This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: +BFWD6sbSJmON9BzBaUOBg+n91pAaIZfJ5+c4naW+Tg= Subject key identifier: 56:0A:37:27:A6:BD:DC:E0:27:46:DA:FB:49:99:DA:A4:7A:E4:3B:12 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 7F00A04F0AD2376502EC51A1CDD3D10AEF0A6C6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 01D4 Signing time: Sun 01 Feb 2026 18:10:41 +0000 Manifest this update: Sun 01 Feb 2026 18:05:41 +0000 Manifest next update: Thu 05 Feb 2026 04:57:41 +0000 Files and hashes: 1: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: ItQ4yaHK0oJdabwYqYAR0lnERMhE/LKV2oMBDYLcbSg=) 2: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: NjLLcw4i8lYLZm56/jX/v5jRANQQxC0OS/6cnprIhgY=) 3: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: 3IuUvfgQ/fSDFjAbV/bWpFSL1cWNQrNqsIN58CdOTAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:00:a0:4f:0a:d2:37:65:02:ec:51:a1:cd:d3:d1:0a:ef:0a:6c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Feb 1 18:05:41 2026 GMT Not After : Feb 5 04:57:41 2026 GMT Subject: CN=560A3727A6BDDCE02746DAFB4999DAA47AE43B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:41:91:03:df:d7:ba:69:5b:df:97:fd:f0: 4c:87:63:b0:68:4d:45:d0:62:2f:cd:c6:3c:a8:ae: 05:07:6a:e0:8f:8b:81:37:19:c4:4b:3f:1d:ee:65: c3:04:d4:4a:f3:20:17:c2:44:79:a4:60:94:d7:04: 20:50:8b:8e:53:cb:7b:f7:c3:b1:90:b9:c2:19:29: 1e:47:21:0d:64:66:9d:f3:c4:2d:72:8f:68:81:94: 98:7f:71:2a:d9:88:8d:ea:02:2c:36:75:82:f4:f3: b4:64:bd:49:10:cc:dc:93:9b:3c:59:29:27:b1:2b: 86:59:ec:92:d7:f9:5e:2d:66:b9:99:18:76:1f:70: 6d:ee:87:1e:36:d0:00:99:79:42:96:ad:26:58:9e: f3:97:30:49:68:51:7b:5e:96:b2:d5:06:8a:dd:e3: 64:da:83:91:5d:93:4e:8b:e1:be:60:77:fa:7b:96: b3:d4:4b:43:d8:5d:f7:ee:79:6d:ac:d1:49:d4:5f: 17:b4:73:ea:04:53:fc:60:a6:7b:0a:77:8b:10:f0: 55:84:b4:29:79:e9:1b:ee:64:4d:c5:74:f0:55:79: d3:0e:ba:15:59:8a:e0:60:35:77:d4:64:02:f1:a5: b6:6f:c1:7a:81:28:a3:0b:c4:87:9c:12:a3:9e:5e: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0A:37:27:A6:BD:DC:E0:27:46:DA:FB:49:99:DA:A4:7A:E4:3B:12 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:70:fe:98:a1:73:b2:19:ea:fd:f8:b5:35:f2:b7:1f:fd: b8:ac:6a:bf:78:79:c6:65:c5:30:b9:96:72:a7:65:27:55:11: 88:8d:a7:0a:b6:69:f0:e7:08:3e:0d:83:1e:15:0f:6d:75:d4: f7:ae:69:3e:ff:8e:69:3d:f8:85:ec:d2:a1:c2:cb:0b:a7:1c: e5:47:08:54:5f:c3:19:97:c3:8d:0b:8f:ce:9e:2d:cc:3a:c8: d5:84:4a:dd:4d:58:99:69:fd:7e:42:bd:0f:42:58:54:ca:21: 2b:35:5f:dd:89:90:2f:6a:ba:03:90:81:44:4e:6d:4a:cc:cc: 82:83:9e:f0:f0:ec:06:43:74:06:0e:a4:8d:a6:9f:4d:32:3e: 76:aa:bb:6a:a6:1a:1a:83:28:c4:d4:90:6f:33:20:1e:18:dc: ef:c2:f3:c1:09:86:05:d1:e2:e5:28:a7:39:2f:8c:77:7b:24: f6:57:6e:e2:10:dc:9e:a3:17:df:8c:03:60:de:32:d9:b1:7d: 21:45:be:96:85:21:96:03:d3:a3:49:17:87:76:ab:a2:a0:fa: 6f:7e:58:06:20:7c:62:7c:4d:22:5e:04:97:a4:17:68:70:d3: 3d:94:8c:b1:5a:71:f3:c5:06:cd:29:ab:9e:68:ce:8b:70:8c: 45:04:84:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwCgTwrSN2UC7FGhzdPRCu8KbG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNjAyMDExODA1NDFaFw0yNjAyMDUwNDU3NDFaMDMxMTAvBgNV BAMTKDU2MEEzNzI3QTZCRERDRTAyNzQ2REFGQjQ5OTlEQUE0N0FFNDNCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePEGRA9/Xumlb35f98EyHY7Bo TUXQYi/NxjyorgUHauCPi4E3GcRLPx3uZcME1ErzIBfCRHmkYJTXBCBQi45Ty3v3 w7GQucIZKR5HIQ1kZp3zxC1yj2iBlJh/cSrZiI3qAiw2dYL087RkvUkQzNyTmzxZ KSexK4ZZ7JLX+V4tZrmZGHYfcG3uhx420ACZeUKWrSZYnvOXMEloUXtelrLVBord 42Tag5Fdk06L4b5gd/p7lrPUS0PYXffueW2s0UnUXxe0c+oEU/xgpnsKd4sQ8FWE tCl56RvuZE3FdPBVedMOuhVZiuBgNXfUZALxpbZvwXqBKKMLxIecEqOeXuKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVgo3J6a93OAnRtr7SZnapHrkOxIwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuxcP6YoXOyGer9+LU18rcf/bisar94ecZl xTC5lnKnZSdVEYiNpwq2afDnCD4Ngx4VD2111PeuaT7/jmk9+IXs0qHCywunHOVH CFRfwxmXw40Lj86eLcw6yNWESt1NWJlp/X5CvQ9CWFTKISs1X92JkC9qugOQgURO bUrMzIKDnvDw7AZDdAYOpI2mn00yPnaqu2qmGhqDKMTUkG8zIB4Y3O/C88EJhgXR 4uUopzkvjHd7JPZXbuIQ3J6jF9+MA2DeMtmxfSFFvpaFIZYD06NJF4d2q6Kg+m9+ WAYgfGJ8TSJeBJekF2hw0z2UjLFacfPFBs0pq55ozotwjEUEhOA= -----END CERTIFICATE-----Generated at Mon Feb 2 14:26:19 2026 by rpki-client