This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json) Hash identifier: RvWgtjt5Dh0vNlja4Yo2NIn1Q4PltWsDfrahwWiJtKY= Subject key identifier: D3:A3:52:00:4E:F9:BC:3C:67:E6:29:F2:6A:9A:62:40:8D:C2:42:0D Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4 Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4 Certificate serial: 0915B0CF25093FD578DDCEE77077D7550FA49CEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft Manifest number: 01E9 Signing time: Sat 24 Jan 2026 06:51:20 +0000 Manifest this update: Sat 24 Jan 2026 06:46:20 +0000 Manifest next update: Tue 27 Jan 2026 10:03:20 +0000 Files and hashes: 1: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: AhnmsKdoQd2arzEM3my3VY3ayg88t3C6NoifIaTROa8=) 2: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=) 3: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=) 4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:15:b0:cf:25:09:3f:d5:78:dd:ce:e7:70:77:d7:55:0f:a4:9c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4 Validity Not Before: Jan 24 06:46:20 2026 GMT Not After : Jan 27 10:03:20 2026 GMT Subject: CN=D3A352004EF9BC3C67E629F26A9A62408DC2420D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:a3:3a:ae:7a:c9:2c:b7:03:e0:d5:40:31: af:03:0c:21:b2:07:ed:c5:6a:28:86:c4:fa:69:80: 6f:18:4d:2f:c8:2b:f8:05:37:c2:94:e5:cb:cc:46: e7:d9:57:25:58:87:aa:24:a4:83:6f:01:d6:0f:4b: 9d:4c:8b:09:f8:7a:92:cc:77:37:ee:63:f8:53:de: 13:ba:9a:8d:9c:dd:df:96:82:04:55:a4:3b:13:4f: 75:e7:f7:5f:08:71:f4:e4:95:27:e3:18:86:e3:4d: b9:84:fc:df:7d:ca:49:1f:f6:05:5e:28:3b:a9:e2: 26:ff:33:fd:ef:48:09:e1:20:28:17:be:55:70:86: 5e:18:a1:94:1b:1d:5f:6f:f6:19:9f:9c:45:1e:af: 8b:d4:09:0d:68:36:81:25:fd:a5:38:92:80:e5:4c: 01:bd:ad:c8:00:da:44:2c:d1:3d:2c:ed:eb:af:cf: e9:de:97:ea:9f:31:0e:46:bd:28:c9:a1:65:27:a8: c6:f2:bf:99:66:cc:8e:02:91:1c:79:db:65:b9:f7: aa:b8:1c:cb:41:14:de:0d:41:43:d6:6e:44:7d:85: 34:2a:67:c6:ee:e5:45:76:88:7b:ff:23:7e:f1:42: e7:0b:a8:b5:a9:09:b5:17:7c:4d:3d:26:e6:2a:97: 08:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A3:52:00:4E:F9:BC:3C:67:E6:29:F2:6A:9A:62:40:8D:C2:42:0D X509v3 Authority Key Identifier: keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:33:88:3b:51:75:c4:f3:4d:4f:a4:e5:38:0a:16:b5:21:07: 03:89:21:95:5d:d0:05:d3:fc:e6:ba:08:9e:47:42:ca:b3:c9: 91:79:d7:29:44:b3:38:c7:15:20:51:96:86:64:27:bb:12:3f: 50:c9:2c:6d:86:73:59:c6:21:d3:ab:db:cd:09:dd:70:32:58: dd:af:e6:e3:fc:16:61:5f:6f:ee:90:8e:13:19:56:0a:e1:10: 16:63:0b:82:57:cb:e4:12:15:0e:d8:a7:da:7d:9e:27:d0:ba: 9b:dd:7c:d7:a7:0b:a7:6b:d2:ea:17:59:14:99:66:69:5c:6e: 2c:9a:3b:38:bd:77:45:f1:14:4a:9a:bd:fc:15:21:cf:c3:2e: a9:29:ff:51:46:94:3a:ef:69:fe:89:6e:c4:ad:67:e7:83:4a: d2:67:c4:f2:a9:12:27:35:57:d9:6b:00:7e:b7:ed:b7:70:16: c8:f1:4c:64:38:d5:c0:2e:e8:a7:e8:fc:8d:6b:53:9a:a4:e1: 02:c2:26:92:f0:20:ed:66:6f:51:ff:c2:af:61:0d:6b:d8:a2: 22:66:a5:1a:68:82:ed:80:0b:fa:af:f2:aa:2b:ce:f2:08:ab: c5:20:d2:d7:65:34:35:e4:fd:47:cc:f6:6f:46:94:a1:42:d9: f7:9c:8b:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRWwzyUJP9V43c7ncHfXVQ+knOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAy MTQ0MzNGNDAeFw0yNjAxMjQwNjQ2MjBaFw0yNjAxMjcxMDAzMjBaMDMxMTAvBgNV BAMTKEQzQTM1MjAwNEVGOUJDM0M2N0U2MjlGMjZBOUE2MjQwOERDMjQyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC386M6rnrJLLcD4NVAMa8DDCGy B+3FaiiGxPppgG8YTS/IK/gFN8KU5cvMRufZVyVYh6okpINvAdYPS51Miwn4epLM dzfuY/hT3hO6mo2c3d+WggRVpDsTT3Xn918IcfTklSfjGIbjTbmE/N99ykkf9gVe KDup4ib/M/3vSAnhICgXvlVwhl4YoZQbHV9v9hmfnEUer4vUCQ1oNoEl/aU4koDl TAG9rcgA2kQs0T0s7euvz+nel+qfMQ5GvSjJoWUnqMbyv5lmzI4CkRx522W596q4 HMtBFN4NQUPWbkR9hTQqZ8bu5UV2iHv/I37xQucLqLWpCbUXfE09JuYqlwh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06NSAE75vDxn5inyappiQI3CQg0wHwYDVR0j BBgwFoAUfKJSTG2CVQtdIcExgr2cwCFEM/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWVjNmNmOC05NjU1LTQzNzktYmYzNi0zNzI3MTQzOGQwM2EvMC83Q0EyNTI0QzZE ODI1NTBCNUQyMUMxMzE4MkJEOUNDMDIxNDQzM0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAyMTQ0 MzNGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlD QzAyMTQ0MzNGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0ziDtRdcTzTU+k5TgKFrUhBwOJIZVd0AXT /Oa6CJ5HQsqzyZF51ylEszjHFSBRloZkJ7sSP1DJLG2Gc1nGIdOr280J3XAyWN2v 5uP8FmFfb+6QjhMZVgrhEBZjC4JXy+QSFQ7Yp9p9nifQupvdfNenC6dr0uoXWRSZ ZmlcbiyaOzi9d0XxFEqavfwVIc/DLqkp/1FGlDrvaf6JbsStZ+eDStJnxPKpEic1 V9lrAH637bdwFsjxTGQ41cAu6Kfo/I1rU5qk4QLCJpLwIO1mb1H/wq9hDWvYoiJm pRpogu2AC/qv8qorzvIIq8Ug0tdlNDXk/UfM9m9GlKFC2feci08= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:17 2026 by rpki-client