This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: BlqsGVuImQ6ylCsdNJQg+GfUS/0sGRiAcRmjf18Dvc4= Subject key identifier: 96:1B:1E:84:4C:50:87:F1:5E:08:82:BE:3E:F3:7D:AD:B3:95:22:B1 Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 3247880FC196BC5072E787E708D6732D58E75F24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 01A1 Signing time: Sat 31 Jan 2026 09:01:28 +0000 Manifest this update: Sat 31 Jan 2026 08:56:28 +0000 Manifest next update: Tue 03 Feb 2026 13:36:28 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) 2: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) 3: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: JrCMC2z4qyitJ0jWyv5E4GNFLeZRP5vPOW087LhXau0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:47:88:0f:c1:96:bc:50:72:e7:87:e7:08:d6:73:2d:58:e7:5f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Jan 31 08:56:28 2026 GMT Not After : Feb 3 13:36:28 2026 GMT Subject: CN=961B1E844C5087F15E0882BE3EF37DADB39522B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:f0:6a:2a:27:68:7c:fc:aa:b5:62:b3:75: d4:78:0e:66:66:7e:2c:c3:14:69:94:be:eb:7f:36: da:ce:df:d8:05:64:30:58:fd:99:c6:e0:1a:98:7d: ae:a9:30:c5:79:86:73:65:28:f1:94:d0:19:02:1e: dc:51:59:f1:d9:74:2c:68:e8:54:e9:ba:e5:64:29: 78:87:a4:fe:f3:ee:c8:92:75:88:f2:6d:5c:18:b6: 91:a7:be:1e:e9:f4:ce:62:df:a9:73:1b:84:54:9c: 85:63:54:9e:40:6f:f8:59:71:4c:e4:70:e7:89:af: b4:f0:14:41:54:d0:04:00:9c:d9:c6:eb:ca:a9:c6: b5:72:cf:6d:df:83:2d:b5:47:20:99:82:61:90:64: 09:9d:05:1d:6e:87:3b:c0:b3:f1:5b:ff:3a:4a:78: 7f:91:ff:fd:3e:a9:1f:62:a7:1a:b1:ab:24:9e:bc: 8f:ce:c7:69:8e:ca:3e:6a:91:42:f4:c8:6b:7b:6e: 67:05:63:a7:cc:6b:00:df:06:f9:64:64:34:5e:b6: 65:0d:7f:3c:2b:5a:32:00:70:7e:72:5d:28:90:86: f0:21:e8:e8:f2:8b:90:bc:d6:0c:13:51:a7:3c:a1: f5:62:24:7c:33:11:96:2d:22:3c:94:b5:3e:9b:56: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1B:1E:84:4C:50:87:F1:5E:08:82:BE:3E:F3:7D:AD:B3:95:22:B1 X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:73:d2:27:7c:a0:25:8c:d9:25:e6:d7:11:6a:b0:43:3c:b2: 0a:e4:93:13:0c:41:eb:c5:2b:f6:d8:4c:4c:52:a1:71:a6:94: 59:6f:38:83:f6:2b:43:e2:bc:9a:39:58:82:05:55:ec:c7:28: eb:16:a5:09:91:49:00:d4:80:bf:1f:d9:79:2c:1b:7a:46:92: 9b:22:20:2c:f5:4d:87:e1:16:b2:38:b8:11:2c:de:f6:e8:0e: 3e:74:dc:41:82:78:7b:ba:d6:38:17:31:7b:42:53:c2:5d:b2: 86:6a:f4:f2:15:06:91:60:7b:c7:1b:bf:de:37:9a:da:c9:4c: ac:01:b9:4c:c8:2f:55:df:64:0c:03:83:85:47:06:41:b6:36: 1b:d5:b2:76:4b:6b:a9:e0:f2:a1:c4:5c:e5:2c:c6:14:7b:db: 1c:9e:4a:4d:a1:ba:ab:a1:94:0e:61:4a:fb:72:55:6d:5c:46: 97:e9:37:df:3e:2f:9a:50:bc:76:da:4f:b9:78:7e:b8:63:08: 3a:7a:69:86:ec:3f:45:ef:a0:af:89:19:f9:f7:5b:28:34:0c: fb:25:a7:0a:5e:40:e5:6f:55:eb:7e:d3:c6:35:67:2c:f9:ea: a0:c2:66:ef:c3:b3:b8:df:9c:52:7b:ef:74:d6:d2:4a:0d:77: cc:dc:0a:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkeID8GWvFBy54fnCNZzLVjnXyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNjAxMzEwODU2MjhaFw0yNjAyMDMxMzM2MjhaMDMxMTAvBgNV BAMTKDk2MUIxRTg0NEM1MDg3RjE1RTA4ODJCRTNFRjM3REFEQjM5NTIyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJ/BqKidofPyqtWKzddR4DmZm fizDFGmUvut/NtrO39gFZDBY/ZnG4BqYfa6pMMV5hnNlKPGU0BkCHtxRWfHZdCxo 6FTpuuVkKXiHpP7z7siSdYjybVwYtpGnvh7p9M5i36lzG4RUnIVjVJ5Ab/hZcUzk cOeJr7TwFEFU0AQAnNnG68qpxrVyz23fgy21RyCZgmGQZAmdBR1uhzvAs/Fb/zpK eH+R//0+qR9ipxqxqySevI/Ox2mOyj5qkUL0yGt7bmcFY6fMawDfBvlkZDRetmUN fzwrWjIAcH5yXSiQhvAh6Ojyi5C81gwTUac8ofViJHwzEZYtIjyUtT6bVv7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhsehExQh/FeCIK+PvN9rbOVIrEwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9z0id8oCWM2SXm1xFqsEM8sgrkkxMMQevF K/bYTExSoXGmlFlvOIP2K0PivJo5WIIFVezHKOsWpQmRSQDUgL8f2XksG3pGkpsi ICz1TYfhFrI4uBEs3vboDj503EGCeHu61jgXMXtCU8JdsoZq9PIVBpFge8cbv943 mtrJTKwBuUzIL1XfZAwDg4VHBkG2NhvVsnZLa6ng8qHEXOUsxhR72xyeSk2huquh lA5hSvtyVW1cRpfpN98+L5pQvHbaT7l4frhjCDp6aYbsP0XvoK+JGfn3Wyg0DPsl pwpeQOVvVet+08Y1Zyz56qDCZu/Ds7jfnFJ773TW0koNd8zcCiA= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:13 2026 by rpki-client