This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: dPQnv1IWRzJqa4uuJI68e/4t30WeQnOZw4rganIU3Qo= Subject key identifier: 8A:25:B0:69:75:39:D5:BF:6B:4D:F1:D6:C1:79:25:5A:A3:29:36:D8 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: BC6288C51E48C92C93D0BB4A66B3F64349FF18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0266 Signing time: Sun 01 Feb 2026 00:20:54 +0000 Manifest this update: Sun 01 Feb 2026 00:15:54 +0000 Manifest next update: Wed 04 Feb 2026 07:52:54 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: 9o2oVUlCH67tmkyiu1d8mqxphsVNPg5UzFLYl2A51s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bc:62:88:c5:1e:48:c9:2c:93:d0:bb:4a:66:b3:f6:43:49:ff:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Feb 1 00:15:54 2026 GMT Not After : Feb 4 07:52:54 2026 GMT Subject: CN=8A25B0697539D5BF6B4DF1D6C179255AA32936D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:6a:c0:cf:31:f0:5d:b9:13:25:9e:b1:a3: ef:a3:7e:60:fd:d0:d5:7d:a7:9e:77:29:ca:a3:ce: cb:8e:84:33:c8:0e:4f:f8:da:4d:9a:b5:3f:98:fe: 8f:b1:63:de:4d:21:57:96:1f:07:7b:83:fb:2a:bb: 28:10:a8:ea:94:06:b7:23:26:3d:78:55:ca:e5:e1: ca:50:2b:e4:05:1e:74:7e:22:bd:4e:e7:fa:11:57: 3e:55:92:8b:0c:cf:6b:0a:a3:65:70:af:f5:22:9b: a7:83:74:cf:9d:6c:17:35:66:e3:78:fe:d7:67:b6: 8d:f7:06:c7:aa:14:f6:0d:92:35:bc:d5:05:7d:d3: d9:8b:b8:d6:93:bb:a5:8a:cd:9d:59:71:aa:5f:f8: e3:6c:45:7f:35:19:94:17:0e:9e:ba:a1:45:b2:52: f7:e1:8c:a1:bd:7d:ad:8e:e5:c7:06:2d:c6:25:df: 0e:c5:c1:78:76:1a:49:b1:52:ce:fb:45:ae:89:f4: 8a:1c:ce:0a:7b:5f:6c:27:a2:42:a7:b6:b7:6a:ad: 00:6d:c6:8e:5d:5c:49:c4:5c:8f:b7:48:6b:a4:f0: c1:12:9f:6e:e4:ca:8a:ea:24:e6:b4:84:57:4a:ea: 0b:92:54:8d:fc:3f:65:09:27:52:2b:bd:9e:de:b3: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:B0:69:75:39:D5:BF:6B:4D:F1:D6:C1:79:25:5A:A3:29:36:D8 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e9:31:f2:17:d5:63:52:12:bf:9b:9d:46:29:02:ea:4f:02: 84:d7:4a:db:f1:86:0e:53:ad:17:a8:90:2d:c6:c3:a8:5e:35: 6b:51:d9:f6:80:47:ee:31:86:a5:d4:1f:ef:87:b1:89:b9:8e: b8:00:a0:87:6e:63:52:a4:2a:b2:01:08:ef:0f:f3:25:21:ee: 3d:08:9d:32:b3:bb:00:e4:d3:79:26:18:50:dd:46:a4:f0:2d: 72:d0:39:f2:c6:b0:c9:0a:e3:c5:be:60:67:11:f2:9c:06:34: 86:ed:a0:aa:a0:1a:32:b7:30:df:f8:7c:25:27:24:59:67:48: 2c:b6:67:96:3d:20:b2:1c:f1:60:ec:9e:e1:99:77:f7:e9:ce: 8c:1d:55:6e:60:b3:5f:5f:50:ff:d1:84:d4:13:62:9b:14:0e: 23:3a:33:71:2e:96:f0:9a:9a:1e:4a:29:64:3c:c4:49:7e:93: 65:04:6c:3f:9a:e1:10:96:2f:c1:df:5e:47:ce:f5:a3:f9:b2: ba:0f:77:ed:63:28:ee:f0:e2:a8:11:90:2a:4f:08:bc:b9:b1: a2:3c:67:fa:05:b9:88:d5:84:3b:2d:8e:41:57:fb:dc:3a:01: b4:22:3a:0a:51:b4:d6:56:c9:af:1e:8b:39:b9:83:07:94:88: 22:8f:2e:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALxiiMUeSMksk9C7Smaz9kNJ/xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNjAyMDEwMDE1NTRaFw0yNjAyMDQwNzUyNTRaMDMxMTAvBgNV BAMTKDhBMjVCMDY5NzUzOUQ1QkY2QjRERjFENkMxNzkyNTVBQTMyOTM2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lWrAzzHwXbkTJZ6xo++jfmD9 0NV9p553KcqjzsuOhDPIDk/42k2atT+Y/o+xY95NIVeWHwd7g/squygQqOqUBrcj Jj14Vcrl4cpQK+QFHnR+Ir1O5/oRVz5VkosMz2sKo2Vwr/Uim6eDdM+dbBc1ZuN4 /tdnto33BseqFPYNkjW81QV909mLuNaTu6WKzZ1Zcapf+ONsRX81GZQXDp66oUWy UvfhjKG9fa2O5ccGLcYl3w7FwXh2GkmxUs77Ra6J9Ioczgp7X2wnokKntrdqrQBt xo5dXEnEXI+3SGuk8MESn27kyorqJOa0hFdK6guSVI38P2UJJ1IrvZ7es1XPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiiWwaXU51b9rTfHWwXklWqMpNtgwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTpMfIX1WNSEr+bnUYpAupPAoTXStvxhg5T rReokC3Gw6heNWtR2faAR+4xhqXUH++HsYm5jrgAoIduY1KkKrIBCO8P8yUh7j0I nTKzuwDk03kmGFDdRqTwLXLQOfLGsMkK48W+YGcR8pwGNIbtoKqgGjK3MN/4fCUn JFlnSCy2Z5Y9ILIc8WDsnuGZd/fpzowdVW5gs19fUP/RhNQTYpsUDiM6M3EulvCa mh5KKWQ8xEl+k2UEbD+a4RCWL8HfXkfO9aP5sroPd+1jKO7w4qgRkCpPCLy5saI8 Z/oFuYjVhDstjkFX+9w6AbQiOgpRtNZWya8eizm5gweUiCKPLmA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:17 2026 by rpki-client