This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: JafSplJGydR25wwyVg4aW+Pm3NiKwza0HRDVj0NGXDw= Subject key identifier: B5:CF:44:90:26:A1:D2:B6:9C:29:24:AD:51:3A:BC:B3:7F:F2:1F:3F Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 4C2D88F8EAB2887CBB2DBE9C82A6E0E276D2C619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: EF Signing time: Sat 24 Jan 2026 12:20:00 +0000 Manifest this update: Sat 24 Jan 2026 12:15:00 +0000 Manifest next update: Tue 27 Jan 2026 14:40:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) 3: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: s2qqo3oU1qGkmrEqC+VMkH+1kS1V5uXeU54SPuAImfg=) 4: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: MuCmNIFFCDr9w9hpyNewzxzz1h/yiQJJn6RZaIoRoUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2d:88:f8:ea:b2:88:7c:bb:2d:be:9c:82:a6:e0:e2:76:d2:c6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Jan 24 12:15:00 2026 GMT Not After : Jan 27 14:40:00 2026 GMT Subject: CN=B5CF449026A1D2B69C2924AD513ABCB37FF21F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:30:ae:49:f8:d3:4d:51:3b:26:6e:17:fd:3e: 45:29:cb:dd:7e:0f:0a:6a:a0:df:f0:d7:d4:05:4e: d9:d3:ad:bd:d8:50:9f:e8:69:de:6b:eb:40:1e:23: 58:38:b0:53:ed:66:13:33:49:af:40:f1:ec:bb:3a: 72:69:94:ed:f4:08:ca:e9:26:50:52:d3:e9:3a:4f: 2f:92:82:37:2c:f7:29:ee:53:33:fb:02:b0:ca:1d: d2:a8:aa:4c:be:d2:4b:b8:d6:a1:6c:8a:57:b9:ee: bd:00:c6:e7:96:1e:d9:61:96:bf:e5:c0:4f:1a:e2: 5c:45:d7:df:88:19:dd:39:88:f4:f8:0f:c4:61:c1: 8c:f0:19:cf:49:07:16:20:26:23:63:33:bf:ca:24: 42:9a:78:dd:f0:19:ce:5f:1b:6f:20:76:fb:e4:44: d8:e5:10:d0:d7:8f:48:bb:4c:9a:b1:7b:30:94:30: 2a:f0:ed:27:da:0b:d0:24:af:23:70:98:6c:10:5b: d2:31:3c:2b:c0:c8:1e:2b:51:e6:65:a5:02:97:90: 9c:2d:df:0d:6c:05:46:b9:ad:ff:16:3b:39:8a:f2: fa:ac:93:6f:b9:8f:93:d8:9f:54:60:e7:0d:57:12: ca:06:97:18:df:39:22:e4:fc:8a:6f:7b:0c:ed:7b: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:44:90:26:A1:D2:B6:9C:29:24:AD:51:3A:BC:B3:7F:F2:1F:3F X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:32:8c:ff:03:c5:96:fc:ed:eb:e9:87:9c:c7:9e:95:25:52: 37:51:41:62:d2:95:e3:12:dd:5f:de:da:f9:ea:d1:0f:34:67: 89:10:ac:7c:e7:bf:89:c0:f2:89:bb:46:0f:be:de:c3:b7:81: 0e:42:0c:3e:25:21:ae:b5:6f:29:58:7e:ec:02:28:a8:d7:eb: d2:a3:ac:b7:00:b2:fa:26:ff:85:51:dd:5a:ce:28:65:aa:b3: a0:3b:cf:5e:b8:36:a4:c5:cf:3d:3b:6b:d8:98:fc:a8:e2:6c: d9:b2:39:82:ff:1a:c7:76:16:aa:64:4e:34:44:c8:ec:44:f8: 17:90:7d:08:0c:a2:d0:04:13:29:2f:fb:ba:6a:09:eb:b9:99: 07:e6:f7:45:88:32:13:7a:01:6a:64:c5:37:1c:56:12:f8:74: dd:f9:f5:63:bf:a3:8d:62:72:5b:ea:56:09:79:6f:45:98:c6: 71:0d:b8:b5:c3:24:0d:28:5b:c8:ba:62:86:fc:a4:45:55:5b: 77:0e:7b:89:7e:e3:e5:1f:34:01:aa:19:ea:06:55:de:dd:e5: b4:0c:e6:09:d5:70:c2:a5:42:60:11:16:63:40:e8:5f:f6:65: f4:9a:54:83:e5:47:c5:1c:3b:94:88:55:38:b7:e7:17:50:a2: b1:03:60:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTC2I+OqyiHy7Lb6cgqbg4nbSxhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNjAxMjQxMjE1MDBaFw0yNjAxMjcxNDQwMDBaMDMxMTAvBgNV BAMTKEI1Q0Y0NDkwMjZBMUQyQjY5QzI5MjRBRDUxM0FCQ0IzN0ZGMjFGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMK5J+NNNUTsmbhf9PkUpy91+ DwpqoN/w19QFTtnTrb3YUJ/oad5r60AeI1g4sFPtZhMzSa9A8ey7OnJplO30CMrp JlBS0+k6Ty+Sgjcs9ynuUzP7ArDKHdKoqky+0ku41qFsile57r0AxueWHtlhlr/l wE8a4lxF19+IGd05iPT4D8RhwYzwGc9JBxYgJiNjM7/KJEKaeN3wGc5fG28gdvvk RNjlENDXj0i7TJqxezCUMCrw7SfaC9AkryNwmGwQW9IxPCvAyB4rUeZlpQKXkJwt 3w1sBUa5rf8WOzmK8vqsk2+5j5PYn1Rg5w1XEsoGlxjfOSLk/Ipvewzte15lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtc9EkCah0racKSStUTq8s3/yHz8wHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMyjP8DxZb87evph5zHnpUlUjdRQWLSleMS 3V/e2vnq0Q80Z4kQrHznv4nA8om7Rg++3sO3gQ5CDD4lIa61bylYfuwCKKjX69Kj rLcAsvom/4VR3VrOKGWqs6A7z164NqTFzz07a9iY/KjibNmyOYL/Gsd2FqpkTjRE yOxE+BeQfQgMotAEEykv+7pqCeu5mQfm90WIMhN6AWpkxTccVhL4dN359WO/o41i clvqVgl5b0WYxnENuLXDJA0oW8i6Yob8pEVVW3cOe4l+4+UfNAGqGeoGVd7d5bQM 5gnVcMKlQmARFmNA6F/2ZfSaVIPlR8UcO5SIVTi35xdQorEDYHY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:42 2026 by rpki-client