This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: 6NIF4j/I90JQ7T3fOLyeLkzAkZsqqDlfwMNC/FjIQpA= Subject key identifier: D1:26:FE:4C:42:68:89:45:AA:4A:51:18:30:4C:0B:0E:1D:A4:F8:DD Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 4244816D656B11E85F32DB9796D34A7632F3050B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: B2 Signing time: Sun 01 Feb 2026 00:22:11 +0000 Manifest this update: Sun 01 Feb 2026 00:17:11 +0000 Manifest next update: Wed 04 Feb 2026 10:22:11 +0000 Files and hashes: 1: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: 8xmYke5SoDl1ZY3arXmakd9fc6tGsrRrShEpsmTec94=) 2: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: kToxDWGLAx7wPnTumpRERHYAC4YJ3ZjsOgXXR/j0FWs=) 3: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: OSAo9QWqyVe1VudNV/7NSJlH0xk8Gb3rIp16xTTxTOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:44:81:6d:65:6b:11:e8:5f:32:db:97:96:d3:4a:76:32:f3:05:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Feb 1 00:17:11 2026 GMT Not After : Feb 4 10:22:11 2026 GMT Subject: CN=D126FE4C42688945AA4A5118304C0B0E1DA4F8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:fd:1f:f1:20:be:79:ed:01:b8:87:a4:22: a1:a0:9a:e8:91:99:b6:fe:a4:fc:4e:03:e8:96:30: a0:68:c4:a8:80:32:92:7e:c9:74:77:71:08:05:0e: c3:1b:73:b8:a0:95:f4:c9:f4:c3:d6:c6:2b:71:15: 0d:f6:d5:d1:ef:e5:6a:92:4f:d7:b1:ec:dc:d4:27: ea:e7:ca:ec:76:fc:af:a1:48:9d:d7:04:24:34:8c: 73:38:97:9e:7f:51:be:76:27:9b:15:5a:9f:3f:be: 51:8b:04:69:57:31:8c:cf:d7:ef:ef:17:6b:82:55: dc:1b:0a:0d:af:b6:04:b0:b5:55:52:00:ae:a7:26: d4:b6:c7:f6:ab:b6:7e:15:9d:a5:fa:ba:96:53:74: 30:66:c8:09:20:e0:19:8e:91:5f:7b:7f:d0:7c:b9: 17:39:96:54:3f:e1:34:66:47:22:f9:ef:22:a6:bf: f4:64:27:e4:47:05:26:8f:39:65:98:01:7d:94:fb: cc:8f:6a:87:79:a4:5a:da:9a:88:ba:ce:00:db:f2: 16:d1:e0:56:76:ad:42:66:9f:14:4a:ce:fe:51:02: 8c:ac:78:73:c4:e5:de:fa:cb:10:ac:4a:19:cc:c2: 24:2c:f3:ca:78:a1:64:3e:80:19:a8:fa:54:b0:f2: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:FE:4C:42:68:89:45:AA:4A:51:18:30:4C:0B:0E:1D:A4:F8:DD X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:25:65:93:ea:2b:70:5e:6d:51:29:20:14:7e:94:ab:5e:57: 21:89:d2:ba:f8:d3:1e:5d:74:55:1e:7b:59:b9:2b:54:92:00: da:4c:56:33:9f:48:e7:e9:be:92:dd:f4:6b:23:15:77:a1:c4: 36:e6:9b:14:5a:67:96:93:d6:67:06:00:c3:85:81:8e:66:60: 2d:7b:c7:5e:7d:d2:73:77:51:43:38:8b:df:2f:68:50:6b:32: 10:02:d3:bf:e9:99:0e:17:67:8a:d2:8b:98:35:61:c3:6e:38: 78:c7:b9:05:d9:b7:31:4a:27:d3:49:8b:4a:57:19:75:c9:9b: 59:49:1f:c9:dc:30:60:c5:14:53:83:85:5e:45:e2:88:23:82: 15:4f:ca:09:39:b9:6c:76:75:93:4b:b6:3d:97:a7:22:ac:36: 64:2a:ea:05:33:ec:ea:d3:13:55:ed:c4:73:02:33:d2:0d:42: b4:a2:ce:a1:b3:12:7b:c5:1f:01:21:69:b8:d1:57:c4:f7:b5: 8c:bf:6f:d1:10:c5:80:2c:07:6a:b7:14:bd:9d:d2:2d:cc:8e: 3f:62:4c:bc:b3:d2:2a:2e:6b:eb:ef:22:d5:ec:b9:0c:4a:71: 2a:9e:bf:a5:ae:6a:8f:92:65:c6:f7:f4:84:fb:42:de:ef:09: 5a:39:8d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkSBbWVrEehfMtuXltNKdjLzBQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNjAyMDEwMDE3MTFaFw0yNjAyMDQxMDIyMTFaMDMxMTAvBgNV BAMTKEQxMjZGRTRDNDI2ODg5NDVBQTRBNTExODMwNEMwQjBFMURBNEY4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2f0f8SC+ee0BuIekIqGgmuiR mbb+pPxOA+iWMKBoxKiAMpJ+yXR3cQgFDsMbc7iglfTJ9MPWxitxFQ321dHv5WqS T9ex7NzUJ+rnyux2/K+hSJ3XBCQ0jHM4l55/Ub52J5sVWp8/vlGLBGlXMYzP1+/v F2uCVdwbCg2vtgSwtVVSAK6nJtS2x/artn4VnaX6upZTdDBmyAkg4BmOkV97f9B8 uRc5llQ/4TRmRyL57yKmv/RkJ+RHBSaPOWWYAX2U+8yPaod5pFramoi6zgDb8hbR 4FZ2rUJmnxRKzv5RAoyseHPE5d76yxCsShnMwiQs88p4oWQ+gBmo+lSw8otRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Sb+TEJoiUWqSlEYMEwLDh2k+N0wHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHolZZPqK3BebVEpIBR+lKteVyGJ0rr40x5d dFUee1m5K1SSANpMVjOfSOfpvpLd9GsjFXehxDbmmxRaZ5aT1mcGAMOFgY5mYC17 x1590nN3UUM4i98vaFBrMhAC07/pmQ4XZ4rSi5g1YcNuOHjHuQXZtzFKJ9NJi0pX GXXJm1lJH8ncMGDFFFODhV5F4ogjghVPygk5uWx2dZNLtj2XpyKsNmQq6gUz7OrT E1XtxHMCM9INQrSizqGzEnvFHwEhabjRV8T3tYy/b9EQxYAsB2q3FL2d0i3Mjj9i TLyz0ioua+vvItXsuQxKcSqev6Wuao+SZcb39IT7Qt7vCVo5jcU= -----END CERTIFICATE-----Generated at Mon Feb 2 17:31:51 2026 by rpki-client