This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft File: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft (raw, json) Hash identifier: OQkDp+9RVK+dPhOeq9QKkURPit+zDvBUlcm7ybWwL6g= Subject key identifier: 46:AC:F0:6B:52:E6:9E:4E:4A:BC:46:92:DB:A1:01:20:35:FD:4B:C3 Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Certificate serial: 34B10B1FE8C93531929C1B27E1BD9DA0C559CBE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft Manifest number: 0178 Signing time: Mon 02 Feb 2026 07:52:15 +0000 Manifest this update: Mon 02 Feb 2026 07:47:15 +0000 Manifest next update: Thu 05 Feb 2026 10:27:15 +0000 Files and hashes: 1: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (hash: enORB7AQ2Y+42S5HE1FDggaW6vwKU8hKfiqSx3+Dqyk=) 2: 28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl (hash: 7mHoEC7gUxhXlJHLgMPRweB0z3tjo8NtuhPkF80H574=) 3: 3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (hash: 85LtLYBqpIRzrudxo0roKqEopeTA2E0uMpmApFi6Dq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b1:0b:1f:e8:c9:35:31:92:9c:1b:27:e1:bd:9d:a0:c5:59:cb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6 Validity Not Before: Feb 2 07:47:15 2026 GMT Not After : Feb 5 10:27:15 2026 GMT Subject: CN=46ACF06B52E69E4E4ABC4692DBA1012035FD4BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:f2:de:7e:5b:36:42:7b:1c:63:a9:54:9d: ed:46:1a:78:08:6f:f3:d1:06:5a:b3:32:5b:62:c6: 75:db:12:0c:14:3a:6f:9e:78:39:0a:59:d0:4e:6f: cd:5d:e5:74:dd:01:02:3a:07:68:39:a6:c0:d0:16: 1e:d5:98:c0:a0:71:a7:41:0d:7a:e2:af:ac:93:79: 21:9e:22:c1:84:97:18:7f:28:a5:a0:00:c9:29:ef: 9d:5e:ac:97:c8:24:ab:e6:bc:97:89:5e:46:d4:23: d5:da:63:35:81:f8:35:c6:12:ad:7e:75:47:cc:a7: 0d:fb:1a:23:59:4e:82:cb:d7:ac:7a:a0:9b:02:3b: c5:4e:3f:6a:53:4c:be:77:ef:c2:ac:15:eb:64:2a: 4f:a5:89:1b:94:67:96:93:1a:cb:01:e9:dd:61:91: f6:f1:2d:5a:e5:c6:1f:76:52:95:b5:86:d9:b6:ed: 9c:d0:b0:b2:73:6e:30:cd:63:ce:eb:9f:ae:27:67: 53:ff:33:a4:7f:af:63:c0:b6:63:f1:e2:c4:40:ff: 03:e0:1a:34:56:27:4a:e9:55:a9:8a:fa:79:fb:5e: 7e:8e:88:df:ee:cc:8f:99:4f:3d:b5:17:0c:50:34: c8:db:1f:17:25:12:e4:b4:12:b3:1a:ee:9f:72:51: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AC:F0:6B:52:E6:9E:4E:4A:BC:46:92:DB:A1:01:20:35:FD:4B:C3 X509v3 Authority Key Identifier: keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d0:13:45:80:77:ef:2c:c7:88:2b:72:7e:51:f4:5d:71:66: 80:d7:25:08:c8:50:f8:27:3f:85:15:b3:c5:30:fa:2b:10:0f: 87:5b:96:d4:e1:5f:b9:1f:72:bf:32:9e:20:a2:37:77:9a:4a: b6:d9:f9:77:b0:1b:d1:02:dc:4c:95:be:82:2f:20:95:ec:2d: 6d:f8:58:7f:45:a7:cf:31:dc:1e:71:54:98:02:56:26:67:4e: a4:89:04:81:86:f6:66:39:f5:5f:92:5c:88:13:c5:7a:7a:9f: 00:02:5c:c5:a7:4b:1c:55:31:68:29:d1:5c:dd:54:be:ad:f6: cd:45:a3:b4:fd:38:74:b4:d0:da:4c:1a:16:21:ca:85:ee:b6: 26:0f:8a:59:dc:82:fa:a1:49:39:95:21:16:97:25:3c:7b:de: de:2f:6e:cb:09:d3:8c:d5:cd:97:b4:a6:67:c0:a0:2b:cf:c5: 05:05:61:e0:3b:36:ed:9c:76:d1:32:22:a3:fd:d6:1e:2e:f9: ff:f9:62:e9:b8:c9:d2:3f:48:df:af:c7:39:5b:89:3a:d8:d8: 7c:a4:b5:b7:44:76:64:fe:7b:34:5d:0d:e7:fb:e8:df:f7:a6: 8d:41:fc:5b:24:3d:c2:7c:9e:69:7b:27:33:6e:cb:52:06:2c: 9f:ae:45:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLELH+jJNTGSnBsn4b2doMVZy+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC MzZGM0FENjAeFw0yNjAyMDIwNzQ3MTVaFw0yNjAyMDUxMDI3MTVaMDMxMTAvBgNV BAMTKDQ2QUNGMDZCNTJFNjlFNEU0QUJDNDY5MkRCQTEwMTIwMzVGRDRCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVv/Lefls2QnscY6lUne1GGngI b/PRBlqzMltixnXbEgwUOm+eeDkKWdBOb81d5XTdAQI6B2g5psDQFh7VmMCgcadB DXrir6yTeSGeIsGElxh/KKWgAMkp751erJfIJKvmvJeJXkbUI9XaYzWB+DXGEq1+ dUfMpw37GiNZToLL16x6oJsCO8VOP2pTTL5378KsFetkKk+liRuUZ5aTGssB6d1h kfbxLVrlxh92UpW1htm27ZzQsLJzbjDNY87rn64nZ1P/M6R/r2PAtmPx4sRA/wPg GjRWJ0rpVamK+nn7Xn6OiN/uzI+ZTz21FwxQNMjbHxclEuS0ErMa7p9yUXi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURqzwa1Lmnk5KvEaS26EBIDX9S8MwHwYDVR0j BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG M0FENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQxZTgyMjMtY2M2OC00MTBlLWI2 N2ItOWI4ODI1YjVjZDVmLzAvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0 OTdCMzZGM0FENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATQE0WAd+8sx4grcn5R9F1xZoDXJQjIUPgn P4UVs8Uw+isQD4dbltThX7kfcr8yniCiN3eaSrbZ+XewG9EC3EyVvoIvIJXsLW34 WH9Fp88x3B5xVJgCViZnTqSJBIGG9mY59V+SXIgTxXp6nwACXMWnSxxVMWgp0Vzd VL6t9s1Fo7T9OHS00NpMGhYhyoXutiYPilncgvqhSTmVIRaXJTx73t4vbssJ04zV zZe0pmfAoCvPxQUFYeA7Nu2cdtEyIqP91h4u+f/5Yum4ydI/SN+vxzlbiTrY2Hyk tbdEdmT+ezRdDef76N/3po1B/FskPcJ8nml7JzNuy1IGLJ+uRbw= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:02 2026 by rpki-client