This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: 5NlOiz/dEKuzUcOjfrVv3zx96Q1rSWuFOnGycF7QNno= Subject key identifier: B0:20:83:63:A5:A4:2D:B8:DB:C3:77:72:01:25:B4:51:F8:A8:E8:6B Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 1B24BFD388727C4C43C06E771AF60978ECD046AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 01DB Signing time: Sun 01 Feb 2026 15:52:30 +0000 Manifest this update: Sun 01 Feb 2026 15:47:30 +0000 Manifest next update: Wed 04 Feb 2026 22:59:30 +0000 Files and hashes: 1: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: m1QpsKWNC41Yh1C09h9LTHnCTbrVYQeuxu9fgYg+m8o=) 2: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: ruv10e3tmv9h/9cUo+OAb/5fPdHnSxFK0F6XnRlE2SI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:24:bf:d3:88:72:7c:4c:43:c0:6e:77:1a:f6:09:78:ec:d0:46:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Feb 1 15:47:30 2026 GMT Not After : Feb 4 22:59:30 2026 GMT Subject: CN=B0208363A5A42DB8DBC377720125B451F8A8E86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:b1:3c:16:fe:30:85:61:b4:df:8a:5d:6b: c3:ff:b3:07:97:d6:78:63:ba:ae:0d:63:dd:f5:2e: 6e:86:80:9e:78:1e:c5:dd:c0:4b:8d:4c:16:9e:06: e4:e5:25:93:2b:de:11:62:6c:42:d6:40:78:8f:03: 2c:c6:53:77:29:54:17:88:5d:51:68:60:be:f6:13: e4:17:3c:76:fc:6f:7f:d2:e8:40:d6:d7:98:4f:ed: 6c:d3:e5:6c:b8:2c:5c:80:84:90:9c:00:17:6a:45: 79:41:f6:83:da:cc:a4:fa:8d:1f:e5:6b:7a:1a:f3: ed:b1:37:ba:b9:62:d3:5d:1b:4e:c2:d7:c5:b5:be: 11:28:6a:e4:04:02:37:05:e9:f1:da:79:dc:d5:f7: f0:ae:10:42:b8:40:91:70:52:4d:57:24:99:8b:e2: 7a:c9:83:f2:73:64:c9:bb:bd:a2:38:5c:64:4a:26: aa:9f:09:3c:1b:01:32:dc:d1:2d:9a:9a:f0:e4:ab: 18:03:b4:36:ec:94:21:59:6c:d3:66:c8:73:9b:1a: 38:51:02:0d:61:04:94:20:b2:90:21:05:f5:48:92: b4:4a:15:0a:71:5e:89:e4:e1:3b:10:32:45:f1:06: a0:47:32:dd:c0:53:ca:72:08:af:f3:02:8a:75:23: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:83:63:A5:A4:2D:B8:DB:C3:77:72:01:25:B4:51:F8:A8:E8:6B X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:56:7b:b5:fe:04:d0:ca:39:5c:c9:8e:2a:b9:b0:81:3c:e1: 21:d5:86:44:d8:e2:f1:23:c6:66:78:a9:52:2d:67:10:9f:11: c7:a6:8d:34:8c:eb:00:1b:c1:7c:e5:c6:53:b5:f2:4f:78:23: 38:1b:cf:72:62:9b:fc:ca:85:3d:d2:19:27:bc:69:a8:bd:4e: 51:0c:15:49:23:5c:3e:93:45:33:fe:19:0b:02:f3:f5:df:ce: 57:a5:1a:7b:62:80:93:ea:69:f5:35:18:0b:7d:92:c0:09:fb: 5d:96:a1:a6:80:6b:21:71:59:8f:74:14:eb:c1:1e:17:0c:8f: 69:b6:93:13:14:cb:46:6f:34:0e:e0:7e:cd:ab:bd:9b:58:9a: 62:dd:8c:fd:c4:74:ad:60:68:52:2c:51:dc:4a:ad:8e:4c:98: 3a:9f:49:ae:51:9d:11:1d:34:67:f0:52:34:ba:37:c1:6c:77: 37:3f:66:cd:99:4d:8f:e6:a7:59:9b:44:22:e1:d6:87:fd:0a: b2:ca:0e:d7:71:a5:2e:e2:f8:fe:1a:c7:c8:ed:5c:69:08:fa: 44:b8:40:91:dd:a8:52:97:0f:ef:e1:14:b7:c8:b3:d4:86:64: 0f:5d:d0:fe:2d:2c:3f:f6:a7:6d:95:82:8e:47:35:e6:ae:28: ba:23:bc:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyS/04hyfExDwG53GvYJeOzQRq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNjAyMDExNTQ3MzBaFw0yNjAyMDQyMjU5MzBaMDMxMTAvBgNV BAMTKEIwMjA4MzYzQTVBNDJEQjhEQkMzNzc3MjAxMjVCNDUxRjhBOEU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBLE8Fv4whWG034pda8P/sweX 1nhjuq4NY931Lm6GgJ54HsXdwEuNTBaeBuTlJZMr3hFibELWQHiPAyzGU3cpVBeI XVFoYL72E+QXPHb8b3/S6EDW15hP7WzT5Wy4LFyAhJCcABdqRXlB9oPazKT6jR/l a3oa8+2xN7q5YtNdG07C18W1vhEoauQEAjcF6fHaedzV9/CuEEK4QJFwUk1XJJmL 4nrJg/JzZMm7vaI4XGRKJqqfCTwbATLc0S2amvDkqxgDtDbslCFZbNNmyHObGjhR Ag1hBJQgspAhBfVIkrRKFQpxXonk4TsQMkXxBqBHMt3AU8pyCK/zAop1I1yvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCCDY6WkLbjbw3dyASW0Ufio6GswHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRWe7X+BNDKOVzJjiq5sIE84SHVhkTY4vEj xmZ4qVItZxCfEcemjTSM6wAbwXzlxlO18k94Izgbz3Jim/zKhT3SGSe8aai9TlEM FUkjXD6TRTP+GQsC8/XfzlelGntigJPqafU1GAt9ksAJ+12WoaaAayFxWY90FOvB HhcMj2m2kxMUy0ZvNA7gfs2rvZtYmmLdjP3EdK1gaFIsUdxKrY5MmDqfSa5RnREd NGfwUjS6N8Fsdzc/Zs2ZTY/mp1mbRCLh1of9CrLKDtdxpS7i+P4ax8jtXGkI+kS4 QJHdqFKXD+/hFLfIs9SGZA9d0P4tLD/2p22Vgo5HNeauKLojvEo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:08 2026 by rpki-client