This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: DQTb7FrP5x5jM1eov+dPs2U9qxnLgrlhe9Q0EAs7uAs= Subject key identifier: 1F:6D:4D:53:2F:8A:41:9A:A5:6E:B7:25:F2:58:A4:D3:15:FF:5A:10 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 30A84F607B0C089DB2BBD53E4A34217B09A72209 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 0217 Signing time: Sun 01 Feb 2026 22:41:07 +0000 Manifest this update: Sun 01 Feb 2026 22:36:07 +0000 Manifest next update: Thu 05 Feb 2026 04:08:07 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: fwVtyUXjYTVa3rVFdh02hlMlOQmXonLeAK+RAXoFoqQ=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a8:4f:60:7b:0c:08:9d:b2:bb:d5:3e:4a:34:21:7b:09:a7:22:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Feb 1 22:36:07 2026 GMT Not After : Feb 5 04:08:07 2026 GMT Subject: CN=1F6D4D532F8A419AA56EB725F258A4D315FF5A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:96:d4:43:9e:02:bc:27:c6:25:41:92:da: 73:8a:e2:9e:2e:3b:62:24:1b:c5:81:47:ef:3b:fb: 52:4f:55:da:ef:7f:3e:d6:d9:38:cb:9b:37:7f:84: e3:0d:0b:63:53:9d:b4:06:44:47:dc:d5:fd:20:51: 18:a5:7e:13:e0:00:b9:a3:96:75:f2:37:bc:bf:7a: 93:ac:8f:cd:dc:9e:e6:63:c9:5b:f4:fd:cf:7f:18: 65:93:56:ed:07:71:6f:71:ca:c8:b1:81:ab:14:a3: cf:e2:be:ad:1f:1e:ef:1d:2a:27:a0:1d:cb:16:e3: fe:fd:9d:f9:0a:43:68:f5:19:1e:5d:ac:a6:45:be: 50:79:ba:ff:8e:51:bc:c8:59:43:be:2d:05:fb:e5: ec:e1:74:e6:e1:c3:14:5d:76:2d:f9:49:a2:25:64: b0:5e:21:b2:9a:a4:0e:01:69:69:1c:72:4a:ce:ff: 2f:e7:75:09:20:db:e7:4f:8c:84:5a:33:56:59:d7: 16:1a:96:28:d3:72:63:68:75:42:5b:66:4b:18:87: d6:e1:ee:5d:d5:57:05:68:b1:5b:c1:90:69:4f:0b: 0a:49:88:d8:71:2d:36:26:93:24:fe:5e:e6:9f:a3: 27:a0:40:03:e6:8b:b9:10:3d:f3:a9:33:56:06:3f: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6D:4D:53:2F:8A:41:9A:A5:6E:B7:25:F2:58:A4:D3:15:FF:5A:10 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:40:d7:71:63:21:5a:a3:18:0f:b0:73:09:a7:f9:51:4f:6b: 03:76:6d:d7:4e:78:bf:e5:a9:57:f0:fa:e5:ef:59:5b:45:36: 6f:1f:56:a8:5d:af:f4:d7:f1:a3:1d:9a:67:b0:43:3f:27:00: 2e:e0:29:a1:aa:67:b2:0c:5a:e4:db:56:ed:17:c3:70:e1:d4: c8:2f:97:9f:17:71:c3:61:2c:9a:26:76:68:d3:29:76:4c:fc: ef:ed:3e:f3:5e:c9:df:15:89:d8:1c:37:d8:ee:bf:1a:ec:7c: 13:d2:38:00:ab:57:18:10:ee:ac:cd:fa:13:56:1f:fb:23:5d: 91:98:42:0e:d8:a2:cf:0f:67:d5:91:67:1b:64:0c:b0:8a:a7: 74:dd:77:37:9a:f4:23:8a:b1:4c:5c:76:86:92:cf:79:42:b0: 82:99:d8:fc:39:33:94:49:7c:b6:fd:89:cb:f4:6c:b2:d2:01: 7d:b3:85:3a:47:9b:ec:ea:80:f1:a9:1c:58:9d:12:ac:7b:06: 36:d0:9c:58:4b:36:bd:e1:5f:c6:5e:67:e5:3d:fe:b8:a9:46: d9:bc:61:3a:ff:4e:a3:bb:1a:0d:ba:dc:f9:2a:2e:89:18:49: 71:5c:1c:f2:bc:79:13:6f:91:48:74:95:0e:6c:11:69:78:72: 70:75:7b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKhPYHsMCJ2yu9U+SjQhewmnIgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNjAyMDEyMjM2MDdaFw0yNjAyMDUwNDA4MDdaMDMxMTAvBgNV BAMTKDFGNkQ0RDUzMkY4QTQxOUFBNTZFQjcyNUYyNThBNEQzMTVGRjVBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIJbUQ54CvCfGJUGS2nOK4p4u O2IkG8WBR+87+1JPVdrvfz7W2TjLmzd/hOMNC2NTnbQGREfc1f0gURilfhPgALmj lnXyN7y/epOsj83cnuZjyVv0/c9/GGWTVu0HcW9xysixgasUo8/ivq0fHu8dKieg HcsW4/79nfkKQ2j1GR5drKZFvlB5uv+OUbzIWUO+LQX75ezhdObhwxRddi35SaIl ZLBeIbKapA4BaWkcckrO/y/ndQkg2+dPjIRaM1ZZ1xYalijTcmNodUJbZksYh9bh 7l3VVwVosVvBkGlPCwpJiNhxLTYmkyT+XuafoyegQAPmi7kQPfOpM1YGP68bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH21NUy+KQZqlbrcl8lik0xX/WhAwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5A13FjIVqjGA+wcwmn+VFPawN2bddOeL/l qVfw+uXvWVtFNm8fVqhdr/TX8aMdmmewQz8nAC7gKaGqZ7IMWuTbVu0Xw3Dh1Mgv l58XccNhLJomdmjTKXZM/O/tPvNeyd8VidgcN9juvxrsfBPSOACrVxgQ7qzN+hNW H/sjXZGYQg7Yos8PZ9WRZxtkDLCKp3Tddzea9COKsUxcdoaSz3lCsIKZ2Pw5M5RJ fLb9icv0bLLSAX2zhTpHm+zqgPGpHFidEqx7BjbQnFhLNr3hX8ZeZ+U9/ripRtm8 YTr/TqO7Gg263PkqLokYSXFcHPK8eRNvkUh0lQ5sEWl4cnB1e7M= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:06 2026 by rpki-client