This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: m0TKq6A0Jzg+gj4gSnYSfifxgmU0qX1e03qlJcRHCwA= Subject key identifier: CF:D6:0D:B8:ED:94:9D:26:E6:2A:F8:99:9F:9D:11:FC:B2:0E:04:E3 Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 7BC32EB4A039A4FAF2939CC3E2D37D4B513B4F23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 020C Signing time: Sat 31 Jan 2026 15:30:54 +0000 Manifest this update: Sat 31 Jan 2026 15:25:54 +0000 Manifest next update: Tue 03 Feb 2026 22:48:54 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: BnJZN8kM3S7TwdBig6pEraKaEILe1NjioWa2vU9OOYk=) 2: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=) 3: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: +MyXIra1tEzUh3Bqp100pCTB+NpiC7GT2NfbRpY5B8s=) 4: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: xkDxtGmCwjBhntrtyMIhGwaxdMGmjgYxodZiYd4/Mbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c3:2e:b4:a0:39:a4:fa:f2:93:9c:c3:e2:d3:7d:4b:51:3b:4f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Jan 31 15:25:54 2026 GMT Not After : Feb 3 22:48:54 2026 GMT Subject: CN=CFD60DB8ED949D26E62AF8999F9D11FCB20E04E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:49:2c:3c:de:3c:5d:b3:3a:8a:b9:92:d8: c5:aa:c2:fe:89:ce:f9:fb:ed:a2:03:45:63:8b:e5: 89:fb:6a:4c:4b:c3:8c:a6:94:e3:f7:e7:3f:ee:4e: a4:55:f6:ce:29:9d:58:f8:40:c0:4f:c3:58:31:1a: 43:e7:35:6e:09:54:d8:06:42:24:be:1f:33:31:09: 3f:d9:f5:20:13:8f:43:3d:bd:d7:9a:db:6c:41:0e: 8f:1f:58:b2:de:83:dc:06:7f:d8:58:9b:8e:f3:02: 1e:60:52:89:8e:f5:ee:91:1e:36:0d:41:1f:c8:12: 96:54:be:3e:13:36:de:1f:2e:c5:12:5f:e2:fa:0a: 1b:45:4e:0c:67:b6:ac:bf:7d:28:9e:a5:c8:34:99: fc:80:8d:ed:a5:7c:ad:e9:19:0d:1e:f4:69:ea:60: bb:86:63:f0:fb:85:a7:c8:ab:4a:3c:8e:31:11:e0: d8:c4:b9:a4:05:dd:79:7d:46:54:03:47:5e:f6:02: ea:d2:d8:8e:6e:c0:e4:6b:03:f9:a6:a1:a9:25:32: 8b:45:a9:2c:5e:a6:0b:fd:8f:e0:ba:fd:5c:0a:29: a7:18:a2:e4:63:09:9e:73:fc:fa:9d:6e:55:2f:5b: c5:b1:f4:32:c1:0c:2f:fd:88:a2:39:48:3b:1c:83: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:0D:B8:ED:94:9D:26:E6:2A:F8:99:9F:9D:11:FC:B2:0E:04:E3 X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1c:ae:31:a4:02:53:9e:c4:85:13:92:32:c1:4a:95:fe:9b: b1:72:b4:56:50:8e:3f:de:e8:6f:05:33:37:ed:d8:ee:93:f7: ee:44:e3:41:05:7f:76:81:10:16:f4:03:6b:5a:02:05:eb:eb: 2c:4e:ab:53:a7:05:ba:4a:ba:a9:d1:d1:72:2b:40:1f:74:2c: 49:78:8a:31:0d:d4:9f:e3:c0:cd:bd:76:55:52:93:c2:e8:76: 60:d9:00:2e:30:ae:63:ee:36:92:83:95:98:16:15:8f:ba:e6: 1a:52:70:e0:6b:cf:54:74:d7:b7:f6:77:69:ec:2a:98:71:b2: 9b:01:65:79:5d:65:a7:c5:11:46:d2:a5:45:06:b1:83:02:61: f8:09:c7:6c:52:a0:5c:d0:43:95:c8:6b:40:c8:6a:8d:c8:58: bc:11:94:03:26:2e:69:9e:15:a9:e1:ab:e4:b9:b7:46:b1:43: 14:5c:d3:97:90:c7:ec:4d:31:75:b3:70:da:f0:08:7f:32:a1: 12:e9:4e:7d:cc:18:10:97:ed:d4:f7:73:9e:c5:c4:7f:b7:3a: f4:e3:21:31:74:d1:05:b7:51:56:90:39:74:0a:9f:c5:9b:c0: fa:3b:04:ac:b2:7b:32:c2:68:23:ea:6d:4a:b3:40:ce:cf:6d: b2:11:ac:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8MutKA5pPryk5zD4tN9S1E7TyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNjAxMzExNTI1NTRaFw0yNjAyMDMyMjQ4NTRaMDMxMTAvBgNV BAMTKENGRDYwREI4RUQ5NDlEMjZFNjJBRjg5OTlGOUQxMUZDQjIwRTA0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/0ksPN48XbM6irmS2MWqwv6J zvn77aIDRWOL5Yn7akxLw4ymlOP35z/uTqRV9s4pnVj4QMBPw1gxGkPnNW4JVNgG QiS+HzMxCT/Z9SATj0M9vdea22xBDo8fWLLeg9wGf9hYm47zAh5gUomO9e6RHjYN QR/IEpZUvj4TNt4fLsUSX+L6ChtFTgxntqy/fSiepcg0mfyAje2lfK3pGQ0e9Gnq YLuGY/D7hafIq0o8jjER4NjEuaQF3Xl9RlQDR172AurS2I5uwORrA/mmoaklMotF qSxepgv9j+C6/VwKKacYouRjCZ5z/PqdblUvW8Wx9DLBDC/9iKI5SDscg0XBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9YNuO2UnSbmKviZn50R/LIOBOMwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4crjGkAlOexIUTkjLBSpX+m7FytFZQjj/e 6G8FMzft2O6T9+5E40EFf3aBEBb0A2taAgXr6yxOq1OnBbpKuqnR0XIrQB90LEl4 ijEN1J/jwM29dlVSk8LodmDZAC4wrmPuNpKDlZgWFY+65hpScOBrz1R017f2d2ns KphxspsBZXldZafFEUbSpUUGsYMCYfgJx2xSoFzQQ5XIa0DIao3IWLwRlAMmLmme Fanhq+S5t0axQxRc05eQx+xNMXWzcNrwCH8yoRLpTn3MGBCX7dT3c57FxH+3OvTj ITF00QW3UVaQOXQKn8WbwPo7BKyyezLCaCPqbUqzQM7PbbIRrNU= -----END CERTIFICATE-----Generated at Mon Feb 2 12:55:51 2026 by rpki-client