This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: S/i70hNnoraSMAeX51PprWt+76sjjrlWz33CTVyiGkg= Subject key identifier: A5:0A:E9:40:47:73:9C:1B:3F:65:7C:82:85:F2:83:3A:D2:E3:73:39 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 048A1C5529F41CA46CD186C3A4E61AF07E216ADD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 0280 Signing time: Sat 31 Jan 2026 10:30:04 +0000 Manifest this update: Sat 31 Jan 2026 10:25:04 +0000 Manifest next update: Tue 03 Feb 2026 11:58:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: oR8AEEEJJgg5m+Az+I0ZykrQaIy5VICdvC1jS+i99J4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8a:1c:55:29:f4:1c:a4:6c:d1:86:c3:a4:e6:1a:f0:7e:21:6a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Jan 31 10:25:04 2026 GMT Not After : Feb 3 11:58:04 2026 GMT Subject: CN=A50AE94047739C1B3F657C8285F2833AD2E37339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:ab:4b:04:57:dd:ee:3e:28:00:b4:6d:89: a7:e9:14:25:4d:ca:77:18:34:e2:54:5f:cd:6c:3a: fc:1e:bd:93:72:cc:0a:f0:96:44:19:c4:7c:5d:cc: f5:5e:d9:e0:4a:18:c1:39:54:3f:2c:89:88:58:a4: d6:bc:37:f1:a5:9e:71:ea:43:78:30:24:0a:5e:38: 17:ea:de:75:2c:de:b3:9a:2e:1d:4c:63:b7:79:dc: fa:c8:cc:aa:68:ed:08:3d:0a:e4:47:69:cc:39:45: 35:3d:20:97:08:9c:46:ed:55:9d:7e:b4:8d:2b:bc: 10:ea:4f:af:4d:12:27:76:5a:73:85:50:65:c7:d8: 79:58:ad:26:b1:bc:bf:72:ad:6c:c2:d7:9f:54:77: 89:cd:f5:49:67:ae:ed:ce:b3:ed:55:94:27:fe:57: 90:6b:56:ea:50:5c:04:af:14:59:3f:0a:8b:20:78: 39:d8:63:07:c0:30:1b:43:6c:e8:4a:e4:d4:1f:dc: 6d:f5:30:54:75:65:56:41:ce:89:8c:a6:d5:8b:d2: 38:eb:86:35:be:fb:de:b9:f0:7f:65:fd:84:6c:65: 02:8e:e4:85:2b:ce:ee:15:77:04:c7:50:c3:78:11: 82:b4:9e:cf:a1:52:01:b3:37:77:81:ad:68:99:a6: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0A:E9:40:47:73:9C:1B:3F:65:7C:82:85:F2:83:3A:D2:E3:73:39 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:dc:b2:25:4d:14:53:f1:fe:14:3e:56:5b:1d:8e:e7:d3:89: e4:4e:fa:8e:b5:6c:d1:dc:8e:b0:3c:c2:9f:71:be:c4:7c:e1: 12:2b:24:09:9f:85:69:66:7e:68:83:b9:21:4f:db:49:d4:4f: ee:de:fd:86:cd:37:88:66:6a:2f:10:28:23:d9:6f:40:45:d7: a0:5f:47:50:8a:a4:e5:2a:b3:06:f1:02:29:7a:eb:c1:14:83: 98:21:83:8e:a5:90:dd:b9:2d:ab:94:6c:51:5b:7e:be:3d:5b: cf:ed:f3:03:78:d2:3d:41:87:11:50:c6:06:c8:c5:0e:51:20: 11:4a:6f:11:6d:ce:16:e4:9d:e1:97:3b:4a:10:e9:f1:71:e8: 15:52:69:f8:b7:fa:78:9d:1c:c2:ca:42:2a:d1:54:aa:6b:0d: f9:73:78:51:40:a7:2f:04:4a:d5:01:40:75:51:49:fe:65:4f: 67:2e:f4:60:64:d8:5f:8c:54:87:c3:93:86:10:b2:9e:78:c0: a1:13:13:a2:75:15:9d:89:63:be:a1:7e:51:3a:b8:4a:a2:28: f3:ac:87:43:57:dc:db:15:a6:9a:81:a7:d1:1d:1a:fd:41:6c: 44:b6:19:8b:2b:2b:5e:db:d7:c7:5c:94:27:cf:32:95:3d:fd: 99:59:a3:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIocVSn0HKRs0YbDpOYa8H4hat0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNjAxMzExMDI1MDRaFw0yNjAyMDMxMTU4MDRaMDMxMTAvBgNV BAMTKEE1MEFFOTQwNDc3MzlDMUIzRjY1N0M4Mjg1RjI4MzNBRDJFMzczMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSKtLBFfd7j4oALRtiafpFCVN yncYNOJUX81sOvwevZNyzArwlkQZxHxdzPVe2eBKGME5VD8siYhYpNa8N/GlnnHq Q3gwJApeOBfq3nUs3rOaLh1MY7d53PrIzKpo7Qg9CuRHacw5RTU9IJcInEbtVZ1+ tI0rvBDqT69NEid2WnOFUGXH2HlYrSaxvL9yrWzC159Ud4nN9Ulnru3Os+1VlCf+ V5BrVupQXASvFFk/CosgeDnYYwfAMBtDbOhK5NQf3G31MFR1ZVZBzomMptWL0jjr hjW++9658H9l/YRsZQKO5IUrzu4VdwTHUMN4EYK0ns+hUgGzN3eBrWiZpsQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQrpQEdznBs/ZXyChfKDOtLjczkwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrcsiVNFFPx/hQ+VlsdjufTieRO+o61bNHc jrA8wp9xvsR84RIrJAmfhWlmfmiDuSFP20nUT+7e/YbNN4hmai8QKCPZb0BF16Bf R1CKpOUqswbxAil668EUg5ghg46lkN25LauUbFFbfr49W8/t8wN40j1BhxFQxgbI xQ5RIBFKbxFtzhbkneGXO0oQ6fFx6BVSafi3+nidHMLKQirRVKprDflzeFFApy8E StUBQHVRSf5lT2cu9GBk2F+MVIfDk4YQsp54wKETE6J1FZ2JY76hflE6uEqiKPOs h0NX3NsVppqBp9EdGv1BbES2GYsrK17b18dclCfPMpU9/ZlZo3k= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:16 2026 by rpki-client