This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: +hTppl8RowIDMdLn2s3tLy7Dk4ICL4gGGJ1PLRsf/AA= Subject key identifier: 64:62:C7:78:AE:17:D1:59:AC:B1:B6:1C:3B:F5:7E:A4:4B:12:36:D9 Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 3E253E48125E109E4DEF43C4B8A490163DE66446 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 9B Signing time: Sat 31 Jan 2026 11:51:24 +0000 Manifest this update: Sat 31 Jan 2026 11:46:24 +0000 Manifest next update: Tue 03 Feb 2026 23:09:24 +0000 Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: BzG6yaz8K9d2yaZJbxZR2wDQbC5lgAeoiJLMdERwWfo=) 2: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: abj3oafYtBjg/Y5cLMY/onWlFu1VFdav63iVmeXfjZk=) 3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 6dckKLb4IjoNupMYzivHBSbdaon1eSuU1MGkh5Rrhkk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 23:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:25:3e:48:12:5e:10:9e:4d:ef:43:c4:b8:a4:90:16:3d:e6:64:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Jan 31 11:46:24 2026 GMT Not After : Feb 3 23:09:24 2026 GMT Subject: CN=6462C778AE17D159ACB1B61C3BF57EA44B1236D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:34:62:7e:4e:b3:49:7a:85:ee:93:ae:10: 0f:a4:fa:b3:55:3c:c8:3b:3b:73:ba:2d:6b:2b:9b: 8b:d4:d5:44:b6:92:aa:27:35:16:da:22:1d:b0:16: ee:e5:c0:e0:19:0a:df:42:cf:58:25:12:d5:b1:f4: aa:0a:2d:fd:98:32:e3:3e:3a:c0:2e:0c:e5:0e:05: d7:a4:18:3b:58:14:b6:13:58:4d:f6:87:05:b6:b5: 56:0b:21:5f:f3:09:ab:39:42:3f:82:d7:21:f2:c9: ca:8e:d4:6e:ca:be:c4:eb:88:67:68:22:31:a7:b0: 9c:97:9c:b8:12:5c:c3:bb:ee:15:66:67:df:45:f3: d7:ce:43:b4:3f:99:bc:5c:ff:c7:fb:a9:30:8c:dc: 51:ca:9d:7c:0f:87:6e:c3:36:01:40:47:c0:4a:8b: b8:68:28:7b:37:04:7d:2a:35:84:12:c3:3a:2f:51: 1b:88:73:69:88:e7:18:f7:5f:e6:f5:f6:75:55:d8: 85:83:c7:dc:2f:f1:ab:61:e6:70:82:46:59:a9:6b: 2c:4e:c7:e0:b4:dc:7f:10:b5:d0:6e:83:59:fb:db: 27:b1:01:d2:aa:77:e7:34:45:ea:e9:35:33:fc:dc: 8d:0b:ff:65:c3:6d:05:8e:1e:b5:d6:4e:4a:d2:95: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:C7:78:AE:17:D1:59:AC:B1:B6:1C:3B:F5:7E:A4:4B:12:36:D9 X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ea:99:35:21:95:f9:11:c2:44:15:0b:d3:de:61:b8:a0:63: df:ab:10:55:9c:aa:22:e8:4f:8e:77:60:92:99:4a:f7:1f:50: 51:a4:c1:a3:2c:65:36:35:81:f1:dc:b8:70:37:42:73:6b:b5: b2:24:1f:76:31:8a:6f:11:b9:2a:64:30:32:2f:0c:eb:87:9c: df:97:8d:d3:05:45:ee:e7:92:0e:c2:1d:60:3c:d4:c0:af:ed: 10:27:00:c7:86:24:4e:58:64:17:61:40:35:c9:60:29:07:39: 4a:c0:4e:af:7e:6f:90:a4:65:66:9d:86:b4:be:b3:78:5d:ab: 61:f8:16:67:79:a9:04:72:0c:07:8c:ce:35:79:65:f6:a0:e0: 49:fb:31:bb:92:1a:23:51:16:68:e7:45:a1:7b:85:41:9f:e3: b2:d6:fd:a3:eb:61:1a:2e:1b:9a:66:2e:1f:09:9c:ac:da:33: c6:a2:d7:37:7c:b6:26:d3:db:a5:3d:ac:15:26:fd:ac:be:1c: d0:6c:31:cf:ba:7b:50:95:a7:20:ea:65:6f:83:d7:a4:9f:a9: e6:a3:92:97:89:0e:2c:9c:03:cb:6a:b7:95:b3:21:3b:a2:b1: a3:66:93:06:53:d6:21:d6:48:b6:20:63:a7:5d:b9:a3:41:e5: bd:9c:d8:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiU+SBJeEJ5N70PEuKSQFj3mZEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNjAxMzExMTQ2MjRaFw0yNjAyMDMyMzA5MjRaMDMxMTAvBgNV BAMTKDY0NjJDNzc4QUUxN0QxNTlBQ0IxQjYxQzNCRjU3RUE0NEIxMjM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGzRifk6zSXqF7pOuEA+k+rNV PMg7O3O6LWsrm4vU1US2kqonNRbaIh2wFu7lwOAZCt9Cz1glEtWx9KoKLf2YMuM+ OsAuDOUOBdekGDtYFLYTWE32hwW2tVYLIV/zCas5Qj+C1yHyycqO1G7KvsTriGdo IjGnsJyXnLgSXMO77hVmZ99F89fOQ7Q/mbxc/8f7qTCM3FHKnXwPh27DNgFAR8BK i7hoKHs3BH0qNYQSwzovURuIc2mI5xj3X+b19nVV2IWDx9wv8ath5nCCRlmpayxO x+C03H8QtdBug1n72yexAdKqd+c0RerpNTP83I0L/2XDbQWOHrXWTkrSlW3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGLHeK4X0VmssbYcO/V+pEsSNtkwHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3qmTUhlfkRwkQVC9PeYbigY9+rEFWcqiLo T453YJKZSvcfUFGkwaMsZTY1gfHcuHA3QnNrtbIkH3Yxim8RuSpkMDIvDOuHnN+X jdMFRe7nkg7CHWA81MCv7RAnAMeGJE5YZBdhQDXJYCkHOUrATq9+b5CkZWadhrS+ s3hdq2H4Fmd5qQRyDAeMzjV5Zfag4En7MbuSGiNRFmjnRaF7hUGf47LW/aPrYRou G5pmLh8JnKzaM8ai1zd8tibT26U9rBUm/ay+HNBsMc+6e1CVpyDqZW+D16Sfqeaj kpeJDiycA8tqt5WzITuisaNmkwZT1iHWSLYgY6dduaNB5b2c2J0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:37 2026 by rpki-client