This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: Ik6OhI1o0ZCmgn2w4ygVDOs3mUlB0FKoLB4Tbjf2shY= Subject key identifier: 3D:88:33:6D:08:E6:1A:0F:69:A6:0F:A8:4F:00:7D:56:C4:4F:FA:06 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 0B9802FF760ED4883944ED8CA3C45F3595A5EAEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 0162 Signing time: Fri 09 Jan 2026 12:02:15 +0000 Manifest this update: Fri 09 Jan 2026 11:57:15 +0000 Manifest next update: Mon 12 Jan 2026 17:38:15 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 2: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: wIJYo2d4syeJs3eheos61cifKM4nox77U4jyIblWa5Q=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: gvo9V/vnXO5MlNpk1yPiU+0sBfoU6SAVYrLdM0QnX0Q=) 4: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 17:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:98:02:ff:76:0e:d4:88:39:44:ed:8c:a3:c4:5f:35:95:a5:ea:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Jan 9 11:57:15 2026 GMT Not After : Jan 12 17:38:15 2026 GMT Subject: CN=3D88336D08E61A0F69A60FA84F007D56C44FFA06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:4c:a7:ba:ad:74:7d:f0:bb:eb:74:f1:70: ec:a2:39:67:b2:72:0e:3a:c0:b6:56:a5:21:8e:13: bb:a4:08:dd:a2:63:1a:15:9f:5a:69:e3:b1:b5:df: 57:4e:7c:ec:2b:f3:67:bc:90:17:46:8f:28:b3:f9: 74:47:32:38:6b:82:a0:56:6f:ea:62:8c:60:e3:9a: 9a:05:5d:1f:b4:f7:0f:fb:67:3f:d0:06:87:ef:2a: 58:be:61:19:d5:97:0c:10:ea:0e:ff:e5:d9:07:c2: e1:a0:aa:c0:9d:9e:62:07:51:4d:43:93:c9:d7:18: 2f:20:71:e5:f2:58:f0:a3:71:b7:2b:05:0f:a1:c0: 54:81:4e:c2:74:95:5e:cf:12:2c:2f:a2:ba:96:ec: bf:a2:19:62:9f:77:63:dd:65:68:5a:6e:26:b2:47: ba:c2:9e:dc:6b:a7:2a:06:8f:be:38:a5:61:d4:5c: 69:e3:f1:1f:1a:d2:9b:2a:86:08:9a:31:21:2a:89: c4:a8:bd:4e:95:42:78:f1:51:cc:c1:4f:61:a5:c2: fe:5a:e7:d2:71:43:13:f4:48:1e:69:bf:fb:e2:bb: ea:f6:81:ff:1e:c1:6c:d1:f7:18:ec:26:37:b9:68: 3f:74:df:62:bb:ca:4e:a2:aa:85:0d:18:d9:f1:7e: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:33:6D:08:E6:1A:0F:69:A6:0F:A8:4F:00:7D:56:C4:4F:FA:06 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:24:23:d3:8f:25:4e:4d:ad:06:0e:2d:87:a6:a0:c5:04:2c: 0e:f0:51:40:88:6f:bf:f2:f2:d5:64:8c:85:c9:a0:51:79:a1: f1:1a:14:6e:2f:24:1e:0b:c0:f5:ba:f8:f8:d3:f7:d1:59:69: e6:9a:55:89:12:3e:c1:6c:ec:a5:f3:f3:b4:48:a6:47:87:11: 1e:be:61:14:9f:0d:a6:11:97:87:89:21:14:79:af:94:d8:96: bf:05:15:b5:cb:1f:ef:35:2f:9f:60:13:f5:c7:3e:57:ed:a2: ba:ed:20:6a:89:d0:76:81:35:e9:c5:13:e7:99:3f:22:6f:ac: 52:0a:c3:21:79:bb:6c:6e:34:2d:08:81:b4:a2:df:98:c6:87: cf:71:43:db:5e:dc:dd:eb:ea:4e:5f:c1:ad:28:4d:f3:34:98: 32:fa:7e:91:3e:8b:37:68:92:49:01:b6:89:48:7a:f1:bb:0f: c5:44:84:bc:84:08:07:70:d3:99:87:b8:de:d9:95:96:63:3d: 2e:3c:33:77:19:ad:54:d1:10:09:73:a4:99:e5:68:7e:cc:76: 2b:1a:15:26:b2:79:08:8d:53:d6:a0:ee:19:f4:e2:b2:37:be: c6:90:a4:27:7d:4b:7c:72:4c:17:18:30:79:92:cc:7b:29:e1: ec:74:35:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5gC/3YO1Ig5RO2Mo8RfNZWl6uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNjAxMDkxMTU3MTVaFw0yNjAxMTIxNzM4MTVaMDMxMTAvBgNV BAMTKDNEODgzMzZEMDhFNjFBMEY2OUE2MEZBODRGMDA3RDU2QzQ0RkZBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFkynuq10ffC763TxcOyiOWey cg46wLZWpSGOE7ukCN2iYxoVn1pp47G131dOfOwr82e8kBdGjyiz+XRHMjhrgqBW b+pijGDjmpoFXR+09w/7Zz/QBofvKli+YRnVlwwQ6g7/5dkHwuGgqsCdnmIHUU1D k8nXGC8gceXyWPCjcbcrBQ+hwFSBTsJ0lV7PEiwvorqW7L+iGWKfd2PdZWhabiay R7rCntxrpyoGj744pWHUXGnj8R8a0psqhgiaMSEqicSovU6VQnjxUczBT2Glwv5a 59JxQxP0SB5pv/viu+r2gf8ewWzR9xjsJje5aD9032K7yk6iqoUNGNnxfnhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYgzbQjmGg9ppg+oTwB9VsRP+gYwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMkI9OPJU5NrQYOLYemoMUELA7wUUCIb7/y 8tVkjIXJoFF5ofEaFG4vJB4LwPW6+PjT99FZaeaaVYkSPsFs7KXz87RIpkeHER6+ YRSfDaYRl4eJIRR5r5TYlr8FFbXLH+81L59gE/XHPlftorrtIGqJ0HaBNenFE+eZ PyJvrFIKwyF5u2xuNC0IgbSi35jGh89xQ9te3N3r6k5fwa0oTfM0mDL6fpE+izdo kkkBtolIevG7D8VEhLyECAdw05mHuN7ZlZZjPS48M3cZrVTREAlzpJnlaH7Mdisa FSayeQiNU9ag7hn04rI3vsaQpCd9S3xyTBcYMHmSzHsp4ex0NXE= -----END CERTIFICATE-----Generated at Fri Jan 9 18:27:48 2026 by rpki-client