This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: mZLo5nJ9OLAWUqKxfskHibl6sC8qh2QnARqTZ5+E20M= Subject key identifier: 5C:21:B3:27:BE:37:A5:61:9F:CD:3A:D8:12:35:CA:1A:06:7C:86:62 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 0CAB25AD42D54D8E9A11336EC273F548D53D47EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 0173 Signing time: Sat 24 Jan 2026 02:32:45 +0000 Manifest this update: Sat 24 Jan 2026 02:27:45 +0000 Manifest next update: Tue 27 Jan 2026 12:05:45 +0000 Files and hashes: 1: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) 2: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) 3: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: uMHmMFwTrGdG2i6SaH3tPD3l7m7ZnVM7o/WleK2FD24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ab:25:ad:42:d5:4d:8e:9a:11:33:6e:c2:73:f5:48:d5:3d:47:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Jan 24 02:27:45 2026 GMT Not After : Jan 27 12:05:45 2026 GMT Subject: CN=5C21B327BE37A5619FCD3AD81235CA1A067C8662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:57:53:e5:c0:fd:0b:56:fa:c4:5a:16:6c:97: 8c:cb:10:61:2b:34:13:d6:e5:94:67:37:70:d6:29: e6:45:60:1f:f5:73:7a:b8:56:55:6c:92:2d:b0:0d: 5b:53:a8:86:83:3e:a7:29:7f:a1:43:42:49:3f:54: d4:49:ed:48:0e:09:23:fc:38:be:f1:9c:40:00:93: b7:49:a3:8b:d6:63:12:c2:9a:cb:e5:86:f5:4e:99: ff:34:e5:9d:42:b7:fa:ad:46:d3:55:51:4a:f4:bc: e4:47:b0:6f:50:43:bb:23:0d:70:18:17:ba:30:8d: 4c:ab:63:bb:74:7f:c7:0e:f5:72:88:ef:88:6a:ca: 28:0e:93:49:36:2e:f7:52:25:ff:d5:9d:8c:41:ff: de:67:20:a7:f6:d6:5e:eb:7b:46:1f:ba:f9:38:cb: 0e:67:d2:67:75:ee:d2:68:87:d2:85:98:fd:26:5d: 08:d5:56:01:b4:47:f8:32:56:66:8d:41:5e:3f:5e: 63:a8:9f:e4:42:21:27:00:12:84:2e:84:00:d1:37: 6e:45:a5:23:79:f0:11:76:ea:02:d7:49:64:c2:2b: fc:48:fb:b6:e5:33:8a:19:b9:01:46:c3:d8:41:02: 34:cc:c5:08:8f:63:94:d6:c6:8c:22:89:2e:c0:d8: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:B3:27:BE:37:A5:61:9F:CD:3A:D8:12:35:CA:1A:06:7C:86:62 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:27:20:7f:16:85:d0:46:f3:69:81:61:f7:43:4b:6e:97:cf: 42:7d:36:30:10:e4:42:c8:c6:90:9c:c8:77:8e:e9:45:30:62: 31:77:10:33:18:50:24:b4:46:7e:1c:95:09:82:17:41:b7:d5: 93:91:cc:cf:d7:d0:12:be:76:51:66:84:ca:5f:98:05:a3:c5: 2c:b8:89:62:d5:95:ef:e4:66:4f:3d:9e:2d:37:9e:74:9c:d5: e1:c6:49:19:27:ac:a9:5e:88:5e:09:e2:35:85:5f:06:70:cc: a4:72:8c:6f:c0:bb:9e:d6:7b:20:28:83:2c:81:d8:25:d8:9c: ae:fb:27:99:b8:88:b7:52:6a:0d:28:e4:69:89:63:37:52:75: c7:37:63:27:a8:e8:f3:37:1f:61:a7:63:6d:ed:97:0e:99:a7: 2d:6a:64:71:ed:f5:90:b9:e7:fc:2c:2b:50:83:54:99:cc:83: 8d:b2:c1:24:12:40:93:d8:f9:ee:06:18:16:0e:44:a9:1e:3c: 57:73:14:61:b8:72:1e:b9:ea:07:2e:c6:8a:5d:0c:f2:71:ed: f9:87:06:ca:5c:40:64:f1:42:0d:4b:3f:8d:63:7f:0b:8a:a8: 9c:a9:52:cf:5a:f8:e4:d7:15:e4:51:f5:b8:78:f9:07:6d:d9: ab:9e:c1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKslrULVTY6aETNuwnP1SNU9R+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNjAxMjQwMjI3NDVaFw0yNjAxMjcxMjA1NDVaMDMxMTAvBgNV BAMTKDVDMjFCMzI3QkUzN0E1NjE5RkNEM0FEODEyMzVDQTFBMDY3Qzg2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaV1PlwP0LVvrEWhZsl4zLEGEr NBPW5ZRnN3DWKeZFYB/1c3q4VlVski2wDVtTqIaDPqcpf6FDQkk/VNRJ7UgOCSP8 OL7xnEAAk7dJo4vWYxLCmsvlhvVOmf805Z1Ct/qtRtNVUUr0vORHsG9QQ7sjDXAY F7owjUyrY7t0f8cO9XKI74hqyigOk0k2LvdSJf/VnYxB/95nIKf21l7re0Yfuvk4 yw5n0md17tJoh9KFmP0mXQjVVgG0R/gyVmaNQV4/XmOon+RCIScAEoQuhADRN25F pSN58BF26gLXSWTCK/xI+7blM4oZuQFGw9hBAjTMxQiPY5TWxowiiS7A2NIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCGzJ743pWGfzTrYEjXKGgZ8hmIwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEnIH8WhdBG82mBYfdDS26Xz0J9NjAQ5ELI xpCcyHeO6UUwYjF3EDMYUCS0Rn4clQmCF0G31ZORzM/X0BK+dlFmhMpfmAWjxSy4 iWLVle/kZk89ni03nnSc1eHGSRknrKleiF4J4jWFXwZwzKRyjG/Au57WeyAogyyB 2CXYnK77J5m4iLdSag0o5GmJYzdSdcc3Yyeo6PM3H2GnY23tlw6Zpy1qZHHt9ZC5 5/wsK1CDVJnMg42ywSQSQJPY+e4GGBYORKkePFdzFGG4ch656gcuxopdDPJx7fmH BspcQGTxQg1LP41jfwuKqJypUs9a+OTXFeRR9bh4+Qdt2auewZc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:17:01 2026 by rpki-client