This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: 4lb5Wyp5vg1uQcfRhcyVc0DolKcvRcXbc1RhijWoC8U= Subject key identifier: DA:CA:02:18:9C:EF:12:7E:B8:50:B3:D3:91:5B:30:84:0D:D7:AB:41 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 764D801B7D001BCB0725D40B41AB115BD224B997 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: 0107 Signing time: Sat 24 Jan 2026 14:22:18 +0000 Manifest this update: Sat 24 Jan 2026 14:17:18 +0000 Manifest next update: Tue 27 Jan 2026 17:16:18 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: kBWcMp/82kaugU6SGEejEBcRQepGZ/VUofI9OpwYgr0=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4d:80:1b:7d:00:1b:cb:07:25:d4:0b:41:ab:11:5b:d2:24:b9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Jan 24 14:17:18 2026 GMT Not After : Jan 27 17:16:18 2026 GMT Subject: CN=DACA02189CEF127EB850B3D3915B30840DD7AB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:03:33:a6:0e:df:53:b4:8e:1a:73:22:ed:26: bd:82:b5:95:5c:62:3b:c2:73:d7:a5:d7:e9:ab:7e: b0:2b:2f:29:08:26:c6:78:b9:3b:f2:7d:d9:a6:55: f2:fd:53:f7:f0:89:9c:cb:40:19:48:04:2e:cb:03: ff:5e:83:42:f7:f2:a9:aa:ff:e9:c2:f9:7f:4f:cc: 44:00:d7:08:74:e9:e0:d5:27:2e:78:48:b0:16:a3: d9:fa:1c:f2:71:00:d6:56:f6:ef:27:df:f6:03:71: bb:d0:ec:d8:89:7e:e0:85:e8:fa:3d:e7:60:a3:3e: 64:9e:41:ef:c9:be:44:52:79:67:c1:b0:ba:5b:d0: 2e:dc:94:d5:5d:27:f0:09:8e:63:57:bc:aa:7c:77: 15:91:fc:60:6d:b3:67:43:79:47:88:d2:29:43:70: bf:a8:77:ff:6b:d8:7e:ed:38:ac:3d:1b:2a:49:92: 30:5a:84:5a:09:ff:a4:d5:c6:12:04:9c:78:34:8c: 05:7e:5f:3a:b0:70:33:a9:71:bb:97:03:22:1b:f7: 5c:a4:d1:c9:69:64:2a:81:da:f8:fa:b6:55:56:7e: b9:f1:cd:6e:a8:04:5b:ac:8b:60:bc:6a:41:ce:b0: 92:78:0a:9b:b2:60:41:7b:19:89:7e:2c:5c:01:0b: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CA:02:18:9C:EF:12:7E:B8:50:B3:D3:91:5B:30:84:0D:D7:AB:41 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:dd:d1:78:c5:51:23:70:4b:bb:b3:8b:fc:4b:05:94:cf:16: 2f:c9:15:92:83:b5:46:58:f8:1c:d8:8d:b8:8c:59:55:bb:03: 33:a1:5f:e7:3e:bb:da:57:39:03:cc:8d:b7:5d:eb:5d:c6:20: c4:d5:7f:dc:19:5b:59:60:b9:e1:32:f4:98:71:e9:7c:d6:da: ad:ab:24:5a:42:6a:0e:a1:61:83:15:74:0c:65:37:14:13:e1: 8a:ab:ac:b2:6c:9a:8c:a4:8f:9d:d2:e3:5f:b8:ce:61:a2:bd: 76:f1:59:fe:b9:7b:63:7d:0f:ed:1c:be:6c:2d:b5:35:c9:49: e2:60:74:15:37:10:b7:ad:e2:f9:88:0e:88:94:0d:ac:89:3b: 13:c2:9c:b0:3c:1b:59:56:fd:0b:08:5c:ce:50:83:9c:0b:ac: 35:68:7c:ed:13:39:55:97:c5:f0:18:47:61:29:0b:48:35:2c: 17:56:7e:3a:39:73:ed:36:8a:6b:96:b1:ac:3e:08:cb:30:80: 69:e6:be:cb:90:6d:9e:00:99:0e:33:73:b8:00:55:39:91:24: 1c:98:cc:df:a7:74:8b:7b:63:b5:32:07:35:1c:db:e5:be:fb: eb:a8:b7:b9:db:ec:12:67:58:90:2c:b9:b4:b7:a4:ef:61:f5: 66:f8:c5:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdk2AG30AG8sHJdQLQasRW9IkuZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNjAxMjQxNDE3MThaFw0yNjAxMjcxNzE2MThaMDMxMTAvBgNV BAMTKERBQ0EwMjE4OUNFRjEyN0VCODUwQjNEMzkxNUIzMDg0MEREN0FCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAzOmDt9TtI4acyLtJr2CtZVc YjvCc9el1+mrfrArLykIJsZ4uTvyfdmmVfL9U/fwiZzLQBlIBC7LA/9eg0L38qmq /+nC+X9PzEQA1wh06eDVJy54SLAWo9n6HPJxANZW9u8n3/YDcbvQ7NiJfuCF6Po9 52CjPmSeQe/JvkRSeWfBsLpb0C7clNVdJ/AJjmNXvKp8dxWR/GBts2dDeUeI0ilD cL+od/9r2H7tOKw9GypJkjBahFoJ/6TVxhIEnHg0jAV+XzqwcDOpcbuXAyIb91yk 0clpZCqB2vj6tlVWfrnxzW6oBFusi2C8akHOsJJ4CpuyYEF7GYl+LFwBC1PDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2soCGJzvEn64ULPTkVswhA3Xq0EwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjd0XjFUSNwS7uzi/xLBZTPFi/JFZKDtUZY +BzYjbiMWVW7AzOhX+c+u9pXOQPMjbdd613GIMTVf9wZW1lgueEy9Jhx6XzW2q2r JFpCag6hYYMVdAxlNxQT4YqrrLJsmoykj53S41+4zmGivXbxWf65e2N9D+0cvmwt tTXJSeJgdBU3ELet4vmIDoiUDayJOxPCnLA8G1lW/QsIXM5Qg5wLrDVofO0TOVWX xfAYR2EpC0g1LBdWfjo5c+02imuWsaw+CMswgGnmvsuQbZ4AmQ4zc7gAVTmRJByY zN+ndIt7Y7UyBzUc2+W+++uot7nb7BJnWJAsubS3pO9h9Wb4xUc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:20:25 2026 by rpki-client