This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: aHLnXrHQJJXeGnjhsPnZrRoNXRVsoGu+5bsV+2qL9Uo= Subject key identifier: 89:32:96:A3:05:78:95:57:37:28:0F:B5:E6:D9:6E:A1:1C:C7:04:50 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 21225D833C599C00996E7B533434122DC476C3D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 026A Signing time: Sat 31 Jan 2026 19:01:23 +0000 Manifest this update: Sat 31 Jan 2026 18:56:23 +0000 Manifest next update: Wed 04 Feb 2026 02:48:23 +0000 Files and hashes: 1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: amGg2X/e259yYVIAXgMMcb+ASupbTD2+EIvh0Q1tcnY=) 2: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: EFmO8yowLpq4qBjOLSIE2Kj2O8iK4b1Pf4wpDSLHQ84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:22:5d:83:3c:59:9c:00:99:6e:7b:53:34:34:12:2d:c4:76:c3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Jan 31 18:56:23 2026 GMT Not After : Feb 4 02:48:23 2026 GMT Subject: CN=893296A30578955737280FB5E6D96EA11CC70450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:3e:73:31:65:21:0a:3e:8c:9c:b3:e0:ef: c8:8d:f4:26:6f:7c:c9:b0:c8:28:6f:19:a4:f4:db: b8:55:f8:7c:31:49:a0:79:fe:31:29:c8:11:fb:97: d2:99:a1:14:63:64:d3:be:47:9d:94:13:81:9e:cf: 4a:b6:ff:fb:31:49:0b:a2:9b:38:93:53:58:ca:c9: a8:0e:60:b5:67:be:11:0a:c0:af:e1:f6:01:13:81: 55:da:a4:f5:09:e9:d1:54:e6:0e:73:5f:44:5d:77: 2a:04:aa:85:a5:97:38:89:39:b8:8c:ec:59:ff:0e: fb:1f:64:f8:74:63:0c:6b:32:72:c1:29:69:7b:7f: 91:ca:ea:ab:b4:cb:fc:3e:3f:41:58:13:47:8a:49: 23:6c:7e:bd:80:25:f3:02:1c:cc:13:ee:d4:e2:7c: 9c:e1:d5:72:5d:54:b9:ac:30:a4:f9:90:a5:c4:b1: c3:ab:03:2a:7c:4a:b4:c7:3e:41:37:f1:74:c4:7a: 5c:43:b3:4f:9f:1a:62:91:9e:14:fd:14:39:da:59: 57:00:f3:ab:37:17:3c:d4:52:48:37:83:35:24:4d: 42:c6:94:2d:02:6b:f1:fa:64:f6:e8:a4:38:7f:7b: f1:7c:72:9e:de:8d:8e:e4:2d:fa:ee:cb:02:4c:af: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:32:96:A3:05:78:95:57:37:28:0F:B5:E6:D9:6E:A1:1C:C7:04:50 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:27:63:f2:b2:2c:a8:fc:90:ea:83:c0:40:2b:0f:4a:8a: a3:1e:87:1e:f0:59:81:55:11:00:82:2e:30:35:9a:45:e8:64: 37:e1:b7:a8:27:c5:7b:0d:dc:e0:76:23:c5:d2:57:35:09:a0: 80:82:5d:02:ef:df:8b:0a:c7:ca:0a:c4:78:78:73:03:10:6d: b9:7f:54:1e:8f:13:b5:28:27:27:79:6a:dc:f1:02:9a:e0:76: 42:01:0e:b0:bc:0b:e6:d3:23:dd:34:e2:ae:b3:83:fb:2c:5a: 0a:0b:c7:e2:03:95:28:1f:f8:61:63:d7:7e:87:92:64:61:7b: 70:27:e9:e4:3f:cb:8b:46:b8:ec:4b:36:9c:9b:b9:bf:4c:8f: dc:f4:e5:68:4e:27:50:e4:64:35:49:bc:c9:e0:1d:b2:8e:78: 9c:a1:d4:cd:35:e6:66:58:36:5b:13:bb:ee:0b:06:7f:d5:0f: a0:da:81:74:6c:bf:3c:dc:c2:a1:91:63:3d:0d:34:42:85:8d: 2c:a6:dd:91:85:4a:a8:dc:0e:42:01:38:0e:9c:18:f1:61:07: 23:78:e2:08:f0:94:f8:e0:63:55:8d:b0:92:82:5c:ee:4a:2f: cb:e4:75:e0:a8:da:cb:a8:17:0c:22:e0:18:38:69:5c:4e:70: dc:f3:70:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISJdgzxZnACZbntTNDQSLcR2w9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNjAxMzExODU2MjNaFw0yNjAyMDQwMjQ4MjNaMDMxMTAvBgNV BAMTKDg5MzI5NkEzMDU3ODk1NTczNzI4MEZCNUU2RDk2RUExMUNDNzA0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+T5zMWUhCj6MnLPg78iN9CZv fMmwyChvGaT027hV+HwxSaB5/jEpyBH7l9KZoRRjZNO+R52UE4Gez0q2//sxSQui mziTU1jKyagOYLVnvhEKwK/h9gETgVXapPUJ6dFU5g5zX0RddyoEqoWllziJObiM 7Fn/DvsfZPh0YwxrMnLBKWl7f5HK6qu0y/w+P0FYE0eKSSNsfr2AJfMCHMwT7tTi fJzh1XJdVLmsMKT5kKXEscOrAyp8SrTHPkE38XTEelxDs0+fGmKRnhT9FDnaWVcA 86s3FzzUUkg3gzUkTULGlC0Ca/H6ZPbopDh/e/F8cp7ejY7kLfruywJMr14RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTKWowV4lVc3KA+15tluoRzHBFAwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg4J2Pysiyo/JDqg8BAKw9KiqMehx7wWYFV EQCCLjA1mkXoZDfht6gnxXsN3OB2I8XSVzUJoICCXQLv34sKx8oKxHh4cwMQbbl/ VB6PE7UoJyd5atzxAprgdkIBDrC8C+bTI9004q6zg/ssWgoLx+IDlSgf+GFj136H kmRhe3An6eQ/y4tGuOxLNpybub9Mj9z05WhOJ1DkZDVJvMngHbKOeJyh1M015mZY NlsTu+4LBn/VD6DagXRsvzzcwqGRYz0NNEKFjSym3ZGFSqjcDkIBOA6cGPFhByN4 4gjwlPjgY1WNsJKCXO5KL8vkdeCo2suoFwwi4Bg4aVxOcNzzcFU= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:10 2026 by rpki-client