This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: 5uY6gTkpZxM6PKDWOHzjvpbeMzUW3ETbLgYme6Jjz/k= Subject key identifier: A0:4E:AB:5D:79:53:64:CE:88:DF:3F:F8:57:85:B2:02:95:48:57:8E Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 4B5E81C1FF1619716064640157E6169179DE0761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0549 Signing time: Mon 02 Feb 2026 01:20:43 +0000 Manifest this update: Mon 02 Feb 2026 01:15:43 +0000 Manifest next update: Thu 05 Feb 2026 02:39:43 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: 1tjbtVNeQ6U1Cyoo7WTb21zO1Dt/FMQ5uONrwkmy55Q=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) 3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5e:81:c1:ff:16:19:71:60:64:64:01:57:e6:16:91:79:de:07:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Feb 2 01:15:43 2026 GMT Not After : Feb 5 02:39:43 2026 GMT Subject: CN=A04EAB5D795364CE88DF3FF85785B2029548578E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:8f:56:51:b8:9b:59:c7:2a:1e:7c:fb:04: d5:82:56:7d:a8:f5:ca:09:77:fa:52:17:da:ef:cf: 31:e9:f7:26:7e:7a:d8:c0:d6:ea:f0:92:ae:c5:81: 0e:c3:0e:7e:ae:54:bc:e5:e8:1d:d1:0b:58:80:16: 07:d4:76:69:62:59:9b:b9:9d:a0:6d:e5:43:41:a0: ac:da:65:08:16:57:92:e2:c0:28:86:27:cd:cb:1d: d7:fb:f6:a7:8f:30:8f:06:38:f7:40:48:c4:9a:94: e7:e1:03:ce:7f:ab:e9:6e:32:51:c8:98:a8:fb:47: f5:dd:d4:3b:49:51:ad:81:46:e4:2c:52:c2:86:46: 10:c6:dc:c1:8e:a2:e6:c7:77:50:36:60:18:3c:64: 0b:c0:7e:c2:23:21:70:ea:d5:76:60:f7:f8:61:13: 86:c7:da:80:86:44:38:82:74:f1:73:10:fb:40:dd: e2:48:dc:42:d7:9c:50:27:23:e6:fd:69:7e:f4:85: e3:12:a5:01:fb:a1:a7:af:24:dc:09:1f:5d:e6:40: 70:f4:a2:36:b3:94:28:e6:ee:7e:d1:e0:89:d5:b9: a5:fb:cc:1d:3f:6e:ee:17:bf:4a:1f:fd:59:dc:d0: 79:a7:54:28:2b:43:04:3a:b0:e7:38:8a:7e:c2:9a: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4E:AB:5D:79:53:64:CE:88:DF:3F:F8:57:85:B2:02:95:48:57:8E X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3e:e6:56:8b:c2:38:b2:cb:84:19:2d:d2:7f:5b:7d:26:a4: 87:ad:d2:63:f9:e0:01:db:07:ae:72:d5:8a:c6:96:54:92:9a: 44:eb:35:bb:ab:14:52:9d:8e:1a:85:a6:1a:8f:63:b0:e6:a2: 24:9c:36:38:18:cf:8d:8d:90:62:55:f8:e5:aa:c9:6f:28:c8: f9:1d:e6:06:ba:a8:59:ac:b3:2a:74:9d:5e:ba:02:22:1c:fc: 6e:8b:71:f2:84:31:15:2c:48:ef:86:95:6a:dd:90:b8:e2:66: 98:08:65:b4:e7:18:b5:76:d7:f8:d9:92:bd:58:27:0c:92:50: a6:fe:bb:09:85:12:3b:54:f0:79:e3:88:d5:56:c8:78:22:fa: d6:bf:32:5c:2a:cd:13:5c:e3:02:be:be:0a:84:e6:db:1a:8c: 06:8d:b8:f2:70:e0:96:e4:1e:67:7e:4a:76:a3:c5:53:de:db: 5e:b6:62:23:c7:ee:f9:11:a6:a8:fe:c9:31:35:c5:30:de:18: a0:c3:a5:bd:48:e5:6e:67:8b:6f:da:13:c8:b6:31:fa:47:76: b6:5b:08:98:e2:15:f4:12:9b:54:96:f5:c6:cd:aa:04:89:43: 8f:ca:60:d3:d8:1b:ce:e8:71:59:33:9b:7b:e8:c6:52:52:8a: 65:af:75:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS16Bwf8WGXFgZGQBV+YWkXneB2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNjAyMDIwMTE1NDNaFw0yNjAyMDUwMjM5NDNaMDMxMTAvBgNV BAMTKEEwNEVBQjVENzk1MzY0Q0U4OERGM0ZGODU3ODVCMjAyOTU0ODU3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvY9WUbibWccqHnz7BNWCVn2o 9coJd/pSF9rvzzHp9yZ+etjA1urwkq7FgQ7DDn6uVLzl6B3RC1iAFgfUdmliWZu5 naBt5UNBoKzaZQgWV5LiwCiGJ83LHdf79qePMI8GOPdASMSalOfhA85/q+luMlHI mKj7R/Xd1DtJUa2BRuQsUsKGRhDG3MGOoubHd1A2YBg8ZAvAfsIjIXDq1XZg9/hh E4bH2oCGRDiCdPFzEPtA3eJI3ELXnFAnI+b9aX70heMSpQH7oaevJNwJH13mQHD0 ojazlCjm7n7R4InVuaX7zB0/bu4Xv0of/Vnc0HmnVCgrQwQ6sOc4in7CmnSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoE6rXXlTZM6I3z/4V4WyApVIV44wHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk+5laLwjiyy4QZLdJ/W30mpIet0mP54AHb B65y1YrGllSSmkTrNburFFKdjhqFphqPY7DmoiScNjgYz42NkGJV+OWqyW8oyPkd 5ga6qFmssyp0nV66AiIc/G6LcfKEMRUsSO+GlWrdkLjiZpgIZbTnGLV21/jZkr1Y JwySUKb+uwmFEjtU8HnjiNVWyHgi+ta/MlwqzRNc4wK+vgqE5tsajAaNuPJw4Jbk Hmd+SnajxVPe2162YiPH7vkRpqj+yTE1xTDeGKDDpb1I5W5ni2/aE8i2MfpHdrZb CJjiFfQSm1SW9cbNqgSJQ4/KYNPYG87ocVkzm3voxlJSimWvdaw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:50:42 2026 by rpki-client