This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: UmNmSZna4CZ/oK2qQAVIKnIISVD7HuUyDzv+FoWXDgk= Subject key identifier: 5B:2C:C9:06:0A:14:97:98:67:4D:E7:43:C2:8F:D8:B9:5F:9A:02:F5 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 4DF32B840809AC91A4956837D9CCACA880AE91FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: 0114 Signing time: Sat 31 Jan 2026 11:02:11 +0000 Manifest this update: Sat 31 Jan 2026 10:57:11 +0000 Manifest next update: Tue 03 Feb 2026 16:32:11 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) 2: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: eKY+2N4mozAMWUTsq9QU9TVi+ivxEFHSbUqbfdpqrqU=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f3:2b:84:08:09:ac:91:a4:95:68:37:d9:cc:ac:a8:80:ae:91:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Jan 31 10:57:11 2026 GMT Not After : Feb 3 16:32:11 2026 GMT Subject: CN=5B2CC9060A149798674DE743C28FD8B95F9A02F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:2e:4e:ca:7c:fe:bd:c8:87:f7:8c:ba:0d: 66:4d:95:46:b1:38:c4:d3:b0:9b:c3:6b:bb:04:79: a8:9d:af:31:94:50:f2:be:dc:77:c3:ae:af:17:3c: 44:e9:5a:59:39:e9:47:2e:85:d8:94:71:cc:d8:94: 8d:d4:75:72:6c:9f:ce:55:48:d0:2b:0a:54:f2:82: 2b:c4:7c:f4:ae:a2:93:6b:5b:2f:98:1a:5c:19:a7: 51:53:f4:19:15:c3:49:e0:b0:80:67:2a:24:4a:97: ef:12:94:d4:8a:c8:20:2d:c6:d2:85:b7:36:2d:7f: ac:5e:53:19:5d:3e:8c:5d:5f:6e:8a:50:ad:13:b8: d6:5c:a5:9d:9c:c5:2c:30:f2:0d:b0:50:eb:01:1c: 20:04:cb:70:88:81:df:df:7d:d0:6f:53:c4:4b:aa: b7:ca:02:40:0a:94:fb:e6:b8:f8:cf:c6:93:7b:e8: fb:a6:22:66:89:f9:0f:85:20:6b:01:39:ce:fd:7a: 78:2d:40:de:79:bf:f5:bd:61:45:5e:1b:ba:7b:f4: e7:20:09:b2:10:b1:5f:b0:c1:c4:c6:97:3b:66:b0: e7:d1:8a:d0:df:07:28:40:ae:5c:33:46:ad:13:20: 35:7b:ba:fb:b1:f7:71:66:36:bf:f3:be:7a:a5:82: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2C:C9:06:0A:14:97:98:67:4D:E7:43:C2:8F:D8:B9:5F:9A:02:F5 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:90:c6:7f:a5:2c:3c:51:10:41:f8:13:cb:80:6b:0f:52: 50:67:ca:e6:4f:1b:a9:5b:02:19:30:00:b0:e1:15:69:6d:64: fa:2c:56:4d:6a:3a:7a:f8:51:d0:ac:be:df:59:28:da:2b:61: 51:7f:bc:0c:f9:9f:0a:e6:a5:05:3e:f8:20:83:62:eb:1c:d8: d2:3a:b1:80:52:61:1b:a7:14:30:0f:03:80:9b:63:b9:89:03: a8:bc:e8:ae:6e:90:d4:57:ba:6a:53:14:20:ed:f5:65:84:cd: fe:98:d3:8d:8b:a7:55:19:18:44:f7:c3:84:7e:8a:36:26:cd: ef:17:7e:39:87:73:83:84:d0:f1:3c:34:db:09:0a:cc:a2:55: 56:56:bb:5b:2f:c8:bb:99:fa:b4:9f:6a:93:3a:2e:2f:47:2d: 11:0c:80:92:db:25:4d:ae:8c:3e:4f:4b:6d:0a:81:83:71:f8: b6:c4:9b:97:c1:0d:53:9a:46:a6:3f:6c:10:51:d5:44:b4:1f: 71:c8:40:0b:14:b2:d7:4b:ef:7b:d4:09:2a:18:5c:6f:65:20: 5b:3d:04:a6:11:12:7a:6d:01:bc:a3:04:f0:ef:55:00:a6:38: e5:14:33:cf:83:a2:06:a8:e7:10:e8:ba:be:15:a2:b7:cd:2d: 51:b5:7e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfMrhAgJrJGklWg32cysqICukf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNjAxMzExMDU3MTFaFw0yNjAyMDMxNjMyMTFaMDMxMTAvBgNV BAMTKDVCMkNDOTA2MEExNDk3OTg2NzRERTc0M0MyOEZEOEI5NUY5QTAyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxi5Oynz+vciH94y6DWZNlUax OMTTsJvDa7sEeaidrzGUUPK+3HfDrq8XPETpWlk56UcuhdiUcczYlI3UdXJsn85V SNArClTygivEfPSuopNrWy+YGlwZp1FT9BkVw0ngsIBnKiRKl+8SlNSKyCAtxtKF tzYtf6xeUxldPoxdX26KUK0TuNZcpZ2cxSww8g2wUOsBHCAEy3CIgd/ffdBvU8RL qrfKAkAKlPvmuPjPxpN76PumImaJ+Q+FIGsBOc79engtQN55v/W9YUVeG7p79Ocg CbIQsV+wwcTGlztmsOfRitDfByhArlwzRq0TIDV7uvux93FmNr/zvnqlgqZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyzJBgoUl5hnTedDwo/YuV+aAvUwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHjkMZ/pSw8URBB+BPLgGsPUlBnyuZPG6lb AhkwALDhFWltZPosVk1qOnr4UdCsvt9ZKNorYVF/vAz5nwrmpQU++CCDYusc2NI6 sYBSYRunFDAPA4CbY7mJA6i86K5ukNRXumpTFCDt9WWEzf6Y042Lp1UZGET3w4R+ ijYmze8XfjmHc4OE0PE8NNsJCsyiVVZWu1svyLuZ+rSfapM6Li9HLREMgJLbJU2u jD5PS20KgYNx+LbEm5fBDVOaRqY/bBBR1US0H3HIQAsUstdL73vUCSoYXG9lIFs9 BKYREnptAbyjBPDvVQCmOOUUM8+Dogao5xDour4VorfNLVG1fuM= -----END CERTIFICATE-----Generated at Mon Feb 2 19:22:38 2026 by rpki-client