This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft File: 7D9756BA26383A8A80C65F2856105B0FF5154379.mft (raw, json) Hash identifier: h/noI0h16L46FkSYy7JuWkAMcGdyK4X/09AimnOhirk= Subject key identifier: CD:8C:8A:B3:76:E3:3C:A2:CD:7C:87:0D:DB:3F:5E:F6:9F:86:17:0B Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79 Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379 Certificate serial: 5C4813027A0E586E199F4AFBDAC9B8225CEF2E98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft Manifest number: 01FD Signing time: Tue 06 Jan 2026 00:12:22 +0000 Manifest this update: Tue 06 Jan 2026 00:07:22 +0000 Manifest next update: Fri 09 Jan 2026 10:37:22 +0000 Files and hashes: 1: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks=) 2: 7D9756BA26383A8A80C65F2856105B0FF5154379.crl (hash: viqXYTP5SNAusETEqkdVy/mQ8LW62DfBE89a3dGdSvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 10:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:48:13:02:7a:0e:58:6e:19:9f:4a:fb:da:c9:b8:22:5c:ef:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379 Validity Not Before: Jan 6 00:07:22 2026 GMT Not After : Jan 9 10:37:22 2026 GMT Subject: CN=CD8C8AB376E33CA2CD7C870DDB3F5EF69F86170B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:a7:8d:0f:3d:ec:55:b5:c4:ac:cb:92:3c: c9:b4:15:0e:ad:34:5f:b7:8c:bf:fc:29:b1:72:33: 98:ae:2b:e1:27:40:7f:57:ac:ee:48:58:f6:3f:69: 84:e3:ab:67:d4:bd:37:28:ef:ab:d0:a7:72:fc:4c: 48:d2:db:66:6d:22:83:1a:96:46:52:e8:76:9e:1b: d0:dc:cc:bf:6c:a1:61:ba:27:96:72:12:8d:31:fd: e4:0c:3c:77:d8:c6:2d:ec:57:fc:1b:86:5f:0f:64: 09:71:f1:24:c5:e1:88:93:ac:22:ae:ad:48:6e:dc: c6:16:1b:5d:c9:9c:e9:ed:96:20:02:94:43:2d:f7: 1d:83:56:95:04:ae:e7:98:3a:07:a8:35:8e:43:c4: 34:7e:74:09:1b:22:8c:86:4f:cb:63:b3:7a:c0:bf: 6b:a5:e1:2b:f0:32:ce:a2:4d:6c:fc:ae:6e:a5:3e: 7a:2e:f9:54:a5:d2:7b:e5:02:35:1b:26:24:20:e3: 50:ed:15:59:2f:06:d4:1e:bc:4c:bd:8b:c4:67:d1: be:d9:1e:84:03:23:16:d4:3b:b8:3c:70:57:85:1b: ab:e4:4c:65:da:74:01:e0:f9:e9:aa:f1:e0:c0:13: 04:28:d6:a4:35:b2:80:9f:cb:0a:57:e6:24:52:cf: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8C:8A:B3:76:E3:3C:A2:CD:7C:87:0D:DB:3F:5E:F6:9F:86:17:0B X509v3 Authority Key Identifier: keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:33:b6:63:a6:9c:1f:47:ae:11:33:75:82:38:cf:93:bd:e3: 5c:4c:f9:82:81:9a:f8:52:f5:60:9e:34:1b:ba:b7:1c:ac:77: 