This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: YlHRU9ib7xCITzXhCKT+mCD0BZomZCPEZgLrEvzEI9s= Subject key identifier: B9:DD:A6:B8:9D:60:FD:46:9C:85:06:12:D3:E9:0A:20:3A:6E:D9:1A Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 604E6353AE4B864EA3E08920D759800B4CB1D4C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0259 Signing time: Sun 01 Feb 2026 13:10:48 +0000 Manifest this update: Sun 01 Feb 2026 13:05:48 +0000 Manifest next update: Wed 04 Feb 2026 21:41:48 +0000 Files and hashes: 1: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 2: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: pk4f0f63AQkt176SXUD1KjF2yyVu3k1gWsAW9zybT1I=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4e:63:53:ae:4b:86:4e:a3:e0:89:20:d7:59:80:0b:4c:b1:d4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Feb 1 13:05:48 2026 GMT Not After : Feb 4 21:41:48 2026 GMT Subject: CN=B9DDA6B89D60FD469C850612D3E90A203A6ED91A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:7e:eb:dd:b8:be:74:db:58:ad:59:ee:fa: c5:bc:6a:0c:56:9d:0b:29:e1:42:1a:ac:94:a6:77: 9a:98:b8:5a:c0:53:62:27:2f:c2:9c:b6:45:e2:d5: 11:1a:cd:11:34:34:ea:00:74:30:57:75:13:b9:6e: 21:e1:b2:36:ca:97:c3:6a:9f:76:6b:bc:97:63:7b: cf:24:d0:19:64:9c:fb:4c:ad:c7:62:21:91:1a:44: b2:0a:76:36:34:40:e3:56:3a:6e:5c:f8:be:6d:1b: ba:8d:a2:87:35:58:f4:b4:28:9e:15:41:c3:e9:11: 88:3e:4b:ba:85:fa:4a:0e:62:a8:6a:82:d8:ce:e3: 86:db:4c:83:f3:cf:c9:d6:b2:16:05:05:8f:51:28: 3d:a2:48:36:5c:e0:17:b2:4b:81:72:82:9d:05:07: a8:97:7d:b3:fc:de:c7:e2:8b:25:01:04:f7:55:4a: d5:5e:c7:1a:d7:d9:c4:9c:25:76:50:9b:bb:95:c9: 8e:ed:05:74:8e:c4:f1:98:41:4c:61:53:9c:a8:7f: 70:56:48:4c:4a:50:77:01:36:1c:67:89:e3:9b:48: 6b:ce:bf:e4:9d:5f:69:11:40:bf:0e:4d:f1:15:1d: 7f:0a:28:72:1d:03:c3:b3:77:19:4a:90:f7:f4:1f: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:A6:B8:9D:60:FD:46:9C:85:06:12:D3:E9:0A:20:3A:6E:D9:1A X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:82:7b:53:77:29:71:91:38:8b:00:e8:0b:5b:97:ad:09:57: 39:33:67:bd:00:99:27:ec:07:06:72:60:fa:32:c5:8c:29:a6: 6b:02:66:5a:31:0f:ca:26:41:bf:3b:a1:7c:d7:d0:9d:26:f9: 9a:ac:7d:85:3c:11:57:45:ed:2f:49:1a:2e:cd:c8:ac:ef:1e: f7:3b:86:7d:16:19:81:3e:f7:b6:77:2b:a2:c6:8c:03:f2:18: 56:f1:05:49:bb:18:93:76:f4:29:cf:c9:64:cf:48:72:a2:6e: 9f:10:96:37:53:3e:7f:02:02:dc:ed:46:01:e8:31:b5:6b:b6: cd:7a:cd:72:0b:bf:12:e2:20:e9:60:5e:27:1d:37:5f:82:e8: 7f:66:e5:72:73:6e:00:89:0a:36:e8:e2:af:c6:6a:48:f4:c1: d0:9c:49:38:e6:60:c8:22:da:e7:95:09:8e:28:db:04:91:ee: e0:6a:5d:09:a0:bc:69:e9:38:cf:c6:5c:d2:d5:d0:46:80:9a: f4:9f:f2:8d:e9:b6:2d:50:ea:5e:e6:dd:6c:e3:53:40:85:c0: 52:e5:52:c8:3e:02:fb:d2:6d:81:1e:12:d6:81:21:da:cd:ae: d8:be:1a:92:88:bd:af:b4:0d:51:aa:e0:09:12:6a:fe:c2:6b: 41:3f:e4:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE5jU65Lhk6j4Ikg11mAC0yx1MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNjAyMDExMzA1NDhaFw0yNjAyMDQyMTQxNDhaMDMxMTAvBgNV BAMTKEI5RERBNkI4OUQ2MEZENDY5Qzg1MDYxMkQzRTkwQTIwM0E2RUQ5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve37r3bi+dNtYrVnu+sW8agxW nQsp4UIarJSmd5qYuFrAU2InL8KctkXi1REazRE0NOoAdDBXdRO5biHhsjbKl8Nq n3ZrvJdje88k0BlknPtMrcdiIZEaRLIKdjY0QONWOm5c+L5tG7qNooc1WPS0KJ4V QcPpEYg+S7qF+koOYqhqgtjO44bbTIPzz8nWshYFBY9RKD2iSDZc4BeyS4Fygp0F B6iXfbP83sfiiyUBBPdVStVexxrX2cScJXZQm7uVyY7tBXSOxPGYQUxhU5yof3BW SExKUHcBNhxnieObSGvOv+SdX2kRQL8OTfEVHX8KKHIdA8OzdxlKkPf0H7WDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUud2muJ1g/UachQYS0+kKIDpu2RowHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCCe1N3KXGROIsA6Atbl60JVzkzZ70AmSfs BwZyYPoyxYwppmsCZloxD8omQb87oXzX0J0m+ZqsfYU8EVdF7S9JGi7NyKzvHvc7 hn0WGYE+97Z3K6LGjAPyGFbxBUm7GJN29CnPyWTPSHKibp8QljdTPn8CAtztRgHo MbVrts16zXILvxLiIOlgXicdN1+C6H9m5XJzbgCJCjbo4q/Gakj0wdCcSTjmYMgi 2ueVCY4o2wSR7uBqXQmgvGnpOM/GXNLV0EaAmvSf8o3pti1Q6l7m3WzjU0CFwFLl Usg+AvvSbYEeEtaBIdrNrti+GpKIva+0DVGq4AkSav7Ca0E/5O4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:15 2026 by rpki-client