This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: WU4K/uwIAqbC6zOzUGF5W6HvxMBGlg2j9MBPG3rkUqc= Subject key identifier: 92:3A:E4:06:2A:73:F5:CE:FC:C9:78:81:B1:B8:D7:75:F3:94:A7:BC Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 448D9070936D8EC985AFF39C177C37F805E3A500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0350 Signing time: Sun 25 Jan 2026 09:02:06 +0000 Manifest this update: Sun 25 Jan 2026 08:57:06 +0000 Manifest next update: Wed 28 Jan 2026 20:03:06 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: AUESLwY5bzj+opdzWY9d4isRztmw1o5U75fFFGRnonA=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8d:90:70:93:6d:8e:c9:85:af:f3:9c:17:7c:37:f8:05:e3:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Jan 25 08:57:06 2026 GMT Not After : Jan 28 20:03:06 2026 GMT Subject: CN=923AE4062A73F5CEFCC97881B1B8D775F394A7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:a2:15:c8:e5:44:82:f5:58:e9:6d:53:80: de:42:a6:39:49:c1:e8:50:07:6b:50:1e:4a:ee:ee: 97:0c:3d:a3:26:83:03:27:a7:8a:e5:3d:0a:3a:44: fa:31:b9:ff:e8:e1:e5:26:7f:a7:bb:43:ab:ca:ee: 26:11:b8:30:81:24:49:91:19:68:9c:7d:6c:30:2b: d5:03:b6:f8:b6:23:85:51:4a:1a:5b:1d:ac:ed:c7: 87:46:7f:be:52:b1:cc:62:0c:3d:c4:6e:63:fc:db: 67:4d:70:ac:8f:35:28:31:ad:2f:e0:cb:f6:b4:97: 65:0c:1b:e8:f2:71:15:7a:ab:de:b5:e4:a0:b1:b3: ef:ca:96:f1:f6:93:9a:db:88:59:d7:5b:ec:64:f2: 46:a4:6a:db:46:7f:28:15:73:72:fc:a0:ac:ac:51: b3:a1:2d:16:98:99:d2:bf:43:e5:c8:08:bb:69:ba: 68:da:af:9a:13:72:6d:8f:f2:de:71:6a:e7:37:93: a4:6b:a6:49:76:5d:45:86:19:da:bb:96:b1:9d:71: 8d:bd:0a:a5:2f:76:16:1c:00:e3:26:90:14:03:39: 9a:f3:31:13:29:98:2c:9b:de:24:c7:d7:ac:f5:fc: b9:e3:c1:78:e8:50:53:4f:ab:ba:8b:02:a1:fd:8e: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:E4:06:2A:73:F5:CE:FC:C9:78:81:B1:B8:D7:75:F3:94:A7:BC X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:75:1c:5b:2a:65:01:67:ab:8f:16:47:36:54:77:68:02:ef: cf:90:19:96:5d:ea:15:9b:cf:8a:3c:34:c7:6b:9b:0d:cc:0d: 3f:33:9e:89:1c:29:d5:61:f1:fb:b1:b1:44:ca:13:f2:9d:ec: fe:99:0d:93:e7:24:6b:97:e3:7e:45:e3:87:9a:ae:2f:7f:39: e0:e8:eb:42:94:40:44:a9:6d:95:63:8f:93:92:bf:ff:7f:ee: c8:c7:8c:3b:36:6b:7c:40:50:0a:fe:c7:80:69:3d:f3:dd:65: 35:83:a2:a2:38:3f:97:4e:7d:e9:ec:ee:e4:9b:76:74:20:e6: 16:aa:d0:46:75:6a:6a:de:35:07:ac:f7:de:5b:39:c9:42:9e: 33:bb:a8:a3:83:ce:83:02:fd:8b:28:02:29:94:a7:c1:73:96: e1:20:cc:8b:c3:df:f9:c2:b6:f8:f4:b9:ec:54:63:17:15:e4: fb:04:f2:29:78:ac:6b:f9:40:40:0b:6b:e7:3f:4a:19:86:39: 93:58:b2:66:09:06:8f:67:22:46:fa:e2:b9:00:bb:97:51:e9: 0c:86:ab:41:f7:88:2a:79:6f:6d:2a:16:2c:15:89:3f:5e:2b: 41:63:60:e8:b2:fc:2d:41:e7:16:e4:ea:d1:9e:c6:9e:85:ae: 3e:0b:45:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURI2QcJNtjsmFr/OcF3w3+AXjpQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNjAxMjUwODU3MDZaFw0yNjAxMjgyMDAzMDZaMDMxMTAvBgNV BAMTKDkyM0FFNDA2MkE3M0Y1Q0VGQ0M5Nzg4MUIxQjhENzc1RjM5NEE3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC176IVyOVEgvVY6W1TgN5CpjlJ wehQB2tQHkru7pcMPaMmgwMnp4rlPQo6RPoxuf/o4eUmf6e7Q6vK7iYRuDCBJEmR GWicfWwwK9UDtvi2I4VRShpbHaztx4dGf75SscxiDD3EbmP822dNcKyPNSgxrS/g y/a0l2UMG+jycRV6q9615KCxs+/KlvH2k5rbiFnXW+xk8kakattGfygVc3L8oKys UbOhLRaYmdK/Q+XICLtpumjar5oTcm2P8t5xauc3k6Rrpkl2XUWGGdq7lrGdcY29 CqUvdhYcAOMmkBQDOZrzMRMpmCyb3iTH16z1/LnjwXjoUFNPq7qLAqH9jmK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkjrkBipz9c78yXiBsbjXdfOUp7wwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABV1HFsqZQFnq48WRzZUd2gC78+QGZZd6hWb z4o8NMdrmw3MDT8znokcKdVh8fuxsUTKE/Kd7P6ZDZPnJGuX435F44eari9/OeDo 60KUQESpbZVjj5OSv/9/7sjHjDs2a3xAUAr+x4BpPfPdZTWDoqI4P5dOfens7uSb dnQg5haq0EZ1amreNQes995bOclCnjO7qKODzoMC/YsoAimUp8FzluEgzIvD3/nC tvj0uexUYxcV5PsE8il4rGv5QEALa+c/ShmGOZNYsmYJBo9nIkb64rkAu5dR6QyG q0H3iCp5b20qFiwViT9eK0FjYOiy/C1B5xbk6tGexp6Frj4LRd8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:47 2026 by rpki-client