This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: +EknYWBKXpsz8QUejPLrWMoGM5FAU0QOAYjy44GGTr8= Subject key identifier: 21:B9:27:3D:E0:A2:D1:81:DE:AE:77:7B:65:6E:CB:F6:50:8D:B6:C3 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 56AA88E584592AC0DEAEFB321FFDC81C6D974E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02DF Signing time: Sun 01 Feb 2026 03:02:06 +0000 Manifest this update: Sun 01 Feb 2026 02:57:06 +0000 Manifest next update: Wed 04 Feb 2026 03:45:06 +0000 Files and hashes: 1: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 2: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: OVrCNxHqsDFwgflR9YF44qb6GXK2lEIAv0SV9AK4Y+U=) 3: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) 4: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:aa:88:e5:84:59:2a:c0:de:ae:fb:32:1f:fd:c8:1c:6d:97:4e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Feb 1 02:57:06 2026 GMT Not After : Feb 4 03:45:06 2026 GMT Subject: CN=21B9273DE0A2D181DEAE777B656ECBF6508DB6C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:ab:84:7b:03:b8:57:b2:db:62:79:c0:82: 0a:98:9d:52:fb:ae:86:89:3a:32:8e:1f:3f:1f:ad: 7c:e4:f0:ac:1a:a3:e6:72:a6:ed:32:21:fa:b6:06: 38:5f:a2:ab:97:1f:d1:0c:14:d7:48:4d:d5:8f:c1: b8:1b:e2:95:0e:f5:d5:23:db:f2:73:d4:a6:0d:99: 45:d1:bd:d2:e2:70:9a:bd:c7:9e:56:ec:f5:ef:8e: 98:37:a9:5a:39:25:44:27:9f:ab:fd:93:82:e7:68: 39:e2:7a:3a:21:db:7a:0b:7a:10:89:9d:d8:96:19: 76:02:78:43:78:0f:14:ef:4b:d5:37:40:95:a9:23: d4:d8:5e:85:a9:c3:32:5e:f7:df:98:2f:9d:0a:e4: 6f:ed:2d:38:3f:12:c4:2e:ca:4f:e8:1c:24:c8:3b: 63:76:eb:89:92:13:fb:a4:3a:96:67:67:fa:15:50: cb:12:ac:98:8a:c4:4a:5c:1b:09:d0:90:db:79:c3: b2:ed:04:58:4f:de:fc:21:0a:3f:c6:de:85:01:ba: 10:99:49:70:6f:a2:39:a6:e9:40:09:84:31:11:42: a2:c9:09:54:c9:4b:c2:ef:b8:e0:68:03:22:19:92: 85:cd:23:f0:47:28:79:a2:fb:a3:c1:9f:94:8c:6d: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:27:3D:E0:A2:D1:81:DE:AE:77:7B:65:6E:CB:F6:50:8D:B6:C3 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:89:be:ee:a1:43:14:e0:22:90:f6:f4:cc:ba:78:a4:09:6f: 20:ac:9b:b2:a7:66:2a:0b:93:3a:4a:d7:24:cd:e3:8c:a6:44: 7b:3e:01:92:db:6f:25:22:5c:6a:b1:b0:57:69:83:f4:03:2e: b9:53:f1:3f:71:51:4b:e9:be:a4:64:08:b2:54:a3:3d:fb:73: e8:92:ef:e9:45:14:45:9f:6f:99:3a:52:71:36:5d:19:49:ac: c2:aa:85:1b:dc:7d:bf:d8:57:24:a0:1a:b1:01:fb:18:e3:33: f2:c1:b6:18:57:00:4a:98:7e:42:0e:fd:3a:f6:9b:c1:1f:4b: dc:f6:55:61:25:05:c1:69:eb:e0:97:04:80:f7:39:d0:d3:49: 89:25:d2:ee:f4:39:78:aa:0c:e9:d2:22:10:f7:2b:2b:88:c2: 44:6c:98:0a:5e:5f:46:6c:cf:8f:2c:9f:f9:a1:bb:12:aa:fd: 31:e7:e5:b9:b1:59:07:27:1c:4d:34:bd:46:26:3c:3d:54:a9: 0a:fe:1e:5d:d3:c1:0e:09:da:1c:27:0b:9d:e4:48:9e:d2:09: 11:65:4b:59:a8:fc:7a:e4:df:8e:87:df:5a:9f:5f:f1:4d:8a: 09:32:bb:36:2b:35:ac:44:ff:82:cb:db:83:be:cf:30:22:69: 73:aa:d1:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqqI5YRZKsDervsyH/3IHG2XTogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNjAyMDEwMjU3MDZaFw0yNjAyMDQwMzQ1MDZaMDMxMTAvBgNV BAMTKDIxQjkyNzNERTBBMkQxODFERUFFNzc3QjY1NkVDQkY2NTA4REI2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMauEewO4V7LbYnnAggqYnVL7 roaJOjKOHz8frXzk8Kwao+Zypu0yIfq2BjhfoquXH9EMFNdITdWPwbgb4pUO9dUj 2/Jz1KYNmUXRvdLicJq9x55W7PXvjpg3qVo5JUQnn6v9k4LnaDniejoh23oLehCJ ndiWGXYCeEN4DxTvS9U3QJWpI9TYXoWpwzJe99+YL50K5G/tLTg/EsQuyk/oHCTI O2N264mSE/ukOpZnZ/oVUMsSrJiKxEpcGwnQkNt5w7LtBFhP3vwhCj/G3oUBuhCZ SXBvojmm6UAJhDERQqLJCVTJS8LvuOBoAyIZkoXNI/BHKHmi+6PBn5SMbaU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbknPeCi0YHernd7ZW7L9lCNtsMwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiJvu6hQxTgIpD29My6eKQJbyCsm7KnZioL kzpK1yTN44ymRHs+AZLbbyUiXGqxsFdpg/QDLrlT8T9xUUvpvqRkCLJUoz37c+iS 7+lFFEWfb5k6UnE2XRlJrMKqhRvcfb/YVySgGrEB+xjjM/LBthhXAEqYfkIO/Tr2 m8EfS9z2VWElBcFp6+CXBID3OdDTSYkl0u70OXiqDOnSIhD3KyuIwkRsmApeX0Zs z48sn/mhuxKq/THn5bmxWQcnHE00vUYmPD1UqQr+Hl3TwQ4J2hwnC53kSJ7SCRFl S1mo/Hrk346H31qfX/FNigkyuzYrNaxE/4LL24O+zzAiaXOq0QA= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:02 2026 by rpki-client