This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: mFqwcphszaXrKoXqZI3CITJwaFi0dmLDbVVNhELrR7k= Subject key identifier: 14:78:31:A1:1C:B3:F8:52:32:AE:DF:78:05:0B:4D:26:44:2C:BE:44 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 2AF83A35CC0DCCB81146811F28DF3634964E53EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: F3 Signing time: Sat 24 Jan 2026 10:42:32 +0000 Manifest this update: Sat 24 Jan 2026 10:37:32 +0000 Manifest next update: Tue 27 Jan 2026 13:24:32 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 5: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: 9em2vUTKBG0H7btGUG9j/O8+mRNJZYKGuHQHZk3odzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f8:3a:35:cc:0d:cc:b8:11:46:81:1f:28:df:36:34:96:4e:53:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Jan 24 10:37:32 2026 GMT Not After : Jan 27 13:24:32 2026 GMT Subject: CN=147831A11CB3F85232AEDF78050B4D26442CBE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:79:43:9a:43:98:92:67:25:19:2e:0c:78: 73:9f:fb:c9:fa:27:99:df:12:1c:cc:bb:e3:c1:02: ce:72:33:31:49:28:25:3a:57:10:0f:b8:f3:39:53: 2a:5e:99:cc:17:30:c1:1b:87:bc:ba:47:28:ef:ba: 0d:e8:35:d0:80:9d:f1:49:27:9b:a3:fa:61:fc:c6: 62:48:55:55:fc:53:6d:6d:ce:ba:6c:aa:00:47:a4: ce:29:5c:69:cf:e7:b4:c3:3c:9e:ae:90:98:d6:ab: de:ae:93:a6:7d:a3:30:ab:53:04:23:9e:fa:7d:00: 00:7e:9d:98:6a:31:df:28:db:87:e9:28:37:8e:fc: 62:2a:7b:39:cb:47:ba:a8:2a:56:cc:07:3f:8a:f2: 3d:50:bb:39:dd:14:d7:50:42:ba:99:d2:9a:90:17: 69:f6:fc:30:53:d4:89:36:6b:6e:78:8b:88:28:6d: d1:a6:6c:95:70:c9:2d:d9:be:58:cb:4d:b2:3d:68: 22:f5:2e:99:62:ae:0b:ed:95:c2:13:13:07:d6:ab: e9:52:55:59:69:f4:f7:06:fd:e1:bb:91:a1:b2:22: b8:25:86:2d:6f:16:6e:11:5b:57:ea:f9:31:64:c4: 9e:66:cc:5e:e6:ae:2e:9a:36:34:ba:7d:b3:a4:97: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:31:A1:1C:B3:F8:52:32:AE:DF:78:05:0B:4D:26:44:2C:BE:44 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:70:64:a2:7c:2d:21:be:89:06:64:43:dc:8e:c1:4c:25:b2: 98:5c:2a:a9:bb:69:b4:8e:97:70:9f:d0:7f:f6:44:aa:1e:be: 29:b2:d9:ae:35:cb:b4:3d:0f:6e:62:da:fb:ab:a2:ec:b1:44: 50:3f:a6:81:f0:ca:69:69:e6:6c:73:fd:d4:3d:5b:41:38:1f: 34:77:29:a1:f9:cb:a1:06:f3:58:e8:84:80:08:12:9c:6d:a7: 17:b4:1e:ab:ed:52:bc:f7:b0:1b:17:ee:c6:69:f2:46:c0:65: 30:b5:d5:69:1e:e9:ce:4a:27:a2:21:86:fb:49:44:7a:86:5a: 97:07:df:e4:ae:1c:d9:e7:29:a5:32:b9:5e:c3:e9:ab:f2:4b: 1e:71:8b:80:d0:7e:d0:3a:69:da:5a:a5:38:95:c9:bd:c4:8c: ff:9d:39:18:f1:1d:e2:ec:ec:e2:e4:73:ac:ef:50:fe:17:e2: 1a:07:e9:d0:f6:f8:4f:b0:d9:b0:93:27:8e:3b:65:8b:9f:06: 20:63:bf:31:45:9f:43:58:b8:4b:03:22:5b:f2:31:e2:4d:e6: 76:0b:30:6e:19:41:bf:3f:ab:3a:e4:06:d2:9e:93:6e:9b:03: 7c:d4:38:f1:1f:10:63:18:02:7f:a6:46:11:fa:cc:ab:0b:69: b6:e1:95:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvg6NcwNzLgRRoEfKN82NJZOU+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNjAxMjQxMDM3MzJaFw0yNjAxMjcxMzI0MzJaMDMxMTAvBgNV BAMTKDE0NzgzMUExMUNCM0Y4NTIzMkFFREY3ODA1MEI0RDI2NDQyQ0JFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NXlDmkOYkmclGS4MeHOf+8n6 J5nfEhzMu+PBAs5yMzFJKCU6VxAPuPM5UypemcwXMMEbh7y6Ryjvug3oNdCAnfFJ J5uj+mH8xmJIVVX8U21tzrpsqgBHpM4pXGnP57TDPJ6ukJjWq96uk6Z9ozCrUwQj nvp9AAB+nZhqMd8o24fpKDeO/GIqeznLR7qoKlbMBz+K8j1QuzndFNdQQrqZ0pqQ F2n2/DBT1Ik2a254i4gobdGmbJVwyS3ZvljLTbI9aCL1LplirgvtlcITEwfWq+lS VVlp9PcG/eG7kaGyIrglhi1vFm4RW1fq+TFkxJ5mzF7mri6aNjS6fbOkly3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHgxoRyz+FIyrt94BQtNJkQsvkQwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANlwZKJ8LSG+iQZkQ9yOwUwlsphcKqm7abSO l3Cf0H/2RKoevimy2a41y7Q9D25i2vurouyxRFA/poHwymlp5mxz/dQ9W0E4HzR3 KaH5y6EG81johIAIEpxtpxe0HqvtUrz3sBsX7sZp8kbAZTC11Wke6c5KJ6IhhvtJ RHqGWpcH3+SuHNnnKaUyuV7D6avySx5xi4DQftA6adpapTiVyb3EjP+dORjxHeLs 7OLkc6zvUP4X4hoH6dD2+E+w2bCTJ447ZYufBiBjvzFFn0NYuEsDIlvyMeJN5nYL MG4ZQb8/qzrkBtKek26bA3zUOPEfEGMYAn+mRhH6zKsLabbhlW8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:42 2026 by rpki-client