This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: UHWvXBz/XjApxDUEr33xBYKmuTIJcANiMRqsop2w9d0= Subject key identifier: F6:C2:49:F7:BE:5E:8F:48:65:86:91:5A:EE:1C:E9:3B:22:D1:54:C7 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 0DE070FCA1A37F28AA3B2524455D234684B81135 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 01B0 Signing time: Sun 01 Feb 2026 17:41:48 +0000 Manifest this update: Sun 01 Feb 2026 17:36:48 +0000 Manifest next update: Wed 04 Feb 2026 22:59:48 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) 3: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: NjJvawmzeD7kFXvzT2fLyrz/J9n39PyiJdnvq8o+KkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e0:70:fc:a1:a3:7f:28:aa:3b:25:24:45:5d:23:46:84:b8:11:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Feb 1 17:36:48 2026 GMT Not After : Feb 4 22:59:48 2026 GMT Subject: CN=F6C249F7BE5E8F486586915AEE1CE93B22D154C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:bd:3e:69:4e:ae:8b:80:38:25:28:21:f3: 40:b2:78:c6:36:d5:37:ba:f8:a7:31:c0:4f:85:59: ce:fe:70:36:29:48:4f:15:9c:61:19:31:8b:4f:f6: 7f:d7:0a:23:61:0c:49:07:f9:e1:49:57:eb:a3:4a: cf:d4:27:82:45:17:60:67:6d:b7:a2:c4:2d:1c:8e: 0c:97:3f:ac:d4:ae:11:58:ad:1b:0f:96:76:b1:29: 33:37:59:b9:4c:12:c8:07:12:a4:71:c3:eb:d3:2f: f4:9c:89:26:39:7b:06:96:14:5f:7b:5f:00:36:ff: 86:9c:31:94:9e:cd:14:07:27:c4:1e:fc:9b:80:8d: bf:86:d2:c2:98:e5:ec:68:b2:4f:e4:64:08:fa:99: 63:00:e4:6b:43:17:1e:6a:17:98:ba:d2:94:5e:9a: b8:9a:28:51:36:a2:3b:e4:29:33:0e:ef:9e:d0:de: 67:1f:6a:78:e6:b0:9b:37:93:68:29:14:8c:00:39: a3:be:a6:d1:af:cb:76:2a:ac:f1:02:be:3e:5b:f3: 83:12:3b:0a:68:fa:48:e3:3b:c3:b6:0e:12:74:7c: de:1d:9e:9d:f1:62:00:8f:23:0d:92:56:97:cf:c4: f8:c1:f3:5d:35:6d:89:4f:3e:fa:f6:43:18:18:8d: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C2:49:F7:BE:5E:8F:48:65:86:91:5A:EE:1C:E9:3B:22:D1:54:C7 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:67:4b:29:b0:eb:cc:30:90:d5:e4:1c:f2:22:6f:90:bc:c5: 06:ac:31:6f:af:da:4e:7a:97:6a:54:65:87:37:90:87:32:c5: d3:5a:5b:c6:63:16:1d:8e:98:00:bc:ad:4e:04:91:44:5b:f2: d9:7e:f8:3f:de:a8:ab:6f:08:51:b1:2a:6a:d2:5e:db:8b:99: 4a:78:47:6b:38:e9:3e:db:33:a3:67:ee:45:ac:12:81:75:b2: f1:e9:a7:93:56:9f:61:5a:3c:d6:62:04:95:3c:ca:aa:6a:d1: 88:27:ed:65:72:86:56:97:a9:30:46:09:1a:b7:b3:e7:4f:fa: 42:39:8c:4b:ab:4f:c2:e6:48:6d:88:fb:8b:c0:c4:64:e8:f4: db:c0:6e:55:fa:b4:d0:19:b7:e1:16:af:91:3b:49:bc:bd:50: 46:44:fd:e6:9a:24:92:14:f5:15:f8:14:0b:a4:b4:8e:f1:5b: ce:f1:cd:42:a9:a1:39:ee:6b:cc:c7:e4:02:c2:4c:2c:0a:b8: b2:7f:cc:cb:53:c5:0b:5c:c3:7f:a1:e8:cc:29:2e:20:71:16: 41:a2:07:04:13:a0:9e:9d:a4:f2:ab:31:02:21:d4:05:ee:aa: e0:47:22:e1:fe:d0:55:ba:56:5e:dd:d0:12:75:51:16:34:69: 9a:12:b8:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDeBw/KGjfyiqOyUkRV0jRoS4ETUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNjAyMDExNzM2NDhaFw0yNjAyMDQyMjU5NDhaMDMxMTAvBgNV BAMTKEY2QzI0OUY3QkU1RThGNDg2NTg2OTE1QUVFMUNFOTNCMjJEMTU0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3O70+aU6ui4A4JSgh80CyeMY2 1Te6+KcxwE+FWc7+cDYpSE8VnGEZMYtP9n/XCiNhDEkH+eFJV+ujSs/UJ4JFF2Bn bbeixC0cjgyXP6zUrhFYrRsPlnaxKTM3WblMEsgHEqRxw+vTL/SciSY5ewaWFF97 XwA2/4acMZSezRQHJ8Qe/JuAjb+G0sKY5exosk/kZAj6mWMA5GtDFx5qF5i60pRe mriaKFE2ojvkKTMO757Q3mcfanjmsJs3k2gpFIwAOaO+ptGvy3YqrPECvj5b84MS Owpo+kjjO8O2DhJ0fN4dnp3xYgCPIw2SVpfPxPjB8101bYlPPvr2QxgYjRpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sJJ975ej0hlhpFa7hzpOyLRVMcwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9nSymw68wwkNXkHPIib5C8xQasMW+v2k56 l2pUZYc3kIcyxdNaW8ZjFh2OmAC8rU4EkURb8tl++D/eqKtvCFGxKmrSXtuLmUp4 R2s46T7bM6Nn7kWsEoF1svHpp5NWn2FaPNZiBJU8yqpq0Ygn7WVyhlaXqTBGCRq3 s+dP+kI5jEurT8LmSG2I+4vAxGTo9NvAblX6tNAZt+EWr5E7Sby9UEZE/eaaJJIU 9RX4FAuktI7xW87xzUKpoTnua8zH5ALCTCwKuLJ/zMtTxQtcw3+h6MwpLiBxFkGi BwQToJ6dpPKrMQIh1AXuquBHIuH+0FW6Vl7d0BJ1URY0aZoSuCY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:48:10 2026 by rpki-client