This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: aQbho2uCUJlW/H8ZZb395cle7z1VwR2+yB8u+Qv9CnA= Subject key identifier: 77:F0:F7:0B:9B:64:47:DB:79:5F:15:55:69:1F:31:4D:19:7E:CD:85 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 288F68D3BAAA0E42337101AB3B0C84CA79CCC4A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0545 Signing time: Sat 31 Jan 2026 09:53:13 +0000 Manifest this update: Sat 31 Jan 2026 09:48:13 +0000 Manifest next update: Tue 03 Feb 2026 20:12:13 +0000 Files and hashes: 1: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 2: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 3: 3130332e31392e35362e302f32322d3232203d3e20313332363337.roa (hash: nNWu0/8/Y5E5+PXCyMclVWwSb+pcTn695z1dKn4epRk=) 4: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: eHpUWpQ3dMrnaAYsBTsXJTEnsirBWqBgZFWEhXQfWyE=) 5: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 6: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) 7: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8f:68:d3:ba:aa:0e:42:33:71:01:ab:3b:0c:84:ca:79:cc:c4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jan 31 09:48:13 2026 GMT Not After : Feb 3 20:12:13 2026 GMT Subject: CN=77F0F70B9B6447DB795F1555691F314D197ECD85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:2b:e0:02:44:b8:e3:27:d7:c6:21:06:12: ab:62:57:8e:9f:64:7e:88:25:01:f5:78:f2:b4:e7: 14:d7:bb:e7:17:6e:7c:b5:3c:08:c1:a7:b6:87:0b: 39:a5:c8:de:9d:90:25:51:09:ec:6b:05:d7:81:6f: e9:3f:ab:42:b5:4d:53:b1:39:27:9b:22:58:a6:ab: d8:e6:cc:83:eb:53:ef:33:69:39:80:70:e3:f6:6e: f8:1a:a9:4d:d1:98:59:d9:06:97:c8:4a:07:69:26: 47:30:32:b0:10:59:d7:36:76:bd:89:aa:4f:6e:36: 21:23:cf:18:de:02:dc:bb:e6:1e:d3:48:f8:2e:ee: 1f:bf:67:1c:d5:bb:0f:3e:4b:47:3c:92:a6:0c:45: 71:37:05:18:3a:07:d9:10:71:5e:17:6d:dc:79:a7: ae:17:39:af:4b:2b:2e:a9:f9:aa:23:8c:38:95:e0: 83:61:7e:74:ac:60:ba:d3:79:03:2b:c0:c6:ed:f6: 1a:bb:ca:05:00:bd:86:81:8f:4a:69:c2:56:7a:9c: 36:0c:48:8e:e9:19:ce:a1:e7:41:16:ee:12:a6:d6: fd:91:89:97:a3:7f:52:85:89:c7:1d:f0:d4:5e:ad: ea:9f:6f:88:4c:18:c0:a8:92:6e:e3:39:e7:bd:11: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F0:F7:0B:9B:64:47:DB:79:5F:15:55:69:1F:31:4D:19:7E:CD:85 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0c:fa:bc:c6:54:b1:a9:d4:1c:3f:b3:40:85:8d:03:9b:fc: db:b6:38:45:48:b3:4f:6d:ee:e5:69:ef:58:f9:cf:13:dc:43: 72:de:bb:8b:1c:6d:a1:72:a5:a7:91:f2:af:4a:15:d7:76:36: 68:db:26:47:bb:c2:37:4f:91:22:50:7a:be:45:5d:f9:b7:2a: 39:08:89:e4:1e:f4:11:f0:fe:6a:cf:87:bc:5a:e2:45:dc:9b: 6e:11:a7:cc:4e:c6:97:15:b7:88:08:eb:84:07:bc:84:7c:d6: 0b:9b:20:24:c9:fb:12:63:08:d1:0b:5d:eb:29:81:a8:1b:87: fe:13:e7:c5:22:87:c1:d6:9b:71:89:de:e1:2f:fb:7d:05:99: e0:12:22:ea:fb:ea:ac:ce:a6:86:2c:29:57:4b:90:51:e3:34: 12:cd:5a:0a:f4:9f:35:5f:4a:a8:2a:f3:a4:1f:68:24:e7:f9: cc:7b:b1:b7:62:27:74:50:6d:5d:cc:c9:67:b9:fd:f1:ed:11: 68:56:c6:97:11:de:1b:ba:96:1c:11:8e:1a:5c:24:2c:65:e5: 07:ba:0e:c4:a7:9a:8c:45:73:e8:0a:bd:47:4c:59:c7:06:4e: 56:db:51:2e:e1:0c:3a:bc:1c:79:25:51:f0:39:42:a4:bd:5a: c3:89:f9:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKI9o07qqDkIzcQGrOwyEynnMxKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNjAxMzEwOTQ4MTNaFw0yNjAyMDMyMDEyMTNaMDMxMTAvBgNV BAMTKDc3RjBGNzBCOUI2NDQ3REI3OTVGMTU1NTY5MUYzMTREMTk3RUNEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eSvgAkS44yfXxiEGEqtiV46f ZH6IJQH1ePK05xTXu+cXbny1PAjBp7aHCzmlyN6dkCVRCexrBdeBb+k/q0K1TVOx OSebIlimq9jmzIPrU+8zaTmAcOP2bvgaqU3RmFnZBpfISgdpJkcwMrAQWdc2dr2J qk9uNiEjzxjeAty75h7TSPgu7h+/ZxzVuw8+S0c8kqYMRXE3BRg6B9kQcV4Xbdx5 p64XOa9LKy6p+aojjDiV4INhfnSsYLrTeQMrwMbt9hq7ygUAvYaBj0ppwlZ6nDYM SI7pGc6h50EW7hKm1v2RiZejf1KFiccd8NRereqfb4hMGMCokm7jOee9EZ4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/D3C5tkR9t5XxVVaR8xTRl+zYUwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcM+rzGVLGp1Bw/s0CFjQOb/Nu2OEVIs09t 7uVp71j5zxPcQ3Leu4scbaFypaeR8q9KFdd2NmjbJke7wjdPkSJQer5FXfm3KjkI ieQe9BHw/mrPh7xa4kXcm24Rp8xOxpcVt4gI64QHvIR81gubICTJ+xJjCNELXesp gagbh/4T58Uih8HWm3GJ3uEv+30FmeASIur76qzOpoYsKVdLkFHjNBLNWgr0nzVf Sqgq86QfaCTn+cx7sbdiJ3RQbV3MyWe5/fHtEWhWxpcR3hu6lhwRjhpcJCxl5Qe6 DsSnmoxFc+gKvUdMWccGTlbbUS7hDDq8HHklUfA5QqS9WsOJ+XY= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:02 2026 by rpki-client