This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: PHNaU5WzhiU2UCpRvIIEol9Hru+UfBi4bWCqUWa9eJU= Subject key identifier: 00:0A:C1:14:62:D7:BC:68:2D:05:34:DB:9C:9F:35:24:1E:7A:00:35 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 20B10F4094487EA81576256396264B7FC09B854C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04DF Signing time: Sun 01 Feb 2026 08:41:45 +0000 Manifest this update: Sun 01 Feb 2026 08:36:45 +0000 Manifest next update: Wed 04 Feb 2026 12:19:45 +0000 Files and hashes: 1: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 2: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: o95vUkV+SnLKAEvBuUHNnKKqzHFnbyzD/TdvFw6AKdo=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 12:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b1:0f:40:94:48:7e:a8:15:76:25:63:96:26:4b:7f:c0:9b:85:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Feb 1 08:36:45 2026 GMT Not After : Feb 4 12:19:45 2026 GMT Subject: CN=000AC11462D7BC682D0534DB9C9F35241E7A0035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:64:fd:d4:b6:6c:11:01:5c:e7:df:78:5e: 9e:2b:a1:80:9c:ad:e3:12:4e:5f:3b:af:ce:46:9d: 52:5d:25:47:38:3c:66:41:fa:ee:fd:ee:b6:7b:cd: 59:95:01:ad:2d:ed:de:7d:3f:ab:8e:15:66:a2:03: cf:22:c3:85:1c:4d:fb:0b:d2:00:81:54:c1:20:fa: 79:07:f3:e4:7c:6a:cf:c1:38:2b:0f:c0:33:d2:ad: a6:b3:82:c3:75:d4:a6:73:98:f1:c7:3a:db:45:cb: 71:38:5c:91:25:e7:d2:cc:00:9d:15:b5:f2:69:75: af:1b:23:96:25:74:88:59:26:df:54:d2:c5:37:c5: 37:3e:f1:1c:b3:1e:af:99:c2:0b:b3:52:6c:e5:73: af:e0:f5:b1:47:d6:f8:92:0c:4c:91:2c:91:eb:27: 1d:f6:9e:a5:e1:fe:94:26:41:b4:1a:5f:6d:ef:60: e3:e3:6e:4c:bd:10:fa:86:f3:e5:10:a4:41:c8:c9: 54:86:73:41:a0:7e:bc:24:e5:8f:fd:20:06:50:31: 15:89:ee:bb:32:f0:81:2a:80:0d:7f:31:9f:df:9a: b4:fd:65:63:eb:d9:e4:fa:bc:f3:ba:2c:f7:b7:0b: fa:74:e0:b7:48:07:cc:60:8f:df:5c:37:7e:6d:25: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:C1:14:62:D7:BC:68:2D:05:34:DB:9C:9F:35:24:1E:7A:00:35 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f3:9d:0a:14:90:02:07:0d:0b:fe:dc:e0:90:11:3b:33:05: 24:81:f4:55:f5:47:38:95:82:e1:3b:68:ff:62:e7:f2:8a:f0: fd:51:3a:63:dc:4d:f8:fd:9d:37:45:82:82:8a:3e:30:d3:28: 67:45:04:37:14:34:1d:b0:f4:61:b7:d3:30:20:8e:b3:cc:8a: 71:aa:bd:70:24:fd:b8:35:4f:f3:31:3c:bf:1d:15:3a:11:22: 9e:71:78:6e:95:de:66:92:52:72:5f:fd:e5:dd:c7:1f:fc:23: 58:7f:5c:5f:aa:42:f5:bd:a2:98:02:a0:26:dc:c1:34:74:72: 6d:83:ed:50:e6:43:5f:06:fa:a4:5e:bd:04:4b:6e:27:64:98: 59:56:d6:a0:47:92:84:07:b3:a5:f7:83:bc:19:b9:de:09:40: 96:72:90:2a:c9:62:38:e8:0d:82:07:8d:85:93:3e:47:9a:21: 45:1b:46:a0:08:10:1a:8d:ad:e3:34:90:14:59:73:01:ae:55: a3:04:ca:8b:d9:0b:61:69:3e:50:c8:8d:28:a5:dc:4d:75:80: 59:95:40:28:7b:f3:51:64:aa:a8:a7:0d:cd:b2:cb:f0:eb:b8: 77:86:35:9e:00:b2:55:7c:dd:7f:0e:60:d7:8d:f1:32:14:74: 1b:27:61:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILEPQJRIfqgVdiVjliZLf8CbhUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNjAyMDEwODM2NDVaFw0yNjAyMDQxMjE5NDVaMDMxMTAvBgNV BAMTKDAwMEFDMTE0NjJEN0JDNjgyRDA1MzREQjlDOUYzNTI0MUU3QTAwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySWT91LZsEQFc5994Xp4roYCc reMSTl87r85GnVJdJUc4PGZB+u797rZ7zVmVAa0t7d59P6uOFWaiA88iw4UcTfsL 0gCBVMEg+nkH8+R8as/BOCsPwDPSraazgsN11KZzmPHHOttFy3E4XJEl59LMAJ0V tfJpda8bI5YldIhZJt9U0sU3xTc+8RyzHq+ZwguzUmzlc6/g9bFH1viSDEyRLJHr Jx32nqXh/pQmQbQaX23vYOPjbky9EPqG8+UQpEHIyVSGc0Ggfrwk5Y/9IAZQMRWJ 7rsy8IEqgA1/MZ/fmrT9ZWPr2eT6vPO6LPe3C/p04LdIB8xgj99cN35tJc5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAArBFGLXvGgtBTTbnJ81JB56ADUwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDznQoUkAIHDQv+3OCQETszBSSB9FX1RziV guE7aP9i5/KK8P1ROmPcTfj9nTdFgoKKPjDTKGdFBDcUNB2w9GG30zAgjrPMinGq vXAk/bg1T/MxPL8dFToRIp5xeG6V3maSUnJf/eXdxx/8I1h/XF+qQvW9opgCoCbc wTR0cm2D7VDmQ18G+qRevQRLbidkmFlW1qBHkoQHs6X3g7wZud4JQJZykCrJYjjo DYIHjYWTPkeaIUUbRqAIEBqNreM0kBRZcwGuVaMEyovZC2FpPlDIjSil3E11gFmV QCh781FkqqinDc2yy/DruHeGNZ4AslV83X8OYNeN8TIUdBsnYQw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:51 2026 by rpki-client