This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: gJE0aIBn2y0vNkP5i3NMnfkYci0kOkjKD4BQnXrlI1I= Subject key identifier: 78:5A:36:0D:43:BF:3F:A2:A6:4A:CC:81:F3:F5:18:BC:8D:E1:B5:73 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 650471944B8D69761E85B61E8B66B9D7E17969E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 0221 Signing time: Sun 01 Feb 2026 06:20:40 +0000 Manifest this update: Sun 01 Feb 2026 06:15:40 +0000 Manifest next update: Wed 04 Feb 2026 14:56:40 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: RixLNaZJ1sXE92bh2XuEy3jHbx42GgGtz7xLg2h3tXE=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:04:71:94:4b:8d:69:76:1e:85:b6:1e:8b:66:b9:d7:e1:79:69:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Feb 1 06:15:40 2026 GMT Not After : Feb 4 14:56:40 2026 GMT Subject: CN=785A360D43BF3FA2A64ACC81F3F518BC8DE1B573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:7a:58:88:5b:e3:7b:d9:81:d7:f2:73:1d: 64:50:4a:c6:80:4c:71:4f:ea:2e:1e:dd:22:9d:41: 62:39:40:f0:8a:8e:af:77:98:fd:80:ad:f6:f9:bf: 9f:d0:08:e3:2a:5b:a5:0b:04:e7:f5:12:ef:d8:04: 90:f4:fc:8d:54:8b:66:71:37:63:ff:18:8a:2f:84: 7f:a3:9d:e3:5a:bf:50:0b:da:d0:fa:2c:78:ef:a3: 91:fe:ce:5d:d9:2c:05:3e:a0:b8:2a:d9:f5:b9:3a: 70:4a:e9:9a:82:b4:dc:35:8f:97:35:a1:2b:9b:da: d9:72:85:08:9e:9e:10:13:fe:aa:92:4e:eb:ed:be: 0d:24:d7:b2:e4:aa:47:72:48:40:e0:12:76:af:54: 8d:26:8d:cd:f3:f0:70:a7:3c:1f:b7:7e:93:70:7b: 0c:94:79:f3:6a:a2:aa:58:cf:bb:ad:b4:1a:22:fa: fc:6f:9f:39:9f:42:91:84:97:a1:5a:6a:6f:e5:af: e3:54:b2:a6:1f:e3:5f:b7:29:32:77:c1:18:34:56: c6:d0:89:83:a0:83:60:0d:15:21:f1:43:7d:fe:f6: 93:6e:4b:1e:00:4e:34:c2:35:9e:2d:ea:da:ac:75: a0:4c:ca:96:6c:b0:9e:1c:07:0e:87:c8:8b:da:77: 1c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5A:36:0D:43:BF:3F:A2:A6:4A:CC:81:F3:F5:18:BC:8D:E1:B5:73 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:42:4a:0a:af:ec:1c:96:83:53:d4:8d:b7:9e:1b:8f:55:b3: 89:23:ba:0f:78:ef:c4:6b:d6:a5:85:22:b3:30:5c:ac:ad:be: 80:7c:ce:fe:a6:13:fa:5c:62:0b:3c:75:ea:92:c3:73:27:9b: 51:f1:e9:e2:c6:b9:7e:ec:81:59:1a:a0:12:de:63:15:e6:d0: c6:b3:26:3c:58:b4:52:fc:a4:5b:38:19:0e:1f:f2:98:7b:cc: c7:eb:0e:2e:94:09:58:d0:76:ba:08:95:48:f9:d3:37:6c:bc: f9:7d:e5:de:ad:ee:50:1d:ba:21:b5:b6:52:af:2b:a9:bc:06: de:d3:2a:51:0b:3a:b1:16:ae:25:1f:c7:b4:f9:8c:76:1e:19: e4:dc:14:b2:4a:4b:d8:42:bc:f5:07:a0:02:b9:f6:f4:57:b1: eb:1d:9a:2b:cd:57:95:d3:39:01:6f:ba:83:e8:59:31:62:06: ef:84:25:3d:6d:ac:b9:a2:8a:21:44:99:1d:f6:db:c6:ec:3e: e3:67:0b:9b:80:69:01:fa:9d:48:91:85:eb:89:24:b8:d7:32: ea:f5:6f:0d:ff:86:bf:33:bb:92:20:ae:10:1b:28:1b:3d:38: 6f:14:fa:bf:ff:98:46:ca:6d:c7:08:b0:4f:38:1b:99:4f:64: fd:b2:1d:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQRxlEuNaXYehbYei2a51+F5aekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNjAyMDEwNjE1NDBaFw0yNjAyMDQxNDU2NDBaMDMxMTAvBgNV BAMTKDc4NUEzNjBENDNCRjNGQTJBNjRBQ0M4MUYzRjUxOEJDOERFMUI1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7npYiFvje9mB1/JzHWRQSsaA THFP6i4e3SKdQWI5QPCKjq93mP2Arfb5v5/QCOMqW6ULBOf1Eu/YBJD0/I1Ui2Zx N2P/GIovhH+jneNav1AL2tD6LHjvo5H+zl3ZLAU+oLgq2fW5OnBK6ZqCtNw1j5c1 oSub2tlyhQienhAT/qqSTuvtvg0k17LkqkdySEDgEnavVI0mjc3z8HCnPB+3fpNw ewyUefNqoqpYz7uttBoi+vxvnzmfQpGEl6Faam/lr+NUsqYf41+3KTJ3wRg0VsbQ iYOgg2ANFSHxQ33+9pNuSx4ATjTCNZ4t6tqsdaBMypZssJ4cBw6HyIvadxyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeFo2DUO/P6KmSsyB8/UYvI3htXMwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5CSgqv7ByWg1PUjbeeG49Vs4kjug9478Rr 1qWFIrMwXKytvoB8zv6mE/pcYgs8deqSw3Mnm1Hx6eLGuX7sgVkaoBLeYxXm0Maz JjxYtFL8pFs4GQ4f8ph7zMfrDi6UCVjQdroIlUj50zdsvPl95d6t7lAduiG1tlKv K6m8Bt7TKlELOrEWriUfx7T5jHYeGeTcFLJKS9hCvPUHoAK59vRXsesdmivNV5XT OQFvuoPoWTFiBu+EJT1trLmiiiFEmR3228bsPuNnC5uAaQH6nUiRheuJJLjXMur1 bw3/hr8zu5IgrhAbKBs9OG8U+r//mEbKbccIsE84G5lPZP2yHRY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:57 2026 by rpki-client