This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: RuPzVTYYviFlQqSbd1khc9EWvdNWuR2CMsq0m5E5QWI= Subject key identifier: E3:78:F1:36:BE:8B:1B:34:35:42:C5:B4:8C:DE:42:7E:F7:16:C3:10 Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 2FDE0F33125DD86D384CE52F7A63E32034A95E68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01EC Signing time: Sun 01 Feb 2026 18:52:22 +0000 Manifest this update: Sun 01 Feb 2026 18:47:22 +0000 Manifest next update: Wed 04 Feb 2026 23:57:22 +0000 Files and hashes: 1: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: 8OavrHRoQUPSc/2Wf05P+Eto0a8BS6JD/0KyCkXMnO4=) 2: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=) 3: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:de:0f:33:12:5d:d8:6d:38:4c:e5:2f:7a:63:e3:20:34:a9:5e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Feb 1 18:47:22 2026 GMT Not After : Feb 4 23:57:22 2026 GMT Subject: CN=E378F136BE8B1B343542C5B48CDE427EF716C310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:b3:60:aa:a9:8d:f1:c5:93:d2:68:09:d3: bd:22:08:ee:59:15:df:f4:a8:06:ef:02:07:88:75: 59:d3:7a:bd:0f:7e:60:2e:9c:73:f9:ae:5a:dc:eb: 76:9b:4c:e6:72:83:68:fb:70:41:46:c4:3f:d4:1e: 2d:81:ac:ff:ce:67:93:5a:4d:2a:22:ae:27:c5:ab: 0a:86:79:6d:c1:92:32:e4:a6:73:17:f7:98:a4:6c: 56:b0:01:f7:bc:42:a1:6a:f2:84:48:c0:88:e4:a4: 13:44:e8:e8:c9:9a:43:97:5b:81:b8:1b:80:03:e0: 09:73:dd:a3:6c:3a:f9:07:ee:f4:4d:e1:eb:01:b3: c6:a9:3b:0d:0e:43:85:02:4a:17:b9:32:ae:f4:5f: 59:e5:71:14:eb:fb:96:37:83:11:af:05:a7:25:15: 1b:a7:2f:bf:34:9e:f0:39:cb:1f:ed:82:28:7d:67: da:53:a8:b9:30:1b:d7:0d:91:5e:56:e0:45:70:b8: 4c:36:2e:bd:47:c0:69:47:88:85:8c:d1:4c:60:2c: 2d:b0:da:32:a5:21:90:76:fd:fc:b0:87:30:d4:8e: 32:7a:08:bf:fe:af:35:f4:ec:99:bb:f5:9e:7c:59: ae:7f:34:41:ba:70:11:b7:b1:e1:7c:a2:f1:9b:61: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:F1:36:BE:8B:1B:34:35:42:C5:B4:8C:DE:42:7E:F7:16:C3:10 X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:97:15:3b:5a:05:82:81:f2:9d:9f:9e:0c:3f:86:c4:1c:72: 6d:0f:2c:1c:62:04:2c:3b:5b:8f:05:74:c9:36:de:14:03:6f: 31:ee:59:d3:7b:cd:3a:53:a4:fe:15:3b:f2:dc:d5:95:a8:11: a7:1c:66:3f:79:57:45:99:86:41:ed:9a:43:54:3a:04:75:1e: 61:b4:a9:3c:65:b8:f0:4a:21:64:36:bd:06:e6:f8:63:2c:53: 23:e3:46:53:d5:d1:38:cb:24:86:5f:38:77:ab:68:6b:d1:d1: b7:4a:7b:f7:6a:d6:6c:b1:2a:ca:1c:11:b9:f4:5a:3e:87:ee: 64:0b:e7:1f:c8:10:f1:ce:f3:e5:85:09:75:4a:da:1a:d4:01: a8:27:ba:38:03:04:12:53:46:5a:e8:8e:04:1c:76:9a:6d:ba: 80:01:a8:e9:d4:ac:b8:0b:b2:b9:85:ce:66:3e:29:06:a2:df: bc:ee:a0:b8:d6:ac:21:77:ba:64:a1:5d:81:21:97:2a:26:24: 1d:9c:be:e8:81:79:d2:0d:a0:93:92:c6:bd:19:f3:a8:95:be: 34:ec:c2:42:5a:ac:86:88:85:66:a1:90:2c:3d:5b:80:09:6c: 67:2a:58:e4:c2:0c:6e:90:df:11:bd:fc:63:67:76:3f:3b:6e: 74:da:0a:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL94PMxJd2G04TOUvemPjIDSpXmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNjAyMDExODQ3MjJaFw0yNjAyMDQyMzU3MjJaMDMxMTAvBgNV BAMTKEUzNzhGMTM2QkU4QjFCMzQzNTQyQzVCNDhDREU0MjdFRjcxNkMzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsB7NgqqmN8cWT0mgJ070iCO5Z Fd/0qAbvAgeIdVnTer0PfmAunHP5rlrc63abTOZyg2j7cEFGxD/UHi2BrP/OZ5Na TSoirifFqwqGeW3BkjLkpnMX95ikbFawAfe8QqFq8oRIwIjkpBNE6OjJmkOXW4G4 G4AD4Alz3aNsOvkH7vRN4esBs8apOw0OQ4UCShe5Mq70X1nlcRTr+5Y3gxGvBacl FRunL780nvA5yx/tgih9Z9pTqLkwG9cNkV5W4EVwuEw2Lr1HwGlHiIWM0UxgLC2w 2jKlIZB2/fywhzDUjjJ6CL/+rzX07Jm79Z58Wa5/NEG6cBG3seF8ovGbYehXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43jxNr6LGzQ1QsW0jN5CfvcWwxAwHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWXFTtaBYKB8p2fngw/hsQccm0PLBxiBCw7 W48FdMk23hQDbzHuWdN7zTpTpP4VO/Lc1ZWoEaccZj95V0WZhkHtmkNUOgR1HmG0 qTxluPBKIWQ2vQbm+GMsUyPjRlPV0TjLJIZfOHeraGvR0bdKe/dq1myxKsocEbn0 Wj6H7mQL5x/IEPHO8+WFCXVK2hrUAagnujgDBBJTRlrojgQcdpptuoABqOnUrLgL srmFzmY+KQai37zuoLjWrCF3umShXYEhlyomJB2cvuiBedINoJOSxr0Z86iVvjTs wkJarIaIhWahkCw9W4AJbGcqWOTCDG6Q3xG9/GNndj87bnTaCjg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:07 2026 by rpki-client