This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json) Hash identifier: 08h2Z2oDSaQPwydP7HZSOXX9irXMU8ry1mMvYxVnmQ4= Subject key identifier: A4:C7:C9:F8:4C:2D:9A:14:DB:19:58:FB:1D:56:B7:14:40:B9:88:CF Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 54FA41579D6904FA1FF98AC77A1E56C3F4016B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft Manifest number: 0255 Signing time: Sun 01 Feb 2026 00:51:02 +0000 Manifest this update: Sun 01 Feb 2026 00:46:02 +0000 Manifest next update: Wed 04 Feb 2026 01:06:02 +0000 Files and hashes: 1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: RnqYAB+n1Kyv6RIcYQp0Ab/YLEy4rz6aEdJlTJfSBfA=) 2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: uC/qnArDdSiiufGjxuhvh3127pXhWNHzqVlIjcIb2ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fa:41:57:9d:69:04:fa:1f:f9:8a:c7:7a:1e:56:c3:f4:01:6b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Feb 1 00:46:02 2026 GMT Not After : Feb 4 01:06:02 2026 GMT Subject: CN=A4C7C9F84C2D9A14DB1958FB1D56B71440B988CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:f7:d9:0d:d7:c1:80:d7:62:d3:ad:a5:a7: 3f:7e:b3:ad:4d:fa:be:fd:19:ce:95:ec:7b:51:a2: ff:d1:71:b6:34:a7:1c:01:66:01:d3:7a:89:3b:e6: d2:33:3d:2c:88:84:a5:64:56:27:eb:48:d7:3d:5b: ae:31:9e:a1:64:6f:dc:b5:fb:ab:78:b8:4a:05:35: 21:7a:a6:a5:e5:7d:2e:da:c7:51:06:8b:41:0e:94: bd:63:88:ef:1f:8b:7b:4b:2e:9b:7d:e0:e2:73:24: 35:19:4f:d8:13:b2:43:79:88:c8:1c:fd:ad:df:b2: cb:91:fa:32:b1:83:8f:04:bf:ea:af:d5:be:00:78: d6:26:2d:07:e0:e3:d9:af:0d:0f:ee:3f:89:1e:36: 3a:40:a0:49:68:fe:c7:b1:b3:7a:47:b5:60:3b:6b: a1:ab:ea:13:ae:ec:35:df:dd:1e:4b:27:bb:60:5f: 8d:b6:dc:25:eb:fb:39:74:d6:97:e5:70:1e:da:35: 70:6e:0a:d0:e5:1e:a9:f3:bd:81:ab:79:8d:cf:99: 72:81:6b:15:c5:66:48:0f:80:92:79:2f:18:bd:7f: b4:0b:19:09:56:e6:ad:7b:98:9f:62:73:11:13:63: 8d:56:43:f1:4f:99:7a:a3:36:82:3d:1d:c2:32:49: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:C9:F8:4C:2D:9A:14:DB:19:58:FB:1D:56:B7:14:40:B9:88:CF X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:07:f4:63:fd:91:84:80:04:32:57:19:fb:68:a2:74:17:d6: ce:89:b7:65:73:83:c1:ee:0b:8c:53:40:41:8a:c8:0b:9d:40: 7b:76:31:a8:e5:44:4c:0b:cf:86:c7:d6:75:85:e0:a4:2c:fa: 9a:6c:a0:95:f2:2f:66:31:3f:20:67:87:bd:c8:1d:7d:ae:20: 30:48:c7:ce:ab:e3:52:37:da:8b:e1:5b:7b:8e:75:70:78:bc: 23:a1:9b:3f:1a:5b:23:9b:01:8e:57:89:3a:21:24:17:35:ca: cc:19:9d:70:2a:8f:fa:e7:4b:89:11:29:ed:c3:f6:e9:34:1b: 2e:f5:73:8c:89:e8:b9:7a:cd:33:28:6e:ce:62:55:cd:42:48: b0:c7:f8:2d:22:f8:a9:b8:53:92:f4:6f:89:50:e7:8f:8a:e2: ac:ce:81:ae:26:ed:6e:d7:51:18:4e:d7:9d:7b:e1:e3:a7:04: 45:81:93:a2:b9:9e:fa:4f:57:ec:a3:b9:b6:81:71:5a:1b:96: 9a:30:22:8e:5b:ec:3f:3f:ff:ff:e1:d0:9a:05:3b:13:9a:1a: ec:07:2b:95:ba:9e:48:e6:9d:3a:e7:49:39:c7:db:31:06:99: c3:3d:95:47:f2:84:c9:d0:5a:9a:97:f9:71:35:20:dd:96:85: 5e:15:cc:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPpBV51pBPof+YrHeh5Ww/QBazYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNjAyMDEwMDQ2MDJaFw0yNjAyMDQwMTA2MDJaMDMxMTAvBgNV BAMTKEE0QzdDOUY4NEMyRDlBMTREQjE5NThGQjFENTZCNzE0NDBCOTg4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWB/fZDdfBgNdi062lpz9+s61N +r79Gc6V7HtRov/RcbY0pxwBZgHTeok75tIzPSyIhKVkVifrSNc9W64xnqFkb9y1 +6t4uEoFNSF6pqXlfS7ax1EGi0EOlL1jiO8fi3tLLpt94OJzJDUZT9gTskN5iMgc /a3fssuR+jKxg48Ev+qv1b4AeNYmLQfg49mvDQ/uP4keNjpAoElo/sexs3pHtWA7 a6Gr6hOu7DXf3R5LJ7tgX4223CXr+zl01pflcB7aNXBuCtDlHqnzvYGreY3PmXKB axXFZkgPgJJ5Lxi9f7QLGQlW5q17mJ9icxETY41WQ/FPmXqjNoI9HcIySYOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpMfJ+EwtmhTbGVj7HVa3FEC5iM8wHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFkM2NjOGEtOTczOC00NTFiLWE3 OTgtN2I3NmIwOTQwYjRiLzAvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0 MDExM0Y2RkUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUH9GP9kYSABDJXGftoonQX1s6Jt2Vzg8Hu C4xTQEGKyAudQHt2MajlREwLz4bH1nWF4KQs+ppsoJXyL2YxPyBnh73IHX2uIDBI x86r41I32ovhW3uOdXB4vCOhmz8aWyObAY5XiTohJBc1yswZnXAqj/rnS4kRKe3D 9uk0Gy71c4yJ6Ll6zTMobs5iVc1CSLDH+C0i+Km4U5L0b4lQ54+K4qzOga4m7W7X URhO15174eOnBEWBk6K5nvpPV+yjubaBcVoblpowIo5b7D8////h0JoFOxOaGuwH K5W6nkjmnTrnSTnH2zEGmcM9lUfyhMnQWpqX+XE1IN2WhV4VzFQ= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:13 2026 by rpki-client