This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: 6n0TgGXknSeCJWmcu8nNloWs7Aa6Guj69xh7uviNJCI= Subject key identifier: 27:16:3B:7E:2E:0D:E9:2D:A2:9B:D9:08:F9:93:1C:55:86:05:A8:FE Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 11265D869CE56C6356EB17C2C821CB7556EC13AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 04AE Signing time: Sun 01 Feb 2026 23:31:05 +0000 Manifest this update: Sun 01 Feb 2026 23:26:05 +0000 Manifest next update: Thu 05 Feb 2026 08:55:05 +0000 Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: g4MCHQFO3MQThoyM2TjwQb6nRcwAjTBYmahYDBr6bho=) 2: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: LmeqzYeHbwqjRvKuIbroVaXCpVEz8bLJBtycTcCFJu4=) 3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: HP+sagZ6n/KSNAW1nV/GoPsVqp7h+LyL4LF4JGCKd8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:26:5d:86:9c:e5:6c:63:56:eb:17:c2:c8:21:cb:75:56:ec:13:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Feb 1 23:26:05 2026 GMT Not After : Feb 5 08:55:05 2026 GMT Subject: CN=27163B7E2E0DE92DA29BD908F9931C558605A8FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:0b:c6:c4:93:5f:d7:49:b4:7b:25:f4:d4: 25:d9:46:96:ad:f9:b3:c2:f7:7e:cb:de:cb:42:71: 18:91:99:4b:0e:2b:4c:b7:e4:14:28:7f:fc:a0:e0: fe:db:74:e3:29:a4:bd:bf:3d:3a:92:32:16:b7:fc: 00:41:0a:50:e4:0d:9f:d7:26:0d:a2:fb:e0:be:c0: 6b:2f:90:d4:d9:62:a8:5b:29:e1:86:38:c3:2a:32: 1f:2c:76:55:16:fb:71:0b:03:4d:b1:93:5a:bf:da: 21:34:21:67:4d:96:7c:d5:c3:60:ab:58:14:af:fa: d4:12:70:e4:e7:71:38:17:3a:40:26:21:74:b1:08: a4:04:ea:16:ac:86:38:99:34:de:b8:a9:9f:b5:b9: 2f:32:64:e4:72:6e:30:26:2c:98:47:d5:34:dd:fd: e3:0f:48:ac:2a:de:b9:78:8b:94:62:9e:4f:42:5b: 1c:18:41:af:ca:0d:f7:8d:eb:69:77:11:d1:d3:a1: 53:4a:12:00:4f:cb:9f:14:5d:73:8b:e9:08:a4:06: fa:28:b6:1e:8f:9c:75:f5:cd:3f:04:87:9a:0a:e6: 90:ac:13:3c:bf:4b:c0:e5:56:75:17:7e:3e:c1:ba: 0f:ed:7b:37:17:f4:59:13:d5:06:04:a3:71:34:72: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:16:3B:7E:2E:0D:E9:2D:A2:9B:D9:08:F9:93:1C:55:86:05:A8:FE X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4e:93:72:30:54:91:70:8d:63:f4:51:71:e2:00:37:f7:45: 73:8b:27:20:85:81:9e:a8:90:0a:48:ee:38:be:f4:ba:2a:84: 75:c8:af:25:ca:d2:f8:c2:b5:4b:ab:93:55:eb:03:66:3e:8f: 14:37:c2:76:56:5b:af:3e:e1:c2:2f:5c:24:8f:2e:ea:01:46: 0a:54:93:92:89:73:0a:8d:aa:11:a2:d8:74:08:04:8d:7d:14: ce:51:ad:c0:0e:bd:d8:53:2e:5f:eb:05:9e:74:8b:87:bf:ae: 4a:8a:be:f2:df:f4:1c:ae:2a:ea:96:25:34:c2:c4:42:2c:59: 3d:38:fa:c4:cc:55:3b:1a:bd:e6:cc:3d:2f:1a:2c:ff:e2:6b: 38:6c:15:50:5c:3a:21:90:9d:f0:08:6f:8a:96:ec:52:19:44: 2f:77:67:eb:f8:ca:88:e3:9e:8e:52:ea:1a:c7:72:5b:13:e3: d4:a4:e7:30:07:d2:af:83:ce:02:0c:cf:fb:87:b6:c6:fc:72: 61:f5:e9:af:19:29:16:cf:07:74:98:26:1c:b2:ef:f6:36:48: a0:7a:9d:24:12:4d:4e:d6:27:80:11:42:36:1a:3a:0a:8c:0e: d6:c9:f8:a7:77:87:64:d6:cb:c5:87:8c:6b:07:a0:88:c8:d4: 76:13:cb:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESZdhpzlbGNW6xfCyCHLdVbsE60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNjAyMDEyMzI2MDVaFw0yNjAyMDUwODU1MDVaMDMxMTAvBgNV BAMTKDI3MTYzQjdFMkUwREU5MkRBMjlCRDkwOEY5OTMxQzU1ODYwNUE4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZgvGxJNf10m0eyX01CXZRpat +bPC937L3stCcRiRmUsOK0y35BQof/yg4P7bdOMppL2/PTqSMha3/ABBClDkDZ/X Jg2i++C+wGsvkNTZYqhbKeGGOMMqMh8sdlUW+3ELA02xk1q/2iE0IWdNlnzVw2Cr WBSv+tQScOTncTgXOkAmIXSxCKQE6hashjiZNN64qZ+1uS8yZORybjAmLJhH1TTd /eMPSKwq3rl4i5Rink9CWxwYQa/KDfeN62l3EdHToVNKEgBPy58UXXOL6QikBvoo th6PnHX1zT8Eh5oK5pCsEzy/S8DlVnUXfj7Bug/tezcX9FkT1QYEo3E0cknPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxY7fi4N6S2im9kI+ZMcVYYFqP4wHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtOk3IwVJFwjWP0UXHiADf3RXOLJyCFgZ6o kApI7ji+9LoqhHXIryXK0vjCtUurk1XrA2Y+jxQ3wnZWW68+4cIvXCSPLuoBRgpU k5KJcwqNqhGi2HQIBI19FM5RrcAOvdhTLl/rBZ50i4e/rkqKvvLf9ByuKuqWJTTC xEIsWT04+sTMVTsavebMPS8aLP/iazhsFVBcOiGQnfAIb4qW7FIZRC93Z+v4yojj no5S6hrHclsT49Sk5zAH0q+DzgIMz/uHtsb8cmH16a8ZKRbPB3SYJhyy7/Y2SKB6 nSQSTU7WJ4ARQjYaOgqMDtbJ+Kd3h2TWy8WHjGsHoIjI1HYTy2k= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:20 2026 by rpki-client