This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: iW4qfY8dWF5hBU9oixf1OP6MSvpSvt/K7a0QD8soC18= Subject key identifier: 9C:F5:C4:A5:F4:B2:CB:A4:8C:42:14:6B:4D:BC:2E:BB:FD:E5:34:70 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 3076BE48EA52CC48A17CA8E96C279EB29777FA22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: D5 Signing time: Tue 20 Jan 2026 20:20:57 +0000 Manifest this update: Tue 20 Jan 2026 20:15:57 +0000 Manifest next update: Sat 24 Jan 2026 00:57:57 +0000 Files and hashes: 1: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: ddc27gBMr3OYby+60rTsFN4jTsnZf0K6QpQ3U8AJvJI=) 2: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: Rg18lYu+EI7TJSppit98bXLhRlnD1UY/HahNSK5DoZ0=) 3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: DkaD62yPmgT3rL8vnnIbnI/XVBv8VoP+g+l6Q15s5Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 00:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:76:be:48:ea:52:cc:48:a1:7c:a8:e9:6c:27:9e:b2:97:77:fa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Jan 20 20:15:57 2026 GMT Not After : Jan 24 00:57:57 2026 GMT Subject: CN=9CF5C4A5F4B2CBA48C42146B4DBC2EBBFDE53470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:65:5d:4d:ac:e4:ae:bd:d3:48:e5:9b:25: ff:0c:4d:4c:c1:81:b4:8b:2b:7c:6e:3d:c4:08:c9: f6:26:cc:78:08:11:96:ea:81:8a:9b:30:14:dd:79: 7f:e5:52:e2:a7:53:6f:23:e5:1a:c2:11:7e:65:70: d4:00:cf:f3:88:3a:34:c4:48:ca:79:cc:fe:2c:40: 2b:fe:9f:57:a0:5a:57:24:d4:91:50:0b:e2:33:9c: cd:95:c7:af:09:4f:aa:cd:c7:f7:1b:3a:ac:64:19: 19:39:d3:f6:aa:e1:6f:11:fa:14:33:9b:b4:8f:5b: a4:a0:ed:ef:f6:49:99:4a:3a:1a:7b:e1:5f:70:7c: da:81:0d:f2:de:db:37:15:2f:32:4b:3d:a2:c8:a9: 6c:1a:d2:d1:32:5d:f5:4b:b7:eb:46:87:28:29:12: 37:21:22:04:91:62:58:44:ac:1b:e6:4d:7e:3d:6e: 3f:cf:b7:15:22:7e:8a:93:60:b5:da:63:08:7e:d2: e3:e7:98:a0:76:83:79:c1:e8:97:ae:2d:65:f5:09: 78:f0:b1:26:80:80:ab:86:1c:d5:be:02:d2:ad:5e: e7:76:87:2f:f4:37:ba:fc:bc:7b:a8:2c:07:50:17: 40:a2:95:8d:3f:12:92:fc:41:96:41:cf:98:c6:58: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:C4:A5:F4:B2:CB:A4:8C:42:14:6B:4D:BC:2E:BB:FD:E5:34:70 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:91:97:5d:0f:e3:6f:4d:f3:35:85:77:56:f0:e0:90:9f:6e: 7d:83:19:a1:95:f0:63:0a:d8:49:05:25:f9:d1:53:65:b2:51: 66:7e:e6:66:19:e8:d0:fc:49:bb:55:26:a5:5b:72:40:ae:8e: a6:5b:e5:9d:e5:30:c2:03:9e:ee:cb:f8:dd:e6:40:b9:2c:57: 4f:d3:5d:ca:cc:7a:09:8c:51:a6:bb:e1:6d:d7:53:df:68:87: 3b:a0:54:37:7a:2c:8c:6f:38:eb:32:67:64:4c:5b:29:14:65: 31:a1:ec:8c:37:d1:26:08:5b:6b:83:fd:b9:1d:3c:b1:c3:0c: a3:c1:7e:9e:51:21:70:a7:20:66:b2:59:0e:32:de:c0:9a:86: bf:89:1c:aa:2f:21:a6:22:2f:5b:c4:1d:bf:0b:3f:45:82:e6: 25:3f:7d:e7:4e:e6:cf:7e:4c:76:29:f7:20:b5:dd:55:89:04: 2d:d8:7c:cb:a2:d3:29:11:c6:3a:8e:c6:9f:d0:d1:fa:37:d0: b1:9e:98:f0:d5:96:72:b4:ca:b5:83:00:cd:f9:84:fb:d8:dd: 98:19:84:28:ea:83:9e:b2:bc:09:9f:7e:51:dc:fd:a1:57:2b: c3:25:2f:d4:18:ba:ac:73:a3:06:76:18:1b:04:03:14:fc:8e: b6:22:c5:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHa+SOpSzEihfKjpbCeespd3+iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNjAxMjAyMDE1NTdaFw0yNjAxMjQwMDU3NTdaMDMxMTAvBgNV BAMTKDlDRjVDNEE1RjRCMkNCQTQ4QzQyMTQ2QjREQkMyRUJCRkRFNTM0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEGVdTazkrr3TSOWbJf8MTUzB gbSLK3xuPcQIyfYmzHgIEZbqgYqbMBTdeX/lUuKnU28j5RrCEX5lcNQAz/OIOjTE SMp5zP4sQCv+n1egWlck1JFQC+IznM2Vx68JT6rNx/cbOqxkGRk50/aq4W8R+hQz m7SPW6Sg7e/2SZlKOhp74V9wfNqBDfLe2zcVLzJLPaLIqWwa0tEyXfVLt+tGhygp EjchIgSRYlhErBvmTX49bj/PtxUifoqTYLXaYwh+0uPnmKB2g3nB6JeuLWX1CXjw sSaAgKuGHNW+AtKtXud2hy/0N7r8vHuoLAdQF0CilY0/EpL8QZZBz5jGWAkZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPXEpfSyy6SMQhRrTbwuu/3lNHAwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiRl10P429N8zWFd1bw4JCfbn2DGaGV8GMK 2EkFJfnRU2WyUWZ+5mYZ6ND8SbtVJqVbckCujqZb5Z3lMMIDnu7L+N3mQLksV0/T XcrMegmMUaa74W3XU99ohzugVDd6LIxvOOsyZ2RMWykUZTGh7Iw30SYIW2uD/bkd PLHDDKPBfp5RIXCnIGayWQ4y3sCahr+JHKovIaYiL1vEHb8LP0WC5iU/fedO5s9+ THYp9yC13VWJBC3YfMui0ykRxjqOxp/Q0fo30LGemPDVlnK0yrWDAM35hPvY3ZgZ hCjqg56yvAmfflHc/aFXK8MlL9QYuqxzowZ2GBsEAxT8jrYixeY= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:34 2026 by rpki-client