This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: 6DY31CTlq+3nQyf+VmAQ/2Y2S+zdX6h9mzhhZSXKQKU= Subject key identifier: 7D:0C:C1:3D:00:CA:3B:C7:E2:92:0F:ED:C3:17:57:2E:25:E3:0A:DA Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 57BF5C16A5CC58CBA8E750290579C34971B087AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 0256 Signing time: Sat 24 Jan 2026 13:32:10 +0000 Manifest this update: Sat 24 Jan 2026 13:27:10 +0000 Manifest next update: Tue 27 Jan 2026 13:51:10 +0000 Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 2: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) 3: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 4: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: dw7QqAaCHi6H2gzM4pqrWnw9fxILpjOYp/MegOJOfdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bf:5c:16:a5:cc:58:cb:a8:e7:50:29:05:79:c3:49:71:b0:87:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Jan 24 13:27:10 2026 GMT Not After : Jan 27 13:51:10 2026 GMT Subject: CN=7D0CC13D00CA3BC7E2920FEDC317572E25E30ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:97:95:46:73:f1:2d:83:b2:f4:3a:64:33: 76:d7:d6:99:61:c4:68:d0:bf:e3:f7:00:99:3f:85: 6f:68:64:c3:e8:6f:bb:53:3a:78:91:3e:b9:ef:d2: 70:6a:fb:96:06:71:10:4a:0d:fc:de:15:e0:0c:a1: 10:b4:42:95:24:7e:90:48:b4:ec:d0:fe:55:d2:0b: 06:93:b2:38:5e:0a:e2:be:50:ea:45:9b:70:f2:3c: a9:dd:b0:39:a9:1a:8f:92:18:ce:77:fe:f3:c3:ad: cc:62:00:1b:48:6b:1d:01:07:ee:21:30:b4:d4:5a: 8a:82:0b:ed:5b:f6:fa:38:0c:ce:44:4f:de:22:dc: 22:d3:96:21:a6:3e:8d:92:4d:64:af:53:ac:9f:d1: 2b:07:d0:6b:75:29:06:6d:1f:c5:16:47:14:04:19: 02:6d:af:68:62:65:73:d9:34:1a:28:49:57:ce:ff: 90:89:b6:ea:48:33:7b:4a:c5:ba:48:53:9d:bb:7b: 14:5b:2b:f8:f8:b8:c0:f1:6e:5d:b7:9a:e7:cd:d8: 8e:2e:9c:ef:f2:e7:75:a1:08:e5:9a:59:23:e6:4b: 49:b3:f4:0a:46:4d:97:39:1e:df:12:b9:bc:85:c1: 47:5f:70:07:30:af:07:43:8b:7a:0c:d5:77:4e:21: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0C:C1:3D:00:CA:3B:C7:E2:92:0F:ED:C3:17:57:2E:25:E3:0A:DA X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c8:b3:37:11:68:08:d6:4f:08:fc:ca:37:45:5f:d0:65:16: 22:a4:a7:34:4b:7d:5b:36:8d:d7:92:26:29:e3:40:83:6e:c0: a2:9a:8c:b2:8f:c3:1c:a6:93:f5:48:b4:fe:42:cd:d7:38:a7: ee:e1:41:37:c9:f5:a1:f8:8f:b2:35:23:66:85:b9:b6:6b:78: 52:bf:e8:f5:32:da:70:22:8a:9f:0b:da:93:55:42:58:76:af: 30:30:ec:b3:91:69:17:82:fa:cd:2b:cc:9b:4a:10:7e:35:f5: ed:3a:aa:ec:8a:c2:c6:ec:39:b4:0e:6b:7b:40:51:b7:6e:06: fa:8c:f5:9a:0e:72:ae:49:6e:df:5e:c0:45:f2:a7:b0:c1:04: d3:f5:9b:2b:41:5f:26:c1:1f:08:9c:c0:a6:42:06:af:00:a4: 3f:6e:db:da:30:97:dd:cf:11:a1:65:eb:c3:a9:3b:6f:99:30: 13:97:da:4c:da:7a:ae:b9:3b:ed:2e:07:e7:ed:5a:42:2f:b8: 92:24:27:54:7c:13:e3:52:39:c7:3f:d9:d3:7f:f5:d4:b3:5d: ec:76:af:aa:a2:a4:83:76:fd:28:f3:c2:74:82:45:75:db:96: c8:9c:b4:8d:68:34:5e:88:30:53:dd:dd:a4:46:8e:6c:c1:10: 7b:a8:f7:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV79cFqXMWMuo51ApBXnDSXGwh68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNjAxMjQxMzI3MTBaFw0yNjAxMjcxMzUxMTBaMDMxMTAvBgNV BAMTKDdEMENDMTNEMDBDQTNCQzdFMjkyMEZFREMzMTc1NzJFMjVFMzBBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChb5eVRnPxLYOy9DpkM3bX1plh xGjQv+P3AJk/hW9oZMPob7tTOniRPrnv0nBq+5YGcRBKDfzeFeAMoRC0QpUkfpBI tOzQ/lXSCwaTsjheCuK+UOpFm3DyPKndsDmpGo+SGM53/vPDrcxiABtIax0BB+4h MLTUWoqCC+1b9vo4DM5ET94i3CLTliGmPo2STWSvU6yf0SsH0Gt1KQZtH8UWRxQE GQJtr2hiZXPZNBooSVfO/5CJtupIM3tKxbpIU527exRbK/j4uMDxbl23mufN2I4u nO/y53WhCOWaWSPmS0mz9ApGTZc5Ht8SubyFwUdfcAcwrwdDi3oM1XdOIfKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQzBPQDKO8fikg/twxdXLiXjCtowHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnIszcRaAjWTwj8yjdFX9BlFiKkpzRLfVs2 jdeSJinjQINuwKKajLKPwxymk/VItP5Czdc4p+7hQTfJ9aH4j7I1I2aFubZreFK/ 6PUy2nAiip8L2pNVQlh2rzAw7LORaReC+s0rzJtKEH419e06quyKwsbsObQOa3tA UbduBvqM9ZoOcq5Jbt9ewEXyp7DBBNP1mytBXybBHwicwKZCBq8ApD9u29owl93P EaFl68OpO2+ZMBOX2kzaeq65O+0uB+ftWkIvuJIkJ1R8E+NSOcc/2dN/9dSzXex2 r6qipIN2/SjzwnSCRXXblsictI1oNF6IMFPd3aRGjmzBEHuo9+8= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:41 2026 by rpki-client