This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: FN9CyZlhhXR9++HZfPNIw2E8tYFjZg6SJh++wVSUD1g= Subject key identifier: 1A:19:72:DC:09:E0:FE:8D:AD:96:21:CA:E9:F2:5A:6F:C3:A2:47:45 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 4C6DA519FF3ABD5FC4AC1CF9CD93145579E7870B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 0288 Signing time: Sat 31 Jan 2026 18:01:32 +0000 Manifest this update: Sat 31 Jan 2026 17:56:32 +0000 Manifest next update: Wed 04 Feb 2026 04:13:32 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: agIDU1aY2fatIXyq3iUXKHhP4VWBzg5PWyta2LlaRLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6d:a5:19:ff:3a:bd:5f:c4:ac:1c:f9:cd:93:14:55:79:e7:87:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Jan 31 17:56:32 2026 GMT Not After : Feb 4 04:13:32 2026 GMT Subject: CN=1A1972DC09E0FE8DAD9621CAE9F25A6FC3A24745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:d5:46:71:94:45:37:f2:f8:56:38:94:ea: 4d:d6:9c:cb:75:ea:ce:43:b5:c3:e6:c2:3e:b7:5d: 31:41:48:dc:2c:ec:5f:15:86:2e:3c:e8:b2:54:34: a3:e1:eb:dd:f3:83:34:c5:20:9b:3f:00:45:e6:a0: dc:40:21:2d:cc:01:59:6f:66:2d:e5:43:24:ef:5b: 03:01:e3:71:4c:80:3f:6e:64:a4:50:fb:11:b5:54: 27:e8:3d:f0:4c:c4:77:94:5d:15:5e:be:81:68:35: 90:db:64:ce:53:c3:61:d3:cc:e6:0d:04:65:3a:61: b6:37:31:a3:95:b4:3b:73:73:91:8f:c7:fe:ad:a0: 2f:31:02:14:a4:b3:15:f1:06:b9:5c:10:b8:09:9d: d6:c0:f8:d1:2a:ad:50:b2:84:8f:6c:f4:00:cb:39: 7b:2a:de:66:74:f2:76:4f:a3:00:33:e0:68:3d:0d: 61:2a:9c:25:b5:b4:4f:96:a1:0c:f2:9e:64:66:94: 05:04:81:6c:b8:d2:db:79:6e:52:e3:0f:c9:ec:d0: 7a:25:05:9a:5c:7f:bb:16:0d:22:10:1d:71:c6:76: f5:52:cf:ea:91:fb:58:e6:76:f6:31:16:10:b4:60: 24:bf:df:dc:72:64:bb:cf:3a:17:cf:80:39:d7:8f: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:19:72:DC:09:E0:FE:8D:AD:96:21:CA:E9:F2:5A:6F:C3:A2:47:45 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:de:de:5f:1f:c0:1c:11:d5:79:be:83:95:c2:02:6f:8f:b5: dd:90:80:2a:ff:f6:6c:5a:12:1f:cd:d6:d9:a0:02:34:23:e2: f3:3b:39:4e:fc:b6:ae:fa:e4:7b:1c:5f:2d:68:1c:75:7e:eb: 41:5e:61:87:58:ef:e8:5d:57:d1:97:cc:a7:fa:31:47:f6:86: 2a:be:bf:7c:49:f1:d7:9a:15:ea:29:ac:b8:5c:02:85:0f:fd: 20:d0:f6:53:76:bf:c9:08:e2:48:e0:ef:bf:59:bf:c2:3e:27: 20:0e:9f:90:82:13:75:6b:de:9a:27:b4:04:41:f5:80:17:f5: 5c:a7:fd:85:dd:72:83:a7:91:d9:68:3d:7a:35:8e:a4:43:ec: 53:39:10:04:70:f8:3b:a8:1e:06:50:cf:3f:d2:44:d4:fc:80: 1f:ad:f5:d2:65:d8:43:84:c6:cc:ed:04:bf:b1:42:9f:e3:b6: 5e:24:5a:4a:98:6f:bc:4c:fe:b9:fe:4e:26:30:9b:8d:1f:8f: fd:d8:3d:09:ff:95:77:9f:4a:9f:6f:bf:b9:2a:1f:e5:6c:0b: 0b:7c:e2:92:c2:22:3f:c1:fe:f1:5a:60:c2:e7:ef:64:b9:f7: 12:cc:c6:4b:fe:02:8d:cc:62:0a:9a:7e:ba:ac:be:59:04:ee: f6:c2:a2:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTG2lGf86vV/ErBz5zZMUVXnnhwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNjAxMzExNzU2MzJaFw0yNjAyMDQwNDEzMzJaMDMxMTAvBgNV BAMTKDFBMTk3MkRDMDlFMEZFOERBRDk2MjFDQUU5RjI1QTZGQzNBMjQ3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mdVGcZRFN/L4VjiU6k3WnMt1 6s5DtcPmwj63XTFBSNws7F8Vhi486LJUNKPh693zgzTFIJs/AEXmoNxAIS3MAVlv Zi3lQyTvWwMB43FMgD9uZKRQ+xG1VCfoPfBMxHeUXRVevoFoNZDbZM5Tw2HTzOYN BGU6YbY3MaOVtDtzc5GPx/6toC8xAhSksxXxBrlcELgJndbA+NEqrVCyhI9s9ADL OXsq3mZ08nZPowAz4Gg9DWEqnCW1tE+WoQzynmRmlAUEgWy40tt5blLjD8ns0Hol BZpcf7sWDSIQHXHGdvVSz+qR+1jmdvYxFhC0YCS/39xyZLvPOhfPgDnXj+fBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhly3Ang/o2tliHK6fJab8OiR0UwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXe3l8fwBwR1Xm+g5XCAm+Ptd2QgCr/9mxa Eh/N1tmgAjQj4vM7OU78tq765HscXy1oHHV+60FeYYdY7+hdV9GXzKf6MUf2hiq+ v3xJ8deaFeoprLhcAoUP/SDQ9lN2v8kI4kjg779Zv8I+JyAOn5CCE3Vr3pontARB 9YAX9Vyn/YXdcoOnkdloPXo1jqRD7FM5EARw+DuoHgZQzz/SRNT8gB+t9dJl2EOE xsztBL+xQp/jtl4kWkqYb7xM/rn+TiYwm40fj/3YPQn/lXefSp9vv7kqH+VsCwt8 4pLCIj/B/vFaYMLn72S59xLMxkv+Ao3MYgqafrqsvlkE7vbCogs= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:14 2026 by rpki-client