This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: 3/m3V/O4M1+IEz/3RzFXThIgbLy6OswNhBFGnCFt0Qk= Subject key identifier: 83:A3:D9:16:B1:53:D1:93:3B:15:CD:62:A0:C8:92:B0:41:7B:B4:21 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 170265DC9568A85C60C6962FBCD37016496C3ED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 0101 Signing time: Fri 23 Jan 2026 20:10:41 +0000 Manifest this update: Fri 23 Jan 2026 20:05:41 +0000 Manifest next update: Tue 27 Jan 2026 02:23:41 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: TOmQWpiCj6zNp5tsNXf0gEy5rsuVj1TfN7OO22hBCrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:02:65:dc:95:68:a8:5c:60:c6:96:2f:bc:d3:70:16:49:6c:3e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Jan 23 20:05:41 2026 GMT Not After : Jan 27 02:23:41 2026 GMT Subject: CN=83A3D916B153D1933B15CD62A0C892B0417BB421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:ff:46:82:7d:79:6c:62:60:da:a2:03:4e: 00:5f:79:b0:f9:1a:31:b3:55:8c:d7:76:3b:77:fe: 4e:e0:98:5d:d3:9b:49:00:28:bf:ac:8c:20:62:cc: 2d:65:2a:13:97:e8:b2:cd:9a:f8:e4:ea:a2:70:13: fd:b8:b4:9e:8b:40:4d:61:8e:f0:be:d2:3d:65:d7: b1:e4:c7:8f:1d:f1:7e:6c:39:85:95:99:0a:d3:bd: e9:2c:2f:aa:24:38:bd:13:8b:2f:01:75:33:e8:1d: 0d:f9:af:ef:e9:b4:14:fb:54:ed:9b:9d:01:75:78: 33:33:a2:1c:a3:5c:7f:94:8d:08:01:31:81:3d:d5: e2:6a:ac:6e:76:bf:9c:85:31:3c:49:53:53:04:8c: d5:be:06:6c:48:0a:9c:67:52:1f:5c:30:ce:77:d6: 00:9b:3f:dd:a4:56:47:64:f1:74:fa:76:bc:69:ec: 24:b9:ab:30:a3:41:92:7a:21:f5:79:38:50:fc:7a: e3:1f:24:d2:8d:c6:62:5b:25:72:4a:52:08:c7:35: 10:1b:3a:50:4c:0a:db:75:1f:c5:c8:b6:9e:b1:9c: 26:af:86:6a:5a:ea:c0:9f:ae:b5:5c:07:a2:5a:8d: 49:e7:98:14:e7:12:02:86:ab:3d:94:c8:2a:df:71: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A3:D9:16:B1:53:D1:93:3B:15:CD:62:A0:C8:92:B0:41:7B:B4:21 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b7:63:63:a9:da:46:54:62:20:31:47:ed:6b:eb:db:0f:3a: bd:d6:f4:34:c2:13:03:b8:80:20:dd:b9:d9:1c:a8:cb:e3:41: 13:68:79:ed:5c:7c:91:26:7f:a3:5c:3f:65:a3:09:28:de:0b: af:98:99:8d:84:be:d8:ea:61:37:94:fc:2b:61:2d:7f:60:99: 53:78:e0:d3:cc:95:b6:a4:0e:ce:2a:94:e3:ef:56:53:8b:52: 55:d3:fc:fa:b1:7d:55:d8:75:7f:93:52:91:81:b1:e1:ed:00: e6:1b:a6:78:0e:b5:86:86:3e:85:e0:51:a6:bf:9a:ab:88:b3: 5d:f4:59:19:67:39:25:d5:85:7b:8b:56:8c:9d:d5:9f:03:1a: 85:9b:20:63:73:2f:ba:5c:fb:9e:8d:27:41:2c:1e:be:88:99: 0d:85:01:a9:ef:37:ee:9a:5a:13:7d:5b:8e:67:71:72:70:49: 39:c0:26:c7:4f:ac:75:e0:76:83:5a:60:8e:e6:7a:a7:df:52: 56:b9:aa:18:b8:3e:0b:e5:32:e2:f8:c5:c9:5f:22:34:1e:ab: ea:d2:cb:35:6b:9f:a5:15:1e:8a:aa:26:0d:ee:39:31:63:63: 23:c8:cb:d8:a7:c6:f4:df:26:28:ce:d5:7a:b9:02:ea:b2:ed: 31:77:c3:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwJl3JVoqFxgxpYvvNNwFklsPtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNjAxMjMyMDA1NDFaFw0yNjAxMjcwMjIzNDFaMDMxMTAvBgNV BAMTKDgzQTNEOTE2QjE1M0QxOTMzQjE1Q0Q2MkEwQzg5MkIwNDE3QkI0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWP9Ggn15bGJg2qIDTgBfebD5 GjGzVYzXdjt3/k7gmF3Tm0kAKL+sjCBizC1lKhOX6LLNmvjk6qJwE/24tJ6LQE1h jvC+0j1l17Hkx48d8X5sOYWVmQrTveksL6okOL0Tiy8BdTPoHQ35r+/ptBT7VO2b nQF1eDMzohyjXH+UjQgBMYE91eJqrG52v5yFMTxJU1MEjNW+BmxICpxnUh9cMM53 1gCbP92kVkdk8XT6drxp7CS5qzCjQZJ6IfV5OFD8euMfJNKNxmJbJXJKUgjHNRAb OlBMCtt1H8XItp6xnCavhmpa6sCfrrVcB6JajUnnmBTnEgKGqz2UyCrfccnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg6PZFrFT0ZM7Fc1ioMiSsEF7tCEwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu3Y2Op2kZUYiAxR+1r69sPOr3W9DTCEwO4 gCDdudkcqMvjQRNoee1cfJEmf6NcP2WjCSjeC6+YmY2EvtjqYTeU/CthLX9gmVN4 4NPMlbakDs4qlOPvVlOLUlXT/PqxfVXYdX+TUpGBseHtAOYbpngOtYaGPoXgUaa/ mquIs130WRlnOSXVhXuLVoyd1Z8DGoWbIGNzL7pc+56NJ0EsHr6ImQ2FAanvN+6a WhN9W45ncXJwSTnAJsdPrHXgdoNaYI7meqffUla5qhi4PgvlMuL4xclfIjQeq+rS yzVrn6UVHoqqJg3uOTFjYyPIy9inxvTfJijO1Xq5Auqy7TF3wzw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:29 2026 by rpki-client