH4l6f1Wa3iwhj0lZlnWDkQGhVOfycSZ e5Uwc75fQA+f8ZbfZyRa7X1MjaWf7YDEMJ+FDI6NbmG3+o2YVivecir5inUcXJ6J e59Bja43tVCD4o7sBuTpfU7e2ERuYaZUbMFXFsdLLqVRi2Iqb3oyiLmB7WTkVJ6u H6iTd0iGfIBRgxdnv4dFlkmr0+fEpLd1vb8VzHwEhCiqER7RcJP+pzro9TsH7N+G yG1Qwdh4smOuX/PYXt16hqnhLAmIzoZWGnqd+eKc7F5M5z1ipwD7IK8dKBhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVeUskyylkZMZf2O1lzXYFnT+hEwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJE3jVWOfqs0zQtdPnEzRHd3yZ1tL6EyoxC LtanCxbc3V5+8xfAkcSpu8Rhp6/TvxmCB+Jw9LYMqM448UqnFZYU/WQhQxdMPiMS B4gRooIsTYtP4Nvlu+HJxIKbWSsoVk+sPsQGu+6uWyDhZsT1f7y7ZLI8GZqKbEHb yNXBXzMRXTVAM4RECb3efXDKSyKoPzAoPBPiAtp8EhBguyJGXoApuvYaZFroL5Kc tRVfgCCMBcO459abAaR4BQYsCh2ubK0mOlsxhs6T/0SI2mub8EMg5bLjlfsk0cTl 3aV71M14Q0eiYWZPNoaEfGVcklO/tkKz+6m8ZV1lZGDmCahxc3U= -----END CERTIFICATE-----Generated at Sun Jan 25 22:09:24 2026 by rpki-client