This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: nmb4nC0eiJFGQwEVM69Zqcl0PEO+UeD1AXUEMfrEf+E= Subject key identifier: D4:40:BB:10:B8:F1:9F:43:4C:FC:F8:CA:09:FF:FF:15:AC:45:5B:BC Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 4EAB7E784536F97324564E0DDD4D41DCA8F777A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 0285 Signing time: Mon 02 Feb 2026 04:52:19 +0000 Manifest this update: Mon 02 Feb 2026 04:47:19 +0000 Manifest next update: Thu 05 Feb 2026 15:05:19 +0000 Files and hashes: 1: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: GkgIUj3iLnoDBgSLwsXcxjcRmy20+p6SRzqI9r3pCJc=) 2: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: dJ48+N7DnAPMlFVVdm79c3GqAaF0/rFXKq0WJY2Deco=) 3: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: it5Y8uFhllmL1qnw/+3j2vvqBc+psgWABpreLSlxm7g=) 4: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: KdryargeIqiffwYupqsX1uiOw2sgJxDwDmYHhrfT8ZA=) 5: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: GqDgDYZHwoD6s9CHkugs2Z1R9R08+t73eMRbzWBmBRU=) 6: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: rc6uQwgmxMPNI/udu7ewE+1J0IYpbvCujs0iJok+o4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ab:7e:78:45:36:f9:73:24:56:4e:0d:dd:4d:41:dc:a8:f7:77:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Feb 2 04:47:19 2026 GMT Not After : Feb 5 15:05:19 2026 GMT Subject: CN=D440BB10B8F19F434CFCF8CA09FFFF15AC455BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:70:44:28:5e:29:0a:df:7b:e1:a4:f1:8c: a1:2e:80:35:ca:8a:4f:a3:70:f3:43:2d:c7:59:d1: f0:03:10:d0:f0:96:db:4c:02:02:87:69:5d:e4:0c: a4:bf:70:93:97:82:d5:0a:a5:e2:c0:e1:dd:a6:92: 5f:03:bd:fe:09:61:7d:62:c0:99:1c:8e:29:8f:5d: 45:fd:a4:67:9a:57:a6:97:ca:66:f6:dd:ed:b8:37: 57:ce:cc:95:18:c8:51:d1:c6:50:ee:fd:5e:c8:19: 9d:89:6a:e7:f2:32:fb:8a:25:2f:ab:87:f2:5d:19: 00:4c:d5:8b:32:3a:20:a6:12:db:b6:23:75:93:cd: dc:63:99:de:31:bc:bd:cf:8b:9d:b4:9c:cf:55:cf: cd:7d:ca:7c:2e:50:93:f0:30:37:2a:0e:5b:b5:bf: 25:4e:b8:8b:bf:ee:39:b7:53:c2:01:e9:23:5a:af: 33:6a:03:a9:a0:40:71:32:8b:d5:48:e4:0a:52:5f: 9a:50:ab:44:c7:5b:f0:f0:6f:82:5f:7e:40:3e:c0: 48:59:75:51:71:af:2f:88:f4:93:cb:43:d9:7d:06: a9:87:83:6f:31:7f:81:16:b8:5f:70:c2:a3:90:09: eb:68:15:a0:1f:05:89:e4:fd:56:d4:3b:49:c1:0f: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:BB:10:B8:F1:9F:43:4C:FC:F8:CA:09:FF:FF:15:AC:45:5B:BC X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5d:a2:45:99:6d:22:58:5d:56:ad:63:e3:7e:1a:f7:82:3f: 87:9c:2c:cb:83:0a:99:85:dd:36:3c:88:43:3e:ec:9a:a2:96: e2:29:f5:d0:31:b3:f4:fa:bf:98:f9:da:43:24:e0:e8:55:fa: 1c:08:8c:ba:4f:2b:79:36:f1:da:d9:f0:0a:ed:90:29:81:e8: c6:e7:b2:1e:0c:5a:ac:f1:33:1c:f0:e3:f1:82:a5:8b:b3:de: ce:f1:30:bc:c6:9b:aa:d7:c5:ce:96:94:31:72:3f:d0:9d:37: 41:f0:ca:7f:0d:4f:0e:c3:69:5a:97:ae:c2:ca:7f:23:c3:16: 0d:51:83:4e:b4:5a:cf:36:cb:40:cc:d0:17:59:68:56:eb:86: cb:79:00:d7:86:b4:dc:03:da:92:6f:5f:54:f8:33:d9:1d:40: 40:d7:93:89:71:ea:ba:1a:56:31:9d:6d:20:3c:8d:c0:b6:7f: ae:e5:ca:41:f1:1b:59:77:0c:7b:24:b9:52:34:f1:c8:37:51: a6:24:d9:6c:30:4f:0d:77:a5:e7:ff:a5:70:23:05:d7:e6:2d: 7c:38:5d:1a:19:4e:6d:fb:13:a7:c8:ea:c5:bb:b3:81:45:4f: 2e:7d:b0:2d:06:88:f0:27:e1:53:9f:a0:a2:a1:bf:50:f7:1c: bf:b8:c1:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqt+eEU2+XMkVk4N3U1B3Kj3d6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNjAyMDIwNDQ3MTlaFw0yNjAyMDUxNTA1MTlaMDMxMTAvBgNV BAMTKEQ0NDBCQjEwQjhGMTlGNDM0Q0ZDRjhDQTA5RkZGRjE1QUM0NTVCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCto3BEKF4pCt974aTxjKEugDXK ik+jcPNDLcdZ0fADENDwlttMAgKHaV3kDKS/cJOXgtUKpeLA4d2mkl8Dvf4JYX1i wJkcjimPXUX9pGeaV6aXymb23e24N1fOzJUYyFHRxlDu/V7IGZ2JaufyMvuKJS+r h/JdGQBM1YsyOiCmEtu2I3WTzdxjmd4xvL3Pi520nM9Vz819ynwuUJPwMDcqDlu1 vyVOuIu/7jm3U8IB6SNarzNqA6mgQHEyi9VI5ApSX5pQq0THW/Dwb4JffkA+wEhZ dVFxry+I9JPLQ9l9BqmHg28xf4EWuF9wwqOQCetoFaAfBYnk/VbUO0nBD6zbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1EC7ELjxn0NM/PjKCf//FaxFW7wwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNdokWZbSJYXVatY+N+GveCP4ecLMuDCpmF 3TY8iEM+7JqiluIp9dAxs/T6v5j52kMk4OhV+hwIjLpPK3k28drZ8ArtkCmB6Mbn sh4MWqzxMxzw4/GCpYuz3s7xMLzGm6rXxc6WlDFyP9CdN0Hwyn8NTw7DaVqXrsLK fyPDFg1Rg060Ws82y0DM0BdZaFbrhst5ANeGtNwD2pJvX1T4M9kdQEDXk4lx6roa VjGdbSA8jcC2f67lykHxG1l3DHskuVI08cg3UaYk2WwwTw13pef/pXAjBdfmLXw4 XRoZTm37E6fI6sW7s4FFTy59sC0GiPAn4VOfoKKhv1D3HL+4wes= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:11 2026 by rpki-client