This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json) Hash identifier: WzsUOso1T8G3HhX8Gy/3AZeaeOpefrfyNjMu7xbX2es= Subject key identifier: 11:BC:EB:31:5A:CE:55:E5:7F:53:43:3F:94:40:A5:07:62:68:DA:FC Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 302776B868F160766CDAB348D3FF4A86E65FAB64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft Manifest number: 0167 Signing time: Sat 31 Jan 2026 00:31:38 +0000 Manifest this update: Sat 31 Jan 2026 00:26:38 +0000 Manifest next update: Tue 03 Feb 2026 11:16:38 +0000 Files and hashes: 1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: tR1ruHDpHy9gzZjNFkruRHN5Lf+ZiLRLCpv8Rr3cvC4=) 2: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=) 3: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:27:76:b8:68:f1:60:76:6c:da:b3:48:d3:ff:4a:86:e6:5f:ab:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Jan 31 00:26:38 2026 GMT Not After : Feb 3 11:16:38 2026 GMT Subject: CN=11BCEB315ACE55E57F53433F9440A5076268DAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:11:61:ad:b1:30:74:34:4a:67:7d:15:71: 79:a2:cf:a0:81:2f:1a:12:1f:aa:d1:77:aa:80:ff: 94:a1:e2:fe:97:39:35:a6:58:db:3f:65:a8:72:70: 14:48:d2:a1:75:90:b5:4e:5c:42:ea:37:12:b4:28: 22:de:3f:86:34:14:68:36:22:f2:7e:cf:a3:a5:68: 7f:a0:bc:70:96:cf:be:aa:bb:a3:6b:0d:53:5a:94: 4c:8a:b5:4a:a1:7d:4a:ff:fc:e8:77:8e:f0:e7:53: 17:cb:1b:12:83:e8:db:52:d3:c5:28:b6:18:c1:0e: 8d:c7:bf:d6:5f:1b:f9:61:c1:57:7c:e9:7a:5d:ad: 31:02:cf:8b:b6:9c:d0:68:76:72:9c:e5:84:9c:b7: 92:40:a1:f8:3e:0b:e6:15:c6:40:77:0b:40:de:64: 60:b7:4a:64:36:ca:dd:cb:c7:d6:86:71:bd:c8:e5: 06:54:d0:e7:02:29:cc:b7:d5:42:78:40:8a:4b:c8: a5:4c:a5:a7:c1:78:75:d3:70:28:7c:3a:d2:e0:07: 14:c6:25:7c:7b:20:6e:1f:53:27:e2:11:a7:30:e9: 18:bf:23:98:e0:63:d0:a8:27:b3:7b:4d:0b:e7:58: 00:5f:d6:45:35:1a:b1:78:c6:2d:0e:80:b5:cb:80: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:EB:31:5A:CE:55:E5:7F:53:43:3F:94:40:A5:07:62:68:DA:FC X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ec:03:b7:d9:fd:45:98:0b:91:df:25:54:56:90:08:b5:d4: ee:cd:44:45:98:e8:2e:07:ce:91:f4:d9:2e:23:2d:76:c9:05: ec:cf:0a:66:9a:ba:e9:28:23:f2:4f:d4:1e:7a:d3:95:e2:ac: 81:d0:a6:d5:25:f3:55:2d:fd:12:25:c4:b4:4f:08:e8:70:bb: 7b:a2:cd:31:8c:7a:c9:20:c5:d2:5e:34:cf:03:66:d1:40:e1: fa:83:1c:91:77:13:56:0c:71:58:b7:52:08:bd:66:2f:db:98: 46:5f:fd:e8:6e:64:21:52:fd:12:65:21:ab:81:6e:39:da:2a: 61:c6:58:c9:50:01:7e:1f:2f:78:8a:69:be:22:0e:0b:32:b5: be:42:a3:2f:46:ed:2b:b7:58:e9:57:3f:46:18:7e:f0:85:b2: ca:0b:a1:e8:60:92:b7:94:75:64:9e:02:d1:93:92:4b:38:44: e7:de:55:4e:ba:24:a9:34:f2:98:b8:73:7d:bd:48:d7:e7:cb: 54:57:2c:87:ef:07:c1:17:65:9f:dc:5c:96:9a:98:0c:54:0f: b0:24:4c:bf:cc:16:39:f0:39:0d:9e:cf:ec:1f:81:7a:a3:c2: c9:97:ac:ed:9c:bc:4a:87:96:c4:02:2a:5a:64:9f:ff:06:dc: 3f:6e:10:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCd2uGjxYHZs2rNI0/9KhuZfq2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNjAxMzEwMDI2MzhaFw0yNjAyMDMxMTE2MzhaMDMxMTAvBgNV BAMTKDExQkNFQjMxNUFDRTU1RTU3RjUzNDMzRjk0NDBBNTA3NjI2OERBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFBFhrbEwdDRKZ30VcXmiz6CB LxoSH6rRd6qA/5Sh4v6XOTWmWNs/ZahycBRI0qF1kLVOXELqNxK0KCLeP4Y0FGg2 IvJ+z6OlaH+gvHCWz76qu6NrDVNalEyKtUqhfUr//Oh3jvDnUxfLGxKD6NtS08Uo thjBDo3Hv9ZfG/lhwVd86XpdrTECz4u2nNBodnKc5YSct5JAofg+C+YVxkB3C0De ZGC3SmQ2yt3Lx9aGcb3I5QZU0OcCKcy31UJ4QIpLyKVMpafBeHXTcCh8OtLgBxTG JXx7IG4fUyfiEacw6Ri/I5jgY9CoJ7N7TQvnWABf1kU1GrF4xi0OgLXLgIsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbzrMVrOVeV/U0M/lEClB2Jo2vwwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRD OUU1NTA1NTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfsA7fZ/UWYC5HfJVRWkAi11O7NREWY6C4H zpH02S4jLXbJBezPCmaauukoI/JP1B5605XirIHQptUl81Ut/RIlxLRPCOhwu3ui zTGMeskgxdJeNM8DZtFA4fqDHJF3E1YMcVi3Ugi9Zi/bmEZf/ehuZCFS/RJlIauB bjnaKmHGWMlQAX4fL3iKab4iDgsytb5Coy9G7Su3WOlXP0YYfvCFssoLoehgkreU dWSeAtGTkks4ROfeVU66JKk08pi4c329SNfny1RXLIfvB8EXZZ/cXJaamAxUD7Ak TL/MFjnwOQ2ez+wfgXqjwsmXrO2cvEqHlsQCKlpkn/8G3D9uEGs= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:06 2026 by rpki-client