This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: ZAYsM7M2No/6ZfiDAHqucoTdY/6sztgrmfRF6dJvXm8= Subject key identifier: 85:07:04:AD:35:15:84:B9:5A:94:1E:AE:08:E4:D4:E1:5F:71:4A:2B Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 2F9763F36153734E277339E0856D265DF98B3FEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 03B9 Signing time: Sat 31 Jan 2026 15:02:21 +0000 Manifest this update: Sat 31 Jan 2026 14:57:21 +0000 Manifest next update: Tue 03 Feb 2026 15:25:21 +0000 Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: LRFRZNw0biuqPlsrEdykRPx7HQKmeYIMQn2y757G9i4=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:97:63:f3:61:53:73:4e:27:73:39:e0:85:6d:26:5d:f9:8b:3f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Jan 31 14:57:21 2026 GMT Not After : Feb 3 15:25:21 2026 GMT Subject: CN=850704AD351584B95A941EAE08E4D4E15F714A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:80:f8:7f:84:cf:4f:65:e3:ba:1b:3f:d4: 12:15:c0:ae:da:10:16:10:91:be:35:fe:42:5e:b4: 50:09:3b:d1:3e:55:83:97:af:ec:84:46:f6:4a:77: 17:4c:97:94:5d:cc:f4:57:7d:b9:f4:89:4d:1d:f6: 16:72:59:15:18:6e:bb:7b:98:36:80:8d:7c:0a:2f: fe:03:9d:f1:78:b7:77:be:cb:5c:03:2e:74:98:02: c1:66:fc:21:d6:c9:d0:ac:86:75:8c:f9:8c:ee:ac: 25:64:d9:98:9a:42:24:fb:ef:58:4b:b6:80:c1:0c: 2a:30:05:94:04:e1:92:6e:01:08:c8:eb:91:46:a3: 2d:04:56:d5:20:da:d5:07:34:c5:e1:d7:e5:29:40: 60:7d:57:87:ab:fc:d9:89:9b:27:66:a0:a6:4f:6e: 1a:5e:76:db:6e:02:d3:2c:14:86:df:83:71:54:f5: b4:e7:5c:ea:f9:ca:47:93:57:6a:f8:27:5b:88:0d: 0e:08:fb:7c:3a:37:a6:64:58:42:13:d1:8f:e6:67: 20:83:ab:2e:56:4b:42:64:e3:54:c6:3f:8d:97:9e: 9c:07:a7:ee:80:d8:be:e8:65:7f:fc:bb:86:cc:05: 72:44:fd:eb:a6:07:55:38:d5:db:c1:74:5a:64:ef: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:07:04:AD:35:15:84:B9:5A:94:1E:AE:08:E4:D4:E1:5F:71:4A:2B X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9d:fa:21:37:cf:ba:93:cb:b3:ec:d4:e0:30:ba:16:6b:ab: 92:89:3b:38:23:3b:1f:49:e0:bc:9c:00:4e:fa:27:78:3a:3d: 1d:75:39:5c:7d:cf:ae:9d:ad:62:bb:7a:7d:77:03:06:14:6e: 8a:cf:15:6d:55:f2:95:57:06:f7:2f:96:05:21:93:d3:0a:f1: 26:fa:0c:71:a2:d5:36:12:44:27:92:6a:ed:90:9d:a0:81:79: 31:78:f9:fe:06:b3:e0:e9:b9:bb:88:fa:02:48:8a:52:af:cc: da:d3:0a:2f:21:c5:f5:fd:83:54:b6:a4:c7:37:ee:10:3b:2c: 8c:06:09:d4:0b:10:ff:e1:38:12:54:7f:2e:7e:05:11:07:c8: 8b:42:c9:fe:26:2e:6c:c8:32:cc:55:28:9d:83:28:57:3b:2d: b2:16:b8:37:98:5d:df:d4:7c:e6:12:57:62:b9:e2:ee:05:d1: 1a:b0:30:a8:91:54:91:db:fe:9b:8c:5e:65:c6:6b:2a:53:05: e2:59:77:c8:4e:9c:03:14:64:49:9a:6b:65:bb:f8:8e:70:ac: dd:21:ab:9c:91:3c:70:45:e6:ec:fe:39:2a:78:e3:00:09:33: f3:1e:0e:f2:7b:f1:b0:3e:b9:e1:5b:ec:67:75:97:d4:68:0d: 3b:17:0e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5dj82FTc04ncznghW0mXfmLP+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNjAxMzExNDU3MjFaFw0yNjAyMDMxNTI1MjFaMDMxMTAvBgNV BAMTKDg1MDcwNEFEMzUxNTg0Qjk1QTk0MUVBRTA4RTRENEUxNUY3MTRBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5ID4f4TPT2Xjuhs/1BIVwK7a EBYQkb41/kJetFAJO9E+VYOXr+yERvZKdxdMl5RdzPRXfbn0iU0d9hZyWRUYbrt7 mDaAjXwKL/4DnfF4t3e+y1wDLnSYAsFm/CHWydCshnWM+YzurCVk2ZiaQiT771hL toDBDCowBZQE4ZJuAQjI65FGoy0EVtUg2tUHNMXh1+UpQGB9V4er/NmJmydmoKZP bhpedttuAtMsFIbfg3FU9bTnXOr5ykeTV2r4J1uIDQ4I+3w6N6ZkWEIT0Y/mZyCD qy5WS0Jk41TGP42XnpwHp+6A2L7oZX/8u4bMBXJE/eumB1U41dvBdFpk76+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQcErTUVhLlalB6uCOTU4V9xSiswHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+d+iE3z7qTy7Ps1OAwuhZrq5KJOzgjOx9J 4LycAE76J3g6PR11OVx9z66drWK7en13AwYUborPFW1V8pVXBvcvlgUhk9MK8Sb6 DHGi1TYSRCeSau2QnaCBeTF4+f4Gs+DpubuI+gJIilKvzNrTCi8hxfX9g1S2pMc3 7hA7LIwGCdQLEP/hOBJUfy5+BREHyItCyf4mLmzIMsxVKJ2DKFc7LbIWuDeYXd/U fOYSV2K54u4F0RqwMKiRVJHb/puMXmXGaypTBeJZd8hOnAMUZEmaa2W7+I5wrN0h q5yRPHBF5uz+OSp44wAJM/MeDvJ78bA+ueFb7Gd1l9RoDTsXDnQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:06 2026 by rpki-client