This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: 0HG8NWsVszZuI2qA/7rCDsoiYVagNRjrFiEABxBu/D0= Subject key identifier: E6:9C:0D:10:3A:65:23:31:F0:A8:62:23:5B:BB:43:DE:31:41:EE:3A Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 7A5D949D81DD2979374D12903D2CC991FD40DFC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 0134 Signing time: Sun 01 Feb 2026 11:10:55 +0000 Manifest this update: Sun 01 Feb 2026 11:05:55 +0000 Manifest next update: Wed 04 Feb 2026 17:51:55 +0000 Files and hashes: 1: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: YbriYkzy97E3rzCjJGINDJPnUIAFK6Tpz7ZKFNdKmBk=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: lTXXqDvVb99/4yIHlkQaywB5MQKhKyYSxakzkjkU+yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 17:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5d:94:9d:81:dd:29:79:37:4d:12:90:3d:2c:c9:91:fd:40:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Feb 1 11:05:55 2026 GMT Not After : Feb 4 17:51:55 2026 GMT Subject: CN=E69C0D103A652331F0A862235BBB43DE3141EE3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:5a:ce:fd:02:f4:12:91:65:c1:e6:34:a9: 5c:c9:37:da:88:41:d8:d4:dc:e3:f2:80:cb:a4:c5: 97:6f:c6:4b:70:57:65:60:fb:c7:a0:f0:40:21:f3: 67:b6:9b:5f:e7:8d:c3:ed:76:c7:87:e9:9b:42:e7: 5a:4b:96:1f:05:75:5f:3f:9f:1b:55:8c:7d:49:1b: 2b:12:ac:e6:5a:10:4c:fb:0e:aa:88:e5:60:92:30: 65:86:aa:ee:33:24:19:a1:ea:41:4a:7d:fe:e1:ef: bd:df:9d:0c:0c:17:f9:f6:61:c5:48:bf:ff:05:3c: 76:a9:23:a3:6b:ac:52:ec:f5:14:74:15:d7:6b:47: ff:db:66:f4:5a:e9:b5:d4:f4:35:f8:a2:07:a4:2a: 07:37:ce:a2:2c:5d:d5:1b:7d:84:4e:b1:4e:49:33: d7:d2:98:45:7c:de:7d:0d:d0:77:49:6d:08:05:08: 1f:1b:89:3d:27:f9:c7:4e:7f:93:00:0a:30:2b:b6: e3:72:0d:5c:54:e8:44:30:99:2e:31:d8:78:03:7d: 28:94:ad:2f:32:08:df:fd:b9:c8:6a:9c:1d:cc:bc: 76:a6:79:b8:ba:e4:40:8f:a4:b0:87:a7:ec:79:77: 6f:50:91:94:dc:0a:64:5e:c5:7b:93:b7:90:86:23: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9C:0D:10:3A:65:23:31:F0:A8:62:23:5B:BB:43:DE:31:41:EE:3A X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c2:09:99:21:63:30:61:c3:0a:54:16:f5:38:a1:12:21:e6: 35:8c:52:cb:f1:85:50:4e:2b:20:1b:3f:9a:85:b0:45:40:25: f0:20:5d:e4:69:9e:e7:f9:8e:8d:ae:67:ca:8a:32:e7:fe:11: 7a:2f:c1:8c:55:f3:32:3f:1c:00:22:81:09:f0:a5:99:0e:5a: b0:9b:77:49:f9:b2:9b:6d:d9:ac:77:b2:ab:e1:35:2e:2e:bd: 56:a3:35:75:ac:aa:38:82:11:54:c0:d8:52:6f:94:0c:ef:b7: b5:9b:94:d8:82:1d:9b:c5:be:6b:ad:66:3d:af:b3:fd:24:e4: 05:80:df:56:cb:ef:17:c6:50:2b:cd:8f:61:33:8a:f3:77:41: 18:6a:77:4f:07:d6:73:a6:16:5b:1c:d5:dc:9f:f9:80:64:a3: e1:43:87:e7:19:a5:17:c8:df:c4:68:0e:59:f9:fe:34:1d:5a: 58:0d:ab:6c:6e:f8:4c:9a:f6:4d:28:78:60:62:1a:68:64:d2: d2:8b:d0:c7:8f:09:07:3d:67:fb:44:e5:80:52:9b:66:91:43: 37:7a:c8:f3:9a:9c:c8:6e:65:dc:65:93:b4:92:e4:b7:5a:36: b6:43:3c:f1:44:03:cf:d4:89:d5:bc:e3:b3:bc:70:83:8c:8d: 7d:8c:26:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUel2UnYHdKXk3TRKQPSzJkf1A38AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNjAyMDExMTA1NTVaFw0yNjAyMDQxNzUxNTVaMDMxMTAvBgNV BAMTKEU2OUMwRDEwM0E2NTIzMzFGMEE4NjIyMzVCQkI0M0RFMzE0MUVFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTFrO/QL0EpFlweY0qVzJN9qI QdjU3OPygMukxZdvxktwV2Vg+8eg8EAh82e2m1/njcPtdseH6ZtC51pLlh8FdV8/ nxtVjH1JGysSrOZaEEz7DqqI5WCSMGWGqu4zJBmh6kFKff7h773fnQwMF/n2YcVI v/8FPHapI6NrrFLs9RR0FddrR//bZvRa6bXU9DX4ogekKgc3zqIsXdUbfYROsU5J M9fSmEV83n0N0HdJbQgFCB8biT0n+cdOf5MACjArtuNyDVxU6EQwmS4x2HgDfSiU rS8yCN/9uchqnB3MvHamebi65ECPpLCHp+x5d29QkZTcCmRexXuTt5CGI7tRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pwNEDplIzHwqGIjW7tD3jFB7jowHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHCCZkhYzBhwwpUFvU4oRIh5jWMUsvxhVBO KyAbP5qFsEVAJfAgXeRpnuf5jo2uZ8qKMuf+EXovwYxV8zI/HAAigQnwpZkOWrCb d0n5sptt2ax3sqvhNS4uvVajNXWsqjiCEVTA2FJvlAzvt7WblNiCHZvFvmutZj2v s/0k5AWA31bL7xfGUCvNj2EzivN3QRhqd08H1nOmFlsc1dyf+YBko+FDh+cZpRfI 38RoDln5/jQdWlgNq2xu+Eya9k0oeGBiGmhk0tKL0MePCQc9Z/tE5YBSm2aRQzd6 yPOanMhuZdxlk7SS5LdaNrZDPPFEA8/UidW847O8cIOMjX2MJlU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:51 2026 by rpki-client