This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: uBtCQWj0QhFUp3nEoVEdCSH8w84cQ+QbsAH1aEXa7rY= Subject key identifier: 5C:E6:5E:B4:E0:72:2A:86:A8:0C:ED:9D:0E:24:9C:55:0B:04:13:9C Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 494CA08CEA0B1E5EC5301DDB9B701A2DB1585946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0436 Signing time: Sat 31 Jan 2026 18:22:01 +0000 Manifest this update: Sat 31 Jan 2026 18:17:01 +0000 Manifest next update: Wed 04 Feb 2026 02:24:01 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: hn9qbPPykm+G3dgjbYsXVKefo8dyAgv3JoRVpfQ9FIk=) 2: AS23693.roa (hash: x5VXB95dtKT5OQR+S1O83x2JIqFsVpTsDEkUCu37XvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4c:a0:8c:ea:0b:1e:5e:c5:30:1d:db:9b:70:1a:2d:b1:58:59:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Jan 31 18:17:01 2026 GMT Not After : Feb 4 02:24:01 2026 GMT Subject: CN=5CE65EB4E0722A86A80CED9D0E249C550B04139C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:14:df:42:ce:ef:5f:45:70:9b:69:83:b7: d8:1a:9a:94:6d:65:70:f5:1f:fc:76:31:c2:1d:f6: d7:1e:f2:b7:c8:06:b8:77:5b:cb:da:15:1a:b1:06: cd:bf:9e:1d:b9:e2:c4:2b:f2:9f:46:f1:3c:54:cb: 98:4f:4d:8c:de:6a:d3:fd:2b:d1:ce:47:d1:d0:5f: be:7c:77:8e:c2:67:71:ef:05:95:c1:67:7b:c3:4e: cb:05:b4:5b:b8:fb:88:2d:d3:a8:21:96:53:8f:49: 61:99:54:0a:1b:a8:84:7d:02:1f:4f:2b:1d:76:bb: 46:f1:5d:c6:5e:02:a3:a0:d3:a3:0a:b7:1a:aa:63: 40:d3:75:93:23:27:73:b0:08:f2:bd:63:5a:1b:4f: f0:ab:5a:d0:07:1a:65:1a:3a:cd:15:36:37:a3:62: 5f:9c:62:0e:34:0b:20:bc:e2:7c:bf:db:e7:3c:30: 27:d5:d3:d5:66:0d:d4:f5:45:b8:40:91:b6:64:f9: f3:7d:1c:ab:f6:56:a7:3f:f7:9d:12:91:6a:4e:56: 6b:c3:5d:ed:44:6a:e3:81:64:e6:6a:0a:11:95:94: d2:1f:1b:34:8d:45:09:cb:34:e5:28:2e:47:80:47: 68:f3:00:26:55:73:02:f0:f3:24:ab:a0:bc:a8:7f: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E6:5E:B4:E0:72:2A:86:A8:0C:ED:9D:0E:24:9C:55:0B:04:13:9C X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c0:a9:df:70:61:36:67:12:49:38:d0:b1:67:18:69:1d:c0: 32:8c:2f:3d:50:43:f7:dc:d1:03:90:86:c4:da:0d:93:98:e9: ae:b0:16:0d:b2:26:5a:62:73:bc:42:39:34:07:27:5f:80:c9: 3c:9c:8f:66:91:6f:a3:cb:b8:cc:8f:90:b3:c7:f0:64:c1:a0: 5e:29:4a:ab:f4:34:08:40:a3:5f:75:d4:01:50:84:4b:25:2b: ea:68:56:2c:bb:2f:32:79:bb:39:ff:35:99:9a:96:73:e1:1c: d5:80:e4:f7:50:5b:64:b8:7b:9f:06:1a:9b:09:76:e9:ce:fa: 19:e5:ef:86:a5:5f:0b:d7:e6:79:c0:e9:c7:d0:5d:9b:85:df: 1b:27:f8:37:03:3d:14:7a:17:93:61:50:e8:e3:f6:0b:e6:55: 27:ef:cc:a9:77:dd:1d:0a:1e:90:c1:1a:95:10:ad:46:5c:02: 39:3b:cf:fd:8a:ab:d3:14:eb:40:d8:ac:8a:7e:fe:da:7b:97: 64:74:c4:88:a5:f3:db:39:a5:db:91:88:01:e1:77:cd:38:b5: aa:06:ab:4c:07:f0:7a:25:d0:7a:a4:17:6e:83:44:81:b0:ae: 40:0c:ef:12:4c:cc:9d:82:e2:44:c6:88:74:36:56:0d:a5:23: 0a:ac:b1:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSUygjOoLHl7FMB3bm3AaLbFYWUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNjAxMzExODE3MDFaFw0yNjAyMDQwMjI0MDFaMDMxMTAvBgNV BAMTKDVDRTY1RUI0RTA3MjJBODZBODBDRUQ5RDBFMjQ5QzU1MEIwNDEzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBahTfQs7vX0Vwm2mDt9gampRt ZXD1H/x2McId9tce8rfIBrh3W8vaFRqxBs2/nh254sQr8p9G8TxUy5hPTYzeatP9 K9HOR9HQX758d47CZ3HvBZXBZ3vDTssFtFu4+4gt06ghllOPSWGZVAobqIR9Ah9P Kx12u0bxXcZeAqOg06MKtxqqY0DTdZMjJ3OwCPK9Y1obT/CrWtAHGmUaOs0VNjej Yl+cYg40CyC84ny/2+c8MCfV09VmDdT1RbhAkbZk+fN9HKv2Vqc/950SkWpOVmvD Xe1EauOBZOZqChGVlNIfGzSNRQnLNOUoLkeAR2jzACZVcwLw8ySroLyofyJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOZetOByKoaoDO2dDiScVQsEE5wwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrAqd9wYTZnEkk40LFnGGkdwDKMLz1QQ/fc 0QOQhsTaDZOY6a6wFg2yJlpic7xCOTQHJ1+AyTycj2aRb6PLuMyPkLPH8GTBoF4p Sqv0NAhAo1911AFQhEslK+poViy7LzJ5uzn/NZmalnPhHNWA5PdQW2S4e58GGpsJ dunO+hnl74alXwvX5nnA6cfQXZuF3xsn+DcDPRR6F5NhUOjj9gvmVSfvzKl33R0K HpDBGpUQrUZcAjk7z/2Kq9MU60DYrIp+/tp7l2R0xIil89s5pduRiAHhd804taoG q0wH8Hol0HqkF26DRIGwrkAM7xJMzJ2C4kTGiHQ2Vg2lIwqssek= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:01 2026 by rpki-client