This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: BlkZpsS1AglGavLIad1y8xGbtDxnp1LNurMOzAiiqUg= Subject key identifier: EF:0B:B9:7C:90:F7:B9:20:B4:74:27:26:5F:9F:F6:30:15:58:D2:C8 Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 1CB6923577FECF0F08202D89E27205E147FE497F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 021C Signing time: Sun 01 Feb 2026 08:41:25 +0000 Manifest this update: Sun 01 Feb 2026 08:36:25 +0000 Manifest next update: Wed 04 Feb 2026 13:52:25 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: 6vymrKDsBNlSoICyZsxavy9Nm6ctZ+EPpJTKXFd3zGg=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b6:92:35:77:fe:cf:0f:08:20:2d:89:e2:72:05:e1:47:fe:49:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Feb 1 08:36:25 2026 GMT Not After : Feb 4 13:52:25 2026 GMT Subject: CN=EF0BB97C90F7B920B47427265F9FF6301558D2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:5f:b3:3f:12:22:39:5f:02:3f:d3:9c:41: 19:57:6f:de:b2:34:75:5c:19:8b:87:42:52:c5:af: 0a:32:b1:41:39:41:fb:3a:73:9d:ca:6a:7c:d0:38: 16:89:f9:bd:a9:8f:9e:e3:31:c1:b7:3f:92:4b:e8: 2b:89:41:d9:b7:fe:ed:83:3f:4b:68:c4:b9:58:ef: 1d:b3:05:26:17:29:a8:a9:b8:ce:3a:1d:c6:94:5b: 19:55:20:b3:c7:b9:c7:1c:21:ae:8a:de:26:d8:08: 9c:93:f9:f2:1a:2f:62:39:7a:70:d2:25:96:c8:b9: ac:c8:1c:ce:ac:d1:40:e8:d3:4c:73:69:76:65:94: 94:0f:a0:d0:b8:0f:b0:59:6c:8b:d9:3f:75:50:17: eb:33:d5:f9:a7:1a:63:2d:c6:f2:21:4c:45:03:78: 13:56:5f:82:f8:08:b7:da:b0:f2:fe:9e:5d:e2:c7: 92:a8:04:ec:00:e0:c1:92:af:1f:c9:f4:5f:52:9b: 90:1d:70:c8:b3:12:bf:62:ed:a5:1f:32:9c:7d:77: 5a:8d:58:59:b2:0c:9d:98:91:8f:a8:64:22:b7:1b: 45:51:3b:ab:03:65:77:34:b5:d7:58:9e:a6:c4:94: f5:9c:a1:dc:61:ce:03:fd:37:58:0e:91:50:c3:4f: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0B:B9:7C:90:F7:B9:20:B4:74:27:26:5F:9F:F6:30:15:58:D2:C8 X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bc:f9:b9:60:67:18:5f:91:a1:4d:26:c8:42:0a:73:20:ed: b1:b7:8a:e1:c0:cf:14:ab:4a:9b:7b:61:be:33:c6:12:d2:87: 2b:2e:15:04:38:65:cc:91:9f:99:dd:db:19:55:fc:0f:2c:ea: 0d:66:c9:a5:59:87:c8:88:2d:9f:e2:33:80:63:b9:e8:b3:d1: 57:af:4f:46:bf:f4:1d:ca:98:5c:d2:f7:bf:54:3e:80:45:55: 4c:bf:42:da:3b:a4:12:57:81:7d:5e:c6:07:5b:ca:9b:3f:1a: f6:70:b6:45:4d:78:d6:6f:a7:6b:76:93:ff:d8:1f:41:72:5d: 0c:1d:77:8e:b9:db:31:a3:b2:7f:ee:1c:8c:da:7e:c9:2b:3f: f7:8a:27:16:1a:c7:3c:a0:a2:42:46:d3:d6:88:18:6a:1c:92: f7:6a:40:6b:ee:b3:83:74:61:3d:3d:5f:90:74:1f:f3:d1:3b: e4:80:3b:42:ee:c1:c9:9a:c5:ea:bf:ff:b7:ad:bf:87:0a:54: e8:38:38:d1:75:89:97:59:4b:ec:21:0f:46:70:86:1f:13:da: bc:75:6a:06:61:58:38:bc:d7:51:8d:b9:89:2f:fa:0f:6c:b2: a0:41:fd:69:e6:85:36:4c:c7:e9:e1:03:ae:1c:dc:a0:d7:dc: 77:8c:d0:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLaSNXf+zw8IIC2J4nIF4Uf+SX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNjAyMDEwODM2MjVaFw0yNjAyMDQxMzUyMjVaMDMxMTAvBgNV BAMTKEVGMEJCOTdDOTBGN0I5MjBCNDc0MjcyNjVGOUZGNjMwMTU1OEQyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTd1+zPxIiOV8CP9OcQRlXb96y NHVcGYuHQlLFrwoysUE5Qfs6c53KanzQOBaJ+b2pj57jMcG3P5JL6CuJQdm3/u2D P0toxLlY7x2zBSYXKaipuM46HcaUWxlVILPHucccIa6K3ibYCJyT+fIaL2I5enDS JZbIuazIHM6s0UDo00xzaXZllJQPoNC4D7BZbIvZP3VQF+sz1fmnGmMtxvIhTEUD eBNWX4L4CLfasPL+nl3ix5KoBOwA4MGSrx/J9F9Sm5AdcMizEr9i7aUfMpx9d1qN WFmyDJ2YkY+oZCK3G0VRO6sDZXc0tddYnqbElPWcodxhzgP9N1gOkVDDT4enAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wu5fJD3uSC0dCcmX5/2MBVY0sgwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG8+blgZxhfkaFNJshCCnMg7bG3iuHAzxSr Spt7Yb4zxhLShysuFQQ4ZcyRn5nd2xlV/A8s6g1myaVZh8iILZ/iM4Bjueiz0Vev T0a/9B3KmFzS979UPoBFVUy/Qto7pBJXgX1exgdbyps/GvZwtkVNeNZvp2t2k//Y H0FyXQwdd4652zGjsn/uHIzafskrP/eKJxYaxzygokJG09aIGGockvdqQGvus4N0 YT09X5B0H/PRO+SAO0Luwcmaxeq//7etv4cKVOg4ONF1iZdZS+whD0Zwhh8T2rx1 agZhWDi811GNuYkv+g9ssqBB/WnmhTZMx+nhA64c3KDX3HeM0KQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:12 2026 by rpki-client