This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: 1DC2M/Pb9b7JjHFJ5F/zdrWyaf6JqlLPITpG2ycmhXM= Subject key identifier: 84:36:B4:DF:54:A5:27:3F:2D:DF:C7:A1:77:AD:F2:B3:B1:C9:42:A3 Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 6F613BECFFB3E0DD1ECF82127BAE1493E7E2C58C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01D9 Signing time: Fri 23 Jan 2026 20:52:26 +0000 Manifest this update: Fri 23 Jan 2026 20:47:26 +0000 Manifest next update: Tue 27 Jan 2026 02:17:26 +0000 Files and hashes: 1: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=) 2: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: ctQCT49zxaMgZl9l6aG7rXrqlbWqaAHYgopRTlsczkc=) 3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=) 4: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:61:3b:ec:ff:b3:e0:dd:1e:cf:82:12:7b:ae:14:93:e7:e2:c5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Jan 23 20:47:26 2026 GMT Not After : Jan 27 02:17:26 2026 GMT Subject: CN=8436B4DF54A5273F2DDFC7A177ADF2B3B1C942A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:7e:a7:1e:cf:9d:5e:07:d3:1b:87:ab:d1: d5:2e:71:01:c3:f5:d6:33:3b:93:d1:ea:04:96:eb: 25:1a:68:6b:84:14:0b:c8:b7:4b:6e:b3:25:98:c8: 9e:68:86:46:49:45:17:0b:f9:6b:73:12:82:df:bc: be:80:77:20:9c:bf:7c:0a:c5:25:dd:93:b2:ae:0b: cd:e1:2e:68:8b:ae:de:c4:f5:6f:5f:8b:64:38:aa: 48:27:f9:99:6c:17:3d:a6:30:5c:b5:89:7a:19:fa: 83:f5:48:43:db:2a:d8:61:8a:20:9f:00:34:0b:ca: 1e:ff:b3:ea:ca:a0:78:b9:73:96:04:06:f2:f9:09: d6:e4:c6:a5:6f:15:6d:d0:f0:0b:14:c5:c3:14:1f: 65:ee:b5:de:46:40:82:6b:6e:27:a1:1c:3c:fd:9d: 77:c0:8b:b1:50:b6:1f:7f:ee:d1:fc:34:55:e6:49: 7f:c3:ba:64:65:e0:c8:72:3f:a0:b3:1f:68:26:89: 8a:33:32:35:35:2b:4a:e7:32:9d:22:ee:c6:3d:70: ca:6f:30:8b:62:fa:15:18:14:ab:fa:35:7b:9d:ef: b3:23:41:61:80:71:0e:b5:e5:56:96:99:40:ec:e1: a9:a4:e5:ad:c4:b9:b5:be:1a:ec:46:65:c7:37:03: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:36:B4:DF:54:A5:27:3F:2D:DF:C7:A1:77:AD:F2:B3:B1:C9:42:A3 X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a8:63:8e:21:a3:f1:5b:85:db:4e:44:8b:5e:fc:7c:96:bd: d1:5e:69:bb:06:12:38:e9:77:c6:fd:f6:70:dc:10:25:c7:de: 58:a1:62:cc:51:1c:7c:ad:48:69:92:2b:23:96:51:96:b2:a2: 64:d5:d8:e4:80:0a:31:3b:c1:9a:d1:be:48:27:7c:ea:a0:2e: 42:f0:d9:1b:5a:eb:29:16:12:e2:82:b3:61:8a:ae:d0:41:ef: ae:35:3f:e8:41:eb:ce:78:34:ca:32:94:02:9b:ac:da:dd:ec: 12:0e:0b:0e:9f:09:89:02:77:40:e0:1a:d4:dc:32:e2:22:2a: 60:5f:f6:41:84:c4:2b:1c:e2:bd:7d:be:4f:ab:70:e2:7c:79: a2:2f:ba:87:66:36:e0:91:a8:f2:22:be:56:07:24:01:9d:5e: 1b:68:8d:49:21:f3:f7:ed:36:32:a6:87:0d:ff:ce:e7:f4:24: 1c:ef:ad:46:01:f9:70:3e:1f:3c:db:ab:5d:15:d3:50:c5:0f: da:f7:51:31:18:34:be:18:9c:7f:de:3e:41:ad:54:d4:5c:5d: e8:15:9f:94:36:18:01:51:1f:64:d3:e8:3b:91:59:bd:f3:1d: e9:38:eb:55:a8:b7:29:fd:81:ed:5e:40:fd:f9:20:9c:26:b0: 3e:e4:2f:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2E77P+z4N0ez4ISe64Uk+fixYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNjAxMjMyMDQ3MjZaFw0yNjAxMjcwMjE3MjZaMDMxMTAvBgNV BAMTKDg0MzZCNERGNTRBNTI3M0YyRERGQzdBMTc3QURGMkIzQjFDOTQyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaLn6nHs+dXgfTG4er0dUucQHD 9dYzO5PR6gSW6yUaaGuEFAvIt0tusyWYyJ5ohkZJRRcL+WtzEoLfvL6AdyCcv3wK xSXdk7KuC83hLmiLrt7E9W9fi2Q4qkgn+ZlsFz2mMFy1iXoZ+oP1SEPbKthhiiCf ADQLyh7/s+rKoHi5c5YEBvL5CdbkxqVvFW3Q8AsUxcMUH2Xutd5GQIJrbiehHDz9 nXfAi7FQth9/7tH8NFXmSX/DumRl4MhyP6CzH2gmiYozMjU1K0rnMp0i7sY9cMpv MIti+hUYFKv6NXud77MjQWGAcQ615VaWmUDs4amk5a3EubW+GuxGZcc3A0UdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDa031SlJz8t38ehd63ys7HJQqMwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALioY44ho/FbhdtORIte/HyWvdFeabsGEjjp d8b99nDcECXH3lihYsxRHHytSGmSKyOWUZayomTV2OSACjE7wZrRvkgnfOqgLkLw 2Rta6ykWEuKCs2GKrtBB7641P+hB6854NMoylAKbrNrd7BIOCw6fCYkCd0DgGtTc MuIiKmBf9kGExCsc4r19vk+rcOJ8eaIvuodmNuCRqPIivlYHJAGdXhtojUkh8/ft NjKmhw3/zuf0JBzvrUYB+XA+Hzzbq10V01DFD9r3UTEYNL4YnH/ePkGtVNRcXegV n5Q2GAFRH2TT6DuRWb3zHek461Wotyn9ge1eQP35IJwmsD7kLxE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:35 2026 by rpki-client