This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: r+OS+mfZuFVfks4wbPJfU/KTX2JnUXkCYU7mfszrwnU= Subject key identifier: 1E:53:BF:53:C6:F6:6D:79:28:B1:58:31:B0:D7:E3:57:3F:65:64:38 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 15747002859EC8CC2C5599772ACD4F13B325044F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 0546 Signing time: Sat 31 Jan 2026 13:10:05 +0000 Manifest this update: Sat 31 Jan 2026 13:05:05 +0000 Manifest next update: Tue 03 Feb 2026 14:46:05 +0000 Files and hashes: 1: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) 3: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 4: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: Wdy0VZCO/NfvO3fK+IVm+UuBmPWGwiMHXdB4waLV9l4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:74:70:02:85:9e:c8:cc:2c:55:99:77:2a:cd:4f:13:b3:25:04:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Jan 31 13:05:05 2026 GMT Not After : Feb 3 14:46:05 2026 GMT Subject: CN=1E53BF53C6F66D7928B15831B0D7E3573F656438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:48:f7:6c:06:a6:06:9d:2e:47:14:8f:4e: ad:4c:0b:a5:03:a0:ea:99:a2:07:4e:23:fc:ee:11: b7:9e:22:01:f1:3e:e5:d4:b2:c6:0b:59:70:a8:57: 4a:51:dc:d9:96:5c:76:8f:17:5f:51:fa:b3:81:b1: 96:6b:2e:b6:e6:16:8c:8e:eb:e9:3c:23:41:5a:37: 89:8f:79:1e:80:ce:4d:30:e0:b5:85:47:70:a9:e7: fc:be:80:1e:71:23:18:00:f5:07:9a:0b:c6:2a:4f: 26:cc:8a:19:c9:55:c2:1e:17:f1:9f:c1:9a:a4:dd: e1:f8:3b:fc:8c:b6:ec:e2:f9:ee:f9:46:8e:03:be: 9c:d2:23:1c:e8:16:47:8e:48:47:ad:a6:f3:4b:83: 6c:1e:d1:ed:90:6e:aa:28:7b:6a:2c:87:14:9f:4d: 85:d7:0b:b0:1c:a4:2e:70:4f:54:d2:db:f0:04:63: 47:89:f1:a8:fd:c6:9b:3c:8b:05:14:cc:b2:32:f0: ed:c7:60:58:b1:52:d5:c2:e1:9b:a6:c7:73:e8:ed: 40:5b:d2:68:5c:52:51:ab:37:23:38:2e:5a:ac:ac: 65:3f:2a:3d:6b:ab:2c:b5:12:43:42:08:41:e6:52: fc:72:b0:81:7c:ff:26:bf:28:d2:f6:08:b6:71:65: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:53:BF:53:C6:F6:6D:79:28:B1:58:31:B0:D7:E3:57:3F:65:64:38 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a0:30:3d:5b:a6:ae:4c:2b:53:82:59:20:98:e2:21:40:3e: da:81:4a:5f:2d:35:0e:2b:16:81:2b:c8:0a:b0:ee:53:f7:4d: e6:08:ba:48:f1:73:b3:9d:29:1f:85:cf:79:24:bc:df:ad:ae: 30:a2:fe:f8:57:53:b1:50:a3:f9:2e:56:40:cb:18:4f:09:8e: 39:3e:c8:8f:04:cc:88:76:6f:3b:7e:c2:ca:8a:37:8a:5c:e6: 2a:48:5e:e8:9a:54:68:07:6e:75:79:15:50:49:8d:67:06:39: 33:14:3c:b4:fa:80:1e:2a:7e:3c:59:91:5d:25:cb:8e:50:44: 4a:7a:59:4b:3a:ee:cd:dd:32:fc:af:79:65:68:ab:94:9e:3a: 3b:d3:be:b6:f1:6f:69:96:5e:af:cd:1a:73:68:15:95:55:b9: 40:f9:0f:e4:a2:c7:c0:3c:7b:4a:47:c6:40:76:d0:fb:da:7f: 03:67:a1:99:96:f7:d5:b8:34:8c:66:eb:c8:94:bb:bf:89:3f: eb:14:26:bf:0d:5e:86:93:8d:2a:d8:18:6a:c2:9e:d1:84:52: df:ef:af:62:b5:3b:36:0b:3a:b6:b6:fd:02:51:0b:f1:6a:a9: 94:b4:e5:3f:1a:74:9b:a0:f0:bb:59:07:71:fa:49:66:99:cb: 4c:91:28:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXRwAoWeyMwsVZl3Ks1PE7MlBE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNjAxMzExMzA1MDVaFw0yNjAyMDMxNDQ2MDVaMDMxMTAvBgNV BAMTKDFFNTNCRjUzQzZGNjZENzkyOEIxNTgzMUIwRDdFMzU3M0Y2NTY0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdW0j3bAamBp0uRxSPTq1MC6UD oOqZogdOI/zuEbeeIgHxPuXUssYLWXCoV0pR3NmWXHaPF19R+rOBsZZrLrbmFoyO 6+k8I0FaN4mPeR6Azk0w4LWFR3Cp5/y+gB5xIxgA9QeaC8YqTybMihnJVcIeF/Gf wZqk3eH4O/yMtuzi+e75Ro4DvpzSIxzoFkeOSEetpvNLg2we0e2Qbqooe2oshxSf TYXXC7AcpC5wT1TS2/AEY0eJ8aj9xps8iwUUzLIy8O3HYFixUtXC4Zumx3Po7UBb 0mhcUlGrNyM4LlqsrGU/Kj1rqyy1EkNCCEHmUvxysIF8/ya/KNL2CLZxZSXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlO/U8b2bXkosVgxsNfjVz9lZDgwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFygMD1bpq5MK1OCWSCY4iFAPtqBSl8tNQ4r FoEryAqw7lP3TeYIukjxc7OdKR+Fz3kkvN+trjCi/vhXU7FQo/kuVkDLGE8Jjjk+ yI8EzIh2bzt+wsqKN4pc5ipIXuiaVGgHbnV5FVBJjWcGOTMUPLT6gB4qfjxZkV0l y45QREp6WUs67s3dMvyveWVoq5SeOjvTvrbxb2mWXq/NGnNoFZVVuUD5D+Six8A8 e0pHxkB20PvafwNnoZmW99W4NIxm68iUu7+JP+sUJr8NXoaTjSrYGGrCntGEUt/v r2K1OzYLOra2/QJRC/FqqZS05T8adJug8LtZB3H6SWaZy0yRKGU= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:21 2026 by rpki-client