This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: 0+wQD15AZrwOpj+qUgAVlIszPxxKoK2KDOdhHIsubCo= Subject key identifier: 0B:90:F9:47:4F:EC:9A:14:05:75:9D:3D:19:AC:58:00:0D:40:83:41 Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 2B07CC37455B4590531D0B5FC310AED5B11992D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: E2 Signing time: Sun 25 Jan 2026 06:30:02 +0000 Manifest this update: Sun 25 Jan 2026 06:25:02 +0000 Manifest next update: Wed 28 Jan 2026 10:03:02 +0000 Files and hashes: 1: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) 2: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: 09e8V1IYQfs3GnKki1EoGsSJd8vaIQOr/LzQmqsIWKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:07:cc:37:45:5b:45:90:53:1d:0b:5f:c3:10:ae:d5:b1:19:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Jan 25 06:25:02 2026 GMT Not After : Jan 28 10:03:02 2026 GMT Subject: CN=0B90F9474FEC9A1405759D3D19AC58000D408341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:9d:1c:ce:3c:4f:c3:7c:ef:fa:d5:15:b8: 11:fc:6b:22:11:63:64:f5:a8:97:8b:cb:b7:93:c6: 55:31:d3:b9:56:2c:e3:ce:ba:88:5e:46:68:1a:52: 10:05:76:d1:e9:9a:59:74:10:04:fa:90:e7:39:ab: db:96:6a:aa:14:2a:ec:a8:92:f4:be:f4:44:91:b1: 73:6d:d8:46:47:67:8a:af:3b:1c:e4:90:9d:96:ea: 60:e7:be:37:00:af:de:25:43:97:1c:58:c1:5c:af: e7:63:30:b8:92:f7:ee:83:ca:7d:b3:62:cd:93:bf: a0:c3:ee:02:f2:55:01:99:2e:ca:60:d3:3e:d4:bc: c3:53:23:a0:25:fb:79:44:2d:7c:b1:d0:10:5d:30: 35:a9:02:3d:7f:bd:c1:4d:2e:59:6f:b0:7d:8f:2a: cd:52:6e:63:bf:f5:06:10:7f:a6:93:e5:66:3f:7e: 86:ba:93:24:33:7b:95:67:e7:72:b1:2b:4b:fa:b9: 9d:74:a5:7d:12:45:ea:d3:70:2e:bd:54:03:70:b1: 18:32:7a:37:c4:42:9a:df:50:59:24:ca:b5:da:cb: 7e:b5:2d:45:cf:13:9e:ef:9b:73:96:8c:21:b1:ae: 4e:0c:76:98:41:70:0a:1d:bd:f7:29:8f:1d:86:68: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:F9:47:4F:EC:9A:14:05:75:9D:3D:19:AC:58:00:0D:40:83:41 X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7d:93:cb:c0:4a:1d:45:e4:c4:f9:0a:ed:8e:06:59:4b:a8: c3:ba:16:52:24:32:07:9d:95:59:cd:7a:ee:e4:a3:82:20:c7: 84:60:45:c3:e5:cd:bb:f1:b4:cc:53:4a:43:2f:c9:93:45:99: 23:e6:a9:3d:8c:4a:20:30:72:42:21:ed:bd:e5:99:49:5c:d3: 33:c0:03:10:fd:82:b2:18:a9:96:83:2b:fe:17:74:a1:1e:bc: 3c:7e:8f:f9:49:2d:3e:ce:13:a3:9b:50:3a:4f:3b:91:3a:b2: 4e:a0:9e:ed:78:57:95:f0:50:54:ad:ef:94:66:e7:58:20:f5: ec:4b:7d:7a:36:e0:ab:0b:02:cd:e3:70:9c:3c:e6:c4:e9:ba: 6a:76:97:12:8e:a2:fb:3f:f3:54:62:16:77:42:bb:44:79:8b: 02:70:58:80:b6:a2:6b:73:70:43:a1:b9:d8:32:e8:93:9d:ed: 2d:95:8e:67:8a:53:16:97:44:4e:aa:19:4f:b4:37:eb:cb:4b: a3:d8:52:85:1f:ce:8b:6f:05:b1:87:c7:3a:ce:e8:d5:cc:a8: 24:fb:af:52:09:2d:54:e2:3b:2d:4b:e0:19:19:ed:6e:cb:dd: ed:d7:48:0d:87:e2:59:be:8c:21:3e:6d:d3:18:1f:9b:d6:63: 43:19:5d:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwfMN0VbRZBTHQtfwxCu1bEZktAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNjAxMjUwNjI1MDJaFw0yNjAxMjgxMDAzMDJaMDMxMTAvBgNV BAMTKDBCOTBGOTQ3NEZFQzlBMTQwNTc1OUQzRDE5QUM1ODAwMEQ0MDgzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAl50czjxPw3zv+tUVuBH8ayIR Y2T1qJeLy7eTxlUx07lWLOPOuoheRmgaUhAFdtHpmll0EAT6kOc5q9uWaqoUKuyo kvS+9ESRsXNt2EZHZ4qvOxzkkJ2W6mDnvjcAr94lQ5ccWMFcr+djMLiS9+6Dyn2z Ys2Tv6DD7gLyVQGZLspg0z7UvMNTI6Al+3lELXyx0BBdMDWpAj1/vcFNLllvsH2P Ks1SbmO/9QYQf6aT5WY/foa6kyQze5Vn53KxK0v6uZ10pX0SRerTcC69VANwsRgy ejfEQprfUFkkyrXay361LUXPE57vm3OWjCGxrk4MdphBcAodvfcpjx2GaP8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5D5R0/smhQFdZ09GaxYAA1Ag0EwHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN9k8vASh1F5MT5Cu2OBllLqMO6FlIkMged lVnNeu7ko4Igx4RgRcPlzbvxtMxTSkMvyZNFmSPmqT2MSiAwckIh7b3lmUlc0zPA AxD9grIYqZaDK/4XdKEevDx+j/lJLT7OE6ObUDpPO5E6sk6gnu14V5XwUFSt75Rm 51gg9exLfXo24KsLAs3jcJw85sTpump2lxKOovs/81RiFndCu0R5iwJwWIC2omtz cEOhudgy6JOd7S2VjmeKUxaXRE6qGU+0N+vLS6PYUoUfzotvBbGHxzrO6NXMqCT7 r1IJLVTiOy1L4BkZ7W7L3e3XSA2H4lm+jCE+bdMYH5vWY0MZXa8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:18 2026 by rpki-client