This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: aGkTsMoBF4NWRAQLWDUjIrjpaefRqz7C6Z9iniEIf4w= Subject key identifier: B0:00:95:E0:0D:35:BA:9B:A1:35:FA:76:12:F4:90:BB:02:64:72:C4 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 622DC297C734E861BF4648FCF0FFF243093FB0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 0245 Signing time: Sun 01 Feb 2026 16:31:18 +0000 Manifest this update: Sun 01 Feb 2026 16:26:18 +0000 Manifest next update: Wed 04 Feb 2026 22:17:18 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: EIdi7AiZcizte3gJixxePKBvQJuO3EVDSnMqY67GbHE=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2d:c2:97:c7:34:e8:61:bf:46:48:fc:f0:ff:f2:43:09:3f:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Feb 1 16:26:18 2026 GMT Not After : Feb 4 22:17:18 2026 GMT Subject: CN=B00095E00D35BA9BA135FA7612F490BB026472C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:2e:1d:ee:5d:0c:28:6a:e4:8f:9d:8d:81: 86:2f:a1:38:ca:37:9c:e7:16:4d:28:72:51:25:79: d5:3d:0d:90:b2:1d:22:76:e1:12:7f:f4:b6:7a:c7: f5:17:8c:d7:b9:7b:47:15:ab:02:27:39:37:30:ba: c6:44:6f:d9:2b:5d:52:ca:a4:75:91:33:1e:c0:5d: 59:8a:09:19:ce:b0:ee:55:5b:1a:6a:39:10:a7:4f: dc:a7:af:71:c8:e9:3b:b8:2f:60:b4:27:86:e7:36: 32:7e:1f:1d:0f:b8:58:62:22:92:74:a5:85:b7:7e: 84:26:f0:74:5e:f9:7d:b5:b6:ad:ec:c2:3d:cf:b0: 1b:67:01:86:37:37:63:05:a2:98:2e:b7:c9:e5:6b: de:58:a4:b5:e5:f9:22:06:dd:35:ff:76:e1:4a:c1: d5:82:73:6b:b5:30:de:50:c4:01:34:f1:93:ef:dd: 0c:a7:6d:5b:69:a5:11:93:93:b5:71:d3:43:3f:2e: 50:ae:67:6c:5e:1d:49:bf:40:bd:cf:51:eb:cb:8a: 03:f9:3a:0d:ff:5c:72:75:b4:19:a7:3e:c1:a9:b3: ec:32:01:91:6b:a6:14:39:95:c2:39:c5:87:55:a6: ec:f5:c1:e7:dd:09:9c:bb:67:f0:60:cd:d7:1e:02: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:95:E0:0D:35:BA:9B:A1:35:FA:76:12:F4:90:BB:02:64:72:C4 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:13:7d:f4:4d:63:1b:54:0f:46:1b:d8:57:6d:80:ce:a7:9c: f5:0e:5e:a8:cd:82:11:60:b2:c4:ed:a0:71:fd:8f:ed:93:d5: 13:6c:0a:b9:62:c6:f2:34:13:f1:b3:7c:55:35:9c:c0:77:91: 98:23:a1:0d:55:c1:44:52:dd:02:b0:5d:eb:64:0e:ec:b6:5f: 57:a2:0b:d3:c5:9b:13:62:68:ab:61:39:65:2f:eb:33:bd:5b: c2:c4:22:6a:44:b7:33:5d:04:24:7f:6b:1a:ce:1f:c9:3a:ca: c8:08:17:c7:c9:83:06:23:ce:97:06:16:1a:70:90:e2:31:5b: 03:40:8c:1f:63:53:70:16:83:bc:9a:44:e9:2b:d1:5c:fa:d8: f7:f6:b3:bb:fc:92:92:76:a4:f9:c5:20:df:03:e5:22:b4:36: 1e:76:32:0a:ed:37:53:5b:f4:96:d8:b2:63:e6:b4:86:e1:0c: 32:8f:93:d8:03:7c:70:14:22:4b:11:f7:47:df:d3:7a:25:3a: 9c:0d:6f:2d:0c:b6:f6:29:63:e3:36:23:99:01:24:e4:71:11: 0c:dd:bb:5e:67:0c:cb:12:c5:d5:e0:69:75:d6:3b:df:ac:a9: 70:bf:be:06:14:cd:0d:78:f6:a6:47:d0:68:dc:5f:05:cf:70: ca:1e:d2:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYi3Cl8c06GG/Rkj88P/yQwk/sLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNjAyMDExNjI2MThaFw0yNjAyMDQyMjE3MThaMDMxMTAvBgNV BAMTKEIwMDA5NUUwMEQzNUJBOUJBMTM1RkE3NjEyRjQ5MEJCMDI2NDcyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoC4d7l0MKGrkj52NgYYvoTjK N5znFk0oclEledU9DZCyHSJ24RJ/9LZ6x/UXjNe5e0cVqwInOTcwusZEb9krXVLK pHWRMx7AXVmKCRnOsO5VWxpqORCnT9ynr3HI6Tu4L2C0J4bnNjJ+Hx0PuFhiIpJ0 pYW3foQm8HRe+X21tq3swj3PsBtnAYY3N2MFopgut8nla95YpLXl+SIG3TX/duFK wdWCc2u1MN5QxAE08ZPv3QynbVtppRGTk7Vx00M/LlCuZ2xeHUm/QL3PUevLigP5 Og3/XHJ1tBmnPsGps+wyAZFrphQ5lcI5xYdVpuz1wefdCZy7Z/BgzdceAixHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsACV4A01upuhNfp2EvSQuwJkcsQwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwTffRNYxtUD0Yb2FdtgM6nnPUOXqjNghFg ssTtoHH9j+2T1RNsCrlixvI0E/GzfFU1nMB3kZgjoQ1VwURS3QKwXetkDuy2X1ei C9PFmxNiaKthOWUv6zO9W8LEImpEtzNdBCR/axrOH8k6ysgIF8fJgwYjzpcGFhpw kOIxWwNAjB9jU3AWg7yaROkr0Vz62Pf2s7v8kpJ2pPnFIN8D5SK0Nh52MgrtN1Nb 9JbYsmPmtIbhDDKPk9gDfHAUIksR90ff03olOpwNby0MtvYpY+M2I5kBJORxEQzd u15nDMsSxdXgaXXWO9+sqXC/vgYUzQ149qZH0GjcXwXPcMoe0mo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:55 2026 by rpki-client