This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: QHmdPhsrCZefuDLb4wexil9OyheCqtYmxwsGmBa5Eek= Subject key identifier: 38:92:0A:6B:BC:9D:ED:D8:19:E0:A2:AE:00:32:93:46:A8:D4:C6:87 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 5FBBEBA5C074EC74FEE1BDD6C7C4FA0E3183DD6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 036A Signing time: Sat 31 Jan 2026 06:11:41 +0000 Manifest this update: Sat 31 Jan 2026 06:06:41 +0000 Manifest next update: Tue 03 Feb 2026 14:08:41 +0000 Files and hashes: 1: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=) 2: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: X9YyIVP+l0/51K96CgQCWSkSLaymQosWcme2qkyryHg=) 3: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=) 4: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bb:eb:a5:c0:74:ec:74:fe:e1:bd:d6:c7:c4:fa:0e:31:83:dd:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Jan 31 06:06:41 2026 GMT Not After : Feb 3 14:08:41 2026 GMT Subject: CN=38920A6BBC9DEDD819E0A2AE00329346A8D4C687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:86:38:cd:13:ee:ee:9b:56:42:c8:5a:b3: bf:f1:b8:62:c2:2f:6b:fd:6e:69:80:39:f9:b5:d5: b4:53:9d:6b:30:ca:c8:8f:29:f7:16:a5:82:c1:c8: 68:e3:bc:27:1c:28:33:2f:82:56:f4:a9:9a:b1:53: 6a:fe:70:7e:55:de:18:70:d6:04:0a:42:d8:19:e1: 67:49:03:b2:2b:c8:c8:fb:ea:6d:4d:42:ec:2c:17: 70:5f:48:92:b1:cb:d0:84:27:6e:5a:72:75:ab:bf: 82:14:da:bf:9c:f9:cb:1a:d3:95:9b:1c:15:58:d7: 5e:0c:19:02:1e:36:10:b0:99:77:ac:3f:73:43:3f: f1:e0:dc:c6:c4:c9:5e:0e:bc:e2:4a:cc:29:0c:2f: 70:0a:40:27:9f:f4:dc:cf:f8:33:a2:da:27:0a:96: 04:2f:93:ee:78:70:4c:95:95:25:1d:a2:7f:ba:5a: 9b:57:fa:b1:c7:86:0d:68:7e:0d:b7:d6:26:0a:14: 9c:8e:5f:5b:cd:d8:76:67:69:ad:71:90:d5:07:59: fb:df:9d:da:20:41:88:88:5c:60:33:08:6d:0c:a1: 08:a2:17:90:49:49:58:8e:77:97:8a:62:65:01:12: e7:b9:e3:f8:9e:69:f5:55:53:c5:39:9a:a2:a6:9e: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:92:0A:6B:BC:9D:ED:D8:19:E0:A2:AE:00:32:93:46:A8:D4:C6:87 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6f:9a:98:6a:48:a3:86:a6:11:4d:9f:96:e6:99:ff:54:bf: ba:6a:a9:6e:14:c8:1c:aa:6b:d9:35:49:f2:2b:2a:82:d7:f0: dd:9b:f9:53:2b:0f:8a:06:0b:a7:db:bd:18:c0:8e:3f:b6:39: 96:f7:1a:19:45:e3:91:b3:b5:e5:41:52:c1:ed:82:a1:86:d7: 7a:da:0a:38:e4:88:87:2a:47:19:82:3d:02:b1:10:31:19:7e: f7:61:f6:fb:10:7d:23:8b:6b:aa:05:f7:8c:33:08:5d:2c:40: 83:4b:73:c5:6e:4a:ae:9e:92:51:6b:91:52:c4:d1:59:80:8d: 28:ac:d3:70:52:0d:19:8b:ce:7d:fc:2e:d8:82:ae:60:24:cd: 9e:8f:87:62:d6:ab:5a:2e:18:25:c7:c8:65:5f:12:b7:84:e7: 1a:76:a9:c0:5d:af:d7:40:20:a9:9e:2d:78:41:c8:be:e3:75: 61:93:ca:bd:97:04:fc:41:a7:34:b4:2a:cd:88:98:05:be:cb: 51:71:cb:b7:90:83:93:20:3c:4c:1e:c0:68:d4:47:18:51:2f: 7a:89:41:3f:a4:3b:3b:4c:7e:b7:6a:f8:26:d5:d3:9b:18:7f: e2:be:b4:80:31:a2:50:bd:08:4e:2b:0c:c2:79:9a:c9:53:74: e6:58:ca:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7vrpcB07HT+4b3Wx8T6DjGD3WowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNjAxMzEwNjA2NDFaFw0yNjAyMDMxNDA4NDFaMDMxMTAvBgNV BAMTKDM4OTIwQTZCQkM5REVERDgxOUUwQTJBRTAwMzI5MzQ2QThENEM2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMW4Y4zRPu7ptWQshas7/xuGLC L2v9bmmAOfm11bRTnWswysiPKfcWpYLByGjjvCccKDMvglb0qZqxU2r+cH5V3hhw 1gQKQtgZ4WdJA7IryMj76m1NQuwsF3BfSJKxy9CEJ25acnWrv4IU2r+c+csa05Wb HBVY114MGQIeNhCwmXesP3NDP/Hg3MbEyV4OvOJKzCkML3AKQCef9NzP+DOi2icK lgQvk+54cEyVlSUdon+6WptX+rHHhg1ofg231iYKFJyOX1vN2HZnaa1xkNUHWfvf ndogQYiIXGAzCG0MoQiiF5BJSViOd5eKYmUBEue54/ieafVVU8U5mqKmnpFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJIKa7yd7dgZ4KKuADKTRqjUxocwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFvmphqSKOGphFNn5bmmf9Uv7pqqW4UyByq a9k1SfIrKoLX8N2b+VMrD4oGC6fbvRjAjj+2OZb3GhlF45GzteVBUsHtgqGG13ra CjjkiIcqRxmCPQKxEDEZfvdh9vsQfSOLa6oF94wzCF0sQINLc8VuSq6eklFrkVLE 0VmAjSis03BSDRmLzn38LtiCrmAkzZ6Ph2LWq1ouGCXHyGVfEreE5xp2qcBdr9dA IKmeLXhByL7jdWGTyr2XBPxBpzS0Ks2ImAW+y1Fxy7eQg5MgPEwewGjURxhRL3qJ QT+kOztMfrdq+CbV05sYf+K+tIAxolC9CE4rDMJ5mslTdOZYyuY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:49:52 2026 by rpki-client