This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: +o/rD9qr2dfhGVkUfW4lRAWdd/5DZyvtsbIz6hvaIXs= Subject key identifier: 05:9B:09:27:ED:7D:FE:20:E7:AB:E7:A5:32:3A:59:18:15:B2:5F:AF Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 397CD23FE7C9B9F71CE78ED2E45690A2DAD45BE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0170 Signing time: Sat 31 Jan 2026 03:22:07 +0000 Manifest this update: Sat 31 Jan 2026 03:17:07 +0000 Manifest next update: Tue 03 Feb 2026 08:28:07 +0000 Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) 2: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: BLlGJvwssnv/V9bZmyjcs2znVY0eWjH9fQ8KqXZdmVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7c:d2:3f:e7:c9:b9:f7:1c:e7:8e:d2:e4:56:90:a2:da:d4:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Jan 31 03:17:07 2026 GMT Not After : Feb 3 08:28:07 2026 GMT Subject: CN=059B0927ED7DFE20E7ABE7A5323A591815B25FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:22:7a:11:49:50:16:4e:08:ad:e4:24:b6: 46:93:01:0d:b0:db:ce:a9:dc:8b:ed:77:1c:2f:fb: 7b:5f:18:17:af:19:00:01:77:7d:37:71:9d:d3:fc: 9f:1a:5f:1b:31:66:46:88:3d:a4:f7:1d:ee:b9:91: 96:e4:33:d6:e4:c3:b5:44:93:bb:e4:f3:c7:79:81: da:f7:b4:31:83:5a:78:89:30:4e:17:4f:7d:db:de: de:fc:d5:9f:6e:c2:35:0b:6c:d7:e5:ca:98:46:f6: 8f:05:d1:34:d6:65:a3:16:72:08:f3:16:2f:91:11: 7e:fd:9a:17:4e:f2:f9:69:ea:95:e5:c4:33:4c:ec: 1c:a8:3b:e0:8e:e9:69:85:2e:21:12:b2:eb:61:65: b6:1e:46:71:ed:74:0a:f3:45:af:6e:ce:34:85:35: cb:f2:aa:27:e2:a2:01:c7:ae:c7:fd:66:2c:8a:4e: fa:3f:11:81:0d:c4:82:96:52:39:56:13:cc:ef:40: 97:50:78:de:0c:89:ad:13:1c:9c:a8:d2:26:8f:2a: 0a:c2:d0:33:50:43:4b:cf:8e:27:5a:28:c5:fa:61: af:f5:c5:a9:11:22:87:ec:9c:27:76:6a:9e:fb:b2: 4b:52:11:d7:1e:2d:e5:47:19:2a:49:c5:22:f2:4a: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:09:27:ED:7D:FE:20:E7:AB:E7:A5:32:3A:59:18:15:B2:5F:AF X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9c:40:2b:19:2e:0e:42:15:a9:ed:ae:ea:c7:60:f8:8b:e8: fd:9c:0e:64:8b:ea:cb:ca:f1:a2:f0:91:36:0c:b3:c7:3f:cb: b1:f6:0f:c0:ca:e7:e2:51:94:30:f4:53:24:e3:3d:27:ca:17: d6:7c:a0:f7:05:b5:e8:c6:4a:7d:53:b4:f5:52:1c:2c:94:6b: 77:64:11:17:f2:5a:99:81:10:41:b2:27:7b:c2:9f:4d:e4:5d: 6b:f4:f9:3e:1e:ee:b1:b7:18:eb:9f:83:78:f4:68:1a:43:b5: 76:83:66:b8:5f:35:25:21:ec:fe:c6:51:46:f0:eb:27:27:87: 5e:1e:62:5c:a3:b8:75:00:ea:b9:b0:a5:03:57:03:30:48:0b: 0e:ec:7c:f2:ac:f4:e0:ae:e2:c3:c5:a4:09:8c:a2:68:5a:3a: 71:56:ed:bd:85:d0:f4:2b:47:5a:d6:c5:fe:bb:9a:7b:96:51: bc:94:76:51:b2:44:30:53:45:62:19:88:97:64:40:27:d0:63: bc:48:48:84:44:57:79:18:c2:cd:be:04:14:71:73:33:87:8b: d8:7f:1f:08:3e:33:94:c8:fa:89:d4:a1:59:65:6a:09:73:3b: 41:e0:56:59:43:54:22:21:f6:43:2b:0e:d1:91:d0:ca:94:1a: 7f:e7:15:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXzSP+fJufcc547S5FaQotrUW+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNjAxMzEwMzE3MDdaFw0yNjAyMDMwODI4MDdaMDMxMTAvBgNV BAMTKDA1OUIwOTI3RUQ3REZFMjBFN0FCRTdBNTMyM0E1OTE4MTVCMjVGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrSJ6EUlQFk4IreQktkaTAQ2w 286p3Ivtdxwv+3tfGBevGQABd303cZ3T/J8aXxsxZkaIPaT3He65kZbkM9bkw7VE k7vk88d5gdr3tDGDWniJME4XT33b3t781Z9uwjULbNflyphG9o8F0TTWZaMWcgjz Fi+REX79mhdO8vlp6pXlxDNM7ByoO+CO6WmFLiESsuthZbYeRnHtdArzRa9uzjSF NcvyqifiogHHrsf9ZiyKTvo/EYENxIKWUjlWE8zvQJdQeN4Mia0THJyo0iaPKgrC 0DNQQ0vPjidaKMX6Ya/1xakRIofsnCd2ap77sktSEdceLeVHGSpJxSLyShapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBZsJJ+19/iDnq+elMjpZGBWyX68wHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIicQCsZLg5CFantrurHYPiL6P2cDmSL6svK 8aLwkTYMs8c/y7H2D8DK5+JRlDD0UyTjPSfKF9Z8oPcFtejGSn1TtPVSHCyUa3dk ERfyWpmBEEGyJ3vCn03kXWv0+T4e7rG3GOufg3j0aBpDtXaDZrhfNSUh7P7GUUbw 6ycnh14eYlyjuHUA6rmwpQNXAzBICw7sfPKs9OCu4sPFpAmMomhaOnFW7b2F0PQr R1rWxf67mnuWUbyUdlGyRDBTRWIZiJdkQCfQY7xISIREV3kYws2+BBRxczOHi9h/ Hwg+M5TI+onUoVllaglzO0HgVllDVCIh9kMrDtGR0MqUGn/nFbY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:16 2026 by rpki-client