This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft File: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft (raw, json) Hash identifier: 7OA/Ef/78SYms7TsP4rt6mnY3wd4zmYTl7DUJyYDl4g= Subject key identifier: B7:11:F4:40:8D:09:4A:6D:3F:7E:C0:C2:C9:B0:84:E1:C5:ED:B4:30 Authority key identifier: 78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61 Certificate issuer: /CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61 Certificate serial: 091B7066283F0D4841D10C61C5A9B338D7BEAD46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft Manifest number: 021F Signing time: Sun 25 Jan 2026 04:10:40 +0000 Manifest this update: Sun 25 Jan 2026 04:05:40 +0000 Manifest next update: Wed 28 Jan 2026 05:42:40 +0000 Files and hashes: 1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: OSaJ9H+pyoyoyW3zEewmfSIETQNngkI7dg9yZKfTzxI=) 2: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl (hash: BVqLP7NT1d8l/4sbcowlY3bNToYqvFT0/EoY3UHgr/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 05:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1b:70:66:28:3f:0d:48:41:d1:0c:61:c5:a9:b3:38:d7:be:ad:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61 Validity Not Before: Jan 25 04:05:40 2026 GMT Not After : Jan 28 05:42:40 2026 GMT Subject: CN=B711F4408D094A6D3F7EC0C2C9B084E1C5EDB430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:8a:1b:17:54:e2:5a:5c:73:e3:ed:93:41: d4:5c:c6:4a:08:c8:d7:36:b6:a1:50:8a:5f:36:af: ee:5f:10:91:b4:e6:11:12:50:32:01:18:70:45:be: f8:e2:70:d7:c4:6b:54:00:aa:82:14:f2:02:3c:39: 9a:f0:b2:7a:b8:81:6a:51:57:fc:a2:09:c9:2a:03: 76:6b:b4:15:71:0c:4a:a8:b4:d0:4e:49:0c:64:7e: 92:88:32:c5:ca:26:27:d4:b3:5e:0b:e6:0b:4b:41: ef:49:a1:22:13:7f:f3:6f:a3:13:c1:02:f6:e4:92: ba:bd:f1:5d:1e:0f:0e:f4:48:fc:9c:2c:2d:3e:8d: 51:3e:72:b8:6e:9c:0f:c8:c9:9f:ae:4d:7e:b4:ea: 09:83:06:c6:54:9b:57:e6:00:2e:13:5e:e4:e0:52: 03:f4:f1:ee:4c:b4:6c:f3:6a:5c:89:75:e2:26:c3: 53:3a:6d:68:4d:8e:cc:78:6b:34:aa:89:0c:67:1f: 33:cd:ce:5f:8a:91:15:ca:58:68:8a:24:a5:03:63: 94:ea:f6:e6:cc:f7:09:5a:22:af:2c:63:60:cd:7e: 4f:66:ec:02:44:ab:52:f2:1d:d4:cc:c5:17:41:cb: 66:9d:42:38:f3:9a:e7:d1:41:3a:e2:a4:67:d6:8d: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:F4:40:8D:09:4A:6D:3F:7E:C0:C2:C9:B0:84:E1:C5:ED:B4:30 X509v3 Authority Key Identifier: keyid:78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3e:b5:fe:48:83:75:a6:e7:b9:13:0e:dc:10:ef:5f:46:57: 08:11:d4:d9:04:cf:e6:36:56:ea:e1:30:55:3c:cc:2b:04:3d: ab:e0:8b:7b:08:09:42:83:5a:51:15:04:1e:f6:92:2f:f5:da: 24:0a:9b:fa:5e:87:39:22:cb:7e:b4:53:99:e8:5d:18:bc:c9: a7:d2:59:0b:9a:3f:dc:fb:76:4b:c0:65:54:6f:4b:44:dd:6f: 29:ee:19:e4:a7:59:d2:29:b9:b3:6a:eb:b7:66:ad:b1:fd:df: d4:82:49:26:d4:66:02:c7:2b:56:6f:73:99:62:b1:ae:07:09: e0:71:26:bc:fd:61:e8:59:47:69:da:56:fd:86:7d:7f:f0:94: 32:77:fd:15:19:a9:00:c5:1f:1c:6a:9d:72:22:fd:c5:6b:82: 61:65:a9:61:e7:9c:18:59:ec:51:66:b9:ac:8b:1d:19:89:83: c8:e3:eb:dc:28:4e:ed:74:0d:19:33:83:84:0f:3a:db:cd:21: ae:77:02:54:84:61:c2:09:5f:ec:b2:18:8f:c1:2b:a4:93:de: 16:47:c4:d0:12:f2:31:be:d1:5c:70:85:5e:0f:90:07:5c:55: a1:54:1b:de:c5:34:e5:61:dc:0b:2c:01:48:78:bc:10:3b:9e: 53:d5:84:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRtwZig/DUhB0QxhxamzONe+rUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1MzVD QTVDNUE2MTAeFw0yNjAxMjUwNDA1NDBaFw0yNjAxMjgwNTQyNDBaMDMxMTAvBgNV BAMTKEI3MTFGNDQwOEQwOTRBNkQzRjdFQzBDMkM5QjA4NEUxQzVFREI0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYI4obF1TiWlxz4+2TQdRcxkoI yNc2tqFQil82r+5fEJG05hESUDIBGHBFvvjicNfEa1QAqoIU8gI8OZrwsnq4gWpR V/yiCckqA3ZrtBVxDEqotNBOSQxkfpKIMsXKJifUs14L5gtLQe9JoSITf/NvoxPB Avbkkrq98V0eDw70SPycLC0+jVE+crhunA/IyZ+uTX606gmDBsZUm1fmAC4TXuTg UgP08e5MtGzzalyJdeImw1M6bWhNjsx4azSqiQxnHzPNzl+KkRXKWGiKJKUDY5Tq 9ubM9wlaIq8sY2DNfk9m7AJEq1LyHdTMxRdBy2adQjjzmufRQTripGfWjQFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxH0QI0JSm0/fsDCybCE4cXttDAwHwYDVR0j BBgwFoAUeJIYPsshfq7y090WSRvlNcpcWmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2U2YWMwMS04ZWFjLTQ2YzUtOTQ2OS0zNWVmYTM2MDk5ZmQvMC83ODkyMTgzRUNC MjE3RUFFRjJEM0REMTY0OTFCRTUzNUNBNUM1QTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1MzVDQTVD NUE2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNlNmFjMDEtOGVhYy00NmM1LTk0 NjktMzVlZmEzNjA5OWZkLzAvNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1 MzVDQTVDNUE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY+tf5Ig3Wm57kTDtwQ719GVwgR1NkEz+Y2 VurhMFU8zCsEPavgi3sICUKDWlEVBB72ki/12iQKm/pehzkiy360U5noXRi8yafS WQuaP9z7dkvAZVRvS0TdbynuGeSnWdIpubNq67dmrbH939SCSSbUZgLHK1Zvc5li sa4HCeBxJrz9YehZR2naVv2GfX/wlDJ3/RUZqQDFHxxqnXIi/cVrgmFlqWHnnBhZ 7FFmuayLHRmJg8jj69woTu10DRkzg4QPOtvNIa53AlSEYcIJX+yyGI/BK6ST3hZH xNAS8jG+0VxwhV4PkAdcVaFUG97FNOVh3AssAUh4vBA7nlPVhC0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:44 2026 by rpki-client