This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: M4Cp+nFZCvsBaAFuqkZn4tqUtIdrs56mf723xExslG4= Subject key identifier: C2:D3:0D:27:59:A3:84:FE:30:5A:93:80:FD:E3:CB:B0:BE:DC:C6:FA Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 0E9EE61E060716D1DA45215C43AB8E897C265BAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 01CF Signing time: Sat 31 Jan 2026 05:22:08 +0000 Manifest this update: Sat 31 Jan 2026 05:17:08 +0000 Manifest next update: Tue 03 Feb 2026 14:03:08 +0000 Files and hashes: 1: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: JEvIOsVwGUTyy+ELa7pteKDjLoptkdSCpebP+nyLjgQ=) 2: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: h/lvNivGUKaWH7S67TIqjeeVOpJdRHbR2NQ9ObH8+/8=) 3: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: NQHGEUDRiXIKhlqun6HUzgzAgG6hDFCPy0ofeC6C2yE=) 4: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: wJLVv3dGJ3iMYrWAOPrHgUOs/cbBFI5PK39xmjvRLuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9e:e6:1e:06:07:16:d1:da:45:21:5c:43:ab:8e:89:7c:26:5b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Jan 31 05:17:08 2026 GMT Not After : Feb 3 14:03:08 2026 GMT Subject: CN=C2D30D2759A384FE305A9380FDE3CBB0BEDCC6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:de:61:08:21:d4:a1:32:30:4f:e3:eb:2e: c6:58:eb:cc:4f:50:fe:bd:72:38:18:a4:6b:20:15: 84:d7:af:8e:cf:12:4b:70:56:aa:bf:f0:e6:0e:30: 03:fe:d4:cd:5b:01:52:2b:45:2b:1b:fc:e9:1c:49: 4c:35:2e:76:62:5a:9b:b2:d7:19:bb:16:61:51:87: cd:d1:db:66:ba:a5:88:77:76:1f:a1:30:c0:ac:8c: a1:57:4b:f6:c9:c8:9b:43:7f:41:4b:8e:c0:a3:ce: 90:fe:8c:f4:f3:4f:91:82:13:d5:0f:f4:c9:3e:b0: d8:f1:35:d8:d1:5d:ad:af:e1:0c:8e:17:0e:b1:b7: 64:64:47:f1:0b:07:69:47:01:d8:de:8f:67:90:d5: 57:a9:57:0e:37:21:b0:d0:e2:f1:ed:ab:17:5e:49: a9:c5:34:ee:89:56:00:58:f7:c5:86:d5:ca:c6:6b: 9b:27:14:a8:bd:6b:22:16:b7:63:19:84:17:18:ac: 69:54:9c:23:24:65:a9:3f:49:cf:90:66:21:dd:8e: 74:c9:29:20:ac:37:d6:d5:ed:35:f1:60:da:ea:c3: 3a:a6:51:66:94:01:c7:35:57:f6:f6:ea:bd:50:7e: 61:30:f4:22:6f:1a:1e:84:0f:e3:45:36:fc:45:69: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D3:0D:27:59:A3:84:FE:30:5A:93:80:FD:E3:CB:B0:BE:DC:C6:FA X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:df:83:7c:9b:b9:2d:35:80:ef:e6:25:bb:94:18:14:74:64: 89:80:0f:d7:a9:c8:c0:17:98:c3:fe:1b:13:cd:69:3e:7c:94: 40:35:8e:6d:8b:7e:85:65:7b:d9:71:10:20:ee:a8:5a:04:6f: b1:6c:47:93:71:e5:b5:45:9c:c6:1d:6f:19:83:7b:c4:7d:ce: c2:73:c5:e5:f8:13:56:cc:28:94:fd:94:dc:3d:53:31:54:79: ff:94:b4:61:eb:23:5c:60:68:de:84:48:37:18:4f:27:be:a1: f8:ba:74:f1:50:47:43:d6:21:1a:22:24:88:f9:b6:f4:ab:a4: 5a:eb:99:45:aa:98:14:58:de:d7:f0:87:fa:77:0a:f7:0b:36: b1:70:c9:d0:11:ce:49:5a:85:10:df:a1:15:94:27:e8:04:4b: 88:12:01:55:cc:58:10:36:38:b4:96:ee:6a:2e:51:a1:af:3f: 05:1a:2b:a8:a4:b1:28:06:35:51:33:78:2b:d8:2b:41:6b:88: aa:0b:2f:cd:80:9d:c0:8f:00:a3:b6:11:ba:8a:71:58:e1:13: 84:c1:c6:ed:ec:bc:d2:ca:59:94:f4:c1:98:5c:a9:9a:d0:5f: 5d:31:ae:87:b7:2e:33:d8:a7:c6:b3:54:14:01:14:ed:c4:43: 51:6e:43:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDp7mHgYHFtHaRSFcQ6uOiXwmW6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNjAxMzEwNTE3MDhaFw0yNjAyMDMxNDAzMDhaMDMxMTAvBgNV BAMTKEMyRDMwRDI3NTlBMzg0RkUzMDVBOTM4MEZERTNDQkIwQkVEQ0M2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAft5hCCHUoTIwT+PrLsZY68xP UP69cjgYpGsgFYTXr47PEktwVqq/8OYOMAP+1M1bAVIrRSsb/OkcSUw1LnZiWpuy 1xm7FmFRh83R22a6pYh3dh+hMMCsjKFXS/bJyJtDf0FLjsCjzpD+jPTzT5GCE9UP 9Mk+sNjxNdjRXa2v4QyOFw6xt2RkR/ELB2lHAdjej2eQ1VepVw43IbDQ4vHtqxde SanFNO6JVgBY98WG1crGa5snFKi9ayIWt2MZhBcYrGlUnCMkZak/Sc+QZiHdjnTJ KSCsN9bV7TXxYNrqwzqmUWaUAcc1V/b26r1QfmEw9CJvGh6ED+NFNvxFafZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwtMNJ1mjhP4wWpOA/ePLsL7cxvowHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPfg3ybuS01gO/mJbuUGBR0ZImAD9epyMAX mMP+GxPNaT58lEA1jm2LfoVle9lxECDuqFoEb7FsR5Nx5bVFnMYdbxmDe8R9zsJz xeX4E1bMKJT9lNw9UzFUef+UtGHrI1xgaN6ESDcYTye+ofi6dPFQR0PWIRoiJIj5 tvSrpFrrmUWqmBRY3tfwh/p3CvcLNrFwydARzklahRDfoRWUJ+gES4gSAVXMWBA2 OLSW7mouUaGvPwUaK6iksSgGNVEzeCvYK0FriKoLL82AncCPAKO2EbqKcVjhE4TB xu3svNLKWZT0wZhcqZrQX10xroe3LjPYp8azVBQBFO3EQ1FuQ48= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:46 2026 by rpki-client