This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: Max/YTM4pEytzW2J4kxKOeQH9uNm3sRqQPO27l05PCs= Subject key identifier: 28:2F:CE:4C:69:B3:DF:80:CE:4A:71:2A:E0:72:6B:60:82:09:F9:0E Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 60B6706D1DBD29337EBF8F40F77F65A6E728200E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 020B Signing time: Sun 25 Jan 2026 04:01:31 +0000 Manifest this update: Sun 25 Jan 2026 03:56:31 +0000 Manifest next update: Wed 28 Jan 2026 04:14:31 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: 2X4eg2/Aakdet4iGodXXmtiOi46SJ6hE8urNiz9LzpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b6:70:6d:1d:bd:29:33:7e:bf:8f:40:f7:7f:65:a6:e7:28:20:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Jan 25 03:56:31 2026 GMT Not After : Jan 28 04:14:31 2026 GMT Subject: CN=282FCE4C69B3DF80CE4A712AE0726B608209F90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:d0:05:88:6b:b7:97:4a:61:4d:c1:ab:a6: 1d:91:86:a1:49:4a:83:8f:81:30:c9:ae:19:48:3c: 4c:de:53:45:bf:8a:5b:60:43:2f:04:24:a7:af:0c: ee:68:7b:75:b0:0d:b6:ba:09:6d:d3:ad:be:74:0c: e0:58:ef:c8:e5:d0:28:ae:5e:de:2b:3d:26:64:75: 41:e2:d1:de:61:30:31:ea:e0:f1:4f:33:8e:b6:fb: 77:aa:90:d5:ee:0a:8a:fe:e4:4e:4a:f5:4b:1e:6a: e8:76:3d:f4:bd:a9:34:ce:26:23:33:53:66:45:44: 32:55:07:34:ca:7d:3a:e9:46:cd:61:24:b6:66:5a: 6b:27:24:31:fa:7b:ad:68:70:bd:ec:d2:e0:45:8b: c2:f2:a3:a6:2e:cd:98:81:db:6f:24:85:da:a3:74: 6b:f3:89:34:24:b9:f9:16:b8:15:b7:55:6b:8c:8c: 2d:7c:2f:3e:d3:76:ae:2f:1a:6a:ac:a8:a2:64:d8: 64:4d:a5:92:92:93:a4:7a:80:2d:d1:2e:44:7a:9e: 9d:75:a8:24:01:45:41:84:7f:b9:0c:e5:d9:74:ca: 95:c9:a2:47:d8:95:e9:6e:42:e0:f3:39:2f:d8:8a: 75:f7:e9:e6:4a:5a:f0:31:05:00:db:34:dc:76:77: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2F:CE:4C:69:B3:DF:80:CE:4A:71:2A:E0:72:6B:60:82:09:F9:0E X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e9:3b:44:78:e6:b3:3f:c0:eb:2a:45:95:77:66:f2:90:3c: 50:35:d9:28:a5:2b:00:65:7b:39:3b:cc:f4:03:27:a1:4d:74: 6c:8b:3d:22:43:45:4a:53:c8:de:c9:bf:d5:7a:52:14:85:fa: 24:5f:fb:27:f0:6d:11:7f:bd:28:c5:cd:18:a4:24:cc:16:0e: ba:b2:bd:b4:ba:82:77:6a:22:9a:ec:76:89:cb:e2:e8:47:48: c1:06:35:91:5f:49:0e:57:2f:ab:31:3d:05:6b:73:1a:15:96: d2:b8:48:8d:00:25:32:9d:7d:5a:4a:77:8d:d2:87:bc:af:c2: 34:46:d2:c6:20:7a:05:39:97:1e:84:78:79:35:24:6d:b1:19: 9f:46:ce:d4:5a:d2:9e:35:f6:98:85:9a:f3:d7:42:79:a9:0d: 1b:55:aa:78:1d:0b:be:70:ea:5d:d5:c6:d2:6e:7d:3e:f0:b9: 7d:c8:d4:e0:29:29:17:08:0d:25:20:2c:df:97:e0:52:f9:8f: b9:09:3f:b0:cf:51:9c:67:f8:d3:0e:a1:b2:78:34:e2:be:b7: c7:69:9a:6c:9d:2e:66:8f:a5:b2:13:55:5a:35:2f:14:1b:1c: c6:2c:bc:89:e5:91:5d:36:91:4e:5f:23:cc:4e:af:90:42:c8: 94:f1:c3:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLZwbR29KTN+v49A939lpucoIA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNjAxMjUwMzU2MzFaFw0yNjAxMjgwNDE0MzFaMDMxMTAvBgNV BAMTKDI4MkZDRTRDNjlCM0RGODBDRTRBNzEyQUUwNzI2QjYwODIwOUY5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSNAFiGu3l0phTcGrph2RhqFJ SoOPgTDJrhlIPEzeU0W/iltgQy8EJKevDO5oe3WwDba6CW3Trb50DOBY78jl0Ciu Xt4rPSZkdUHi0d5hMDHq4PFPM462+3eqkNXuCor+5E5K9Useauh2PfS9qTTOJiMz U2ZFRDJVBzTKfTrpRs1hJLZmWmsnJDH6e61ocL3s0uBFi8Lyo6YuzZiB228khdqj dGvziTQkufkWuBW3VWuMjC18Lz7Tdq4vGmqsqKJk2GRNpZKSk6R6gC3RLkR6np11 qCQBRUGEf7kM5dl0ypXJokfYleluQuDzOS/YinX36eZKWvAxBQDbNNx2d82jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKC/OTGmz34DOSnEq4HJrYIIJ+Q4wHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3pO0R45rM/wOsqRZV3ZvKQPFA12SilKwBl ezk7zPQDJ6FNdGyLPSJDRUpTyN7Jv9V6UhSF+iRf+yfwbRF/vSjFzRikJMwWDrqy vbS6gndqIprsdonL4uhHSMEGNZFfSQ5XL6sxPQVrcxoVltK4SI0AJTKdfVpKd43S h7yvwjRG0sYgegU5lx6EeHk1JG2xGZ9GztRa0p419piFmvPXQnmpDRtVqngdC75w 6l3VxtJufT7wuX3I1OApKRcIDSUgLN+X4FL5j7kJP7DPUZxn+NMOobJ4NOK+t8dp mmydLmaPpbITVVo1LxQbHMYsvInlkV02kU5fI8xOr5BCyJTxw/4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:56 2026 by rpki-client