This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: Po9gVlrpzlwYKHXqqaGv51hbzLyeTtKQhfxudzrFyvc= Subject key identifier: 59:D3:15:CE:48:95:B2:3D:74:DC:D4:B6:4A:87:EF:D6:9F:FB:09:02 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 28917B91287A873B6CE42CCED9648AC02F018F4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: BE Signing time: Sun 01 Feb 2026 05:31:49 +0000 Manifest this update: Sun 01 Feb 2026 05:26:49 +0000 Manifest next update: Wed 04 Feb 2026 10:41:49 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: t7yfbCuABA89iDs/XsD6qAJ7yjZKoQbmOie9G0XD9KI=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:7b:91:28:7a:87:3b:6c:e4:2c:ce:d9:64:8a:c0:2f:01:8f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Feb 1 05:26:49 2026 GMT Not After : Feb 4 10:41:49 2026 GMT Subject: CN=59D315CE4895B23D74DCD4B64A87EFD69FFB0902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:c6:a0:2d:66:f4:5a:18:1e:20:44:b4:01: 1b:aa:4a:3c:b8:4a:a2:2a:94:46:cc:24:59:90:82: a7:47:1b:14:da:49:dc:6e:0b:13:c4:bc:dd:b9:7c: 82:a3:c8:c6:1c:4a:d4:d0:bc:6c:0f:94:aa:db:5c: 84:11:fd:ab:97:be:d8:3f:bc:26:37:0b:23:d1:bd: a7:1a:47:ff:85:8c:a4:b7:d5:19:29:47:5c:20:a3: e2:ab:f0:73:60:09:45:a6:cf:a8:e2:5f:3d:8d:16: 17:79:22:e8:9e:3a:45:e4:36:51:73:0b:6f:25:24: 72:87:dd:23:6c:2f:38:ee:52:c2:85:b1:85:86:46: 49:fa:e2:26:4f:cb:bb:b9:6b:fd:67:cd:e1:e0:32: 64:8c:81:e0:4d:c3:e1:0b:04:cc:6c:02:de:89:ff: 89:fb:68:7f:b2:2d:dc:5d:31:df:5b:a7:71:fc:05: b5:da:9a:35:00:0b:91:4f:31:1a:a1:bc:07:2f:3d: 53:e7:b1:fd:4a:ff:27:a0:88:4d:bc:0d:6c:ec:95: e0:d5:0c:47:ff:b9:f7:97:cd:b5:75:72:68:f5:52: 39:0c:ff:a3:3b:ee:fd:6e:d4:03:a0:e4:45:84:cc: 3f:9f:19:b0:b7:b9:41:b6:77:ff:c1:6e:10:7e:55: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:15:CE:48:95:B2:3D:74:DC:D4:B6:4A:87:EF:D6:9F:FB:09:02 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:bc:7c:29:84:4b:39:0c:ee:ca:f2:36:02:0c:ea:18:68:31: 95:86:5b:54:f5:4a:74:b3:a4:ea:70:97:e8:ec:b0:92:7f:b2: 81:e8:c7:48:14:1c:78:b9:e0:80:d6:a1:d4:56:ca:e6:f9:ad: ba:fc:9a:98:0c:5b:cb:37:48:b8:09:49:c3:d0:75:9d:3b:69: 3a:8e:97:17:a9:b6:d1:92:47:57:40:71:17:d2:f3:81:92:e5: be:f8:56:2d:7c:49:65:48:0e:da:1b:b1:dc:0b:e3:04:59:be: 6a:19:24:8a:99:4b:44:c3:8b:04:c7:64:57:ba:59:dc:74:f2: 9c:b1:54:da:74:8b:c1:d2:9e:34:fd:50:79:78:1b:01:3a:85: db:cf:66:ac:ed:e7:dd:bf:42:10:1f:f1:a5:c7:ad:d7:b2:9c: 84:5f:38:c1:5e:21:e0:51:6f:d8:7c:6c:75:ea:06:a6:86:44: 90:6c:ab:34:1a:47:6a:e9:ba:17:19:6c:78:36:34:8c:72:2c: b3:ce:c4:b0:30:50:9f:17:c6:cc:9c:00:95:b2:57:1a:15:be: cb:92:72:38:0e:25:51:a0:f1:0e:7c:5d:8f:87:bb:a1:25:64: 6d:fd:35:df:96:ee:30:c3:fa:45:c5:de:3b:bf:a3:3e:4b:ff: 1f:0f:aa:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJF7kSh6hzts5CzO2WSKwC8Bj04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNjAyMDEwNTI2NDlaFw0yNjAyMDQxMDQxNDlaMDMxMTAvBgNV BAMTKDU5RDMxNUNFNDg5NUIyM0Q3NERDRDRCNjRBODdFRkQ2OUZGQjA5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjK8agLWb0WhgeIES0ARuqSjy4 SqIqlEbMJFmQgqdHGxTaSdxuCxPEvN25fIKjyMYcStTQvGwPlKrbXIQR/auXvtg/ vCY3CyPRvacaR/+FjKS31RkpR1wgo+Kr8HNgCUWmz6jiXz2NFhd5IuieOkXkNlFz C28lJHKH3SNsLzjuUsKFsYWGRkn64iZPy7u5a/1nzeHgMmSMgeBNw+ELBMxsAt6J /4n7aH+yLdxdMd9bp3H8BbXamjUAC5FPMRqhvAcvPVPnsf1K/yegiE28DWzsleDV DEf/ufeXzbV1cmj1UjkM/6M77v1u1AOg5EWEzD+fGbC3uUG2d//BbhB+VezlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWdMVzkiVsj103NS2Sofv1p/7CQIwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALi8fCmESzkM7sryNgIM6hhoMZWGW1T1SnSz pOpwl+jssJJ/soHox0gUHHi54IDWodRWyub5rbr8mpgMW8s3SLgJScPQdZ07aTqO lxepttGSR1dAcRfS84GS5b74Vi18SWVIDtobsdwL4wRZvmoZJIqZS0TDiwTHZFe6 Wdx08pyxVNp0i8HSnjT9UHl4GwE6hdvPZqzt592/QhAf8aXHrdeynIRfOMFeIeBR b9h8bHXqBqaGRJBsqzQaR2rpuhcZbHg2NIxyLLPOxLAwUJ8XxsycAJWyVxoVvsuS cjgOJVGg8Q58XY+Hu6ElZG39Nd+W7jDD+kXF3ju/oz5L/x8Pqro= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:01 2026 by rpki-client