This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: 3Afyf++0EzmHUg4EUc5wDCZmv1dXlFjTsaVLq4yx7gE= Subject key identifier: 4B:4C:12:79:9E:0B:96:D7:23:34:FC:56:E4:DD:F7:AF:6E:73:60:34 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 5A9D6B89E5A794CACD9A747142825B013A53ABED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 023A Signing time: Sat 31 Jan 2026 06:10:06 +0000 Manifest this update: Sat 31 Jan 2026 06:05:06 +0000 Manifest next update: Tue 03 Feb 2026 17:28:06 +0000 Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 2: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: 2tXuxqn5pfFGbs5PMm/zYeXgsNylRarkJIKwT79r/sE=) 3: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 4: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 5: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9d:6b:89:e5:a7:94:ca:cd:9a:74:71:42:82:5b:01:3a:53:ab:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Jan 31 06:05:06 2026 GMT Not After : Feb 3 17:28:06 2026 GMT Subject: CN=4B4C12799E0B96D72334FC56E4DDF7AF6E736034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:74:3b:28:2f:6d:a6:1f:4f:4f:89:d4:95: 7b:e7:c2:22:24:ce:7a:e3:24:15:11:74:6c:dc:c4: 2c:73:62:53:2c:67:e8:d4:b1:ad:d2:b0:5a:1b:8e: 04:2d:58:e1:34:6c:8a:8b:1a:05:b2:aa:48:87:56: b5:8d:aa:8d:5d:3e:d5:a8:8e:c1:cd:e9:45:5b:85: 42:49:8f:07:46:d9:b2:94:4d:b3:8c:79:17:a7:e6: 43:4f:c5:42:e8:c7:f7:36:30:90:fd:53:5a:72:3c: f4:10:d6:bf:36:12:f4:72:45:bc:e3:80:54:b9:50: a0:11:ac:ac:1d:9f:cd:50:d9:a5:8b:c6:ac:e6:35: 04:54:48:ff:13:4f:39:47:7f:22:85:68:0d:af:2c: 36:8b:75:3c:5e:11:2a:64:20:62:26:02:49:e4:55: a3:50:bb:a5:ff:e2:6b:63:9c:78:ee:c4:68:23:e5: c3:8e:1e:e5:43:a8:e9:de:0e:1f:d7:05:dd:92:18: d3:e9:53:67:51:1b:6e:3f:3e:11:92:45:0a:73:d1: 20:f5:ba:82:ea:16:d6:8d:35:7a:1e:fc:a4:56:1d: 7a:c7:d9:68:5e:61:8f:79:23:85:cc:6d:6e:85:0f: 14:6d:a4:67:bb:9b:ae:f4:5a:90:79:20:cc:0b:5c: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:12:79:9E:0B:96:D7:23:34:FC:56:E4:DD:F7:AF:6E:73:60:34 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:02:76:af:70:ca:4b:55:33:c4:c2:1a:5f:52:80:2d:a9:9f: 42:94:c5:af:c9:bd:d1:ba:60:dc:bc:ca:4c:8f:88:79:e9:d7: 6d:30:5d:92:df:fb:92:d1:6c:9f:e9:91:36:e5:4d:f3:a4:e5: 36:1e:ed:62:7d:d5:6c:e5:ed:f6:64:10:ad:da:56:5e:32:49: c7:0f:9b:a7:cc:f4:22:66:e0:c1:79:18:a5:41:71:b2:f4:2e: 5e:35:0b:d6:13:c5:12:aa:6e:5e:8b:db:d8:e2:3a:6b:ae:37: ff:d5:f7:fa:ad:f2:53:6b:94:6b:4b:1a:bc:b6:51:41:ac:24: c9:8b:2c:9b:5f:c2:33:d8:8b:df:3d:b7:89:9b:2c:49:5c:c6: 19:e9:0a:e6:e0:df:f2:58:47:f2:73:99:e1:72:2a:e8:d6:42: ac:82:e1:d9:13:5b:b5:b9:f4:5f:d9:91:27:28:b6:93:49:e7: 85:52:eb:14:40:56:2b:76:48:38:76:7c:e7:48:f7:e0:f6:49: 2d:da:4a:44:7f:db:83:46:04:79:74:74:fc:e8:d0:26:a6:4c: f5:c4:0c:02:19:86:aa:c3:51:a8:ea:ec:b9:b7:1e:0b:9f:f2: 72:6f:83:ab:28:a8:8b:a1:b1:ba:93:4c:2c:77:11:d3:0f:22: 51:6e:e6:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWp1rieWnlMrNmnRxQoJbATpTq+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNjAxMzEwNjA1MDZaFw0yNjAyMDMxNzI4MDZaMDMxMTAvBgNV BAMTKDRCNEMxMjc5OUUwQjk2RDcyMzM0RkM1NkU0RERGN0FGNkU3MzYwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShXQ7KC9tph9PT4nUlXvnwiIk znrjJBURdGzcxCxzYlMsZ+jUsa3SsFobjgQtWOE0bIqLGgWyqkiHVrWNqo1dPtWo jsHN6UVbhUJJjwdG2bKUTbOMeRen5kNPxULox/c2MJD9U1pyPPQQ1r82EvRyRbzj gFS5UKARrKwdn81Q2aWLxqzmNQRUSP8TTzlHfyKFaA2vLDaLdTxeESpkIGImAknk VaNQu6X/4mtjnHjuxGgj5cOOHuVDqOneDh/XBd2SGNPpU2dRG24/PhGSRQpz0SD1 uoLqFtaNNXoe/KRWHXrH2WheYY95I4XMbW6FDxRtpGe7m670WpB5IMwLXAZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0wSeZ4LltcjNPxW5N33r25zYDQwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQCdq9wyktVM8TCGl9SgC2pn0KUxa/JvdG6 YNy8ykyPiHnp120wXZLf+5LRbJ/pkTblTfOk5TYe7WJ91Wzl7fZkEK3aVl4ySccP m6fM9CJm4MF5GKVBcbL0Ll41C9YTxRKqbl6L29jiOmuuN//V9/qt8lNrlGtLGry2 UUGsJMmLLJtfwjPYi989t4mbLElcxhnpCubg3/JYR/JzmeFyKujWQqyC4dkTW7W5 9F/ZkScotpNJ54VS6xRAVit2SDh2fOdI9+D2SS3aSkR/24NGBHl0dPzo0CamTPXE DAIZhqrDUajq7Lm3Hguf8nJvg6soqIuhsbqTTCx3EdMPIlFu5ro= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:44 2026 by rpki-client