This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: sdGhhvkXnfaVV7Z1QVdrryIxzJ3t9Ln/PmieXpeNsO8= Subject key identifier: 23:0F:A8:E4:30:1C:A4:DB:C7:D5:66:05:A6:FD:C4:A2:1F:E8:4A:AB Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 036B32E3A6E1ABAADC26D5212F35331A3827BBBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01F9 Signing time: Fri 23 Jan 2026 20:01:40 +0000 Manifest this update: Fri 23 Jan 2026 19:56:40 +0000 Manifest next update: Tue 27 Jan 2026 07:14:40 +0000 Files and hashes: 1: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) 2: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: ZlHtnkvvfpYbKhafa2whtBukWZR5cJu6nBJKeKt9aBQ=) 3: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6b:32:e3:a6:e1:ab:aa:dc:26:d5:21:2f:35:33:1a:38:27:bb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Jan 23 19:56:40 2026 GMT Not After : Jan 27 07:14:40 2026 GMT Subject: CN=230FA8E4301CA4DBC7D56605A6FDC4A21FE84AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:55:ef:2c:1f:ba:46:18:8b:1f:32:34:fa:6e: e5:34:79:87:13:db:35:dd:4c:21:31:be:e7:bb:76: 6f:df:d1:90:33:ee:1b:70:81:21:e6:b4:99:62:64: 88:1f:78:67:40:92:b7:95:3f:4d:db:97:67:eb:9c: bf:09:05:d5:0a:55:86:d4:6c:3e:3c:f8:50:00:75: 39:c6:c4:84:70:f0:56:8e:0c:bf:6c:6a:fa:b6:74: 84:d0:f4:e1:a5:58:1c:8b:57:e6:3f:2c:de:d8:a3: ca:0b:8a:21:26:19:7f:ed:cc:67:bd:6f:77:18:15: 32:df:c6:ab:08:4e:40:4c:94:2c:5f:3b:27:74:e1: dc:66:92:48:24:7a:9b:6c:66:ec:5c:4a:d0:92:c2: cf:19:6b:b0:75:ec:af:9b:f8:7e:c1:db:a0:6c:3d: db:b9:4b:74:07:1f:69:4b:ca:9a:2e:62:36:d5:36: 25:80:23:c9:9d:31:80:a1:9c:16:ce:41:3e:83:ba: 1b:2b:27:c8:01:56:a5:fa:97:1d:17:9d:ed:48:60: f8:6c:b3:ff:d5:d6:3a:87:a4:ce:29:91:de:f0:a8: 88:3a:6c:dc:e2:0a:59:9e:96:86:79:0b:89:22:36: 82:c8:dd:b1:3f:6f:08:d5:c3:f5:27:af:57:98:ab: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0F:A8:E4:30:1C:A4:DB:C7:D5:66:05:A6:FD:C4:A2:1F:E8:4A:AB X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3e:5c:0a:d3:e1:56:d0:6b:20:3b:ab:e7:54:0b:84:a6:6e: 09:de:9d:ac:d4:4d:28:5e:ac:fd:c1:af:ac:20:6c:2f:11:d0: 4c:fe:c9:74:a2:d5:2f:d4:a5:7d:3d:4c:95:a4:a0:01:66:24: 2f:e5:27:d4:df:76:90:05:88:d4:37:73:e6:e0:1e:71:29:02: 4b:e4:d4:87:34:21:4f:1c:18:c6:b8:cd:cd:e2:fd:b0:bb:c0: 57:90:08:66:1f:ea:c6:ec:fd:18:e5:17:2c:c4:4f:2a:de:9a: dc:a7:68:19:f6:b2:15:14:63:a6:9e:62:f8:64:32:f3:ad:04: 03:33:5a:b2:22:07:f3:7f:e8:6b:79:4b:ee:61:bd:44:37:09: 79:9a:f8:05:40:f1:5f:7f:e9:32:d1:1a:17:bc:24:c1:13:8c: fb:d3:61:7f:0e:fe:00:45:24:0d:b4:e5:e1:68:4e:9c:77:cd: f2:0e:54:0e:1b:a7:b2:1a:cb:e3:0b:6f:5c:66:db:71:dc:bf: 05:d0:94:7b:a8:40:6b:55:22:57:59:b0:77:e1:37:53:bf:1b: 57:eb:09:09:44:b4:bd:59:de:0d:fd:8a:67:56:a5:f7:41:cb: da:4c:5c:8e:ed:a1:95:4c:71:18:46:97:4f:08:d4:90:10:82: be:4e:88:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2sy46bhq6rcJtUhLzUzGjgnu74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNjAxMjMxOTU2NDBaFw0yNjAxMjcwNzE0NDBaMDMxMTAvBgNV BAMTKDIzMEZBOEU0MzAxQ0E0REJDN0Q1NjYwNUE2RkRDNEEyMUZFODRBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuVe8sH7pGGIsfMjT6buU0eYcT 2zXdTCExvue7dm/f0ZAz7htwgSHmtJliZIgfeGdAkreVP03bl2frnL8JBdUKVYbU bD48+FAAdTnGxIRw8FaODL9savq2dITQ9OGlWByLV+Y/LN7Yo8oLiiEmGX/tzGe9 b3cYFTLfxqsITkBMlCxfOyd04dxmkkgkeptsZuxcStCSws8Za7B17K+b+H7B26Bs Pdu5S3QHH2lLypouYjbVNiWAI8mdMYChnBbOQT6DuhsrJ8gBVqX6lx0Xne1IYPhs s//V1jqHpM4pkd7wqIg6bNziClmeloZ5C4kiNoLI3bE/bwjVw/Unr1eYqx7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIw+o5DAcpNvH1WYFpv3Eoh/oSqswHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc+XArT4VbQayA7q+dUC4SmbgnenazUTShe rP3Br6wgbC8R0Ez+yXSi1S/UpX09TJWkoAFmJC/lJ9TfdpAFiNQ3c+bgHnEpAkvk 1Ic0IU8cGMa4zc3i/bC7wFeQCGYf6sbs/RjlFyzETyremtynaBn2shUUY6aeYvhk MvOtBAMzWrIiB/N/6Gt5S+5hvUQ3CXma+AVA8V9/6TLRGhe8JMETjPvTYX8O/gBF JA205eFoTpx3zfIOVA4bp7Iay+MLb1xm23HcvwXQlHuoQGtVIldZsHfhN1O/G1fr CQlEtL1Z3g39imdWpfdBy9pMXI7toZVMcRhGl08I1JAQgr5OiP4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:25 2026 by rpki-client