This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: aDji/cyZ0LmGU+Wq8SF1IJATla3bV87kDadCbE1xhx8= Subject key identifier: A9:95:80:48:B2:77:3E:BC:8A:6E:54:BD:24:77:51:A6:D7:F2:B6:ED Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 534D1544BAF59FDF63B33FEAF52B297EFACEAE18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 04E9 Signing time: Sat 31 Jan 2026 23:31:22 +0000 Manifest this update: Sat 31 Jan 2026 23:26:22 +0000 Manifest next update: Wed 04 Feb 2026 06:29:22 +0000 Files and hashes: 1: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K1B+8ghkTLIZ5AJ6fsYXvRX9s2r1jX+7WBmIft8mUyc=) 2: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: is60XG55kI3U+nT1mhyKJAyjcOForTY6eEtxGShLT7E=) 3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) 4: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 06:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4d:15:44:ba:f5:9f:df:63:b3:3f:ea:f5:2b:29:7e:fa:ce:ae:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Jan 31 23:26:22 2026 GMT Not After : Feb 4 06:29:22 2026 GMT Subject: CN=A9958048B2773EBC8A6E54BD247751A6D7F2B6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:85:85:fe:9b:83:a2:91:73:13:cc:11:d3: 85:23:6f:fc:62:81:74:fe:b7:4b:fe:6e:d9:0b:7a: 53:64:fb:26:fc:1d:9d:39:93:90:7b:2f:f1:d2:01: 4c:87:26:bd:0d:1a:2f:cc:1a:5f:7a:bd:19:5f:d2: 81:a9:da:6f:82:23:0a:e2:b9:79:ba:16:59:87:65: b5:57:2c:10:e6:9a:6d:66:64:3e:34:2d:b1:bf:dc: 71:56:04:c1:3a:ed:ce:f9:4a:36:7e:c4:9a:61:e7: 39:05:4a:99:3e:7e:75:80:5d:8c:a9:e9:64:9d:47: 33:56:5b:45:b2:d7:d8:5c:b9:ae:4a:5c:cd:70:ad: 00:a8:29:41:f7:0e:3c:2f:27:de:ac:bc:84:1c:94: fc:d9:73:b0:2a:07:51:c7:5b:4c:50:79:2d:5a:da: 94:c6:43:d8:92:c4:c9:4f:f6:f3:37:6d:b8:04:98: 10:5c:96:f9:f0:d0:b5:e7:74:e4:3b:de:37:c2:9c: 3e:65:5c:d5:dd:85:bf:7b:1f:ea:19:fe:38:f1:8f: 95:62:6d:6f:15:32:40:4c:25:1f:1f:15:17:8e:d2: 48:8d:bf:77:db:11:c5:41:58:be:4f:d7:a4:0a:ce: 5c:70:ed:4e:9f:7a:0b:8a:fa:db:a4:b4:59:26:ee: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:80:48:B2:77:3E:BC:8A:6E:54:BD:24:77:51:A6:D7:F2:B6:ED X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:74:eb:65:79:41:91:99:ce:5a:dd:5d:65:d3:dc:28:27:52: c1:7e:7d:1e:12:ae:e6:26:1e:47:09:29:b4:5e:22:3b:92:f3: a2:7b:78:ec:cf:e0:ac:38:bf:27:02:fd:81:0c:64:ee:6c:e7: 17:96:3b:65:66:8c:1a:fd:69:b0:79:7b:fc:dc:d6:9a:f9:db: 02:23:cf:65:38:28:a0:ef:4f:7c:c9:83:90:9f:e2:da:ab:ed: 44:b6:73:69:59:42:25:59:0b:34:d8:1b:f5:1c:84:34:ba:b8: 2d:46:c9:cb:5f:70:39:12:ba:03:2d:7b:01:5d:75:5d:00:a3: 52:63:a0:b7:b8:06:f7:39:76:4e:90:ea:cd:c1:29:b8:ea:bd: fb:ec:a2:c9:cc:5f:e9:d4:9b:58:44:7f:83:e6:bc:0b:88:8e: 62:da:f6:96:6a:7d:e7:3e:aa:1f:aa:72:12:80:44:47:84:c0: bd:f9:2f:b5:d2:4a:e4:04:72:fc:e3:a4:44:b9:47:1b:ed:d7: d1:ba:19:14:7e:e6:24:f8:57:2e:aa:60:6f:d7:b9:97:d0:59: ed:32:70:07:71:ae:7d:cb:c1:ec:50:ce:fb:32:c2:59:80:da: 72:50:65:45:f3:72:59:51:13:f9:da:5e:de:68:b8:15:3f:a8: de:49:07:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU00VRLr1n99jsz/q9SspfvrOrhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNjAxMzEyMzI2MjJaFw0yNjAyMDQwNjI5MjJaMDMxMTAvBgNV BAMTKEE5OTU4MDQ4QjI3NzNFQkM4QTZFNTRCRDI0Nzc1MUE2RDdGMkI2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVIWF/puDopFzE8wR04Ujb/xi gXT+t0v+btkLelNk+yb8HZ05k5B7L/HSAUyHJr0NGi/MGl96vRlf0oGp2m+CIwri uXm6FlmHZbVXLBDmmm1mZD40LbG/3HFWBME67c75SjZ+xJph5zkFSpk+fnWAXYyp 6WSdRzNWW0Wy19hcua5KXM1wrQCoKUH3DjwvJ96svIQclPzZc7AqB1HHW0xQeS1a 2pTGQ9iSxMlP9vM3bbgEmBBclvnw0LXndOQ73jfCnD5lXNXdhb97H+oZ/jjxj5Vi bW8VMkBMJR8fFReO0kiNv3fbEcVBWL5P16QKzlxw7U6feguK+tuktFkm7oPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZWASLJ3PryKblS9JHdRptfytu0wHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAd062V5QZGZzlrdXWXT3CgnUsF+fR4SruYm HkcJKbReIjuS86J7eOzP4Kw4vycC/YEMZO5s5xeWO2VmjBr9abB5e/zc1pr52wIj z2U4KKDvT3zJg5Cf4tqr7US2c2lZQiVZCzTYG/UchDS6uC1GyctfcDkSugMtewFd dV0Ao1JjoLe4Bvc5dk6Q6s3BKbjqvfvsosnMX+nUm1hEf4PmvAuIjmLa9pZqfec+ qh+qchKAREeEwL35L7XSSuQEcvzjpES5Rxvt19G6GRR+5iT4Vy6qYG/XuZfQWe0y cAdxrn3LwexQzvsywlmA2nJQZUXzcllRE/naXt5ouBU/qN5JB6g= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:07 2026 by rpki-client