This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: Oo8qFqwq7HoO3dvJx2PE9JsfuB6xRaqUlKMdFDJFBqc= Subject key identifier: 6F:F3:B6:32:9F:49:F7:15:C8:22:A5:B1:66:E5:F1:07:02:C5:A1:16 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 0F86BAD5D1B23ADF55CDBBD717B92F53F0AC0F1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 0248 Signing time: Fri 30 Jan 2026 21:21:19 +0000 Manifest this update: Fri 30 Jan 2026 21:16:19 +0000 Manifest next update: Tue 03 Feb 2026 08:55:19 +0000 Files and hashes: 1: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) 2: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: xaBB6DomA7FACic6tfrfqV8AGN5kgZoKIVsHMvuiiNQ=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:86:ba:d5:d1:b2:3a:df:55:cd:bb:d7:17:b9:2f:53:f0:ac:0f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Jan 30 21:16:19 2026 GMT Not After : Feb 3 08:55:19 2026 GMT Subject: CN=6FF3B6329F49F715C822A5B166E5F10702C5A116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:23:92:09:99:47:c4:7c:cb:d1:10:7f:64: 4d:07:8d:ad:0e:a7:58:7c:d2:fe:c3:c9:6f:13:c2: 3e:e3:c9:16:f4:b8:23:77:94:8b:be:4b:d1:13:08: db:3c:a7:ba:f8:bb:ea:cc:37:e3:8a:e0:1c:45:11: b3:48:de:2a:70:c1:69:ee:74:eb:5d:d4:99:e7:73: b4:7f:e0:2d:02:47:9a:a8:6f:3d:32:c0:02:4c:fb: bb:29:6e:0b:9e:56:bc:b5:ce:fc:d5:5b:d0:40:c5: d6:7c:45:ee:3b:20:e8:ca:9a:8c:03:a9:99:72:cb: 19:b4:9a:4e:02:93:21:b8:2a:4b:c4:17:7c:67:aa: 59:16:2b:4d:e1:09:cb:0f:cd:1c:19:59:36:06:28: a9:4a:2c:e0:96:ad:ae:c8:52:41:1a:aa:78:7d:df: 8a:7d:52:67:53:19:ab:7f:a2:e2:c7:64:12:f4:86: b7:ae:20:65:4f:fa:4a:cc:d4:b9:54:5b:d5:c6:93: 9a:f3:54:93:0d:b7:1a:f0:b6:11:be:3c:da:3d:eb: 67:fc:a4:99:96:41:38:eb:74:c4:9a:6f:7a:1d:cf: 17:63:8c:cc:4a:1c:b0:94:b4:f4:12:71:aa:45:db: 49:a4:d7:66:6f:35:ee:d7:49:64:b8:90:e2:00:16: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F3:B6:32:9F:49:F7:15:C8:22:A5:B1:66:E5:F1:07:02:C5:A1:16 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:cc:13:19:8e:bd:e2:ee:b9:a9:17:d6:f8:54:c2:a7:21:8f: ba:1b:89:a3:fd:ed:d6:af:f9:5a:b7:53:48:70:2f:90:b2:35: 10:5c:80:02:ed:98:1e:b6:12:bf:02:b4:1f:53:dd:1a:a9:ca: 12:34:32:69:03:2b:03:87:76:68:b6:b0:db:69:86:de:14:cd: d3:da:70:1e:dd:62:e6:f0:89:b8:db:9b:eb:4e:b6:5e:27:14: 40:d6:87:a6:e8:ef:57:2a:0a:c6:bb:b2:29:38:fb:dc:7f:d8: d5:8c:60:19:7d:09:7b:60:48:87:ba:be:2b:97:9c:c0:e4:40: 7a:5c:75:47:f4:e3:83:18:ac:b5:a6:7f:e9:4d:8a:ba:cd:89: c5:5d:6a:11:7c:05:7e:8c:63:3c:e5:18:27:87:4a:f4:99:d3: 50:83:b0:96:c9:d5:b5:29:a6:2b:b8:6f:2c:d5:89:df:c1:95: 43:30:37:4b:e3:10:27:7e:c7:be:00:8f:b5:45:d0:58:91:ed: 0c:44:f8:6c:81:67:3b:98:f1:44:39:0b:6f:fd:5e:0f:c6:bb: eb:1b:3e:bb:28:69:68:1c:5d:7a:da:e3:0a:0b:07:5f:d0:3d: e9:dc:f6:2d:3a:c1:df:4e:c3:26:bb:b7:57:c6:c4:dd:53:41: 98:b9:19:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4a61dGyOt9VzbvXF7kvU/CsDxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNjAxMzAyMTE2MTlaFw0yNjAyMDMwODU1MTlaMDMxMTAvBgNV BAMTKDZGRjNCNjMyOUY0OUY3MTVDODIyQTVCMTY2RTVGMTA3MDJDNUExMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LiOSCZlHxHzL0RB/ZE0Hja0O p1h80v7DyW8Twj7jyRb0uCN3lIu+S9ETCNs8p7r4u+rMN+OK4BxFEbNI3ipwwWnu dOtd1Jnnc7R/4C0CR5qobz0ywAJM+7spbgueVry1zvzVW9BAxdZ8Re47IOjKmowD qZlyyxm0mk4CkyG4KkvEF3xnqlkWK03hCcsPzRwZWTYGKKlKLOCWra7IUkEaqnh9 34p9UmdTGat/ouLHZBL0hreuIGVP+krM1LlUW9XGk5rzVJMNtxrwthG+PNo962f8 pJmWQTjrdMSab3odzxdjjMxKHLCUtPQScapF20mk12ZvNe7XSWS4kOIAFnmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb/O2Mp9J9xXIIqWxZuXxBwLFoRYwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLMExmOveLuuakX1vhUwqchj7obiaP97dav +Vq3U0hwL5CyNRBcgALtmB62Er8CtB9T3RqpyhI0MmkDKwOHdmi2sNtpht4UzdPa cB7dYubwibjbm+tOtl4nFEDWh6bo71cqCsa7sik4+9x/2NWMYBl9CXtgSIe6viuX nMDkQHpcdUf044MYrLWmf+lNirrNicVdahF8BX6MYzzlGCeHSvSZ01CDsJbJ1bUp piu4byzVid/BlUMwN0vjECd+x74Aj7VF0FiR7QxE+GyBZzuY8UQ5C2/9Xg/Gu+sb PrsoaWgcXXra4woLB1/QPenc9i06wd9Owya7t1fGxN1TQZi5GWU= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:29 2026 by rpki-client