This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: 3Y/Z6631vjHO/zR8Q8ub4C3oxs/lfz+VrJfp2qQxve0= Subject key identifier: 90:9D:33:41:F7:99:6B:99:FB:E9:8C:75:A7:28:EA:65:28:B3:22:D4 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 76EE537A461B3307AACCAF248258B1A0D46A5B6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0257 Signing time: Sat 31 Jan 2026 16:11:21 +0000 Manifest this update: Sat 31 Jan 2026 16:06:21 +0000 Manifest next update: Tue 03 Feb 2026 18:18:21 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 2: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: 35nS32yJTNLhbcgUZmALVqr3JvPHwEeFfQkvwvwc4sA=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: BggS2kwrF1wot9/y3zRY32YXHPw5qTZ25TRQLtufFRk=) 4: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) 5: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) 6: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) 7: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: InGQY3MZTXdBzVl9f/6b6mok5SVj3un8F20uI5Xn2z0=) 8: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 9: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: t+7xr7Jyy6eQuSi3Iwo19gdtdnj/QQr4rzh2oE9JtQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ee:53:7a:46:1b:33:07:aa:cc:af:24:82:58:b1:a0:d4:6a:5b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Jan 31 16:06:21 2026 GMT Not After : Feb 3 18:18:21 2026 GMT Subject: CN=909D3341F7996B99FBE98C75A728EA6528B322D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:bb:ab:7e:6f:1f:f6:bd:0a:d1:b7:71:7d: d1:d9:53:a7:e0:12:38:04:47:1b:ef:e0:64:f4:67: 8c:97:53:bb:7b:68:3f:c8:18:a3:60:2b:7e:0e:0a: 2c:0b:e5:80:ac:46:c4:bb:bd:7b:d8:88:29:f4:f1: 50:b9:5c:7a:b7:c0:59:17:e6:53:ce:2b:d3:68:10: e0:1d:2a:72:96:c9:65:22:76:f2:06:ef:52:7c:f3: 4b:10:4c:e2:dc:76:3e:fb:b5:ba:10:07:b6:12:98: 0d:a3:7b:0d:18:04:67:1d:ca:be:11:15:32:31:65: 21:b2:48:95:9e:34:bf:ab:1b:97:e9:4f:71:90:f2: 7f:e1:b2:e1:68:59:d2:23:ab:fa:cc:4d:2a:34:60: 44:61:76:b0:dd:e9:ad:54:db:26:66:00:48:07:0b: e7:fd:43:c1:78:28:5f:d7:d3:71:23:4c:88:3f:0a: df:27:be:ed:17:46:0f:9f:19:74:e1:15:7a:3b:ed: 51:dd:43:53:ed:d7:d1:31:79:45:fa:38:94:26:d5: e8:6d:b0:4e:70:0a:32:f3:13:57:b4:41:0a:d9:ff: b9:c7:9b:03:12:14:80:2f:20:ac:41:cd:9b:04:90: c5:85:4c:55:bd:2c:d4:9a:a4:6a:32:2e:8d:84:61: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9D:33:41:F7:99:6B:99:FB:E9:8C:75:A7:28:EA:65:28:B3:22:D4 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7b:c3:e5:9e:d7:1d:be:67:d1:24:09:c6:10:07:c8:9b:9a: e6:a8:73:30:d6:e2:3e:c1:53:4a:60:32:f4:5a:31:f7:48:07: b4:9d:59:58:f0:08:9c:7d:8f:90:35:42:24:e7:13:20:42:34: cc:95:e3:02:b0:62:79:6c:13:0f:49:96:4c:f1:2c:1f:b3:8c: dc:3d:01:dd:d9:e3:5a:6c:5c:7c:2d:91:59:20:ba:c5:8f:58: 26:06:82:a8:ff:6e:60:a0:43:ef:67:29:df:71:db:bc:55:51: c6:38:f7:05:94:4c:ed:b6:a6:f8:a4:03:4f:0e:1d:55:63:69: eb:f4:0f:87:fb:c8:81:ed:0e:a8:ce:02:59:d4:a9:9d:b6:71: ef:01:0d:3c:76:8e:b5:cc:40:ef:d5:9b:67:e7:2b:68:37:87: cc:2e:02:bb:bc:0d:52:e9:f2:32:ea:1b:96:4f:03:7f:25:19: 49:59:1d:dc:3c:83:9f:b6:d3:c9:26:af:1b:a7:23:66:36:87: e0:89:5f:94:9b:e9:a5:61:28:7d:19:24:a3:be:b4:09:f0:78: 90:67:e1:1c:bf:84:30:90:30:7b:2d:47:10:e2:ae:b8:41:22: fc:e4:54:6b:08:a0:bf:0d:61:24:97:c6:12:4f:ee:5b:b2:1e: f9:04:23:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdu5TekYbMweqzK8kglixoNRqW2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNjAxMzExNjA2MjFaFw0yNjAyMDMxODE4MjFaMDMxMTAvBgNV BAMTKDkwOUQzMzQxRjc5OTZCOTlGQkU5OEM3NUE3MjhFQTY1MjhCMzIyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbP7urfm8f9r0K0bdxfdHZU6fg EjgERxvv4GT0Z4yXU7t7aD/IGKNgK34OCiwL5YCsRsS7vXvYiCn08VC5XHq3wFkX 5lPOK9NoEOAdKnKWyWUidvIG71J880sQTOLcdj77tboQB7YSmA2jew0YBGcdyr4R FTIxZSGySJWeNL+rG5fpT3GQ8n/hsuFoWdIjq/rMTSo0YERhdrDd6a1U2yZmAEgH C+f9Q8F4KF/X03EjTIg/Ct8nvu0XRg+fGXThFXo77VHdQ1Pt19ExeUX6OJQm1eht sE5wCjLzE1e0QQrZ/7nHmwMSFIAvIKxBzZsEkMWFTFW9LNSapGoyLo2EYR0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJ0zQfeZa5n76Yx1pyjqZSizItQwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx7w+We1x2+Z9EkCcYQB8ibmuaoczDW4j7B U0pgMvRaMfdIB7SdWVjwCJx9j5A1QiTnEyBCNMyV4wKwYnlsEw9JlkzxLB+zjNw9 Ad3Z41psXHwtkVkgusWPWCYGgqj/bmCgQ+9nKd9x27xVUcY49wWUTO22pvikA08O HVVjaev0D4f7yIHtDqjOAlnUqZ22ce8BDTx2jrXMQO/Vm2fnK2g3h8wuAru8DVLp 8jLqG5ZPA38lGUlZHdw8g5+208kmrxunI2Y2h+CJX5Sb6aVhKH0ZJKO+tAnweJBn 4Ry/hDCQMHstRxDirrhBIvzkVGsIoL8NYSSXxhJP7luyHvkEI2U= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:25 2026 by rpki-client