This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: KTFOb4jpKH6j+eectwsVB+EMSoGtnocqQHOeAwWkD7c= Subject key identifier: F9:1E:E0:D6:29:2E:C2:50:C1:4E:2D:F1:4D:04:63:DE:68:4D:B4:81 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 11BFDB647D877F7AC3918EE6C1A007CCEB5FAA79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0288 Signing time: Sat 31 Jan 2026 09:32:14 +0000 Manifest this update: Sat 31 Jan 2026 09:27:14 +0000 Manifest next update: Tue 03 Feb 2026 15:44:14 +0000 Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: i+MoEz8eS3RKxf5DE+oBdBXLAZikYN1wJCHUVs+azh0=) 2: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=) 3: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: fnpzhwrWJtuVRCEk/Brv5fn3t/Tkqr0TAzzp3HgzG50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bf:db:64:7d:87:7f:7a:c3:91:8e:e6:c1:a0:07:cc:eb:5f:aa:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Jan 31 09:27:14 2026 GMT Not After : Feb 3 15:44:14 2026 GMT Subject: CN=F91EE0D6292EC250C14E2DF14D0463DE684DB481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:88:9c:fd:a2:4b:18:27:c9:fa:2a:93:bc: e5:d0:b4:a8:f8:16:53:36:89:5b:cc:46:16:83:a0: c3:98:4d:2b:72:db:96:84:16:14:f8:24:d9:af:b0: 56:67:28:e0:84:db:8a:75:56:e4:95:d3:55:ca:e8: 91:25:75:40:b1:df:cd:c1:e6:84:18:0d:f8:a3:29: 19:75:82:ff:98:07:fc:68:ce:4c:20:69:02:04:d8: 50:db:a8:08:da:10:d6:e7:c8:74:dc:d7:2e:82:04: 6d:45:83:37:2b:23:c3:01:32:09:c1:e5:bd:2a:44: 2f:2d:7a:7f:5b:21:99:17:5b:20:dc:35:36:97:8e: 6f:d8:2e:64:1d:2b:58:fe:86:46:17:28:e3:db:68: 71:86:2d:d6:bb:d4:33:18:be:e5:27:8d:72:1a:cb: b3:89:0f:69:e3:7a:66:ad:aa:5e:6e:79:16:3e:85: 18:0f:7b:7e:f0:51:a3:5b:d6:f4:9b:a6:79:c3:a7: 25:10:d8:64:df:33:57:81:1e:74:47:90:9c:50:a7: f5:79:0d:b2:c4:b7:9e:b2:63:31:85:2d:8e:38:74: 23:17:30:31:4e:c6:29:34:55:cc:bb:a9:3a:24:74: 0c:cb:d2:12:d2:88:5a:74:a9:42:af:96:4a:44:8e: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1E:E0:D6:29:2E:C2:50:C1:4E:2D:F1:4D:04:63:DE:68:4D:B4:81 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:19:bd:22:5f:cd:f2:a2:e1:96:e4:eb:96:21:7a:39:d2:64: 99:2a:b4:05:91:48:60:1e:42:b0:73:54:80:46:3f:d9:8d:a9: 17:80:20:8f:a4:12:0b:1b:30:33:fc:2c:01:95:40:bc:31:05: fd:0f:3e:b7:73:2c:7a:27:e8:c3:84:ee:99:13:23:09:a1:43: 11:b9:e1:3a:26:29:1f:8c:84:46:fd:ea:61:84:83:4d:3d:e1: 62:e4:cf:65:ac:7d:cc:e6:6b:b4:78:a3:fa:1a:2e:1d:92:fb: 61:5d:83:5a:72:9f:89:cd:8a:3f:8e:0d:31:7e:f1:eb:3e:14: 8e:62:97:a8:98:37:94:a8:7f:dd:2c:7b:c6:06:1f:cc:4f:d0: 21:15:ea:59:90:26:e2:df:87:7b:f3:ee:cd:b2:0c:d3:8a:c3: 37:cf:ef:55:1b:ca:ed:b9:6d:c8:0b:5e:b1:16:3d:4b:3d:6e: 01:cc:94:49:22:95:84:ea:68:05:db:15:01:77:ac:ba:f6:51: 18:ca:5f:dd:fc:d4:35:a2:5c:d5:a1:d7:36:b6:39:37:0d:80: ae:07:75:e4:83:9e:c8:53:a4:27:18:7f:41:f0:f6:2e:84:aa: bd:6b:74:69:a6:54:6a:33:71:ad:a9:b6:a7:05:30:7a:6f:ea: d6:d3:50:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEb/bZH2Hf3rDkY7mwaAHzOtfqnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNjAxMzEwOTI3MTRaFw0yNjAyMDMxNTQ0MTRaMDMxMTAvBgNV BAMTKEY5MUVFMEQ2MjkyRUMyNTBDMTRFMkRGMTREMDQ2M0RFNjg0REI0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhYic/aJLGCfJ+iqTvOXQtKj4 FlM2iVvMRhaDoMOYTSty25aEFhT4JNmvsFZnKOCE24p1VuSV01XK6JEldUCx383B 5oQYDfijKRl1gv+YB/xozkwgaQIE2FDbqAjaENbnyHTc1y6CBG1FgzcrI8MBMgnB 5b0qRC8ten9bIZkXWyDcNTaXjm/YLmQdK1j+hkYXKOPbaHGGLda71DMYvuUnjXIa y7OJD2njematql5ueRY+hRgPe37wUaNb1vSbpnnDpyUQ2GTfM1eBHnRHkJxQp/V5 DbLEt56yYzGFLY44dCMXMDFOxik0Vcy7qTokdAzL0hLSiFp0qUKvlkpEjnBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+R7g1ikuwlDBTi3xTQRj3mhNtIEwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoZvSJfzfKi4Zbk65YhejnSZJkqtAWRSGAe QrBzVIBGP9mNqReAII+kEgsbMDP8LAGVQLwxBf0PPrdzLHon6MOE7pkTIwmhQxG5 4TomKR+MhEb96mGEg0094WLkz2Wsfczma7R4o/oaLh2S+2Fdg1pyn4nNij+ODTF+ 8es+FI5il6iYN5Sof90se8YGH8xP0CEV6lmQJuLfh3vz7s2yDNOKwzfP71Ubyu25 bcgLXrEWPUs9bgHMlEkilYTqaAXbFQF3rLr2URjKX9381DWiXNWh1za2OTcNgK4H deSDnshTpCcYf0Hw9i6Eqr1rdGmmVGozca2ptqcFMHpv6tbTUA0= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:21 2026 by rpki-client