This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: aH5ZvTxZ5EmuuU+DCHaEaCu5eXmuZJ0EhmEzh1G1SqU= Subject key identifier: 4D:C4:8E:AA:0C:88:CB:77:58:40:A5:CB:EA:CB:3B:D3:20:F5:61:84 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 2909F2ADB16352624EE7EAE73146EA1C84A0314C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 04B4 Signing time: Sat 24 Jan 2026 01:52:30 +0000 Manifest this update: Sat 24 Jan 2026 01:47:30 +0000 Manifest next update: Tue 27 Jan 2026 08:58:30 +0000 Files and hashes: 1: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) 2: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: 2hHXIm/5yBs8w8yLiBwt8JbfKGmhBcL54OjjhQea35Y=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:09:f2:ad:b1:63:52:62:4e:e7:ea:e7:31:46:ea:1c:84:a0:31:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Jan 24 01:47:30 2026 GMT Not After : Jan 27 08:58:30 2026 GMT Subject: CN=4DC48EAA0C88CB775840A5CBEACB3BD320F56184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:0c:9d:8f:4f:0a:12:3f:da:c5:92:46:f8: 12:a8:92:84:c5:07:d1:7c:e5:59:4e:b4:77:a1:bb: 3b:c8:5c:a6:68:96:79:4a:2a:f1:df:cf:cd:77:28: 72:33:19:67:49:79:b0:e4:07:af:20:4e:3e:18:a3: 3a:84:67:48:ba:46:05:fc:58:4f:f1:c0:ad:8c:cb: 93:5b:ed:6b:ca:88:e4:2e:1c:b9:3d:55:4d:aa:53: cf:b3:b1:5c:64:f5:51:0d:1b:b6:78:8b:76:e3:5e: 79:a2:ff:1f:5f:1a:0e:22:d4:29:fa:7d:cb:75:f1: 2f:90:09:bc:81:dd:89:cb:90:57:35:35:0f:31:66: fe:31:66:dc:70:34:68:9f:8a:91:3c:87:dd:f6:09: e9:d1:eb:5e:2a:de:24:04:cf:45:8d:68:d6:8e:a9: c6:b7:18:6f:0e:5f:5d:6b:be:31:29:ba:5c:4c:37: 41:5f:9a:c3:98:09:bf:6a:c3:79:0d:42:e2:27:1b: 1a:1b:81:2f:d5:65:93:2b:b7:10:46:98:d6:e4:04: 9f:8d:35:e1:5e:2f:f8:71:2b:e4:3c:81:c2:b6:0c: f1:0e:c4:a0:4a:50:aa:3d:e1:13:48:61:88:5d:86: 1b:c4:4a:c4:1f:c3:fd:ad:c0:0d:e5:5b:26:e1:e7: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:8E:AA:0C:88:CB:77:58:40:A5:CB:EA:CB:3B:D3:20:F5:61:84 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2c:08:b7:ad:99:95:2e:9d:96:11:06:68:8b:d0:20:6e:48: 33:ff:af:7c:1e:88:9a:e6:fa:40:28:c3:6b:f0:4a:dd:6f:6b: 00:3a:d7:63:52:51:83:2c:39:a6:0b:6a:cd:4f:2b:8e:c5:fa: 26:b7:05:fd:98:a7:56:5b:78:c0:6d:c2:c5:f8:d2:f8:ad:0a: d3:3c:95:73:54:aa:40:ea:37:a3:99:03:31:4e:57:f5:49:a7: dc:cd:c2:43:e1:f4:81:2b:44:f6:92:76:9e:7b:f4:85:18:8d: c1:de:34:ef:f7:00:d7:8f:4b:8d:cc:02:0f:3c:f5:71:de:f7: 64:f4:19:a3:19:7b:02:cc:f5:ee:de:9a:3a:e3:09:1a:75:73: 2b:69:d5:ec:86:cd:11:8a:4c:69:42:be:d8:53:2a:d3:89:f7: da:20:6d:89:45:e4:38:48:95:d2:a0:f3:a9:72:bc:76:96:99: 6e:8f:45:40:d2:c3:28:81:ae:0e:6a:0f:fa:6a:90:f4:a9:83: 9a:66:f6:41:b5:61:e0:4d:02:c0:f4:c3:b1:7a:f5:76:3b:7c: 79:ea:cc:e5:d4:db:ff:90:0d:27:06:2e:1c:d9:60:06:fd:80: 3d:65:7a:6f:61:78:72:8d:07:37:df:7b:26:54:29:4b:1c:b8: 23:32:01:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQnyrbFjUmJO5+rnMUbqHISgMUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNjAxMjQwMTQ3MzBaFw0yNjAxMjcwODU4MzBaMDMxMTAvBgNV BAMTKDREQzQ4RUFBMEM4OENCNzc1ODQwQTVDQkVBQ0IzQkQzMjBGNTYxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtBwydj08KEj/axZJG+BKokoTF B9F85VlOtHehuzvIXKZolnlKKvHfz813KHIzGWdJebDkB68gTj4YozqEZ0i6RgX8 WE/xwK2My5Nb7WvKiOQuHLk9VU2qU8+zsVxk9VENG7Z4i3bjXnmi/x9fGg4i1Cn6 fct18S+QCbyB3YnLkFc1NQ8xZv4xZtxwNGifipE8h932CenR614q3iQEz0WNaNaO qca3GG8OX11rvjEpulxMN0FfmsOYCb9qw3kNQuInGxobgS/VZZMrtxBGmNbkBJ+N NeFeL/hxK+Q8gcK2DPEOxKBKUKo94RNIYYhdhhvESsQfw/2twA3lWybh5wMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcSOqgyIy3dYQKXL6ss70yD1YYQwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMsCLetmZUunZYRBmiL0CBuSDP/r3weiJrm +kAow2vwSt1vawA612NSUYMsOaYLas1PK47F+ia3Bf2Yp1ZbeMBtwsX40vitCtM8 lXNUqkDqN6OZAzFOV/VJp9zNwkPh9IErRPaSdp579IUYjcHeNO/3ANePS43MAg88 9XHe92T0GaMZewLM9e7emjrjCRp1cytp1eyGzRGKTGlCvthTKtOJ99ogbYlF5DhI ldKg86lyvHaWmW6PRUDSwyiBrg5qD/pqkPSpg5pm9kG1YeBNAsD0w7F69XY7fHnq zOXU2/+QDScGLhzZYAb9gD1lem9heHKNBzffeyZUKUscuCMyAWg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:47:54 2026 by rpki-client