This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: XOEi0zsmL5cOwNCTCTLdJucHA8I6Va8VT17Te4xP63I= Subject key identifier: F8:59:A7:96:39:8B:79:F2:33:2F:E9:94:83:8A:FF:F4:3A:FE:3B:7A Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 6AAD22EFCC90FE05E6F6D26314F558CABFA7B1FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0434 Signing time: Sun 01 Feb 2026 19:11:02 +0000 Manifest this update: Sun 01 Feb 2026 19:06:02 +0000 Manifest next update: Wed 04 Feb 2026 23:59:02 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: 6HUwzyWFYVDDE9T4uA7jpGywRvFwVld9Njsa1ULz0iI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ad:22:ef:cc:90:fe:05:e6:f6:d2:63:14:f5:58:ca:bf:a7:b1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Feb 1 19:06:02 2026 GMT Not After : Feb 4 23:59:02 2026 GMT Subject: CN=F859A796398B79F2332FE994838AFFF43AFE3B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:75:c7:9b:d3:03:c7:a7:32:d3:e7:2a:fe:f7: 42:23:fc:7a:5b:d4:45:10:ab:82:23:e2:cf:9e:08: 08:c1:a4:cc:9e:c5:3c:a0:d6:7c:6b:91:01:c4:02: 78:1a:49:1d:7a:a1:ab:42:fd:25:5b:74:84:2d:92: 08:6d:57:7f:71:4a:be:c0:8b:02:41:44:3c:a1:0f: 63:08:ef:6f:d6:81:09:26:a6:58:65:8d:56:c9:62: a5:f6:c1:48:2f:fd:f9:56:a5:b0:b9:93:58:37:f2: a8:98:79:7b:f8:a3:73:27:ee:0e:60:bd:c3:94:36: 56:7c:a0:a1:ec:0c:d3:03:83:fd:40:41:bb:25:0d: 37:63:6f:d7:e9:12:23:8f:ca:c7:58:b2:fd:ed:ec: 08:c9:06:9f:13:0b:d3:29:20:17:b9:b1:84:93:0c: b7:3c:79:da:2c:51:be:d9:7b:de:07:25:4a:01:a6: 05:6a:c4:36:de:73:10:bc:94:c6:65:19:22:c7:91: 57:26:16:4e:27:53:98:f0:f9:58:32:33:3f:37:f6: 8e:6d:c3:9d:1e:cf:e4:00:5c:4a:a0:0a:99:27:d6: 2a:08:f7:c2:8e:57:dc:74:66:ed:f9:39:55:26:be: ba:7d:c1:2d:ac:db:24:79:01:46:6c:7b:78:ad:f0: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:A7:96:39:8B:79:F2:33:2F:E9:94:83:8A:FF:F4:3A:FE:3B:7A X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:eb:b0:4e:9f:bd:2d:b3:da:38:ec:4e:cf:c7:c0:7b:64:a3: b8:70:68:65:78:bb:75:69:11:a9:4a:95:67:07:4e:c4:05:1d: 11:3b:86:ed:f7:84:04:10:54:dd:5c:e2:d7:55:4a:32:26:f5: 80:83:31:1c:59:a0:40:49:c3:f7:75:61:07:30:13:d2:73:8b: 88:ae:5a:e2:5d:bc:0f:97:fd:33:58:7c:93:a4:00:67:ef:0b: 48:30:00:81:da:f4:d9:51:58:90:03:2a:dc:26:5f:c8:a3:53: 09:2c:98:bd:0b:11:66:10:8b:79:ba:82:6d:7f:b8:4c:4f:97: 62:e8:8f:df:ed:79:32:4c:c0:d8:51:bd:0f:7c:24:45:d6:3d: 56:00:ab:b7:1b:a2:85:af:1b:41:d4:43:75:b9:31:87:92:29: cb:7e:e6:67:0e:9a:4a:df:fd:d7:b6:2a:32:51:d1:45:2e:f4: 6b:7d:72:07:ee:d7:22:98:74:8d:0f:75:fd:45:ce:19:95:85: 8b:a3:db:57:24:ce:35:84:d4:07:da:39:22:41:c7:4f:dc:7c: 36:d2:ef:f4:d3:d8:e2:30:93:1d:4d:83:11:f3:25:76:b1:5c: 9a:75:9a:d5:3c:55:98:5a:49:2f:7a:42:8e:76:cc:c1:77:88: 1f:8a:59:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaq0i78yQ/gXm9tJjFPVYyr+nsfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNjAyMDExOTA2MDJaFw0yNjAyMDQyMzU5MDJaMDMxMTAvBgNV BAMTKEY4NTlBNzk2Mzk4Qjc5RjIzMzJGRTk5NDgzOEFGRkY0M0FGRTNCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxdceb0wPHpzLT5yr+90Ij/Hpb 1EUQq4Ij4s+eCAjBpMyexTyg1nxrkQHEAngaSR16oatC/SVbdIQtkghtV39xSr7A iwJBRDyhD2MI72/WgQkmplhljVbJYqX2wUgv/flWpbC5k1g38qiYeXv4o3Mn7g5g vcOUNlZ8oKHsDNMDg/1AQbslDTdjb9fpEiOPysdYsv3t7AjJBp8TC9MpIBe5sYST DLc8edosUb7Ze94HJUoBpgVqxDbecxC8lMZlGSLHkVcmFk4nU5jw+VgyMz839o5t w50ez+QAXEqgCpkn1ioI98KOV9x0Zu35OVUmvrp9wS2s2yR5AUZse3it8EuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FmnljmLefIzL+mUg4r/9Dr+O3owHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfrsE6fvS2z2jjsTs/HwHtko7hwaGV4u3Vp EalKlWcHTsQFHRE7hu33hAQQVN1c4tdVSjIm9YCDMRxZoEBJw/d1YQcwE9Jzi4iu WuJdvA+X/TNYfJOkAGfvC0gwAIHa9NlRWJADKtwmX8ijUwksmL0LEWYQi3m6gm1/ uExPl2Loj9/teTJMwNhRvQ98JEXWPVYAq7cbooWvG0HUQ3W5MYeSKct+5mcOmkrf /de2KjJR0UUu9Gt9cgfu1yKYdI0Pdf1FzhmVhYuj21ckzjWE1AfaOSJBx0/cfDbS 7/TT2OIwkx1NgxHzJXaxXJp1mtU8VZhaSS96Qo52zMF3iB+KWaY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:10 2026 by rpki-client