This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft File: 798D703C19A93E4E19F716304D78F20AA3261B8A.mft (raw, json) Hash identifier: bHd22VCsGJCEe/Gbs4Mc1jx2dgVpiZfPw0CvmYHRm7I= Subject key identifier: FA:91:D0:22:EE:AE:FD:95:2D:CB:E9:02:E7:E5:43:9E:78:86:AC:03 Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A Certificate issuer: /CN=798D703C19A93E4E19F716304D78F20AA3261B8A Certificate serial: 71FE2D5590C982DF5CA4AAB73AC1FDAFDEA35B84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft Manifest number: 0547 Signing time: Sat 24 Jan 2026 01:02:01 +0000 Manifest this update: Sat 24 Jan 2026 00:57:01 +0000 Manifest next update: Tue 27 Jan 2026 04:48:01 +0000 Files and hashes: 1: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: JtI1jfgaZBEwCqyUB72ksPn3QargIoHZ6U4tHyErJjI=) 2: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: h+98Hl+FH7IDfemSrtBXhbDJo99hfIfndXfQe3JekOA=) 3: 798D703C19A93E4E19F716304D78F20AA3261B8A.crl (hash: AEXrSoe79BeErEADg/9sqxX+GuhvilLPG2LbS5JyNjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fe:2d:55:90:c9:82:df:5c:a4:aa:b7:3a:c1:fd:af:de:a3:5b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A Validity Not Before: Jan 24 00:57:01 2026 GMT Not After : Jan 27 04:48:01 2026 GMT Subject: CN=FA91D022EEAEFD952DCBE902E7E5439E7886AC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:a6:e9:05:72:c4:e1:69:74:e6:0f:dc:20: 89:92:6c:f1:9b:3e:81:9b:9a:02:9d:cf:96:84:de: 70:b9:a0:36:3a:bc:0f:70:85:42:89:2c:cf:60:9f: 2b:0a:ac:cd:a6:07:6c:8b:11:98:ad:a5:6b:a4:30: b3:c0:15:fc:42:a3:c3:f9:d7:f4:41:bb:77:62:32: 69:24:c7:c7:87:ca:10:3f:f8:f0:b7:bb:4a:49:d4: 7e:cf:f8:a6:87:c3:69:d9:56:70:17:af:79:ee:cd: da:11:f2:5f:bb:28:5c:ef:0d:a2:88:d8:40:a2:25: 37:16:6a:23:b6:f6:ab:94:33:3f:25:af:43:cf:60: 5c:9c:02:b6:3f:1d:0e:80:53:09:87:aa:da:d7:b1: 99:93:ab:75:79:c2:82:a4:50:12:af:b8:32:a5:0c: 9c:18:76:94:74:a3:78:0a:cd:b3:3b:21:56:83:dd: 82:a4:d8:a1:9b:65:9e:ed:00:aa:5e:1e:2e:3c:30: 21:ef:33:86:66:8f:74:04:9e:af:e3:1b:62:20:00: 84:1d:b0:15:dd:5e:99:ea:7f:4f:5b:11:f2:cf:cf: 52:f0:d9:32:db:68:6f:ca:00:50:f0:cc:4f:3e:15: 3c:49:ff:f4:51:5d:9e:7b:24:3a:5f:d1:03:ee:f4: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:91:D0:22:EE:AE:FD:95:2D:CB:E9:02:E7:E5:43:9E:78:86:AC:03 X509v3 Authority Key Identifier: keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f5:1c:9c:ba:9b:54:8c:16:fa:d9:ef:8a:ef:51:0e:9b:6f: 