This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: A8fbhicdQCxiRTyYj0orgIfftTkPgw1lcOpFo40S0n4= Subject key identifier: 83:F4:4C:78:0D:A6:A0:A6:18:63:E3:B5:F9:5F:05:E8:50:41:49:EF Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 57BE3B1BCFE3466B2986829B8DE794592300E346 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 01CA Signing time: Sun 25 Jan 2026 13:31:05 +0000 Manifest this update: Sun 25 Jan 2026 13:26:05 +0000 Manifest next update: Wed 28 Jan 2026 15:05:05 +0000 Files and hashes: 1: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: koH5q5oLKcLR5X6MYFdU+MrvD6zwh8v3JGfpyVLK7F8=) 2: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: BDD90sSQsBf6TcZNY5H5fSy8FBCNfWqRzrbG2rv5UwQ=) 3: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: /v7tBPRU1u+BR2RiPNz47SYnAXI0sTw9kpjJnL+zjlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:be:3b:1b:cf:e3:46:6b:29:86:82:9b:8d:e7:94:59:23:00:e3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Jan 25 13:26:05 2026 GMT Not After : Jan 28 15:05:05 2026 GMT Subject: CN=83F44C780DA6A0A61863E3B5F95F05E8504149EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:85:91:2a:6b:e7:dd:10:dd:fc:de:fe:06: aa:be:64:ad:73:fc:6f:e8:73:25:61:bd:6a:a2:8c: 1e:10:2b:77:5a:b5:61:e3:dd:bb:af:c1:f0:78:2b: 3d:1f:97:5f:99:b2:99:fb:b3:4d:2e:fa:ae:50:f2: a0:71:17:ce:2b:68:99:6e:20:66:68:e2:bd:49:df: a8:f8:4d:1e:0a:72:48:72:37:cb:90:5d:a9:85:22: 34:e4:e5:97:46:21:63:ce:53:54:c0:48:10:66:10: 41:a8:42:bd:a0:64:93:fb:9b:92:08:96:e8:9a:40: a5:27:0f:be:84:4d:c8:c6:00:46:44:b4:8b:14:86: 2a:ea:aa:3f:7d:c0:36:7a:61:89:87:bd:b9:9e:5c: 98:24:e3:9f:0e:a2:90:ff:8b:77:35:a6:20:57:27: 2e:cb:ce:f0:20:8e:e7:f5:48:70:a7:61:00:b1:95: e1:7c:f3:71:c6:f2:c0:da:ca:b9:77:3f:39:05:10: cd:4d:77:70:a7:01:3d:aa:5a:c3:2b:b5:c2:ff:f3: c1:fe:58:e3:62:00:19:b2:81:67:5e:95:31:58:8a: 71:48:17:92:10:d3:32:01:3d:fc:06:fd:e6:a4:d8: 9f:55:58:35:88:2d:0d:1e:1d:33:89:22:a2:5f:6f: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:4C:78:0D:A6:A0:A6:18:63:E3:B5:F9:5F:05:E8:50:41:49:EF X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cd:43:bb:eb:66:4f:f6:ed:25:d3:ca:16:df:56:c2:4d:cf: d1:73:3c:c2:6f:31:6b:03:84:e6:61:10:5e:4d:97:42:df:91: fc:4d:aa:bc:27:44:5c:c1:73:d8:2d:8f:ad:24:9b:9b:e8:77: 90:00:2d:76:a5:68:c4:fd:2a:e8:95:a7:65:5f:11:7b:10:bf: bc:e0:30:18:d6:1e:66:cc:49:67:c3:cd:76:a5:41:75:40:79: 39:51:b8:55:a4:ee:01:45:dc:52:55:d6:99:d9:1f:7d:58:28: a6:7b:c3:ab:87:25:be:45:e5:d2:73:98:e9:ad:66:cd:b5:e3: 0d:db:12:07:36:94:19:0c:ae:52:e0:a4:b8:50:83:31:77:3a: 8f:54:42:68:f1:71:a5:90:e1:14:15:ac:14:9c:31:98:80:3d: 49:04:b9:47:d1:46:ac:0b:46:ce:b0:33:3b:8e:bf:d4:03:ff: f8:82:51:45:02:66:25:a7:13:a6:43:fe:f8:8a:84:d5:a7:9b: 07:a3:b8:33:d0:fa:3e:6c:d3:f1:88:05:c5:a6:d3:a0:66:47: 4c:cf:3f:f5:bc:af:4f:f1:d8:ee:42:cd:20:d6:44:10:21:c9: c1:4c:88:3a:24:8e:be:4e:73:a8:4b:28:87:81:2c:a5:66:38: 6e:0e:58:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV747G8/jRmsphoKbjeeUWSMA40YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNjAxMjUxMzI2MDVaFw0yNjAxMjgxNTA1MDVaMDMxMTAvBgNV BAMTKDgzRjQ0Qzc4MERBNkEwQTYxODYzRTNCNUY5NUYwNUU4NTA0MTQ5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRoWRKmvn3RDd/N7+Bqq+ZK1z /G/ocyVhvWqijB4QK3datWHj3buvwfB4Kz0fl1+Zspn7s00u+q5Q8qBxF84raJlu IGZo4r1J36j4TR4KckhyN8uQXamFIjTk5ZdGIWPOU1TASBBmEEGoQr2gZJP7m5II luiaQKUnD76ETcjGAEZEtIsUhirqqj99wDZ6YYmHvbmeXJgk458OopD/i3c1piBX Jy7LzvAgjuf1SHCnYQCxleF883HG8sDayrl3PzkFEM1Nd3CnAT2qWsMrtcL/88H+ WONiABmygWdelTFYinFIF5IQ0zIBPfwG/eak2J9VWDWILQ0eHTOJIqJfb0DLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/RMeA2moKYYY+O1+V8F6FBBSe8wHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPNQ7vrZk/27SXTyhbfVsJNz9FzPMJvMWsD hOZhEF5Nl0LfkfxNqrwnRFzBc9gtj60km5vod5AALXalaMT9KuiVp2VfEXsQv7zg MBjWHmbMSWfDzXalQXVAeTlRuFWk7gFF3FJV1pnZH31YKKZ7w6uHJb5F5dJzmOmt Zs214w3bEgc2lBkMrlLgpLhQgzF3Oo9UQmjxcaWQ4RQVrBScMZiAPUkEuUfRRqwL Rs6wMzuOv9QD//iCUUUCZiWnE6ZD/viKhNWnmwejuDPQ+j5s0/GIBcWm06BmR0zP P/W8r0/x2O5CzSDWRBAhycFMiDokjr5Oc6hLKIeBLKVmOG4OWMo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:49:24 2026 by rpki-client