This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: expaFL0UtiHVjY4qHILFjdQNUuCF93Tjjq5UvlL8AiE= Subject key identifier: 90:D1:DA:0E:85:A1:68:25:1B:27:9E:CE:B9:4C:28:43:C8:3D:91:22 Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 4E19194BDC49F10DDB96583847D9B10E8C39FAD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 020E Signing time: Sun 01 Feb 2026 13:10:41 +0000 Manifest this update: Sun 01 Feb 2026 13:05:41 +0000 Manifest next update: Wed 04 Feb 2026 15:29:41 +0000 Files and hashes: 1: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: aWOw08v+3En+ZNwhMXw9+rCzjUtLEmauv8GzIJGbTwc=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:19:19:4b:dc:49:f1:0d:db:96:58:38:47:d9:b1:0e:8c:39:fa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Feb 1 13:05:41 2026 GMT Not After : Feb 4 15:29:41 2026 GMT Subject: CN=90D1DA0E85A168251B279ECEB94C2843C83D9122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:8d:04:42:dc:6c:82:87:97:18:3b:cb:d2: c2:80:b1:d6:f9:33:b5:2d:28:08:82:d4:6c:cd:2f: 6a:87:8b:75:46:8e:5b:c4:28:2a:9d:a1:01:c3:36: c8:98:ae:a6:ee:2c:bc:af:80:46:d2:47:63:38:8f: 69:69:49:d7:58:4b:19:65:a3:ef:89:06:97:14:1f: 07:b8:2a:9a:0c:a3:be:a2:c8:87:e8:95:1c:e5:c7: 9f:9f:f4:b7:9f:4e:1f:cf:2d:ef:3e:4b:6d:d6:1e: 28:8d:77:03:c3:e5:4c:fd:aa:ca:c0:4b:db:66:c3: 35:f2:c7:3c:ef:b4:87:5d:40:51:90:1d:4b:2b:82: da:36:5e:22:fb:55:8f:16:cf:43:dc:71:a0:1b:c5: 2a:62:f4:43:30:89:34:a2:ba:b0:9b:69:76:21:51: 24:6b:c0:28:10:2e:5c:ae:7b:d8:f7:62:ab:b5:08: 59:7e:29:8b:d2:fc:57:86:c3:08:ee:8f:98:e9:73: 1d:c0:58:ab:ce:02:71:bd:4b:20:d8:4e:43:06:2d: 7e:cc:76:51:3e:3d:10:e0:bd:a8:56:c8:fd:4c:bf: 5f:03:a4:5c:07:fe:f3:ef:6f:6c:6d:93:46:a5:f3: ac:13:b6:60:af:7f:5f:0f:6a:cc:f0:67:5c:fc:43: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D1:DA:0E:85:A1:68:25:1B:27:9E:CE:B9:4C:28:43:C8:3D:91:22 X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b9:81:fd:42:74:31:75:e5:07:69:2a:f4:03:92:1b:f1:17: ce:ec:b7:c6:64:aa:8d:3e:40:63:e0:f0:0b:2e:49:d8:31:e4: c3:de:16:59:a3:90:bf:c3:e9:0d:ba:1c:e8:19:c6:94:a1:b5: 98:5a:ae:53:ec:80:f4:f2:56:a2:cc:17:84:b6:97:39:3b:bb: dd:b6:f4:49:e5:53:e9:74:1d:12:ac:fd:56:04:0a:e3:c7:5c: 19:c4:c5:ec:99:bb:2c:10:98:6e:b8:2a:96:11:d6:a2:2c:2a: 77:1c:dc:8a:4d:a7:ec:af:b9:45:3a:83:5f:4c:0e:bb:11:ba: e6:f4:80:3d:a9:f2:11:f8:31:25:87:f8:07:44:23:aa:f1:4a: 00:c7:84:bd:f3:88:a0:80:9d:1b:9f:8f:10:d9:72:c7:77:5b: 98:eb:55:f2:b0:9f:45:ef:db:ba:ff:90:d8:e1:6e:04:93:9e: 1e:78:9c:d0:9f:5d:b3:62:a4:8f:8f:6e:2b:b2:d1:ae:47:cd: c3:9d:e3:c8:67:e5:6d:8c:ca:a7:a0:d1:22:e5:70:33:e4:f3: 1b:ee:b3:7c:6f:d5:5f:71:31:d8:e5:82:9d:52:3d:56:f7:3c: 8d:3d:5d:76:16:b9:8f:ab:00:49:0c:b0:b1:8c:5b:d9:5f:65: 49:96:ae:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThkZS9xJ8Q3bllg4R9mxDow5+tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNjAyMDExMzA1NDFaFw0yNjAyMDQxNTI5NDFaMDMxMTAvBgNV BAMTKDkwRDFEQTBFODVBMTY4MjUxQjI3OUVDRUI5NEMyODQzQzgzRDkxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4o0EQtxsgoeXGDvL0sKAsdb5 M7UtKAiC1GzNL2qHi3VGjlvEKCqdoQHDNsiYrqbuLLyvgEbSR2M4j2lpSddYSxll o++JBpcUHwe4KpoMo76iyIfolRzlx5+f9LefTh/PLe8+S23WHiiNdwPD5Uz9qsrA S9tmwzXyxzzvtIddQFGQHUsrgto2XiL7VY8Wz0PccaAbxSpi9EMwiTSiurCbaXYh USRrwCgQLlyue9j3Yqu1CFl+KYvS/FeGwwjuj5jpcx3AWKvOAnG9SyDYTkMGLX7M dlE+PRDgvahWyP1Mv18DpFwH/vPvb2xtk0al86wTtmCvf18PaszwZ1z8Q6aZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNHaDoWhaCUbJ57OuUwoQ8g9kSIwHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC5gf1CdDF15QdpKvQDkhvxF87st8Zkqo0+ QGPg8AsuSdgx5MPeFlmjkL/D6Q26HOgZxpShtZharlPsgPTyVqLMF4S2lzk7u922 9EnlU+l0HRKs/VYECuPHXBnExeyZuywQmG64KpYR1qIsKncc3IpNp+yvuUU6g19M DrsRuub0gD2p8hH4MSWH+AdEI6rxSgDHhL3ziKCAnRufjxDZcsd3W5jrVfKwn0Xv 27r/kNjhbgSTnh54nNCfXbNipI+Pbiuy0a5HzcOd48hn5W2Myqeg0SLlcDPk8xvu s3xv1V9xMdjlgp1SPVb3PI09XXYWuY+rAEkMsLGMW9lfZUmWrts= -----END CERTIFICATE-----Generated at Mon Feb 2 09:49:51 2026 by rpki-client