This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: DlSXDyzf6z3XbOtvXOrbBiPQ2N7AUF1uXnL3cwcJQ68= Subject key identifier: 99:20:DE:E6:11:D0:5E:CA:6C:AC:13:F6:1B:24:61:D6:DD:4D:AF:79 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 4DFB5E8D8902517848261619B9BA7332E0723348 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0541 Signing time: Sat 31 Jan 2026 10:01:20 +0000 Manifest this update: Sat 31 Jan 2026 09:56:20 +0000 Manifest next update: Tue 03 Feb 2026 15:34:20 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 2: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 3: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 5: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: DBQlQSAXktiuqNVZKef9CeYPrwQXwOP1iMHfJws3Bp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fb:5e:8d:89:02:51:78:48:26:16:19:b9:ba:73:32:e0:72:33:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Jan 31 09:56:20 2026 GMT Not After : Feb 3 15:34:20 2026 GMT Subject: CN=9920DEE611D05ECA6CAC13F61B2461D6DD4DAF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:e9:f9:1e:56:48:d2:9e:9f:9d:4b:aa:31: 6d:80:49:fb:a1:41:35:c6:cd:3b:4b:0a:4a:5b:59: 0f:6f:22:35:95:81:30:e3:d0:14:92:2d:16:8e:28: ec:31:ef:71:65:bf:52:92:bb:6b:20:08:d7:44:29: 06:18:a1:33:4a:e6:29:8a:cd:1d:79:96:12:dd:54: 49:50:15:fa:64:98:1a:91:12:6d:ce:43:aa:d4:9e: ff:c5:0c:e0:c5:bb:de:77:3e:1e:78:ba:d5:00:90: 4a:6f:4e:f7:87:e0:4e:f1:87:0a:65:75:50:9e:f0: 69:8f:2a:b3:7d:05:2d:57:b8:eb:08:74:a8:7e:78: 67:c7:f2:88:cd:f2:f1:b5:13:86:c2:c0:b0:55:e0: d4:87:f7:9c:f8:8a:39:24:0c:d8:42:14:b5:5e:cc: c4:f1:3c:ec:5e:df:b2:d7:31:fd:82:57:99:18:b7: 8a:63:95:e3:8a:64:a4:85:d6:d4:13:2a:96:ec:2b: b8:4b:64:82:1d:0b:fa:2d:f5:99:21:1a:f1:f5:c6: 56:6c:e0:b0:11:f6:cb:2f:c9:b0:96:3d:f8:39:86: 16:21:6a:06:4d:d3:ab:46:08:37:ad:b5:9f:77:f5: 2d:6f:8e:ba:d5:37:82:1e:1d:43:e9:74:da:54:e4: 68:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:20:DE:E6:11:D0:5E:CA:6C:AC:13:F6:1B:24:61:D6:DD:4D:AF:79 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ae:2c:8e:10:93:36:0c:ee:92:09:c3:d5:e1:4e:cb:fd:c5: ed:6c:bb:9b:3b:78:09:16:af:25:de:78:72:c2:13:c7:ad:1b: b3:21:32:ce:d3:58:72:0f:ce:b9:ea:27:68:78:ce:70:7d:60: fe:6e:25:ea:7e:14:d8:d4:00:a2:80:d4:19:a5:58:9d:a3:20: c1:9b:17:4c:79:2f:ac:28:cf:e3:a4:b7:14:8c:26:1c:6e:21: 25:cf:45:09:51:27:a1:3b:b3:85:31:57:a3:14:00:61:09:06: ff:77:ad:4e:a6:b1:9e:36:73:8b:87:b6:f7:aa:01:4a:cd:d1: f4:0e:b8:ea:e3:79:5c:b3:0a:cd:f7:7a:aa:d0:38:16:bc:9b: 58:74:4b:6f:7b:2d:8a:8c:49:b8:41:1a:88:49:77:5b:d8:27: 41:f6:6c:ee:9f:90:ee:3b:03:7b:14:f8:25:69:b7:d3:3f:38: 03:a4:3c:f8:a1:59:fd:14:9e:44:ec:d7:06:fa:bc:1e:3e:fa: 51:39:0d:0c:d5:cb:e5:5c:bb:8e:b9:f3:92:66:2e:ef:7f:54: 74:d7:84:bb:1d:01:03:ae:db:05:e8:98:ee:c8:07:06:f8:28: 9b:42:d0:22:a4:30:6d:d0:d5:a4:61:45:eb:13:b1:06:d6:48: e1:92:5e:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTftejYkCUXhIJhYZubpzMuByM0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNjAxMzEwOTU2MjBaFw0yNjAyMDMxNTM0MjBaMDMxMTAvBgNV BAMTKDk5MjBERUU2MTFEMDVFQ0E2Q0FDMTNGNjFCMjQ2MUQ2REQ0REFGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Mun5HlZI0p6fnUuqMW2ASfuh QTXGzTtLCkpbWQ9vIjWVgTDj0BSSLRaOKOwx73Flv1KSu2sgCNdEKQYYoTNK5imK zR15lhLdVElQFfpkmBqREm3OQ6rUnv/FDODFu953Ph54utUAkEpvTveH4E7xhwpl dVCe8GmPKrN9BS1XuOsIdKh+eGfH8ojN8vG1E4bCwLBV4NSH95z4ijkkDNhCFLVe zMTxPOxe37LXMf2CV5kYt4pjleOKZKSF1tQTKpbsK7hLZIIdC/ot9ZkhGvH1xlZs 4LAR9ssvybCWPfg5hhYhagZN06tGCDettZ939S1vjrrVN4IeHUPpdNpU5GifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSDe5hHQXspsrBP2GyRh1t1Nr3kwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCuLI4QkzYM7pIJw9XhTsv9xe1su5s7eAkW ryXeeHLCE8etG7MhMs7TWHIPzrnqJ2h4znB9YP5uJep+FNjUAKKA1BmlWJ2jIMGb F0x5L6woz+OktxSMJhxuISXPRQlRJ6E7s4UxV6MUAGEJBv93rU6msZ42c4uHtveq AUrN0fQOuOrjeVyzCs33eqrQOBa8m1h0S297LYqMSbhBGohJd1vYJ0H2bO6fkO47 A3sU+CVpt9M/OAOkPPihWf0UnkTs1wb6vB4++lE5DQzVy+Vcu46585JmLu9/VHTX hLsdAQOu2wXomO7IBwb4KJtC0CKkMG3Q1aRhResTsQbWSOGSXos= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:59 2026 by rpki-client