This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft File: 10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json) Hash identifier: ChL01BR9ZzqUSTjfUKXyZdzrOwMHv71X04UIVQstgUQ= Subject key identifier: C5:59:04:27:D7:C9:67:74:05:D8:62:4F:D7:BB:30:C9:B0:A0:8E:42 Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 5C963017B3D7520FCB6A7F9BBABFA3BD743073F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft Manifest number: 04E0 Signing time: Sat 31 Jan 2026 22:50:46 +0000 Manifest this update: Sat 31 Jan 2026 22:45:46 +0000 Manifest next update: Wed 04 Feb 2026 04:10:46 +0000 Files and hashes: 1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=) 2: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: vnOWOE8ANRJB3kxmh2kTgRDOD4mP6pnBNqxwGmSsQIw=) 3: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: 3X3wWamMItGbNqtEsaj1Fe6Bit+bXrqyWEWBXHHyMFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:96:30:17:b3:d7:52:0f:cb:6a:7f:9b:ba:bf:a3:bd:74:30:73:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Jan 31 22:45:46 2026 GMT Not After : Feb 4 04:10:46 2026 GMT Subject: CN=C5590427D7C9677405D8624FD7BB30C9B0A08E42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:e1:70:ff:05:e2:0f:0e:be:92:06:17:79: 2a:17:12:ab:7d:03:d0:90:54:7b:43:eb:76:37:af: cc:5c:df:62:5b:3b:59:df:c0:22:51:f1:76:00:5c: ef:e7:db:47:06:ac:d3:11:50:cf:1d:26:d8:f2:dc: 88:81:eb:02:fd:96:65:4a:87:7d:ee:af:da:e1:e2: b4:83:47:3c:c5:bc:ee:bc:78:f7:bd:8a:7f:4f:27: c8:97:84:8c:63:1a:0f:96:c0:d3:f6:01:56:f2:d4: 2c:16:c1:32:fe:57:05:af:3c:81:6f:49:06:f9:14: 89:fa:27:09:26:9c:ec:62:1a:b4:26:da:26:f6:fc: aa:01:a9:b2:f4:5c:a5:ec:c3:a8:75:b9:2b:42:4b: 5b:07:11:d5:6b:9a:db:61:5e:0c:a6:d8:39:1a:d2: ec:19:3a:ad:13:ff:30:93:aa:ae:de:14:73:c2:51: 0d:b9:1e:16:3e:8a:d2:ca:8d:20:e3:7a:fa:89:b4: 27:30:a4:69:c4:70:55:96:d9:78:ad:cc:c8:be:5b: 1b:d6:7a:c2:54:96:45:3f:98:99:70:63:d1:2e:d0: 30:8a:b9:66:c8:1b:bb:bb:9a:4a:f0:9a:f7:11:7f: ae:e2:c0:c4:af:0e:b6:f3:21:2c:8c:94:eb:8c:12: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:59:04:27:D7:C9:67:74:05:D8:62:4F:D7:BB:30:C9:B0:A0:8E:42 X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:3e:7e:5b:ba:fe:c8:b3:41:58:e4:df:bf:f1:4c:84:ab: 85:56:ec:37:84:15:e1:70:da:0d:ad:82:a4:fa:b8:5f:a3:20: 24:89:63:ea:c4:4e:9d:fc:2c:ab:71:e8:38:6f:a2:01:d4:3b: 7f:bd:aa:dd:89:23:c6:f9:c9:46:59:da:45:c2:8a:0d:dd:31: 02:15:9b:ae:db:87:a1:e2:71:ad:03:13:a6:05:6e:6c:43:c9: de:bf:41:98:39:aa:2e:37:90:89:db:f6:08:95:f1:77:1a:64: 01:f1:c5:36:9d:bf:0b:fa:41:79:9a:fb:5c:fa:dc:ca:5f:dd: d0:12:c1:b4:4b:d9:4b:db:0c:b7:5f:91:b4:34:39:24:c3:0d: b0:63:bd:a4:d6:eb:63:cc:72:7a:e1:e5:56:5f:0b:21:4c:7a: ce:0e:dc:3b:9d:ba:9c:25:54:7d:07:16:37:96:1f:59:2f:e5: d6:ac:11:a4:cb:b7:09:00:51:3c:06:e9:01:10:ac:9f:d6:bc: a3:eb:d4:96:53:e4:35:46:33:9c:33:52:b7:91:75:17:4e:d1: 33:86:61:45:d1:c6:0b:44:8a:8a:d2:7e:d5:c7:8a:f7:7f:81: 35:6f:c0:c6:2c:ab:9e:bd:4e:9c:da:8a:2a:ad:74:fc:cb:3c: 21:43:14:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJYwF7PXUg/Lan+bur+jvXQwc/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNjAxMzEyMjQ1NDZaFw0yNjAyMDQwNDEwNDZaMDMxMTAvBgNV BAMTKEM1NTkwNDI3RDdDOTY3NzQwNUQ4NjI0RkQ3QkIzMEM5QjBBMDhFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HuFw/wXiDw6+kgYXeSoXEqt9 A9CQVHtD63Y3r8xc32JbO1nfwCJR8XYAXO/n20cGrNMRUM8dJtjy3IiB6wL9lmVK h33ur9rh4rSDRzzFvO68ePe9in9PJ8iXhIxjGg+WwNP2AVby1CwWwTL+VwWvPIFv SQb5FIn6JwkmnOxiGrQm2ib2/KoBqbL0XKXsw6h1uStCS1sHEdVrmtthXgym2Dka 0uwZOq0T/zCTqq7eFHPCUQ25HhY+itLKjSDjevqJtCcwpGnEcFWW2XitzMi+WxvW esJUlkU/mJlwY9Eu0DCKuWbIG7u7mkrwmvcRf67iwMSvDrbzISyMlOuMEqoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxVkEJ9fJZ3QF2GJP17swybCgjkIwHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1 Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7ePn5buv7Is0FY5N+/8UyEq4VW7DeEFeFw 2g2tgqT6uF+jICSJY+rETp38LKtx6DhvogHUO3+9qt2JI8b5yUZZ2kXCig3dMQIV m67bh6Hica0DE6YFbmxDyd6/QZg5qi43kInb9giV8XcaZAHxxTadvwv6QXma+1z6 3Mpf3dASwbRL2UvbDLdfkbQ0OSTDDbBjvaTW62PMcnrh5VZfCyFMes4O3Dudupwl VH0HFjeWH1kv5dasEaTLtwkAUTwG6QEQrJ/WvKPr1JZT5DVGM5wzUreRdRdO0TOG YUXRxgtEiorSftXHivd/gTVvwMYsq569TpzaiiqtdPzLPCFDFGc= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:14 2026 by rpki-client