This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: eL+PN8cCFocu5KXhYCD3+Azu2UkcOYvFml31pv5SPYg= Subject key identifier: 89:23:EF:FD:D4:DC:37:E0:74:41:6B:9D:23:3C:3D:D1:48:A6:E3:0B Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 6A2A49481C042C97E03491C2E2B3C44AD5BDDE6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 01BB Signing time: Sat 31 Jan 2026 09:42:14 +0000 Manifest this update: Sat 31 Jan 2026 09:37:14 +0000 Manifest next update: Tue 03 Feb 2026 19:47:14 +0000 Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 2: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 3: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: Ea/l7AsPniZM0Lv/sZdCbXqDTvqexTpIEhmRsOyK4u8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:49:48:1c:04:2c:97:e0:34:91:c2:e2:b3:c4:4a:d5:bd:de:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Jan 31 09:37:14 2026 GMT Not After : Feb 3 19:47:14 2026 GMT Subject: CN=8923EFFDD4DC37E074416B9D233C3DD148A6E30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:9a:b2:3e:41:70:b4:59:09:ac:b0:00:a1: 75:a5:82:a2:8d:c5:43:36:cd:58:cd:4f:14:9f:3f: 09:f6:99:3a:ef:61:90:70:2c:73:db:7c:0b:19:49: f3:79:e6:f5:db:a5:ea:84:5d:64:48:72:7d:cc:07: 30:1d:59:15:87:ce:48:2b:fb:56:28:1d:89:5d:53: b3:75:e4:13:06:a2:e8:31:f3:15:76:d7:a0:8b:78: 22:ae:b1:55:b9:fa:ac:4a:2c:20:81:09:d2:6f:f6: fd:16:a7:53:c2:fe:66:9c:02:7d:d6:80:ee:04:a0: 7b:1a:ad:a1:9e:1a:ce:8e:87:2a:dc:ce:66:e4:d4: f2:7c:d0:60:b5:dc:43:15:8d:19:0e:a7:ee:33:b9: c2:3d:83:26:6f:31:84:ab:f4:08:7b:6e:3a:2d:9e: 69:a4:8f:9f:5a:bb:d3:95:44:e6:2b:44:45:2a:1b: 57:52:62:73:c6:26:25:63:63:eb:67:55:8e:be:b2: 7b:82:18:89:10:f6:e4:ca:e2:38:ac:69:9b:6e:33: 9d:38:fe:22:cb:ef:df:35:2c:d1:37:a5:a0:06:c9: de:83:2d:e6:39:e7:0f:03:4d:e5:2c:96:1c:a3:d5: 66:f0:cf:97:ca:42:4f:8a:3b:95:56:da:0b:cb:c1: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:23:EF:FD:D4:DC:37:E0:74:41:6B:9D:23:3C:3D:D1:48:A6:E3:0B X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e0:79:2d:fe:f4:62:0a:59:f4:b7:22:92:a3:b7:51:7f:4f: 34:55:31:01:32:c2:5f:0b:43:af:11:a0:56:3b:03:b4:e9:43: 6f:2e:56:96:9d:fa:3e:9a:b2:5f:7b:a5:28:38:3c:0f:ea:7a: 30:c9:93:67:8f:46:52:dd:9b:f9:80:ce:6e:58:b6:4f:5a:02: bc:fa:c7:17:0e:70:6d:d1:e8:74:7a:53:40:c9:5b:0f:fd:72: 8c:69:40:f7:f9:bc:8f:12:20:0b:7d:2e:0d:41:a7:64:35:c5: c3:e5:b7:79:54:87:93:7e:ca:0e:b1:6c:9c:7a:ef:ea:ac:9a: 92:d1:d1:18:37:09:5b:2b:3c:9b:b3:46:e9:8c:87:7c:c1:52: 57:b7:0c:27:91:8b:df:bc:1b:2d:8a:ed:9b:38:83:ed:ca:c9: 8f:79:59:4b:e6:13:3c:9d:15:47:aa:a5:17:63:7a:d6:10:b8: 09:60:ff:f6:6f:30:2d:47:19:e9:04:aa:18:8b:88:63:88:06: 47:69:4e:cc:89:1c:e9:d1:41:34:c3:42:f1:65:60:91:16:2a: 44:0b:6e:39:87:f3:a0:b5:de:ef:17:d0:05:de:3d:9d:23:1a: 01:62:89:d9:6c:dd:49:10:c6:7a:9a:d9:1c:7f:ca:45:3e:b9: 3f:9f:0a:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaipJSBwELJfgNJHC4rPEStW93mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNjAxMzEwOTM3MTRaFw0yNjAyMDMxOTQ3MTRaMDMxMTAvBgNV BAMTKDg5MjNFRkZERDREQzM3RTA3NDQxNkI5RDIzM0MzREQxNDhBNkUzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDak5qyPkFwtFkJrLAAoXWlgqKN xUM2zVjNTxSfPwn2mTrvYZBwLHPbfAsZSfN55vXbpeqEXWRIcn3MBzAdWRWHzkgr +1YoHYldU7N15BMGougx8xV216CLeCKusVW5+qxKLCCBCdJv9v0Wp1PC/macAn3W gO4EoHsaraGeGs6Ohyrczmbk1PJ80GC13EMVjRkOp+4zucI9gyZvMYSr9Ah7bjot nmmkj59au9OVROYrREUqG1dSYnPGJiVjY+tnVY6+snuCGIkQ9uTK4jisaZtuM504 /iLL7981LNE3paAGyd6DLeY55w8DTeUslhyj1Wbwz5fKQk+KO5VW2gvLwctnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSPv/dTcN+B0QWudIzw90Uim4wswHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXgeS3+9GIKWfS3IpKjt1F/TzRVMQEywl8L Q68RoFY7A7TpQ28uVpad+j6asl97pSg4PA/qejDJk2ePRlLdm/mAzm5Ytk9aArz6 xxcOcG3R6HR6U0DJWw/9coxpQPf5vI8SIAt9Lg1Bp2Q1xcPlt3lUh5N+yg6xbJx6 7+qsmpLR0Rg3CVsrPJuzRumMh3zBUle3DCeRi9+8Gy2K7Zs4g+3KyY95WUvmEzyd FUeqpRdjetYQuAlg//ZvMC1HGekEqhiLiGOIBkdpTsyJHOnRQTTDQvFlYJEWKkQL bjmH86C13u8X0AXePZ0jGgFiidls3UkQxnqa2Rx/ykU+uT+fClo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:44 2026 by rpki-client