This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: bj5iexmGVi8nem2xYNb1CY9/g64982Qd9PXtqPLWcNY= Subject key identifier: C1:22:68:C7:02:E7:45:B7:D4:77:7C:99:22:27:06:C0:2A:25:B9:8A Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 3D9CDF5A4C7991C0F9329828935FA63C6265FB42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01D7 Signing time: Sat 31 Jan 2026 20:30:50 +0000 Manifest this update: Sat 31 Jan 2026 20:25:50 +0000 Manifest next update: Wed 04 Feb 2026 04:12:50 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: Hm7vRfKk3pJadhI2t7gjDQ62M0IzPEy/18UTwIejIDE=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: fp/oWSUeXGTrPiTprsbkQ9UXZFAnoLEYMcQ89AiXon8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9c:df:5a:4c:79:91:c0:f9:32:98:28:93:5f:a6:3c:62:65:fb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Jan 31 20:25:50 2026 GMT Not After : Feb 4 04:12:50 2026 GMT Subject: CN=C12268C702E745B7D4777C99222706C02A25B98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:7b:a8:ff:45:ae:59:8b:f8:1b:0e:3d:8b: 13:5b:6c:42:df:2d:64:1e:ff:30:68:4d:11:0e:8b: b4:42:2e:20:87:b6:67:bb:e5:81:99:94:24:38:b8: eb:97:64:94:8e:e5:fc:da:4e:54:f9:af:34:00:c0: 33:51:b9:97:69:1c:09:3f:ee:1a:86:92:1e:09:67: e6:40:65:f1:7a:4c:d7:42:d3:bc:dc:e8:97:0c:d8: fb:91:78:5b:ae:7c:0d:0e:01:ab:46:94:c9:52:9d: c5:f7:85:dd:32:fb:18:5e:31:d9:97:ad:81:7d:22: 90:c1:f0:a7:ce:14:03:f8:02:0a:4e:ea:0f:f8:47: 06:5e:83:31:fd:e4:48:fb:a3:97:db:6d:32:47:57: c2:2d:02:b4:64:a7:8f:28:08:2e:08:2a:88:81:1d: a9:94:b6:5a:8f:d2:4d:7d:f5:12:74:a0:c0:27:00: 84:55:0c:44:73:91:04:87:3d:55:9c:70:25:4e:09: d0:66:4b:8e:fe:49:fe:9a:51:01:9b:f9:04:af:62: fc:9c:3e:13:9f:cd:04:b6:5d:4a:48:7b:c0:bb:53: af:88:d0:c3:06:59:69:80:06:31:31:be:12:43:12: 37:27:1e:1c:60:be:c9:08:5f:25:61:0e:9a:58:41: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:22:68:C7:02:E7:45:B7:D4:77:7C:99:22:27:06:C0:2A:25:B9:8A X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:84:fb:a4:df:f5:29:e1:ba:c3:9e:28:b4:11:e0:fb:d4:c4: 1b:37:c6:33:70:0a:b8:79:c2:21:50:1e:c8:85:84:2e:1b:9a: 40:4f:8c:56:c3:3c:75:7b:c8:ee:a6:4e:06:6c:e0:55:8a:aa: 8c:dd:76:1c:e4:85:e9:d6:92:21:ee:51:2b:a9:50:43:6e:ff: 48:03:2d:91:4b:4f:1a:b5:e9:d9:f5:58:2c:8e:7d:98:1c:c1: 9f:50:51:0e:cd:13:91:17:71:cb:d0:de:91:35:87:b6:fa:53: 16:ea:d9:b4:7e:a9:8f:84:b6:b4:56:e2:94:15:9c:e4:2d:81: 4a:81:98:5e:56:d0:23:aa:b9:30:46:2e:b6:a1:f8:f8:0b:b2: 54:1e:94:44:c4:5a:c7:69:0a:f3:b7:9c:48:26:a2:71:da:89: c8:4f:f3:cb:c3:99:61:e8:1e:3e:06:94:09:64:b8:a1:90:7e: 91:08:15:ca:7c:7c:fe:be:72:88:e8:60:0f:59:8a:e7:53:2f: 73:8e:1c:fa:5c:ba:7f:22:be:53:49:15:45:4f:15:55:77:18: da:56:be:65:0e:6e:c4:40:48:3d:a5:99:3e:30:b0:c8:df:07: 71:dd:95:ef:fc:81:93:9d:b5:00:ff:60:99:da:98:1e:9b:71: b9:8e:88:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZzfWkx5kcD5Mpgok1+mPGJl+0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNjAxMzEyMDI1NTBaFw0yNjAyMDQwNDEyNTBaMDMxMTAvBgNV BAMTKEMxMjI2OEM3MDJFNzQ1QjdENDc3N0M5OTIyMjcwNkMwMkEyNUI5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZF3uo/0WuWYv4Gw49ixNbbELf LWQe/zBoTREOi7RCLiCHtme75YGZlCQ4uOuXZJSO5fzaTlT5rzQAwDNRuZdpHAk/ 7hqGkh4JZ+ZAZfF6TNdC07zc6JcM2PuReFuufA0OAatGlMlSncX3hd0y+xheMdmX rYF9IpDB8KfOFAP4AgpO6g/4RwZegzH95Ej7o5fbbTJHV8ItArRkp48oCC4IKoiB HamUtlqP0k199RJ0oMAnAIRVDERzkQSHPVWccCVOCdBmS47+Sf6aUQGb+QSvYvyc PhOfzQS2XUpIe8C7U6+I0MMGWWmABjExvhJDEjcnHhxgvskIXyVhDppYQYsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSJoxwLnRbfUd3yZIicGwColuYowHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWE+6Tf9SnhusOeKLQR4PvUxBs3xjNwCrh5 wiFQHsiFhC4bmkBPjFbDPHV7yO6mTgZs4FWKqozddhzkhenWkiHuUSupUENu/0gD LZFLTxq16dn1WCyOfZgcwZ9QUQ7NE5EXccvQ3pE1h7b6Uxbq2bR+qY+EtrRW4pQV nOQtgUqBmF5W0COquTBGLrah+PgLslQelETEWsdpCvO3nEgmonHaichP88vDmWHo Hj4GlAlkuKGQfpEIFcp8fP6+cojoYA9ZiudTL3OOHPpcun8ivlNJFUVPFVV3GNpW vmUObsRASD2lmT4wsMjfB3Hdle/8gZOdtQD/YJnamB6bcbmOiCc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:59 2026 by rpki-client