87:29:cf:3f:2b:e1:bb:20:58:c3:28:d6:5c:de:05:c3:a8:ad: e5:de:59:00:52:ae:8b:53:79:3b:4b:39:80:46:af:93:f3:45: fe:02:39:0c:a7:c8:48:50:35:cf:7b:da:08:07:dc:47:7b:13: 92:a5:92:17:78:7a:fe:68:c2:23:83:de:0a:ad:8a:57:a0:26: 5e:b2:57:d0:ec:a7:8e:5b:a2:28:61:45:73:8a:13:91:3d:e4: ca:84:2a:c0:b3:85:fa:44:22:d3:80:19:81:1f:00:f0:19:8d: 30:ac:72:64:3c:90:cb:8e:7f:c9:62:b5:85:c0:13:f2:0f:86: 97:c3:5e:ae:5d:0f:5a:09:7e:bf:f1:d2:5d:ef:b6:55:b2:73: 2c:c3:2b:52:3a:60:85:8a:59:c5:b9:85:9a:8c:95:97:42:0d: 0f:bf:8a:a4:cb:57:d9:a9:9d:01:4a:f1:9d:1b:dd:81:35:8a: 95:a0:dd:1f:ec:a8:76:bd:f9:29:91:af:6e:ff:d1:88:4b:d4: 20:73:a2:f2:be:a7:0f:9c:a8:67:e1:6c:10:a0:c7:92:1d:e6: bd:c4:f5:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEgTAnoOWG4Zn0r72sm4IlzvLpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5NzU2QkEyNjM4M0E4QTgwQzY1RjI4NTYxMDVCMEZG NTE1NDM3OTAeFw0yNjAxMDYwMDA3MjJaFw0yNjAxMDkxMDM3MjJaMDMxMTAvBgNV BAMTKENEOEM4QUIzNzZFMzNDQTJDRDdDODcwRERCM0Y1RUY2OUY4NjE3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZaeNDz3sVbXErMuSPMm0FQ6t NF+3jL/8KbFyM5iuK+EnQH9XrO5IWPY/aYTjq2fUvTco76vQp3L8TEjS22ZtIoMa lkZS6HaeG9DczL9soWG6J5ZyEo0x/eQMPHfYxi3sV/wbhl8PZAlx8STF4YiTrCKu rUhu3MYWG13JnOntliAClEMt9x2DVpUErueYOgeoNY5DxDR+dAkbIoyGT8tjs3rA v2ul4SvwMs6iTWz8rm6lPnou+VSl0nvlAjUbJiQg41DtFVkvBtQevEy9i8Rn0b7Z HoQDIxbUO7g8cFeFG6vkTGXadAHg+emq8eDAEwQo1qQ1soCfywpX5iRSz+5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYyKs3bjPKLNfIcN2z9e9p+GFwswHwYDVR0j BBgwFoAUfZdWuiY4OoqAxl8oVhBbD/UVQ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzcxNDEyMi04NjBjLTQxNGUtYTY3YS02ODRhMWJlOTYwZGUvMC83RDk3NTZCQTI2 MzgzQThBODBDNjVGMjg1NjEwNUIwRkY1MTU0Mzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5NzU2QkEyNjM4M0E4QTgwQzY1RjI4NTYxMDVCMEZGNTE1 NDM3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM3MTQxMjItODYwYy00MTRlLWE2 N2EtNjg0YTFiZTk2MGRlLzAvN0Q5NzU2QkEyNjM4M0E4QTgwQzY1RjI4NTYxMDVC MEZGNTE1NDM3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcztmOmnB9HrhEzdYI4z5O941xM+YKBmvhS 9WCeNBu6txysd4cpzz8r4bsgWMMo1lzeBcOoreXeWQBSrotTeTtLOYBGr5PzRf4C OQynyEhQNc972ggH3Ed7E5Klkhd4ev5owiOD3gqtilegJl6yV9Dsp45boihhRXOK E5E95MqEKsCzhfpEItOAGYEfAPAZjTCscmQ8kMuOf8litYXAE/IPhpfDXq5dD1oJ fr/x0l3vtlWycyzDK1I6YIWKWcW5hZqMlZdCDQ+/iqTLV9mpnQFK8Z0b3YE1ipWg 3R/sqHa9+SmRr27/0YhL1CBzovK+pw+cqGfhbBCgx5Id5r3E9Y4= -----END CERTIFICATE-----Generated at Thu Jan 8 07:23:52 2026 by rpki-client