This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: OkI8Uy37Z/76Kt0m0fxf3Ixtl8RfBeN8CshUcZWG1mc= Subject key identifier: 07:C7:AE:9B:71:28:0B:7B:C8:FD:70:87:6B:42:DC:F6:FE:31:E2:6D Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 3327E8502E54B617B2B737C08926D93D4C4D1632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 01B2 Signing time: Sun 01 Feb 2026 00:32:45 +0000 Manifest this update: Sun 01 Feb 2026 00:27:45 +0000 Manifest next update: Wed 04 Feb 2026 08:45:45 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 4: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: ifK0Jp1ex0ucdQnGj+qjNKm3o8GjQXHzzvqwMI2hVko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:27:e8:50:2e:54:b6:17:b2:b7:37:c0:89:26:d9:3d:4c:4d:16:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Feb 1 00:27:45 2026 GMT Not After : Feb 4 08:45:45 2026 GMT Subject: CN=07C7AE9B71280B7BC8FD70876B42DCF6FE31E26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:21:41:f4:f6:15:b8:87:0c:3c:e2:e9:02: cf:3e:45:0f:af:84:01:65:5f:9b:05:6a:94:92:be: 1c:de:a0:24:fd:93:c7:7f:18:8f:69:30:3d:1b:7c: 58:c3:89:7e:57:e0:0b:8e:e4:2d:99:9c:75:bd:15: 4a:4c:bd:6f:b2:57:ac:97:fc:74:1b:16:43:99:e5: 69:56:c6:e6:29:01:1d:1d:51:eb:c7:ca:99:e2:b6: 56:17:f4:60:de:76:7b:0a:59:10:3c:91:c6:d8:a5: 5f:19:b1:95:c9:71:8f:25:5f:82:90:cc:52:0e:f8: 0e:af:bc:f3:06:ab:57:4d:0b:99:76:2a:a5:6b:ea: 1c:6d:27:06:fd:e9:45:b5:da:40:76:9b:36:96:66: e6:b5:20:fa:9e:14:29:e7:71:f0:8a:cd:5d:ad:16: 0a:1d:5b:c7:3a:1e:83:ad:7a:09:85:49:04:9e:3d: c5:39:29:3b:5d:f1:64:7f:0e:f4:17:03:63:b9:33: 8b:f2:18:ac:75:fe:78:d7:32:cf:ed:f8:8e:6d:1e: 46:29:e2:49:df:87:00:20:cc:5b:c5:e7:15:e3:41: 3a:d9:97:b4:af:e2:ab:7c:46:cd:64:4f:32:8b:8c: 04:70:01:54:f0:8c:90:8b:93:96:b8:33:1d:17:73: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C7:AE:9B:71:28:0B:7B:C8:FD:70:87:6B:42:DC:F6:FE:31:E2:6D X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d4:0a:b9:66:07:36:62:59:d4:52:9f:0a:fc:ba:72:a8:25: 81:34:71:04:09:19:ba:8d:ff:80:14:eb:44:99:f5:fc:61:48: 0f:79:7b:2d:75:b9:2e:fd:22:70:c4:b1:72:8a:e7:50:33:0c: 83:15:fa:6a:23:2b:0a:d1:78:40:2f:bc:a2:19:a7:83:79:8c: c8:cb:72:e4:b9:74:18:79:9e:fa:a6:e7:37:67:b6:76:ec:f0: 4b:b3:96:4a:c7:65:be:70:91:16:04:2c:c5:42:40:15:df:bb: dc:61:c5:2c:a6:92:88:e0:5a:09:d8:87:e5:b1:47:c1:2c:ca: 0f:14:e0:04:01:ad:a6:c5:57:d4:41:1f:54:bf:46:4b:56:1d: c0:b9:1a:bf:0e:02:f2:ff:9f:40:5e:df:a9:f2:f4:92:76:b5: 7c:ea:e4:84:f9:2e:0b:34:b6:2f:72:fd:04:98:b5:44:21:da: c1:2d:4d:1e:2e:e0:55:df:78:95:a0:05:a3:b3:a9:bc:52:cb: 74:3f:06:5d:63:b4:2b:70:37:30:7c:a4:55:6c:1d:4e:ea:36: 75:47:c6:5c:4e:08:b8:df:7a:fc:1e:73:61:2f:7a:69:45:9b: 45:89:fe:8c:ad:bf:da:a5:e5:e0:0e:90:90:c4:c6:7c:04:74: ff:0f:b7:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyfoUC5UtheytzfAiSbZPUxNFjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNjAyMDEwMDI3NDVaFw0yNjAyMDQwODQ1NDVaMDMxMTAvBgNV BAMTKDA3QzdBRTlCNzEyODBCN0JDOEZENzA4NzZCNDJEQ0Y2RkUzMUUyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPiFB9PYVuIcMPOLpAs8+RQ+v hAFlX5sFapSSvhzeoCT9k8d/GI9pMD0bfFjDiX5X4AuO5C2ZnHW9FUpMvW+yV6yX /HQbFkOZ5WlWxuYpAR0dUevHypnitlYX9GDednsKWRA8kcbYpV8ZsZXJcY8lX4KQ zFIO+A6vvPMGq1dNC5l2KqVr6hxtJwb96UW12kB2mzaWZua1IPqeFCnncfCKzV2t FgodW8c6HoOtegmFSQSePcU5KTtd8WR/DvQXA2O5M4vyGKx1/njXMs/t+I5tHkYp 4knfhwAgzFvF5xXjQTrZl7Sv4qt8Rs1kTzKLjARwAVTwjJCLk5a4Mx0Xc3UtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB8eum3EoC3vI/XCHa0Lc9v4x4m0wHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbUCrlmBzZiWdRSnwr8unKoJYE0cQQJGbqN /4AU60SZ9fxhSA95ey11uS79InDEsXKK51AzDIMV+mojKwrReEAvvKIZp4N5jMjL cuS5dBh5nvqm5zdntnbs8EuzlkrHZb5wkRYELMVCQBXfu9xhxSymkojgWgnYh+Wx R8Esyg8U4AQBrabFV9RBH1S/RktWHcC5Gr8OAvL/n0Be36ny9JJ2tXzq5IT5Lgs0 ti9y/QSYtUQh2sEtTR4u4FXfeJWgBaOzqbxSy3Q/Bl1jtCtwNzB8pFVsHU7qNnVH xlxOCLjfevwec2EvemlFm0WJ/oytv9ql5eAOkJDExnwEdP8Pt2Q= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:45 2026 by rpki-client