This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: zxbn7aCduVnwh1SzKO5cY/PygWeFR7zDMf8Bk7YYVn4= Subject key identifier: 13:25:58:A2:09:67:66:10:F0:DE:42:89:B1:56:BA:B6:29:A3:B3:A9 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 305DDCABDC1ECCD3FBD6A195499FFB64792C2DDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 0502 Signing time: Sun 01 Feb 2026 10:41:51 +0000 Manifest this update: Sun 01 Feb 2026 10:36:51 +0000 Manifest next update: Wed 04 Feb 2026 21:08:51 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 2: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: bIaYQlKCHckoMgDhSxUYEDkcgiCZsJPETgyyUtQjMW4=) 3: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) 4: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5d:dc:ab:dc:1e:cc:d3:fb:d6:a1:95:49:9f:fb:64:79:2c:2d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Feb 1 10:36:51 2026 GMT Not After : Feb 4 21:08:51 2026 GMT Subject: CN=132558A209676610F0DE4289B156BAB629A3B3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:c9:1e:da:53:05:e2:0a:41:03:d7:90:4a: 2f:4c:82:ac:a5:ea:30:cd:2a:f2:9f:42:09:8d:79: f7:9d:aa:0a:c7:4c:9f:9f:21:40:ca:26:cc:a9:33: b0:15:a9:f0:1b:f0:ce:bb:b5:59:f1:e4:a6:c1:c8: 35:73:e4:5e:a7:83:ce:15:c8:4e:0c:f3:10:a1:a7: 63:cd:20:29:a7:27:1b:d2:32:7a:69:cd:34:fc:75: 63:99:f9:7e:55:af:9e:20:67:1e:e7:83:e7:82:17: 1c:28:ae:1c:3f:ee:10:8f:34:69:aa:b3:96:d4:78: 00:f2:5a:82:87:8d:b2:62:6f:08:5a:6e:cf:67:32: 38:b2:b8:b9:2e:a6:c6:19:c7:db:4d:9f:e1:90:d1: e2:2a:1f:9b:3b:a9:45:51:62:54:11:f4:a3:15:51: a2:86:03:d7:2a:5b:cc:fb:10:00:80:62:ae:56:ed: 6f:07:11:20:13:ac:65:a6:45:a4:dc:be:70:4b:e9: c7:ab:35:7e:e8:ed:15:42:a2:67:01:a1:64:6f:a3: 3a:74:03:db:f4:92:02:f4:fe:e0:91:2e:41:f6:51: 1e:67:64:b5:88:1b:e6:56:c9:36:fe:bf:25:7b:f8: f1:2f:3b:19:2d:bf:89:20:0e:1c:ea:d1:bd:10:e1: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:58:A2:09:67:66:10:F0:DE:42:89:B1:56:BA:B6:29:A3:B3:A9 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5e:64:36:45:59:b9:dd:21:04:c9:ac:e4:1c:3a:8d:4b:08: 04:3b:e7:86:c6:84:76:ba:ee:94:17:f7:8e:e7:69:ea:a3:8e: 35:1d:2e:77:15:90:50:6b:c4:74:84:33:86:7b:a1:a2:4f:88: 84:f2:dc:8a:06:f8:b8:d1:d2:06:56:33:37:54:33:40:5b:01: 0b:fb:c8:73:c0:46:bb:36:b6:f9:52:95:7a:fc:43:c5:31:11: 0e:bc:81:06:ca:a3:10:9c:7c:5b:b1:5a:72:58:ba:e0:84:78: e4:87:8e:c2:1e:52:e7:93:37:88:80:74:88:12:4e:a3:fc:1f: 16:47:8e:3c:4a:b6:a1:20:28:89:17:e8:e3:1f:c2:69:eb:5e: e7:0e:ef:8a:16:83:e6:d9:7c:f5:05:77:e6:65:a3:cc:51:4e: f5:79:21:28:70:e8:27:47:5d:64:fa:0b:a1:a0:49:98:e6:fe: 2a:59:f9:6b:78:e9:09:43:67:4c:c0:d5:2b:55:c5:06:be:b7: 20:9d:6c:25:69:fc:ab:0d:e9:5b:61:8c:7a:8d:53:61:77:36: 1c:f1:24:28:3e:5a:ab:90:26:d7:80:6a:af:40:64:1e:eb:24: 26:02:39:07:db:0f:b9:24:73:07:3d:04:5f:66:0f:5c:2b:23: f9:a8:38:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMF3cq9wezNP71qGVSZ/7ZHksLdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNjAyMDExMDM2NTFaFw0yNjAyMDQyMTA4NTFaMDMxMTAvBgNV BAMTKDEzMjU1OEEyMDk2NzY2MTBGMERFNDI4OUIxNTZCQUI2MjlBM0IzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/cke2lMF4gpBA9eQSi9Mgqyl 6jDNKvKfQgmNefedqgrHTJ+fIUDKJsypM7AVqfAb8M67tVnx5KbByDVz5F6ng84V yE4M8xChp2PNICmnJxvSMnppzTT8dWOZ+X5Vr54gZx7ng+eCFxworhw/7hCPNGmq s5bUeADyWoKHjbJibwhabs9nMjiyuLkupsYZx9tNn+GQ0eIqH5s7qUVRYlQR9KMV UaKGA9cqW8z7EACAYq5W7W8HESATrGWmRaTcvnBL6cerNX7o7RVComcBoWRvozp0 A9v0kgL0/uCRLkH2UR5nZLWIG+ZWyTb+vyV7+PEvOxktv4kgDhzq0b0Q4VChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEyVYoglnZhDw3kKJsVa6timjs6kwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIReZDZFWbndIQTJrOQcOo1LCAQ754bGhHa6 7pQX947naeqjjjUdLncVkFBrxHSEM4Z7oaJPiITy3IoG+LjR0gZWMzdUM0BbAQv7 yHPARrs2tvlSlXr8Q8UxEQ68gQbKoxCcfFuxWnJYuuCEeOSHjsIeUueTN4iAdIgS TqP8HxZHjjxKtqEgKIkX6OMfwmnrXucO74oWg+bZfPUFd+Zlo8xRTvV5IShw6CdH XWT6C6GgSZjm/ipZ+Wt46QlDZ0zA1StVxQa+tyCdbCVp/KsN6VthjHqNU2F3Nhzx JCg+WquQJteAaq9AZB7rJCYCOQfbD7kkcwc9BF9mD1wrI/moOHA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:08 2026 by rpki-client