25:a3:96:20:0e:3c:09:65:14:2b:c6:55:37:a6:dd:2d:33:13: a2:93:a6:78:78:22:54:ed:d1:39:2e:78:56:c9:7d:65:02:b3: 6b:74:20:79:24:d0:34:bb:d5:f1:73:c4:a7:48:3a:06:68:15: 6b:24:b9:d5:e1:b6:4d:fe:0f:16:2b:18:00:cb:51:23:fd:4f: f7:ee:f7:d8:b5:30:d1:e7:0a:71:04:9b:76:5f:b1:a2:f9:a1: 44:f0:95:03:89:f8:ae:a3:33:c6:ee:dc:46:04:47:a2:8d:99: 77:68:18:c4:65:85:1f:83:52:ce:f6:bf:b9:2b:19:27:d6:8e: 86:d7:99:c0:84:5d:02:f9:7d:c1:42:cb:de:cb:8a:cd:df:3e: a3:60:5d:71:cb:5e:f8:6c:be:d7:18:51:6f:fd:9a:a4:c7:a5: dc:11:5f:54:d8:b3:44:f8:69:c2:d9:0c:93:6f:b4:ac:d6:f6: bb:40:7b:df:03:e2:8c:a5:e4:ce:bd:1e:8c:d1:f8:e0:e6:dc: cc:88:ae:ad:84:8a:b8:1f:39:af:37:b0:67:75:eb:fc:76:ad: 03:2a:73:69:18:5e:1e:7a:49:aa:e9:3c:5f:50:2e:97:06:a1: 76:f4:93:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcf4tVZDJgt9cpKq3OsH9r96jW4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFB MzI2MUI4QTAeFw0yNjAxMjQwMDU3MDFaFw0yNjAxMjcwNDQ4MDFaMDMxMTAvBgNV BAMTKEZBOTFEMDIyRUVBRUZEOTUyRENCRTkwMkU3RTU0MzlFNzg4NkFDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb46bpBXLE4Wl05g/cIImSbPGb PoGbmgKdz5aE3nC5oDY6vA9whUKJLM9gnysKrM2mB2yLEZitpWukMLPAFfxCo8P5 1/RBu3diMmkkx8eHyhA/+PC3u0pJ1H7P+KaHw2nZVnAXr3nuzdoR8l+7KFzvDaKI 2ECiJTcWaiO29quUMz8lr0PPYFycArY/HQ6AUwmHqtrXsZmTq3V5woKkUBKvuDKl DJwYdpR0o3gKzbM7IVaD3YKk2KGbZZ7tAKpeHi48MCHvM4Zmj3QEnq/jG2IgAIQd sBXdXpnqf09bEfLPz1Lw2TLbaG/KAFDwzE8+FTxJ//RRXZ57JDpf0QPu9DOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+pHQIu6u/ZUty+kC5+VDnniGrAMwHwYDVR0j BBgwFoAUeY1wPBmpPk4Z9xYwTXjyCqMmG4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmVjMzVlZC0wZjM2LTQzZDctYjUzNy0wNmRiMzE0YzkwZDUvMC83OThENzAzQzE5 QTkzRTRFMTlGNzE2MzA0RDc4RjIwQUEzMjYxQjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFBMzI2 MUI4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZlYzM1ZWQtMGYzNi00M2Q3LWI1 MzctMDZkYjMxNGM5MGQ1LzAvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYy MEFBMzI2MUI4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr1HJy6m1SMFvrZ74rvUQ6bbyWjliAOPAll FCvGVTem3S0zE6KTpnh4IlTt0TkueFbJfWUCs2t0IHkk0DS71fFzxKdIOgZoFWsk udXhtk3+DxYrGADLUSP9T/fu99i1MNHnCnEEm3ZfsaL5oUTwlQOJ+K6jM8bu3EYE R6KNmXdoGMRlhR+DUs72v7krGSfWjobXmcCEXQL5fcFCy97Lis3fPqNgXXHLXvhs vtcYUW/9mqTHpdwRX1TYs0T4acLZDJNvtKzW9rtAe98D4oyl5M69HozR+ODm3MyI rq2EirgfOa83sGd16/x2rQMqc2kYXh56SarpPF9QLpcGoXb0k2Q= -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:06 2026 by rpki-client