This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: Pu11KHEK+jt1kCJQ0Xxc/4ddKP/8/4XERdMF4+dT37Q= Subject key identifier: 74:06:61:F2:52:6F:34:83:E3:BF:5F:E6:21:B9:57:B0:59:94:50:43 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 514A1BA63C2CF9F75D2666BAC95E5FC4695D0555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01CD Signing time: Sat 24 Jan 2026 22:42:18 +0000 Manifest this update: Sat 24 Jan 2026 22:37:18 +0000 Manifest next update: Wed 28 Jan 2026 00:17:18 +0000 Files and hashes: 1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: yZ/MChZHB5tDzBnd1w3tnaq3ghVO7uYw0Z7Ua0KxMJI=) 2: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: hM3QbVxMLlOXsRLQLFWLqXsGt7o4mp3T54FSvj673Xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4a:1b:a6:3c:2c:f9:f7:5d:26:66:ba:c9:5e:5f:c4:69:5d:05:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Jan 24 22:37:18 2026 GMT Not After : Jan 28 00:17:18 2026 GMT Subject: CN=740661F2526F3483E3BF5FE621B957B059945043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:0c:8a:7d:c7:a8:41:5a:95:7a:1f:78:ee: f3:ca:d1:fd:cd:de:9d:e4:f0:b4:72:45:77:db:e3: 5a:43:91:7a:82:48:0b:a0:ba:d0:73:a5:8c:fd:23: 3c:44:b6:0e:e2:bf:9e:b8:3e:84:39:ec:72:0b:75: e5:08:41:27:c2:74:a0:2e:51:dd:9b:9b:28:20:89: 6c:e0:2f:46:fa:83:37:ef:18:50:61:82:db:d2:ca: 57:5d:ee:0b:50:65:c9:29:a3:03:fd:b1:f8:cf:a2: a4:10:e1:92:aa:d5:db:b4:77:2b:95:eb:8a:35:62: ab:b6:b4:82:1c:13:49:79:d9:5f:28:72:4d:2d:32: 28:be:34:fc:ea:05:3f:2a:df:3d:1a:72:67:4e:4e: 6b:d9:1f:79:db:5f:04:f4:c6:99:b1:1f:cd:93:71: d7:d1:4e:7d:ca:48:5e:90:32:64:60:76:38:30:2d: 98:ea:7b:45:c8:56:9b:9c:15:de:75:25:c4:9a:02: f6:db:72:28:33:11:b2:d9:32:80:b3:47:a7:d2:9d: 35:2a:ae:61:f9:7d:e5:63:61:d1:16:bd:b3:7d:75: 5a:5f:bb:68:bf:4a:57:9f:c2:10:7d:1d:8f:12:aa: 64:2b:b5:b0:e3:77:41:6e:10:ab:ed:28:86:6b:c9: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:61:F2:52:6F:34:83:E3:BF:5F:E6:21:B9:57:B0:59:94:50:43 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b1:79:d5:27:21:e7:25:19:7a:67:17:8b:00:ff:3d:c6:84: b5:4b:88:69:fd:41:48:05:3d:5d:f7:df:bd:78:e4:44:cd:73: a3:60:a0:ba:c1:13:de:07:e4:1a:56:b1:01:01:21:3d:80:f1: e3:cf:ba:3b:9f:7a:17:30:62:14:28:00:5f:93:a7:12:0e:74: db:f2:56:90:31:4d:ac:cd:f9:14:7d:1e:1a:33:c7:d3:5c:c8: ae:08:c7:ff:96:5f:f4:1d:d8:0c:3e:9b:56:32:2e:b7:cc:d0: fb:68:1c:2d:29:ac:e7:af:10:52:5f:d4:0b:d5:ae:a9:bb:04: 51:b2:48:d0:53:6a:3a:fc:14:7f:37:f5:93:26:fb:81:6a:7b: 10:01:5c:9c:5e:17:ea:ad:28:40:3f:45:20:5f:f2:33:24:43: e9:6b:fe:a0:4c:e6:e3:f9:54:70:ea:2b:24:c5:ba:11:1d:54: 48:b0:71:4b:27:dd:19:04:f8:c4:21:7a:c3:42:f1:21:44:3c: f8:fa:d3:26:16:7c:42:98:3c:4c:4d:81:42:88:8a:52:12:24: 77:fd:b5:78:c5:e4:73:77:97:da:21:0e:fe:1b:ef:91:a6:e9: cd:96:09:29:e4:d9:2f:4d:e6:fe:e3:d2:3e:55:90:2e:67:66: 90:d5:e1:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUobpjws+fddJma6yV5fxGldBVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNjAxMjQyMjM3MThaFw0yNjAxMjgwMDE3MThaMDMxMTAvBgNV BAMTKDc0MDY2MUYyNTI2RjM0ODNFM0JGNUZFNjIxQjk1N0IwNTk5NDUwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGAyKfceoQVqVeh947vPK0f3N 3p3k8LRyRXfb41pDkXqCSAugutBzpYz9IzxEtg7iv564PoQ57HILdeUIQSfCdKAu Ud2bmyggiWzgL0b6gzfvGFBhgtvSyldd7gtQZckpowP9sfjPoqQQ4ZKq1du0dyuV 64o1Yqu2tIIcE0l52V8ock0tMii+NPzqBT8q3z0acmdOTmvZH3nbXwT0xpmxH82T cdfRTn3KSF6QMmRgdjgwLZjqe0XIVpucFd51JcSaAvbbcigzEbLZMoCzR6fSnTUq rmH5feVjYdEWvbN9dVpfu2i/SlefwhB9HY8SqmQrtbDjd0FuEKvtKIZryRFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAZh8lJvNIPjv1/mIblXsFmUUEMwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2xedUnIeclGXpnF4sA/z3GhLVLiGn9QUgF PV3337145ETNc6NgoLrBE94H5BpWsQEBIT2A8ePPujufehcwYhQoAF+TpxIOdNvy VpAxTazN+RR9Hhozx9NcyK4Ix/+WX/Qd2Aw+m1YyLrfM0PtoHC0prOevEFJf1AvV rqm7BFGySNBTajr8FH839ZMm+4FqexABXJxeF+qtKEA/RSBf8jMkQ+lr/qBM5uP5 VHDqKyTFuhEdVEiwcUsn3RkE+MQhesNC8SFEPPj60yYWfEKYPExNgUKIilISJHf9 tXjF5HN3l9ohDv4b75Gm6c2WCSnk2S9N5v7j0j5VkC5nZpDV4Wk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:16 2026 by rpki-client