This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: Vlk24+gXBUIa2nBX4yc2O0thZiX/kZ66+n4A47Le46U= Subject key identifier: C0:96:A3:FD:F5:CD:BD:9D:95:DB:9F:0A:D0:EF:B1:70:8A:8B:42:D9 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 1721D44851D4E1534CACD27D103EE918B5843FB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01F1 Signing time: Sat 31 Jan 2026 18:10:05 +0000 Manifest this update: Sat 31 Jan 2026 18:05:05 +0000 Manifest next update: Wed 04 Feb 2026 02:14:05 +0000 Files and hashes: 1: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=) 2: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=) 3: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=) 4: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: L3dO7xciTRis2Q7nkkCBKzX8BPRNkctfpBd6ervPX78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:21:d4:48:51:d4:e1:53:4c:ac:d2:7d:10:3e:e9:18:b5:84:3f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Jan 31 18:05:05 2026 GMT Not After : Feb 4 02:14:05 2026 GMT Subject: CN=C096A3FDF5CDBD9D95DB9F0AD0EFB1708A8B42D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:2c:6e:1d:cc:76:3e:2b:3b:43:bf:9e:0c: 95:95:85:0a:4e:95:3e:f0:52:32:49:95:d9:6a:30: f3:ff:79:ac:b0:b6:c4:ef:db:99:b5:78:03:cd:c2: 8b:08:1b:40:04:cb:0a:91:0c:bf:23:f6:b0:c0:4c: c1:67:a9:38:a3:83:13:c3:95:c1:56:cb:01:31:8a: e9:7d:cf:c5:69:47:98:88:b2:ac:35:6a:61:60:d6: 42:eb:95:5b:08:87:4d:31:a0:2a:b1:d6:0f:60:16: d4:32:ab:1c:fe:96:aa:46:0e:a2:89:8a:82:e6:d9: 29:5a:62:85:a5:ae:bf:68:62:17:82:15:f2:32:79: 36:35:12:3b:30:63:ac:6c:00:55:79:48:28:46:e4: 32:b9:78:97:23:ef:42:77:9c:c7:6d:93:27:89:c1: 6f:b3:42:d6:12:51:11:4a:bb:43:f6:f2:5f:6c:02: a4:13:df:2e:17:9e:25:1e:fe:9b:d8:59:79:fb:92: e7:7d:f0:da:0b:0b:b5:88:30:60:a4:66:63:b1:ca: 30:50:74:81:5b:2d:4c:7f:68:09:ea:0d:22:62:09: 36:42:5f:94:39:7a:fb:38:c2:9d:bd:b1:94:7e:cf: 01:b9:8e:41:d8:12:c6:dc:94:1f:67:6b:58:37:92: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:96:A3:FD:F5:CD:BD:9D:95:DB:9F:0A:D0:EF:B1:70:8A:8B:42:D9 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:19:8d:d3:31:b5:49:a7:bb:5a:5a:35:43:c4:eb:bd:66:ee: 54:28:8c:f3:3a:24:98:e6:9f:3b:fc:9d:d4:66:83:ba:64:0a: 34:c7:4d:c4:28:1d:34:68:0a:df:6d:18:40:16:56:6a:b2:8e: 0b:35:73:3d:82:a3:c0:7a:b2:19:e5:2f:b9:2b:c1:fd:73:f5: 30:f9:7e:13:4b:12:5a:39:b6:82:ec:75:c0:bf:3f:c0:52:bc: a2:28:1d:00:d0:55:cc:dd:9e:63:9f:9c:ef:03:c6:9f:9c:3e: 2a:82:66:82:96:6e:b6:62:08:0f:31:b6:ce:28:60:63:3e:f5: b6:8b:4f:76:66:31:be:83:9e:5a:94:ef:c8:08:67:8a:e8:42: b8:6c:7f:82:69:ea:a5:f5:5c:b4:30:6c:23:46:25:8f:fd:15: 86:7b:9d:a0:c1:dc:52:ff:03:d6:91:13:7f:cd:f9:ef:9b:e3: c7:5f:72:68:f9:c1:31:7b:ee:ba:c3:80:02:be:b2:02:19:f1: 49:04:2e:37:80:56:b8:00:b1:cb:2e:f9:96:ed:d2:b8:43:4e: 76:36:07:7c:92:85:ca:7c:32:1c:23:c8:aa:d6:42:a0:e0:67: dc:d8:79:26:7d:9a:8c:98:f5:04:49:cb:fc:ab:b1:71:4a:e3: aa:c1:6d:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyHUSFHU4VNMrNJ9ED7pGLWEP7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNjAxMzExODA1MDVaFw0yNjAyMDQwMjE0MDVaMDMxMTAvBgNV BAMTKEMwOTZBM0ZERjVDREJEOUQ5NURCOUYwQUQwRUZCMTcwOEE4QjQyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmeyxuHcx2Pis7Q7+eDJWVhQpO lT7wUjJJldlqMPP/eaywtsTv25m1eAPNwosIG0AEywqRDL8j9rDATMFnqTijgxPD lcFWywExiul9z8VpR5iIsqw1amFg1kLrlVsIh00xoCqx1g9gFtQyqxz+lqpGDqKJ ioLm2SlaYoWlrr9oYheCFfIyeTY1EjswY6xsAFV5SChG5DK5eJcj70J3nMdtkyeJ wW+zQtYSURFKu0P28l9sAqQT3y4XniUe/pvYWXn7kud98NoLC7WIMGCkZmOxyjBQ dIFbLUx/aAnqDSJiCTZCX5Q5evs4wp29sZR+zwG5jkHYEsbclB9na1g3ko4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwJaj/fXNvZ2V258K0O+xcIqLQtkwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEZjdMxtUmnu1paNUPE671m7lQojPM6JJjm nzv8ndRmg7pkCjTHTcQoHTRoCt9tGEAWVmqyjgs1cz2Co8B6shnlL7krwf1z9TD5 fhNLElo5toLsdcC/P8BSvKIoHQDQVczdnmOfnO8Dxp+cPiqCZoKWbrZiCA8xts4o YGM+9baLT3ZmMb6DnlqU78gIZ4roQrhsf4Jp6qX1XLQwbCNGJY/9FYZ7naDB3FL/ A9aRE3/N+e+b48dfcmj5wTF77rrDgAK+sgIZ8UkELjeAVrgAscsu+Zbt0rhDTnY2 B3yShcp8MhwjyKrWQqDgZ9zYeSZ9moyY9QRJy/yrsXFK46rBbbo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:05 2026 by rpki-client