This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: GReFkZEelfUkUk30+nI9m1hSCeEh/JXIK96yCRZmzgE= Subject key identifier: E8:41:E5:EE:19:2B:22:3F:96:D5:1D:43:6E:01:73:9F:7E:74:82:77 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 323C1E7BB9096E4BF955A4C0D77E1C6B0F10828B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 0517 Signing time: Mon 02 Feb 2026 12:31:50 +0000 Manifest this update: Mon 02 Feb 2026 12:26:50 +0000 Manifest next update: Thu 05 Feb 2026 16:08:50 +0000 Files and hashes: 1: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: xs8pA2D0D5YaS4TGFKDVBECK5WGPm5d1YKSYkCnZDe8=) 2: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=) 3: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3c:1e:7b:b9:09:6e:4b:f9:55:a4:c0:d7:7e:1c:6b:0f:10:82:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Feb 2 12:26:50 2026 GMT Not After : Feb 5 16:08:50 2026 GMT Subject: CN=E841E5EE192B223F96D51D436E01739F7E748277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:35:93:11:0a:89:80:02:31:f3:62:fa:9a: b8:f5:8f:d0:b5:25:24:80:a7:35:ff:21:8a:af:28: b2:39:67:98:b7:6b:66:fb:a5:45:1d:2f:ec:ea:26: db:34:cf:8d:d9:e8:8f:fc:a3:1e:20:05:00:8e:e3: 60:16:62:0f:d7:0b:03:68:3c:9c:01:72:09:a3:2c: c7:f3:9b:31:a1:5e:01:f2:00:c8:20:00:87:3a:10: 75:1e:1c:67:69:b9:29:b2:d5:c0:47:f0:8a:40:0d: 1c:4a:2a:d7:2a:f6:64:99:33:0e:e3:16:d4:f2:b0: a7:65:5b:4f:e0:44:ad:b3:dd:80:5a:7d:d8:d5:16: 80:b2:63:16:e1:21:0a:67:1a:0a:d5:bc:15:4a:99: 27:66:ba:b8:eb:83:1a:42:73:93:f4:33:00:88:07: 7c:01:1e:17:fb:8b:3c:0b:50:2d:50:ec:bd:a4:7a: 17:21:72:ba:00:9f:10:1c:09:31:83:7d:12:85:67: 13:08:49:fd:0c:92:5c:fe:8a:e4:14:ff:5b:da:cc: d8:ac:f4:8b:49:b3:13:b5:58:13:75:a2:59:47:69: c2:78:09:7a:a5:fc:14:d3:b5:63:f5:9a:b4:1f:50: 45:d5:85:8d:65:90:27:57:3e:e7:c8:e1:7f:c8:d7: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:41:E5:EE:19:2B:22:3F:96:D5:1D:43:6E:01:73:9F:7E:74:82:77 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:c0:e7:6c:53:f6:ac:d9:ba:00:fb:eb:c6:fc:5d:a4:24: 80:fd:a8:f9:fa:29:00:8a:20:cd:9c:c1:99:c6:31:88:c9:d8: 71:39:e8:1e:50:ee:45:ce:ab:f1:b6:1c:b1:f0:90:40:4a:00: 27:51:ad:01:02:f6:8b:46:8f:11:d0:8f:ef:d1:db:b2:80:c8: 7f:ab:eb:5d:5c:53:2b:a7:5e:a9:11:00:c7:29:b0:f4:e0:68: 2a:a2:71:04:0f:62:ed:6e:eb:e3:e4:35:ea:93:2f:3f:74:33: 31:53:ee:ce:64:f1:34:db:1c:43:a1:9c:89:03:0a:f8:f2:0e: 23:eb:38:2b:41:91:56:f5:58:a3:9e:10:9d:13:7f:69:35:8d: b9:25:a3:a8:33:bd:23:cc:c1:8b:7c:62:68:5d:94:6c:96:01: 06:34:66:bb:96:bd:c9:f7:4d:86:ce:54:17:63:2f:0d:d1:34: 58:27:0b:cb:12:39:ad:69:0f:05:fc:17:4c:1c:54:98:17:f3: 51:18:6d:a9:a9:84:59:cd:e8:ce:36:a4:8f:ef:fc:c2:7a:66: 5f:c3:ec:61:8f:2e:89:b0:a1:5e:b1:a3:46:dc:3e:37:83:e7: c3:2a:76:3f:e7:ce:55:77:b1:a9:59:dc:09:5e:58:d7:85:74: 7d:37:72:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjwee7kJbkv5VaTA134caw8QgoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNjAyMDIxMjI2NTBaFw0yNjAyMDUxNjA4NTBaMDMxMTAvBgNV BAMTKEU4NDFFNUVFMTkyQjIyM0Y5NkQ1MUQ0MzZFMDE3MzlGN0U3NDgyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDzWTEQqJgAIx82L6mrj1j9C1 JSSApzX/IYqvKLI5Z5i3a2b7pUUdL+zqJts0z43Z6I/8ox4gBQCO42AWYg/XCwNo PJwBcgmjLMfzmzGhXgHyAMggAIc6EHUeHGdpuSmy1cBH8IpADRxKKtcq9mSZMw7j FtTysKdlW0/gRK2z3YBafdjVFoCyYxbhIQpnGgrVvBVKmSdmurjrgxpCc5P0MwCI B3wBHhf7izwLUC1Q7L2kehchcroAnxAcCTGDfRKFZxMISf0Mklz+iuQU/1vazNis 9ItJsxO1WBN1ollHacJ4CXql/BTTtWP1mrQfUEXVhY1lkCdXPufI4X/I13ppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6EHl7hkrIj+W1R1DbgFzn350gncwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkQwOdsU/as2boA++vG/F2kJID9qPn6KQCK IM2cwZnGMYjJ2HE56B5Q7kXOq/G2HLHwkEBKACdRrQEC9otGjxHQj+/R27KAyH+r 611cUyunXqkRAMcpsPTgaCqicQQPYu1u6+PkNeqTLz90MzFT7s5k8TTbHEOhnIkD CvjyDiPrOCtBkVb1WKOeEJ0Tf2k1jbklo6gzvSPMwYt8YmhdlGyWAQY0ZruWvcn3 TYbOVBdjLw3RNFgnC8sSOa1pDwX8F0wcVJgX81EYbamphFnN6M42pI/v/MJ6Zl/D 7GGPLomwoV6xo0bcPjeD58Mqdj/nzlV3salZ3AleWNeFdH03cmI= -----END CERTIFICATE-----Generated at Mon Feb 2 14:27:01 2026 by rpki-client