This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: lmOaHRGYD0aSDh6SxWsXi/G22RtaoyoabFvwjdj1bvo= Subject key identifier: 52:94:68:DF:96:C3:EF:5E:70:BE:EC:B7:C6:39:EE:03:80:BB:AB:15 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 13B6D8BE09D8C911AEC7236C5744F5833048995B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 0534 Signing time: Sun 01 Feb 2026 20:22:16 +0000 Manifest this update: Sun 01 Feb 2026 20:17:16 +0000 Manifest next update: Wed 04 Feb 2026 21:07:16 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: qwJ/JeHgplBGIwAvUtTc58qh0WJuqLGR1NJaq6/dJ5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b6:d8:be:09:d8:c9:11:ae:c7:23:6c:57:44:f5:83:30:48:99:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Feb 1 20:17:16 2026 GMT Not After : Feb 4 21:07:16 2026 GMT Subject: CN=529468DF96C3EF5E70BEECB7C639EE0380BBAB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:a5:a2:9b:d1:16:ed:70:25:35:9e:94:13: 04:85:c8:5e:53:3e:11:e9:a4:d4:f0:fe:c6:d0:d5: 20:56:ca:6e:03:ce:34:81:91:bf:9c:d8:9f:21:f7: 65:77:4e:9d:b1:2a:4b:be:05:81:6c:8f:68:91:7b: d6:93:29:d6:c4:1d:5d:3f:39:b6:c7:11:c6:bc:28: dc:a4:d8:90:b9:e5:c9:d5:a4:46:ba:45:c7:b3:e9: fa:fa:af:4d:e7:6c:9d:d0:3a:a6:c6:75:78:f6:9b: 93:00:ae:3e:1d:95:87:66:b4:8e:ff:94:81:d1:ed: 4f:7f:65:f3:71:7d:6b:22:21:1e:8f:85:7c:6e:ef: 64:4f:a2:76:ea:1a:db:ce:8d:07:98:89:24:c6:e2: 09:9b:74:82:6b:ad:8b:6b:63:1b:7e:13:1d:f0:f4: 51:73:4b:c2:87:7b:36:b3:f9:de:b8:33:40:30:06: a0:ad:8d:d9:ce:41:6e:c5:16:58:ee:df:a6:b9:2f: 57:eb:f2:92:00:84:d2:e9:a5:31:df:1a:0f:cb:6c: 80:ad:0b:dd:cb:83:b7:cb:10:0e:96:cf:3b:0e:ad: 50:4e:94:0a:ab:81:c6:c7:81:95:7d:04:c9:84:1e: af:76:48:1b:32:d4:38:33:9b:f3:29:c2:da:95:7a: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:68:DF:96:C3:EF:5E:70:BE:EC:B7:C6:39:EE:03:80:BB:AB:15 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9e:5c:a8:5c:88:61:c4:d2:e5:82:7a:dd:6f:05:09:36:3f: 4d:81:89:42:40:01:55:b1:7a:66:95:f5:aa:f7:ab:1e:b6:6c: 7f:d6:f6:c3:a9:bb:53:d7:26:87:a2:d0:20:ca:a4:01:3c:cd: 35:8e:40:fe:7f:f0:95:38:08:60:cd:98:af:0d:27:f3:f8:a0: 3c:2e:c1:af:50:5d:ef:cb:6f:4b:e7:64:21:28:71:24:d3:87: c7:5c:0d:fe:72:a3:53:09:d2:93:df:28:e9:8d:c6:8a:3d:cb: b0:b2:66:2c:71:41:bd:d0:1d:51:94:7b:c5:23:b8:f2:f7:85: 87:64:1c:ab:1a:66:ae:16:fa:89:4f:bc:42:14:54:c0:86:3f: c6:7b:2e:5e:5a:12:35:23:14:ac:17:bc:74:01:7c:bc:3d:e7: 36:ad:1f:62:2f:33:78:ca:42:a5:b3:e4:b1:8d:52:a2:14:cf: 72:27:46:bf:32:0e:d0:c6:b5:55:ee:63:cc:1b:c7:a9:34:67: a5:c7:cb:07:eb:35:43:a1:d2:1e:b3:fa:79:18:cd:09:ef:9a: a2:99:ec:08:9a:22:15:ce:49:d1:19:4c:cd:18:ec:ed:62:50: 0d:30:36:7f:53:ac:93:ad:d0:df:e9:96:e6:11:01:8b:68:4b: be:71:d8:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7bYvgnYyRGuxyNsV0T1gzBImVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNjAyMDEyMDE3MTZaFw0yNjAyMDQyMTA3MTZaMDMxMTAvBgNV BAMTKDUyOTQ2OERGOTZDM0VGNUU3MEJFRUNCN0M2MzlFRTAzODBCQkFCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+6Wim9EW7XAlNZ6UEwSFyF5T PhHppNTw/sbQ1SBWym4DzjSBkb+c2J8h92V3Tp2xKku+BYFsj2iRe9aTKdbEHV0/ ObbHEca8KNyk2JC55cnVpEa6Rcez6fr6r03nbJ3QOqbGdXj2m5MArj4dlYdmtI7/ lIHR7U9/ZfNxfWsiIR6PhXxu72RPonbqGtvOjQeYiSTG4gmbdIJrrYtrYxt+Ex3w 9FFzS8KHezaz+d64M0AwBqCtjdnOQW7FFlju36a5L1fr8pIAhNLppTHfGg/LbICt C93Lg7fLEA6WzzsOrVBOlAqrgcbHgZV9BMmEHq92SBsy1Dgzm/MpwtqVerTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpRo35bD715wvuy3xjnuA4C7qxUwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaeXKhciGHE0uWCet1vBQk2P02BiUJAAVWx emaV9ar3qx62bH/W9sOpu1PXJoei0CDKpAE8zTWOQP5/8JU4CGDNmK8NJ/P4oDwu wa9QXe/Lb0vnZCEocSTTh8dcDf5yo1MJ0pPfKOmNxoo9y7CyZixxQb3QHVGUe8Uj uPL3hYdkHKsaZq4W+olPvEIUVMCGP8Z7Ll5aEjUjFKwXvHQBfLw95zatH2IvM3jK QqWz5LGNUqIUz3InRr8yDtDGtVXuY8wbx6k0Z6XHywfrNUOh0h6z+nkYzQnvmqKZ 7AiaIhXOSdEZTM0Y7O1iUA0wNn9TrJOt0N/pluYRAYtoS75x2MM= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:02 2026 by rpki-client