This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: 6flA4LtPOmoeEl+sOdMhNZjeDyZiupB1WL3aFzi3ctE= Subject key identifier: 9A:5C:75:95:25:76:4A:14:C9:B6:07:F7:42:28:58:32:9F:B9:51:FD Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 27C9304D0FA569EF44CE8BD84EB2CBD37D5DC9AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 02FC Signing time: Sun 25 Jan 2026 18:11:13 +0000 Manifest this update: Sun 25 Jan 2026 18:06:13 +0000 Manifest next update: Wed 28 Jan 2026 22:17:13 +0000 Files and hashes: 1: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: /AVFp9yuDaTPTIbmJy/e6GBJnIJvd+B7RXfBPYconJs=) 2: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: co+KBnnYJEQwi8iEhHouifTA/OpTo3Sr/IbcmkaoPho=) 3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: 6G5VVeMd9f0T1RPqM5MK5BUBT+YheiE43z/FzXMuOVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c9:30:4d:0f:a5:69:ef:44:ce:8b:d8:4e:b2:cb:d3:7d:5d:c9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Jan 25 18:06:13 2026 GMT Not After : Jan 28 22:17:13 2026 GMT Subject: CN=9A5C759525764A14C9B607F7422858329FB951FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:78:cb:30:2d:42:59:8e:28:73:93:a3:c3: a0:bc:c8:e4:0b:1a:bd:3b:83:a2:73:e3:54:36:f5: 3b:6a:2e:57:1e:59:89:30:68:73:eb:ca:51:d4:d5: 88:a6:81:64:33:c3:98:f5:7d:0e:26:02:68:0e:b3: 06:c6:4a:cd:ea:2c:af:30:9e:44:91:32:28:12:b0: 68:67:aa:da:2f:18:40:cc:ce:32:91:8d:9a:d3:55: fe:2e:37:23:ac:e5:c8:f7:74:2e:e2:a1:22:58:bd: 5f:9e:c4:36:2b:89:3e:e8:4c:f6:09:6c:b1:9c:15: 56:57:4a:60:67:1f:56:d2:22:ec:ef:70:15:81:16: ce:ac:18:bf:95:90:b2:02:4f:c4:36:4b:19:f1:f1: e8:f7:ee:78:6b:14:e3:7b:0b:85:0d:e1:26:0a:6e: 2e:f6:36:47:30:71:20:9f:2e:32:ff:28:cb:d4:b9: 35:74:d4:38:eb:f9:2f:48:03:c5:12:e4:10:52:73: 3a:ce:27:f4:7b:c6:78:33:94:50:50:64:77:16:28: d1:b9:9f:25:b8:3f:8d:9e:7d:fa:5e:59:ef:fc:8a: 57:04:ec:86:52:96:d6:0e:a8:bd:ce:47:df:61:cd: 3f:02:4c:b7:78:40:c0:cd:97:d9:8c:e4:9f:58:17: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:75:95:25:76:4A:14:C9:B6:07:F7:42:28:58:32:9F:B9:51:FD X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e8:d7:de:8d:90:af:17:3e:41:c3:0d:72:91:3c:6c:ed:1a: b7:ac:1c:a0:f8:d1:37:ce:1f:f1:65:57:be:13:fa:92:7f:0a: e8:3d:70:98:ad:9b:5d:4c:1c:ae:48:55:09:81:55:1e:67:16: 7b:c9:7e:76:24:f4:a0:33:5d:4f:5f:60:4f:a2:56:7d:5f:55: be:b7:5a:4d:c2:fc:c6:fb:91:71:ea:df:10:14:2e:2f:f8:97: bb:b4:56:c4:b4:e7:c4:c1:82:48:43:82:59:4f:6e:e1:f6:84: 47:81:85:c6:11:ca:06:14:34:d3:bb:ab:c9:eb:b0:83:5a:cf: 8f:88:fb:e0:49:a7:56:fb:b6:69:c5:b5:5b:1e:73:85:66:7c: 5a:f7:19:16:d5:fa:3d:8f:91:b3:8b:18:61:9f:95:f4:a5:a0: 26:79:7e:97:6f:ea:31:5f:b4:60:bd:84:1f:00:c9:47:3f:59: ec:28:d6:24:d3:a1:02:de:60:16:ed:f7:f7:6b:2c:7b:a6:c4: 23:44:3f:ae:e2:5c:1c:b3:1c:6a:6f:47:b6:61:8f:c8:84:35: 5f:77:61:a8:45:85:2c:05:a1:a0:0c:e9:73:5f:8d:d1:9e:97: f7:06:a8:8c:96:59:2b:62:bc:25:3a:85:6d:de:69:bd:80:db: ba:0e:16:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8kwTQ+lae9EzovYTrLL031dya4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNjAxMjUxODA2MTNaFw0yNjAxMjgyMjE3MTNaMDMxMTAvBgNV BAMTKDlBNUM3NTk1MjU3NjRBMTRDOUI2MDdGNzQyMjg1ODMyOUZCOTUxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMXjLMC1CWY4oc5Ojw6C8yOQL Gr07g6Jz41Q29TtqLlceWYkwaHPrylHU1YimgWQzw5j1fQ4mAmgOswbGSs3qLK8w nkSRMigSsGhnqtovGEDMzjKRjZrTVf4uNyOs5cj3dC7ioSJYvV+exDYriT7oTPYJ bLGcFVZXSmBnH1bSIuzvcBWBFs6sGL+VkLICT8Q2Sxnx8ej37nhrFON7C4UN4SYK bi72NkcwcSCfLjL/KMvUuTV01Djr+S9IA8US5BBSczrOJ/R7xngzlFBQZHcWKNG5 nyW4P42effpeWe/8ilcE7IZSltYOqL3OR99hzT8CTLd4QMDNl9mM5J9YF78ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmlx1lSV2ShTJtgf3QihYMp+5Uf0wHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDo196NkK8XPkHDDXKRPGztGresHKD40TfO H/FlV74T+pJ/Cug9cJitm11MHK5IVQmBVR5nFnvJfnYk9KAzXU9fYE+iVn1fVb63 Wk3C/Mb7kXHq3xAULi/4l7u0VsS058TBgkhDgllPbuH2hEeBhcYRygYUNNO7q8nr sINaz4+I++BJp1b7tmnFtVsec4VmfFr3GRbV+j2PkbOLGGGflfSloCZ5fpdv6jFf tGC9hB8AyUc/Wewo1iTToQLeYBbt9/drLHumxCNEP67iXByzHGpvR7Zhj8iENV93 YahFhSwFoaAM6XNfjdGel/cGqIyWWStivCU6hW3eab2A27oOFok= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:37 2026 by rpki-client