This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: KNZSRZiLgk+/AO9Dv7R/FDwWNCJQ63FVxbsWbqXTaSk= Subject key identifier: 9C:3F:D1:85:6C:3C:C0:B8:4E:E7:FD:DD:D8:B4:FE:4F:61:C8:94:79 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 4A76B881DD3A45D304ACFB162ACE766249D6F402 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 0221 Signing time: Sat 31 Jan 2026 11:41:27 +0000 Manifest this update: Sat 31 Jan 2026 11:36:27 +0000 Manifest next update: Tue 03 Feb 2026 23:13:27 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) 2: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: yYQDE9PWIBFG2Zcl/cw/ha0VittvnzZYRPnMBiB9DPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 23:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:76:b8:81:dd:3a:45:d3:04:ac:fb:16:2a:ce:76:62:49:d6:f4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Jan 31 11:36:27 2026 GMT Not After : Feb 3 23:13:27 2026 GMT Subject: CN=9C3FD1856C3CC0B84EE7FDDDD8B4FE4F61C89479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:dd:b9:7c:d2:21:19:3f:b4:bb:75:6d:ca: 09:45:ec:22:2c:3f:9d:45:6f:d3:f2:f9:05:28:35: 69:36:e0:9f:85:8f:69:d0:54:0a:84:68:38:47:0d: 22:4e:7f:eb:95:8a:e5:a1:1f:ad:4b:9d:a7:70:0e: 06:4d:64:a2:00:dc:37:8c:d2:88:66:c9:b4:22:bf: 43:c2:9e:c6:13:a2:05:cf:47:49:d9:ad:db:00:0f: 41:2b:f7:7b:50:b3:38:a3:f7:c7:88:e8:03:0a:cf: 2e:53:12:11:2f:b0:ed:ef:d1:84:0f:69:22:c8:84: 23:82:73:2e:39:0b:c1:fa:22:16:08:2d:5d:b9:45: 90:2f:ae:3c:4f:d3:bd:01:d3:63:2c:1c:59:ce:7f: 0b:0c:f8:d8:05:f2:33:06:74:3b:df:9b:1b:6e:e0: 2f:c8:b3:77:7c:75:ec:e6:53:b4:4c:71:bb:e4:17: 3f:bb:1e:0d:0c:41:3c:7e:42:66:a3:72:9e:0d:3f: b3:1a:16:ad:16:33:c6:fc:bc:e3:2b:d6:ee:11:53: 26:8c:b4:38:66:0a:1f:7e:5b:7c:bc:ca:18:55:0d: ed:31:81:3f:51:77:82:c2:a2:64:3f:89:1b:58:22: 58:5d:c2:4b:be:1b:b9:33:db:16:6c:25:06:dd:c9: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:D1:85:6C:3C:C0:B8:4E:E7:FD:DD:D8:B4:FE:4F:61:C8:94:79 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ae:19:6b:1a:bf:d0:50:e9:22:58:34:cc:8b:27:71:88:61: 3c:ad:c6:97:f5:ce:19:c1:1e:38:9d:6d:32:98:f2:18:7a:2f: 42:01:67:06:60:99:f8:f4:e7:fa:d1:01:91:7a:7a:ee:ab:f3: 4c:93:1c:58:bc:76:21:ba:94:50:98:42:90:9d:87:b9:88:4a: b0:24:24:c7:c8:27:44:db:d7:55:ff:02:5f:6c:34:db:73:b6: fe:51:f5:23:f2:80:dc:8e:c9:5e:7a:28:5c:af:06:5e:75:f6: 47:fe:e4:9e:6d:7e:e7:2d:5f:f6:e3:4c:d5:62:7a:68:dc:0a: 13:2a:62:b4:e6:a4:42:34:35:49:63:12:85:03:54:1f:d3:1d: 8b:54:5f:08:b6:c3:ed:d3:99:37:b7:28:89:b3:30:59:94:3d: 44:3f:20:83:18:30:39:37:9f:9a:f6:e9:16:a9:af:b9:18:34: 8f:0a:79:d4:2f:82:00:3a:8f:15:68:e7:8d:80:7e:01:18:2c: 0d:68:63:ac:0d:93:89:1a:de:97:94:ed:9c:87:37:75:b9:b6: 2f:d5:5f:fd:bb:ac:af:42:0f:04:ed:a2:c3:81:20:a0:62:13: c9:88:b8:da:d4:65:29:82:3d:f0:a3:32:f0:5f:03:aa:9c:75: a6:d3:a8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSna4gd06RdMErPsWKs52YknW9AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNjAxMzExMTM2MjdaFw0yNjAyMDMyMzEzMjdaMDMxMTAvBgNV BAMTKDlDM0ZEMTg1NkMzQ0MwQjg0RUU3RkREREQ4QjRGRTRGNjFDODk0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHd25fNIhGT+0u3VtyglF7CIs P51Fb9Py+QUoNWk24J+Fj2nQVAqEaDhHDSJOf+uViuWhH61LnadwDgZNZKIA3DeM 0ohmybQiv0PCnsYTogXPR0nZrdsAD0Er93tQszij98eI6AMKzy5TEhEvsO3v0YQP aSLIhCOCcy45C8H6IhYILV25RZAvrjxP070B02MsHFnOfwsM+NgF8jMGdDvfmxtu 4C/Is3d8dezmU7RMcbvkFz+7Hg0MQTx+Qmajcp4NP7MaFq0WM8b8vOMr1u4RUyaM tDhmCh9+W3y8yhhVDe0xgT9Rd4LComQ/iRtYIlhdwku+G7kz2xZsJQbdyZVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnD/RhWw8wLhO5/3d2LT+T2HIlHkwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASuGWsav9BQ6SJYNMyLJ3GIYTytxpf1zhnB HjidbTKY8hh6L0IBZwZgmfj05/rRAZF6eu6r80yTHFi8diG6lFCYQpCdh7mISrAk JMfIJ0Tb11X/Al9sNNtztv5R9SPygNyOyV56KFyvBl519kf+5J5tfuctX/bjTNVi emjcChMqYrTmpEI0NUljEoUDVB/THYtUXwi2w+3TmTe3KImzMFmUPUQ/IIMYMDk3 n5r26Rapr7kYNI8KedQvggA6jxVo542AfgEYLA1oY6wNk4ka3peU7ZyHN3W5ti/V X/27rK9CDwTtosOBIKBiE8mIuNrUZSmCPfCjMvBfA6qcdabTqJ8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:13 2026 by rpki-client