This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: 0ROQeEBYRID4zOPKnOIY81Mq5QTk2sZeQHSV5XBHQUc= Subject key identifier: EC:69:53:99:B8:60:79:6B:EC:B3:BC:DA:66:2E:DD:68:49:6E:9B:FB Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 57DF2B8B568CFB5BBAE35C3532E47251921D8B5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 01E8 Signing time: Fri 23 Jan 2026 17:32:25 +0000 Manifest this update: Fri 23 Jan 2026 17:27:25 +0000 Manifest next update: Tue 27 Jan 2026 00:31:25 +0000 Files and hashes: 1: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=) 2: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: 3Yvoieow8kdserNiJ2BHcki2xeSODJga/MUh+XgJY44=) 3: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:df:2b:8b:56:8c:fb:5b:ba:e3:5c:35:32:e4:72:51:92:1d:8b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Jan 23 17:27:25 2026 GMT Not After : Jan 27 00:31:25 2026 GMT Subject: CN=EC695399B860796BECB3BCDA662EDD68496E9BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:87:d2:10:5c:91:68:24:02:49:3b:a7:d0: e8:cf:a7:6e:6c:90:ff:01:7e:89:fd:91:68:c0:78: 28:d7:38:1e:83:0d:a1:02:98:3c:ba:db:e5:50:c1: 61:0e:01:37:69:d2:46:cb:5f:85:e1:fa:e3:b3:a0: 5b:1f:02:62:58:80:84:ac:0b:a6:04:26:fa:14:5f: 36:ad:ab:41:9c:32:be:a2:58:00:76:61:88:e4:8a: 3a:1f:2a:c9:77:11:55:9a:14:bb:40:13:fb:79:30: d3:f4:a1:a6:f4:58:5c:2c:a2:a1:2d:61:49:56:8b: 3d:aa:a9:03:5b:a0:68:55:5c:6c:d2:a8:ab:56:7a: e0:59:0d:eb:8e:7a:11:76:fe:80:72:04:e0:e0:d4: 4a:d1:23:36:ca:61:36:c5:df:2d:74:6e:5c:ac:bd: 24:88:c5:ca:c3:ba:79:79:07:87:43:13:c9:50:01: 11:b0:9c:79:ac:70:29:1b:6e:48:1b:ff:3c:3e:12: 04:f6:8f:b8:02:db:a2:fb:59:0b:50:17:b1:81:b8: d4:62:9b:61:17:ea:45:f8:84:9f:58:81:05:f1:95: a1:76:96:47:09:4c:b1:1e:90:3f:13:4a:01:c8:1f: 5d:b0:a5:e5:6e:40:cb:20:84:c6:1f:f4:44:ef:10: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:69:53:99:B8:60:79:6B:EC:B3:BC:DA:66:2E:DD:68:49:6E:9B:FB X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:65:d4:cf:0a:bf:3c:60:e0:3c:83:67:04:4a:0d:3f:3c:1f: e1:eb:a0:2d:62:d5:84:1e:e3:f8:cc:f6:42:e8:15:7e:5a:cc: 15:a1:8f:aa:05:2e:ba:4f:6a:2d:ef:7a:33:cc:57:ff:c2:11: 36:d0:62:80:6b:16:f2:11:fe:31:be:73:cc:35:41:dd:32:a1: a8:19:e0:a3:b5:7a:aa:46:f4:1d:fd:f4:09:20:72:31:de:19: c2:a5:b4:a1:34:8b:31:20:ca:48:81:6e:6f:bd:0f:c4:24:c7: 69:5a:3e:be:b4:0f:02:8b:77:76:4f:21:a7:69:62:2d:51:04: c1:af:e6:89:4a:e5:ac:a3:91:08:a4:ea:e6:56:fc:5f:c1:9e: bf:bc:81:c2:ff:0b:1f:61:f3:73:a2:bb:39:6b:ce:12:77:99: c3:2b:1b:25:9c:e5:e7:69:bd:fa:1b:91:25:66:0d:c5:f2:14: 63:a6:93:54:64:65:95:10:d5:91:ad:e9:47:e0:85:7d:7e:d0: d6:49:9a:44:ad:4b:bb:5d:51:8c:f5:6a:2c:06:dd:48:ae:6a: 49:1a:b5:92:8c:a6:4f:55:7d:f8:12:60:4a:9c:1a:5e:a4:9b: 39:5e:8a:fd:ad:e7:67:ed:25:1e:a6:f6:8e:88:92:e6:94:b7: 51:35:f4:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV98ri1aM+1u641w1MuRyUZIdi1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNjAxMjMxNzI3MjVaFw0yNjAxMjcwMDMxMjVaMDMxMTAvBgNV BAMTKEVDNjk1Mzk5Qjg2MDc5NkJFQ0IzQkNEQTY2MkVERDY4NDk2RTlCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4w4fSEFyRaCQCSTun0OjPp25s kP8Bfon9kWjAeCjXOB6DDaECmDy62+VQwWEOATdp0kbLX4Xh+uOzoFsfAmJYgISs C6YEJvoUXzatq0GcMr6iWAB2YYjkijofKsl3EVWaFLtAE/t5MNP0oab0WFwsoqEt YUlWiz2qqQNboGhVXGzSqKtWeuBZDeuOehF2/oByBODg1ErRIzbKYTbF3y10blys vSSIxcrDunl5B4dDE8lQARGwnHmscCkbbkgb/zw+EgT2j7gC26L7WQtQF7GBuNRi m2EX6kX4hJ9YgQXxlaF2lkcJTLEekD8TSgHIH12wpeVuQMsghMYf9ETvELqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7GlTmbhgeWvss7zaZi7daElum/swHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtl1M8Kvzxg4DyDZwRKDT88H+HroC1i1YQe 4/jM9kLoFX5azBWhj6oFLrpPai3vejPMV//CETbQYoBrFvIR/jG+c8w1Qd0yoagZ 4KO1eqpG9B399AkgcjHeGcKltKE0izEgykiBbm+9D8Qkx2laPr60DwKLd3ZPIadp Yi1RBMGv5olK5ayjkQik6uZW/F/Bnr+8gcL/Cx9h83OiuzlrzhJ3mcMrGyWc5edp vfobkSVmDcXyFGOmk1RkZZUQ1ZGt6UfghX1+0NZJmkStS7tdUYz1aiwG3Uiuakka tZKMpk9VffgSYEqcGl6kmzleiv2t52ftJR6m9o6IkuaUt1E19MY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:05:54 2026 by rpki-client