This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: 3NDZpV/BeFr/rxie/bgbXO81Vw8Ujd//vom/LPtnVo4= Subject key identifier: 74:4E:5E:8D:3A:F6:41:DB:DD:70:83:E5:7D:1A:16:7B:FB:30:10:D9 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 740F6D4AA97C14A92580B6B6E7C5A9504E93A7C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 03AB Signing time: Mon 02 Feb 2026 05:01:44 +0000 Manifest this update: Mon 02 Feb 2026 04:56:44 +0000 Manifest next update: Thu 05 Feb 2026 15:31:44 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: TwI7S9Spiz/HB5EXxspwhA4IQU0XTBPbLx0DL977Igk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0f:6d:4a:a9:7c:14:a9:25:80:b6:b6:e7:c5:a9:50:4e:93:a7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Feb 2 04:56:44 2026 GMT Not After : Feb 5 15:31:44 2026 GMT Subject: CN=744E5E8D3AF641DBDD7083E57D1A167BFB3010D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:3b:d2:dd:c4:5b:3c:3e:22:14:2b:29:a2: 34:eb:35:a4:c1:88:ee:44:f1:d6:71:f7:88:4a:b6: f2:8c:95:a3:25:c6:b5:a4:7a:ea:8c:68:5f:8e:c0: 15:89:71:8e:a8:ed:56:4a:95:57:e8:13:aa:fd:e2: 52:d9:3c:e9:99:09:be:57:0a:e1:6e:63:0e:cc:2e: cc:f2:9c:ec:36:a9:97:2d:bb:29:f6:d1:9a:d2:2a: 9b:4a:02:bf:69:12:c0:30:f3:e7:39:78:c3:27:f1: 1e:e8:59:13:55:8b:3d:c3:3c:af:33:fa:af:9f:a0: 6b:58:4c:6f:c2:89:9d:50:56:33:a8:32:1d:d5:a2: 34:32:d1:d9:71:43:fd:9b:87:55:2b:67:a3:91:ad: e0:11:5c:a7:f7:4d:96:76:75:71:b1:50:a0:b7:8e: 4c:1d:a8:37:bb:57:df:24:a9:03:a4:75:fe:0c:fe: 10:ae:d3:a2:f4:6a:f1:14:bf:24:2f:86:ad:0e:2d: 0a:8f:44:2e:1a:e8:0b:ee:48:c8:3c:8c:3b:10:96: 8b:2f:d3:23:9d:62:83:fe:c0:3a:e8:04:fc:61:6d: 82:1b:a9:37:49:7f:8e:c4:73:23:6d:27:59:42:6a: c2:7b:8f:f2:7b:4b:54:b6:c3:1a:e0:a9:b5:d5:8b: 9c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:5E:8D:3A:F6:41:DB:DD:70:83:E5:7D:1A:16:7B:FB:30:10:D9 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e8:eb:e4:b2:f3:36:18:4f:b8:e4:22:34:3c:4b:7e:01:d7: 27:02:a1:e9:a9:a3:af:68:9b:12:e8:33:bd:e8:0f:b0:6d:96: bd:cd:b9:5c:e7:83:25:da:16:d6:8d:fb:75:94:92:00:26:c1: b6:c2:23:97:8c:80:f7:37:3a:f8:5e:50:35:50:4e:80:38:57: 15:78:54:8a:85:33:78:d6:68:71:49:d5:0d:af:9e:3f:41:2c: 2c:88:99:76:80:d1:3d:cf:ba:bd:43:8e:57:47:32:0c:5c:c5: 3f:92:90:56:f8:ae:07:03:15:37:d6:b3:0b:90:16:8b:34:a5: 87:07:2b:51:67:1a:bc:04:59:9e:6b:fd:d4:c4:5f:c4:27:38: ac:47:30:de:33:3d:32:ad:14:03:97:b8:62:02:f6:75:ed:69: 4f:0b:71:72:78:7e:20:40:78:e9:b4:f3:98:85:36:bf:6d:74: 98:55:51:62:d4:cc:c8:69:a8:7b:84:fc:9c:db:27:87:e3:76: 74:ab:d2:c2:7d:1e:83:7d:ca:4e:5b:d2:c2:4a:82:6a:d6:9c: 6c:49:83:8e:78:c4:b8:6b:40:69:7e:ae:99:44:bd:84:63:5f: 2f:59:e6:0c:68:f2:12:c8:8e:52:e9:bb:46:20:86:fd:4c:54: 08:29:15:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdA9tSql8FKklgLa258WpUE6Tp8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNjAyMDIwNDU2NDRaFw0yNjAyMDUxNTMxNDRaMDMxMTAvBgNV BAMTKDc0NEU1RThEM0FGNjQxREJERDcwODNFNTdEMUExNjdCRkIzMDEwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4DvS3cRbPD4iFCspojTrNaTB iO5E8dZx94hKtvKMlaMlxrWkeuqMaF+OwBWJcY6o7VZKlVfoE6r94lLZPOmZCb5X CuFuYw7MLszynOw2qZctuyn20ZrSKptKAr9pEsAw8+c5eMMn8R7oWRNViz3DPK8z +q+foGtYTG/CiZ1QVjOoMh3VojQy0dlxQ/2bh1UrZ6ORreARXKf3TZZ2dXGxUKC3 jkwdqDe7V98kqQOkdf4M/hCu06L0avEUvyQvhq0OLQqPRC4a6AvuSMg8jDsQlosv 0yOdYoP+wDroBPxhbYIbqTdJf47EcyNtJ1lCasJ7j/J7S1S2wxrgqbXVi5xBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdE5ejTr2QdvdcIPlfRoWe/swENkwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbo6+Sy8zYYT7jkIjQ8S34B1ycCoempo69o mxLoM73oD7Btlr3NuVzngyXaFtaN+3WUkgAmwbbCI5eMgPc3OvheUDVQToA4VxV4 VIqFM3jWaHFJ1Q2vnj9BLCyImXaA0T3Pur1DjldHMgxcxT+SkFb4rgcDFTfWswuQ Fos0pYcHK1FnGrwEWZ5r/dTEX8QnOKxHMN4zPTKtFAOXuGIC9nXtaU8LcXJ4fiBA eOm085iFNr9tdJhVUWLUzMhpqHuE/JzbJ4fjdnSr0sJ9HoN9yk5b0sJKgmrWnGxJ g454xLhrQGl+rplEvYRjXy9Z5gxo8hLIjlLpu0Yghv1MVAgpFds= -----END CERTIFICATE-----Generated at Mon Feb 2 09:58:36 2026 by rpki-client