This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: wuDrCjC0Hq5VENg/ikiZ8mLRpQbT0x5yPfy/P36y2Lk= Subject key identifier: 72:AF:86:F3:93:7A:53:47:DD:A7:4D:C8:D6:CF:EB:78:D7:45:79:4B Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 490074991B908E4115F611432F7906A7810625C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 014D Signing time: Sat 31 Jan 2026 13:21:05 +0000 Manifest this update: Sat 31 Jan 2026 13:16:05 +0000 Manifest next update: Tue 03 Feb 2026 17:40:05 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: uYubPbC4ego3s8benPJRZp/xT23BzEd+oLaWFx429HE=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:00:74:99:1b:90:8e:41:15:f6:11:43:2f:79:06:a7:81:06:25:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Jan 31 13:16:05 2026 GMT Not After : Feb 3 17:40:05 2026 GMT Subject: CN=72AF86F3937A5347DDA74DC8D6CFEB78D745794B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:80:bc:1c:59:4c:31:59:c3:d2:83:25:6f: 2f:00:bf:37:1c:66:93:81:98:9a:52:a6:d3:6d:60: 34:bf:7d:d6:d3:bd:fc:88:29:8e:68:9a:76:ec:3e: 07:84:bd:f2:b6:0b:74:dd:6f:64:8d:66:f1:71:1a: bd:82:00:a6:cf:6c:d4:7a:ec:49:67:77:75:32:ff: 18:be:76:05:d0:48:3e:55:e2:3f:c4:bc:69:c6:8b: e5:42:a6:ef:29:59:61:e9:8e:1a:2a:31:1e:0f:80: d6:62:11:9c:f4:e3:b5:43:4c:55:85:d2:11:21:ef: d9:61:f9:59:9d:59:10:7b:bc:3f:6f:af:1d:b1:a3: 6c:d0:03:60:84:87:05:4c:e8:72:c2:67:03:5e:46: ca:4c:d9:31:4e:0f:5b:d2:bb:5d:a0:e4:98:c1:4b: 14:90:98:6e:5d:56:c0:cb:34:b0:24:aa:32:0c:27: 8b:d5:fa:07:60:d8:20:4a:a3:97:0d:c9:b7:cd:53: f7:44:1d:91:97:53:93:fc:79:1e:23:0e:ba:0c:64: c9:8d:f7:4c:94:15:ad:21:de:a6:bf:16:89:20:a4: 19:4b:ff:4c:71:be:69:b1:13:3c:61:d7:1f:55:ae: 79:2c:3b:8f:bd:a2:a6:f1:6d:8f:ef:24:57:66:ec: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:86:F3:93:7A:53:47:DD:A7:4D:C8:D6:CF:EB:78:D7:45:79:4B X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7a:34:8c:0a:52:09:d3:c7:33:d3:55:fa:17:db:93:7b:f8: 87:62:67:ff:ee:09:8a:06:4e:fa:8c:28:92:1a:22:85:9c:04: 3a:51:54:b2:17:ab:12:94:ca:77:5d:6d:b0:42:8a:c5:2f:06: 8f:ee:92:0d:f9:df:27:32:dd:c2:21:23:bc:f7:36:08:04:43: 8b:52:16:dc:22:d0:a0:e1:2a:c9:96:bd:97:be:4f:0f:d6:bc: 7e:04:b2:03:e9:1e:68:0d:bb:63:ee:65:21:21:97:85:56:9f: 63:f5:a5:4e:2d:27:dd:e3:ed:89:b3:79:2f:4f:e0:93:1a:fd: f9:1c:6e:47:bb:ee:a1:80:87:4f:67:2a:0c:68:27:d7:dc:a4: 75:33:78:bd:d6:b9:27:34:fd:08:72:dd:24:3b:b7:c7:57:b8: 89:4d:fb:9a:48:57:f8:87:04:9d:96:4a:fb:3c:37:45:5e:e4: 44:5c:3c:37:9e:92:04:d0:fd:a6:0b:a8:08:90:83:a9:48:4f: 33:5d:3d:00:5c:32:c0:98:80:83:aa:63:72:92:73:91:ef:68: 75:b8:8b:b9:ec:bb:95:98:d3:57:6a:df:80:a9:75:a8:68:ba: 31:f9:e9:59:a2:84:e6:44:0a:3b:31:b4:55:a6:ed:c8:52:90: b6:83:58:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQB0mRuQjkEV9hFDL3kGp4EGJcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNjAxMzExMzE2MDVaFw0yNjAyMDMxNzQwMDVaMDMxMTAvBgNV BAMTKDcyQUY4NkYzOTM3QTUzNDdEREE3NERDOEQ2Q0ZFQjc4RDc0NTc5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlo4C8HFlMMVnD0oMlby8Avzcc ZpOBmJpSptNtYDS/fdbTvfyIKY5omnbsPgeEvfK2C3Tdb2SNZvFxGr2CAKbPbNR6 7Elnd3Uy/xi+dgXQSD5V4j/EvGnGi+VCpu8pWWHpjhoqMR4PgNZiEZz047VDTFWF 0hEh79lh+VmdWRB7vD9vrx2xo2zQA2CEhwVM6HLCZwNeRspM2TFOD1vSu12g5JjB SxSQmG5dVsDLNLAkqjIMJ4vV+gdg2CBKo5cNybfNU/dEHZGXU5P8eR4jDroMZMmN 90yUFa0h3qa/FokgpBlL/0xxvmmxEzxh1x9VrnksO4+9oqbxbY/vJFdm7MjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcq+G85N6U0fdp03I1s/reNdFeUswHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZ6NIwKUgnTxzPTVfoX25N7+IdiZ//uCYoG TvqMKJIaIoWcBDpRVLIXqxKUynddbbBCisUvBo/ukg353ycy3cIhI7z3NggEQ4tS Ftwi0KDhKsmWvZe+Tw/WvH4EsgPpHmgNu2PuZSEhl4VWn2P1pU4tJ93j7YmzeS9P 4JMa/fkcbke77qGAh09nKgxoJ9fcpHUzeL3WuSc0/Qhy3SQ7t8dXuIlN+5pIV/iH BJ2WSvs8N0Ve5ERcPDeekgTQ/aYLqAiQg6lITzNdPQBcMsCYgIOqY3KSc5HvaHW4 i7nsu5WY01dq34CpdahoujH56VmihOZECjsxtFWm7chSkLaDWIs= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:12 2026 by rpki-client