This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json) Hash identifier: DOPdp9EHNoYjhNpYXpXJB+NWUQXpAA6YcxReosY2LiQ= Subject key identifier: F0:A0:08:7B:8B:8D:F9:00:76:82:37:7D:9D:41:60:8D:11:E2:EB:D3 Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Certificate serial: 302E05DB702F767DAE3144504DD1AADB5527DD16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft Manifest number: 012D Signing time: Mon 02 Feb 2026 11:21:54 +0000 Manifest this update: Mon 02 Feb 2026 11:16:54 +0000 Manifest next update: Thu 05 Feb 2026 13:25:54 +0000 Files and hashes: 1: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=) 2: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=) 3: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: 859yRYxg6dYMZDhycmHxCWbBfEwXNU7EIcEdV25XiMg=) 4: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: qa4YHm32QrdIZ+RaV9/429DZJadtxtrxwm5qOAi3KVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 13:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2e:05:db:70:2f:76:7d:ae:31:44:50:4d:d1:aa:db:55:27:dd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4 Validity Not Before: Feb 2 11:16:54 2026 GMT Not After : Feb 5 13:25:54 2026 GMT Subject: CN=F0A0087B8B8DF9007682377D9D41608D11E2EBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:70:6d:8b:ba:d9:08:4b:79:d8:1b:42:e8: 41:54:71:1e:96:c4:05:59:cc:0a:13:cb:2c:b6:cd: 79:6d:d5:0c:bf:5c:71:e7:49:b0:03:15:2e:da:f3: 40:3e:21:c4:25:32:21:1f:9c:1c:96:28:83:c1:2f: c1:f9:9e:c4:42:b3:ca:fc:70:cc:f2:7f:c2:cf:cc: fa:dd:fb:f9:7a:e3:8b:59:31:49:88:ae:45:77:75: 73:3f:7d:cd:43:e4:ae:28:a4:56:d8:0b:28:3d:5d: 46:71:71:83:fe:c9:9b:fa:93:d6:97:ae:78:30:dc: 05:44:31:1c:5a:c5:7f:78:b4:0d:c3:27:6c:02:2a: 88:46:9e:36:ca:0c:53:4e:ff:32:96:a4:66:43:ab: f8:fe:74:08:1e:21:09:cc:5d:10:54:d4:91:9e:ef: aa:ac:38:5e:80:28:d8:04:d6:c8:85:84:b7:97:6f: 01:5e:11:f0:a0:20:f4:70:b2:a2:ce:ca:6f:0c:a6: 6f:69:b6:65:2a:24:5a:2e:3f:f5:03:d7:8a:75:34: 52:4b:34:c3:62:f5:c4:53:fb:72:8a:ab:b5:92:19: 86:5a:78:4c:36:dc:62:15:85:1b:2f:b3:27:52:8f: ec:2d:a4:79:27:91:35:ab:77:58:cf:53:0d:80:c1: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A0:08:7B:8B:8D:F9:00:76:82:37:7D:9D:41:60:8D:11:E2:EB:D3 X509v3 Authority Key Identifier: keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:65:cc:f9:a7:27:a0:c5:3b:6a:9f:cd:bd:ce:0d:aa:85:8e: 4d:06:e7:70:1e:ab:76:83:63:78:b6:28:00:0f:8c:29:69:a8: 26:a3:09:bd:c2:7f:c3:61:54:83:91:93:e4:8c:7a:08:33:70: c2:4a:42:cd:20:31:71:14:74:38:7b:1d:74:c2:14:d3:eb:8e: 42:d2:a2:0d:5b:1e:55:12:a4:0c:38:85:55:7b:9a:43:95:ff: e9:09:87:3b:93:59:2e:63:ba:78:a3:de:96:f0:23:fd:5b:e4: 40:39:f8:de:01:7e:34:b9:c2:af:e0:a2:c3:81:08:9a:dc:a2: c9:16:95:6c:cf:ea:cb:d1:be:5d:0e:31:cc:a4:1d:4b:86:c5: 6d:07:4c:bc:d4:05:b7:bb:17:a8:8f:08:40:42:16:6b:4e:87: 75:48:9b:6a:ad:c3:e1:c5:42:10:61:08:b7:cc:51:dd:39:fd: ae:3f:4d:85:f3:ad:dd:ab:30:b3:d1:2e:42:bf:aa:46:17:a9: 86:9e:ca:36:7b:8e:f3:7c:8a:68:fc:e5:be:94:3c:3d:40:f3: b9:3f:82:f6:57:79:a3:4d:0f:69:0f:1f:de:17:26:45:12:1a: 23:0d:72:ce:7c:bc:f4:09:d5:12:43:53:2f:9b:e2:54:60:51: 2e:c3:3c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMC4F23Avdn2uMURQTdGq21Un3RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJC RjdCN0NGNDAeFw0yNjAyMDIxMTE2NTRaFw0yNjAyMDUxMzI1NTRaMDMxMTAvBgNV BAMTKEYwQTAwODdCOEI4REY5MDA3NjgyMzc3RDlENDE2MDhEMTFFMkVCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqXBti7rZCEt52BtC6EFUcR6W xAVZzAoTyyy2zXlt1Qy/XHHnSbADFS7a80A+IcQlMiEfnByWKIPBL8H5nsRCs8r8 cMzyf8LPzPrd+/l644tZMUmIrkV3dXM/fc1D5K4opFbYCyg9XUZxcYP+yZv6k9aX rngw3AVEMRxaxX94tA3DJ2wCKohGnjbKDFNO/zKWpGZDq/j+dAgeIQnMXRBU1JGe 76qsOF6AKNgE1siFhLeXbwFeEfCgIPRwsqLOym8Mpm9ptmUqJFouP/UD14p1NFJL NMNi9cRT+3KKq7WSGYZaeEw23GIVhRsvsydSj+wtpHknkTWrd1jPUw2AwbFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8KAIe4uN+QB2gjd9nUFgjRHi69MwHwYDVR0j BBgwFoAUEJAr867BZfycw81yrcq/W797fPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2MwNTUyMS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC8xMDkwMkJGM0FF QzE2NUZDOUNDM0NENzJBRENBQkY1QkJGN0I3Q0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJGNUJCRjdC N0NGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjMDU1MjEtMDMzOC00ZjMxLWEy MDktNGY4NzhiZWY2MzhhLzAvMTA5MDJCRjNBRUMxNjVGQzlDQzNDRDcyQURDQUJG NUJCRjdCN0NGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBlzPmnJ6DFO2qfzb3ODaqFjk0G53Aeq3aD Y3i2KAAPjClpqCajCb3Cf8NhVIORk+SMeggzcMJKQs0gMXEUdDh7HXTCFNPrjkLS og1bHlUSpAw4hVV7mkOV/+kJhzuTWS5junij3pbwI/1b5EA5+N4BfjS5wq/gosOB CJrcoskWlWzP6svRvl0OMcykHUuGxW0HTLzUBbe7F6iPCEBCFmtOh3VIm2qtw+HF QhBhCLfMUd05/a4/TYXzrd2rMLPRLkK/qkYXqYaeyjZ7jvN8imj85b6UPD1A87k/ gvZXeaNND2kPH94XJkUSGiMNcs58vPQJ1RJDUy+b4lRgUS7DPIA= -----END CERTIFICATE-----Generated at Mon Feb 2 15:59:17 2026 by rpki-client