This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft File: 024ABFF2959A6144CC4889C70F77F968FA410EF1.mft (raw, json) Hash identifier: 0DdiqMXQUl/gn+FiWVyqs2IGWoE5xfe+PEzHUee8vww= Subject key identifier: 9E:A3:73:0B:7E:4D:95:10:17:D4:74:F7:8E:F6:AB:87:95:2F:47:D7 Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 Certificate issuer: /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Certificate serial: 2C8126386EADE84FF5DA5CF4781BB7783EEF2E39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft Manifest number: 0305 Signing time: Sun 01 Feb 2026 20:31:17 +0000 Manifest this update: Sun 01 Feb 2026 20:26:17 +0000 Manifest next update: Thu 05 Feb 2026 02:10:17 +0000 Files and hashes: 1: 024ABFF2959A6144CC4889C70F77F968FA410EF1.crl (hash: sC/4HYutkYsxE6UYT3jW3ubxcJuEGqa/Z+uybDHTuPU=) 2: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: QdIixnzSq8N8sCH+dxKebIKtXdrr8qVttS8Xci0wB7M=) 3: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: QO9yzDb4CC7G7ZrOt9x3m3LlZY080vHY8ADNw1G145c=) 4: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: Dc4qfVtP8INNtKjh1IR53nYnK3S3BQyGrJeyd5Z5XHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:81:26:38:6e:ad:e8:4f:f5:da:5c:f4:78:1b:b7:78:3e:ef:2e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Validity Not Before: Feb 1 20:26:17 2026 GMT Not After : Feb 5 02:10:17 2026 GMT Subject: CN=9EA3730B7E4D951017D474F78EF6AB87952F47D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:2c:78:a5:f0:1a:54:2d:d5:22:95:65:b8: e6:47:77:18:d3:39:19:f3:0d:1d:5d:58:3b:9b:47: 27:ac:9f:19:57:68:89:79:d5:48:69:7d:de:31:d9: 2d:6c:a3:56:84:b4:ce:43:23:1b:09:2c:78:9e:bf: 5c:30:ab:ae:df:7b:c2:6a:00:3d:eb:de:8a:55:da: 3a:8e:28:7e:c9:37:50:ce:f9:9b:1f:29:3d:be:7b: 0d:7b:bb:6b:0d:84:84:a5:b2:4f:f5:2e:bb:ad:d9: 7b:57:1c:ab:60:fa:8d:12:f3:5f:06:61:01:18:53: e6:fb:1e:7f:45:32:a4:7c:69:c0:3d:21:f1:e3:20: 2f:18:7f:bd:65:45:66:89:37:49:0b:6d:e1:a9:6e: 97:93:16:44:50:2d:8a:3f:90:3b:eb:89:dc:cf:83: 5b:98:bc:e0:cf:41:db:2a:2c:e1:5d:e5:20:cd:1e: c5:1d:36:dc:5b:7a:a2:0e:64:c0:05:60:19:6e:80: 9d:41:68:d5:5e:a6:dd:7e:ba:ff:72:7a:d7:52:99: 8f:a1:9d:90:f3:c0:ab:64:65:a2:6d:42:09:55:89: b8:f3:97:57:b6:95:77:50:d8:8f:d4:e9:9f:66:0c: 82:f1:89:60:1e:3e:5e:e3:12:23:80:43:5e:e6:2f: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A3:73:0B:7E:4D:95:10:17:D4:74:F7:8E:F6:AB:87:95:2F:47:D7 X509v3 Authority Key Identifier: keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3a:e3:56:92:de:3f:6a:53:23:aa:f0:df:69:df:ea:ec:65: ca:3f:c5:37:c3:54:10:bd:c4:55:b4:f7:21:13:38:e1:7d:bc: d1:9f:e9:00:8d:44:69:31:2d:88:d3:c5:e9:20:e2:27:23:74: 81:d5:b4:fa:8e:72:f3:57:e1:b7:cc:46:ab:e7:19:74:60:59: 1f:e9:75:b7:37:c6:40:ac:a9:67:60:92:c5:94:f0:29:6d:5f: d8:ac:fa:ff:27:a1:9e:54:39:af:39:d6:62:ff:39:f8:5a:9b: 2c:18:df:44:3b:05:9c:05:99:95:d1:66:f9:d4:2b:f5:15:26: 8e:33:7e:2c:75:3f:3e:9a:d3:75:c1:e8:a8:71:54:ae:06:cb: 7e:b3:6e:37:91:66:38:9a:cc:cf:cd:bf:a2:df:0e:94:ea:c4: 34:ed:ca:09:22:41:dd:9c:b1:f5:f2:53:02:5f:01:12:ce:d0: 03:39:e9:98:23:cd:00:f9:2b:69:7f:9f:3d:bc:89:b3:8b:b5: c0:71:fc:cb:c1:a6:02:94:1a:b4:ac:4e:a4:77:60:10:81:5c: d5:c1:6a:40:87:4d:df:a1:b6:17:ab:c2:c2:f6:25:7a:2f:8b: dd:84:1f:8f:fa:ae:d6:59:b7:5b:f0:4b:bb:65:af:87:37:f4: 92:22:a8:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIEmOG6t6E/12lz0eBu3eD7vLjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhG QTQxMEVGMTAeFw0yNjAyMDEyMDI2MTdaFw0yNjAyMDUwMjEwMTdaMDMxMTAvBgNV BAMTKDlFQTM3MzBCN0U0RDk1MTAxN0Q0NzRGNzhFRjZBQjg3OTUyRjQ3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKix4pfAaVC3VIpVluOZHdxjT ORnzDR1dWDubRyesnxlXaIl51Uhpfd4x2S1so1aEtM5DIxsJLHiev1wwq67fe8Jq AD3r3opV2jqOKH7JN1DO+ZsfKT2+ew17u2sNhISlsk/1Lrut2XtXHKtg+o0S818G YQEYU+b7Hn9FMqR8acA9IfHjIC8Yf71lRWaJN0kLbeGpbpeTFkRQLYo/kDvridzP g1uYvODPQdsqLOFd5SDNHsUdNtxbeqIOZMAFYBlugJ1BaNVept1+uv9yetdSmY+h nZDzwKtkZaJtQglVibjzl1e2lXdQ2I/U6Z9mDILxiWAePl7jEiOAQ17mLyuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnqNzC35NlRAX1HT3jvarh5UvR9cwHwYDVR0j BBgwFoAUAkq/8pWaYUTMSInHD3f5aPpBDvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzFhOTQyNi0zYzM1LTQ3MGUtYmYzNC0zMGU3ZTQxNjAyY2IvMC8wMjRBQkZGMjk1 OUE2MTQ0Q0M0ODg5QzcwRjc3Rjk2OEZBNDEwRUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhGQTQx MEVGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5 NjhGQTQxMEVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ641aS3j9qUyOq8N9p3+rsZco/xTfDVBC9 xFW09yETOOF9vNGf6QCNRGkxLYjTxekg4icjdIHVtPqOcvNX4bfMRqvnGXRgWR/p dbc3xkCsqWdgksWU8CltX9is+v8noZ5UOa851mL/OfhamywY30Q7BZwFmZXRZvnU K/UVJo4zfix1Pz6a03XB6KhxVK4Gy36zbjeRZjiazM/Nv6LfDpTqxDTtygkiQd2c sfXyUwJfARLO0AM56ZgjzQD5K2l/nz28ibOLtcBx/MvBpgKUGrSsTqR3YBCBXNXB akCHTd+htherwsL2JXovi92EH4/6rtZZt1vwS7tlr4c39JIiqLI= -----END CERTIFICATE-----Generated at Mon Feb 2 15:59:18 2026 by rpki-client