This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: AsDi1OowyQ1Dq9i5LamnQ1eAsnLav2vZ57PU/Xbf1Lk= Subject key identifier: 29:87:1F:7B:88:13:79:E4:CC:98:E1:44:27:3F:69:8C:C3:E4:AF:89 Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 5A930007431BEDA3E192113C6E1E734EA446590C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 0234 Signing time: Fri 23 Jan 2026 12:42:21 +0000 Manifest this update: Fri 23 Jan 2026 12:37:21 +0000 Manifest next update: Mon 26 Jan 2026 23:43:21 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: h3F9Llj9O7Xku7uQRgTprbQZ0BqnZP4nbNoiUb3SuDY=) 2: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: 7ygtuaa7stJ7x2BMLylRzYiVBaInsuQrrtif68tJBuo=) 3: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: YevEYsnpyXjpiEIMiyxhrulrrR0dSrjcBVrRlWG52Uk=) 4: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:93:00:07:43:1b:ed:a3:e1:92:11:3c:6e:1e:73:4e:a4:46:59:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Jan 23 12:37:21 2026 GMT Not After : Jan 26 23:43:21 2026 GMT Subject: CN=29871F7B881379E4CC98E144273F698CC3E4AF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:92:74:b7:df:ef:25:21:63:5e:cb:c9:8c: 67:8c:98:a8:f1:69:39:03:c0:40:c2:5e:4f:90:ce: 10:06:dc:d3:a0:1c:4a:8f:1f:08:07:13:52:4c:e8: d7:14:81:78:a4:fb:69:5f:30:77:43:ef:de:47:a0: 61:f5:44:9d:d0:bc:78:0e:e7:4f:78:be:16:a3:de: cb:4e:5d:30:7d:e7:1f:0c:23:34:0e:b6:99:f4:28: c6:8c:53:27:ea:62:1f:5b:9c:47:8e:1b:8a:a8:11: 6f:fb:24:b9:c3:79:01:01:a5:2b:36:16:22:10:f7: c4:16:0d:a9:5a:3f:78:e5:ef:fe:22:c3:ce:de:fc: fc:bf:99:c3:77:30:cc:b2:b5:65:c0:2e:4b:6d:03: 22:92:9c:44:20:f8:75:63:4f:79:33:f3:19:e4:aa: dc:37:9c:a6:d8:f6:b1:c0:a0:43:00:ce:d9:e2:f7: b0:66:55:29:81:18:50:97:9b:36:82:d7:d0:11:7b: e1:73:ec:7e:0d:b6:5e:e2:ab:7b:a0:2e:35:ec:1c: 0d:98:67:13:de:14:74:67:70:33:7a:2f:15:57:11: 58:26:3d:82:ba:33:b8:ce:9f:16:c1:62:e3:c1:34: 8d:f1:4b:50:7e:e7:64:45:0b:34:70:a9:dc:45:19: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:1F:7B:88:13:79:E4:CC:98:E1:44:27:3F:69:8C:C3:E4:AF:89 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7c:a9:1e:bf:c0:5c:2f:87:ed:48:2b:d8:5e:94:27:17:e8: 84:4c:3b:20:ff:9a:b4:4a:8c:b8:f2:1a:6c:d3:b2:ac:d7:4a: eb:ef:20:be:90:36:2c:99:7a:47:ba:d7:b8:8c:2d:33:d9:be: 9a:1c:fb:22:b7:a7:54:1b:ac:e3:a0:1c:2b:ad:77:ee:e4:a9: 9f:eb:6d:35:ff:84:46:93:e4:6e:51:16:e2:a1:df:db:d7:0b: 12:d6:0b:da:95:20:df:cc:be:83:1a:42:65:3a:c6:49:44:66: 73:b5:65:12:fb:cb:b9:ac:10:90:1e:da:85:fb:65:90:00:fd: f3:de:b4:30:6e:58:8f:ac:9c:cf:81:42:85:5a:ae:ed:5a:72: 5b:97:91:59:b3:97:a8:4a:e0:7d:1c:f6:9e:42:c7:16:04:40: 0d:af:c4:94:85:ca:8f:2b:b4:43:c5:81:51:23:3a:2c:ac:f5: a6:b8:1e:72:7a:0d:81:2a:ed:69:dd:f5:5a:39:db:69:a0:f2: 16:85:0e:b9:e4:83:4f:c0:d9:c3:8c:0a:98:88:6f:0b:ab:cc: 1d:c4:a2:f8:9a:c9:86:20:79:9e:19:e1:30:e3:3e:e8:69:07: 7d:9f:10:66:75:5e:ea:ac:a6:0d:a0:db:cf:a4:d8:a2:bb:a2: 7a:6e:36:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpMAB0Mb7aPhkhE8bh5zTqRGWQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNjAxMjMxMjM3MjFaFw0yNjAxMjYyMzQzMjFaMDMxMTAvBgNV BAMTKDI5ODcxRjdCODgxMzc5RTRDQzk4RTE0NDI3M0Y2OThDQzNFNEFGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SZJ0t9/vJSFjXsvJjGeMmKjx aTkDwEDCXk+QzhAG3NOgHEqPHwgHE1JM6NcUgXik+2lfMHdD795HoGH1RJ3QvHgO 5094vhaj3stOXTB95x8MIzQOtpn0KMaMUyfqYh9bnEeOG4qoEW/7JLnDeQEBpSs2 FiIQ98QWDalaP3jl7/4iw87e/Py/mcN3MMyytWXALkttAyKSnEQg+HVjT3kz8xnk qtw3nKbY9rHAoEMAztni97BmVSmBGFCXmzaC19ARe+Fz7H4Ntl7iq3ugLjXsHA2Y ZxPeFHRncDN6LxVXEVgmPYK6M7jOnxbBYuPBNI3xS1B+52RFCzRwqdxFGUIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYcfe4gTeeTMmOFEJz9pjMPkr4kwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACR8qR6/wFwvh+1IK9helCcX6IRMOyD/mrRK jLjyGmzTsqzXSuvvIL6QNiyZeke617iMLTPZvpoc+yK3p1QbrOOgHCutd+7kqZ/r bTX/hEaT5G5RFuKh39vXCxLWC9qVIN/MvoMaQmU6xklEZnO1ZRL7y7msEJAe2oX7 ZZAA/fPetDBuWI+snM+BQoVaru1acluXkVmzl6hK4H0c9p5CxxYEQA2vxJSFyo8r tEPFgVEjOiys9aa4HnJ6DYEq7Wnd9Vo522mg8haFDrnkg0/A2cOMCpiIbwurzB3E oviayYYgeZ4Z4TDjPuhpB32fEGZ1Xuqspg2g28+k2KK7onpuNl8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:54 2026 by rpki-client