This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: iwokjzFGXa1cDvB3qeMFOx4mukRqk9QYqV+f8Yqu6sM= Subject key identifier: F6:92:EC:14:8B:A6:E5:56:92:05:05:8A:56:C2:CA:7A:29:F2:E9:D4 Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 0A59B09AE13291A3F1E903546848294FBC306B02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 025E Signing time: Mon 02 Feb 2026 11:31:54 +0000 Manifest this update: Mon 02 Feb 2026 11:26:54 +0000 Manifest next update: Thu 05 Feb 2026 16:56:54 +0000 Files and hashes: 1: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: qRzNT+IfRecYTvD+VsI5a1iBSZSCNiq2hNYl9uaF2wg=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: HNI0ArO+KsvaMgGqtyRRpqs1evvFTKgd+Siy8K2ur7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 16:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:59:b0:9a:e1:32:91:a3:f1:e9:03:54:68:48:29:4f:bc:30:6b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: Feb 2 11:26:54 2026 GMT Not After : Feb 5 16:56:54 2026 GMT Subject: CN=F692EC148BA6E5569205058A56C2CA7A29F2E9D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:72:b2:45:80:ad:be:40:2a:42:90:79:ab: 4f:eb:14:bd:ea:7e:d5:43:da:e5:cb:ea:07:bf:6b: 7e:57:24:dd:81:e6:61:14:dc:7f:10:4c:23:07:d0: e3:a9:60:b6:61:57:08:f8:bd:b5:b8:26:b7:d8:39: 84:97:d2:5b:07:77:67:e8:2b:e4:1e:13:36:76:ef: 32:16:3e:4b:9d:72:ab:59:30:75:64:9c:77:82:1c: 96:93:df:97:2f:1e:dc:7c:83:19:a2:51:93:a9:ee: 21:d2:7f:c5:26:61:11:47:09:aa:67:59:04:66:e6: 23:9b:b2:92:7b:1c:b8:5f:39:82:ee:f5:b2:04:82: 85:e2:c4:28:4d:26:2c:89:0b:be:e4:37:07:92:12: 9b:fd:55:33:09:43:37:93:82:2d:c2:2d:c1:b6:cf: 42:6a:bd:bb:78:f1:ec:5d:14:8c:a2:09:73:60:91: 87:a3:b8:37:4c:36:f5:5e:1c:7a:44:07:59:de:8a: 43:49:c8:c5:0c:0b:6c:13:42:0d:f6:84:55:69:3b: 94:91:6b:41:72:59:df:17:52:cf:42:15:c3:29:cb: 51:21:46:17:10:e9:27:cd:ce:d3:8a:f3:98:9f:20: 81:ba:ec:41:06:50:99:b9:d6:7d:d5:51:58:31:28: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:92:EC:14:8B:A6:E5:56:92:05:05:8A:56:C2:CA:7A:29:F2:E9:D4 X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e7:a3:6e:15:c6:f7:dd:6e:fd:82:1a:4f:50:6c:17:f5:e0: b9:f9:8a:a2:13:d2:27:16:6b:c2:1a:5e:ad:63:a6:99:8e:22: 5f:55:80:f9:78:cf:e6:44:8c:2d:33:55:b4:01:be:99:c8:b2: 5e:3e:7f:2a:4c:22:bc:06:cc:4a:09:08:32:cc:2c:e2:37:50: 4c:ef:f0:4c:42:97:b4:b0:7a:ec:b3:cd:84:5b:38:4c:b5:4c: 00:5d:91:ff:40:47:5f:40:cb:89:85:78:a0:f9:85:6d:70:10: 1a:83:f3:48:54:f8:2f:52:6d:66:c3:c4:b3:84:31:8d:54:50: 6c:60:b1:9c:6c:08:2d:6a:58:6c:ff:78:25:66:4f:67:d0:95: 1b:6f:c3:aa:bb:97:fe:c3:5b:ef:b2:cb:42:af:bf:7b:84:b7: 01:17:75:63:94:c6:5d:fd:57:c8:0e:25:76:ff:76:91:ef:9a: 43:1e:4d:22:ea:c7:27:aa:4a:9b:15:d5:af:7d:7d:64:dd:71: 10:f4:47:35:1c:00:51:6d:fc:9f:4c:c2:ba:dc:f1:69:b0:c7: 47:f5:32:13:61:db:5c:29:64:5f:38:25:ef:f0:18:47:82:ad: 54:66:2d:41:ea:e8:a8:cc:98:c9:a4:a0:79:17:d3:86:c6:cb: a5:d3:0b:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClmwmuEykaPx6QNUaEgpT7wwawIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNjAyMDIxMTI2NTRaFw0yNjAyMDUxNjU2NTRaMDMxMTAvBgNV BAMTKEY2OTJFQzE0OEJBNkU1NTY5MjA1MDU4QTU2QzJDQTdBMjlGMkU5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs13KyRYCtvkAqQpB5q0/rFL3q ftVD2uXL6ge/a35XJN2B5mEU3H8QTCMH0OOpYLZhVwj4vbW4JrfYOYSX0lsHd2fo K+QeEzZ27zIWPkudcqtZMHVknHeCHJaT35cvHtx8gxmiUZOp7iHSf8UmYRFHCapn WQRm5iObspJ7HLhfOYLu9bIEgoXixChNJiyJC77kNweSEpv9VTMJQzeTgi3CLcG2 z0Jqvbt48exdFIyiCXNgkYejuDdMNvVeHHpEB1neikNJyMUMC2wTQg32hFVpO5SR a0FyWd8XUs9CFcMpy1EhRhcQ6SfNztOK85ifIIG67EEGUJm51n3VUVgxKP8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9pLsFIum5VaSBQWKVsLKeiny6dQwHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbno24Vxvfdbv2CGk9QbBf14Ln5iqIT0icW a8IaXq1jppmOIl9VgPl4z+ZEjC0zVbQBvpnIsl4+fypMIrwGzEoJCDLMLOI3UEzv 8ExCl7SweuyzzYRbOEy1TABdkf9AR19Ay4mFeKD5hW1wEBqD80hU+C9SbWbDxLOE MY1UUGxgsZxsCC1qWGz/eCVmT2fQlRtvw6q7l/7DW++yy0Kvv3uEtwEXdWOUxl39 V8gOJXb/dpHvmkMeTSLqxyeqSpsV1a99fWTdcRD0RzUcAFFt/J9Mwrrc8Wmwx0f1 MhNh21wpZF84Je/wGEeCrVRmLUHq6KjMmMmkoHkX04bGy6XTC5w= -----END CERTIFICATE-----Generated at Mon Feb 2 15:52:33 2026 by rpki-client