This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: you1b7XyKONtpUF9T8xzWRy7h0dDToj2fS0WNhuXBKI= Subject key identifier: 61:BD:B7:85:44:0C:00:ED:99:86:59:24:58:FD:18:5E:E2:39:D2:51 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 43F3C1B96AD0055D40020551A53CB361EFD93F25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 0169 Signing time: Fri 23 Jan 2026 20:21:33 +0000 Manifest this update: Fri 23 Jan 2026 20:16:33 +0000 Manifest next update: Mon 26 Jan 2026 21:28:33 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: NWx313Eak6ryGXrEQpkxOKGoXHPpAIUkV1kgoiWIcbI=) 2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: 8BRGIjefty8sLc1ZfWkrubhQIyt7J7+He/FXFv8R2Vs=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: qJyum2At3OQ0/Mui5d66zUzvrRUlMyLgYJNLgluGsro=) 4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: KanSX4vh3hQZ/kVDwjgRfda8W+2jUMG1JE+JsW7DEIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f3:c1:b9:6a:d0:05:5d:40:02:05:51:a5:3c:b3:61:ef:d9:3f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Jan 23 20:16:33 2026 GMT Not After : Jan 26 21:28:33 2026 GMT Subject: CN=61BDB785440C00ED9986592458FD185EE239D251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:57:25:99:a5:a5:ee:36:b3:ac:2d:a2:16: 7e:45:33:aa:22:82:9d:05:1a:36:be:be:83:f2:d2: 2e:ce:a2:74:91:12:94:87:f1:cb:0c:d6:1c:ff:3f: 4c:10:f2:65:23:fd:51:eb:18:0a:8d:ca:a2:01:80: 9e:48:04:bd:89:12:3a:ef:0f:3f:80:59:ac:4d:01: c8:a7:fe:fc:1c:c3:34:63:5b:71:99:2b:17:7d:7a: ce:d2:c1:b2:1b:01:fa:89:d6:a2:70:ac:ec:04:59: fe:db:0b:05:3e:3d:47:61:49:9b:2d:6a:bf:1d:fe: 02:71:ae:51:97:56:44:52:c5:0e:44:9f:7e:ba:c8: 1b:07:b3:31:88:30:2b:80:ac:9c:cc:74:68:02:bd: 89:6c:58:c3:71:08:17:d4:d3:98:f7:8f:0a:b6:31: c0:34:1d:08:f1:ba:a8:5e:cb:7d:09:f5:06:cb:89: ce:37:a2:e2:ca:bf:f6:86:d6:bd:e5:78:a0:d9:23: 9d:8e:0a:68:81:16:a8:5b:cd:8b:bd:95:3d:5a:c9: 90:13:52:9c:bc:d8:a9:fa:88:26:7e:04:de:cf:42: 43:f6:46:44:32:92:a0:37:a9:34:ef:d9:ac:29:85: ec:15:d0:54:df:0a:02:a0:4a:86:c5:89:bd:02:7d: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BD:B7:85:44:0C:00:ED:99:86:59:24:58:FD:18:5E:E2:39:D2:51 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c8:58:b5:d1:aa:9b:29:2f:0b:05:4e:4d:0b:76:23:3d:d7: 62:de:63:27:f6:de:c2:18:66:67:a6:b1:29:d2:75:34:8f:ee: af:82:69:e6:d0:e6:dc:a3:be:88:53:9b:46:64:10:d3:bd:79: 4b:51:31:eb:23:3f:ad:ce:b5:0e:2f:48:3b:20:ba:57:85:a4: 85:35:44:02:ca:0f:29:d0:cb:da:1d:9b:f2:cc:85:ce:5e:a8: e6:b1:c6:31:17:6e:7a:91:12:a7:ba:fa:33:4c:67:d3:58:1e: c2:00:e0:69:89:d6:bf:69:f4:91:06:33:a4:14:d7:57:4c:e0: cf:2d:7a:a5:2a:38:ec:23:61:4a:3d:c1:8c:07:93:d8:0b:e7: 68:14:a4:e2:59:66:8b:71:87:57:bc:3a:da:f8:f1:a4:a4:9d: e2:d7:a4:58:b1:29:6c:3c:c8:03:da:a6:6a:b6:bf:4d:4a:4d: 61:f4:46:29:49:d9:5a:8c:61:c1:15:81:6c:d2:f7:cc:7d:46: dc:8d:ab:7f:29:6a:02:c1:51:24:48:8c:07:ba:34:75:25:04: d2:2e:06:68:d9:ce:d4:82:47:cb:33:0c:74:a1:70:07:a0:a3: e3:e6:28:17:a5:05:f9:64:1f:18:6c:55:7d:d6:78:95:94:4c: 1f:5c:c2:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/PBuWrQBV1AAgVRpTyzYe/ZPyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNjAxMjMyMDE2MzNaFw0yNjAxMjYyMTI4MzNaMDMxMTAvBgNV BAMTKDYxQkRCNzg1NDQwQzAwRUQ5OTg2NTkyNDU4RkQxODVFRTIzOUQyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGllclmaWl7jazrC2iFn5FM6oi gp0FGja+voPy0i7OonSREpSH8csM1hz/P0wQ8mUj/VHrGAqNyqIBgJ5IBL2JEjrv Dz+AWaxNAcin/vwcwzRjW3GZKxd9es7SwbIbAfqJ1qJwrOwEWf7bCwU+PUdhSZst ar8d/gJxrlGXVkRSxQ5En366yBsHszGIMCuArJzMdGgCvYlsWMNxCBfU05j3jwq2 McA0HQjxuqhey30J9QbLic43ouLKv/aG1r3leKDZI52OCmiBFqhbzYu9lT1ayZAT Upy82Kn6iCZ+BN7PQkP2RkQykqA3qTTv2awphewV0FTfCgKgSobFib0CfUwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYb23hUQMAO2ZhlkkWP0YXuI50lEwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjIWLXRqpspLwsFTk0LdiM912LeYyf23sIY ZmemsSnSdTSP7q+CaebQ5tyjvohTm0ZkENO9eUtRMesjP63OtQ4vSDsguleFpIU1 RALKDynQy9odm/LMhc5eqOaxxjEXbnqREqe6+jNMZ9NYHsIA4GmJ1r9p9JEGM6QU 11dM4M8teqUqOOwjYUo9wYwHk9gL52gUpOJZZotxh1e8Otr48aSkneLXpFixKWw8 yAPapmq2v01KTWH0RilJ2VqMYcEVgWzS98x9RtyNq38pagLBUSRIjAe6NHUlBNIu BmjZztSCR8szDHShcAego+PmKBelBflkHxhsVX3WeJWUTB9cwrw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:23 2026 by rpki-client