This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: 7vnHq4NTGV8cdrrtRpebrQB5ZwP4m/GpF/8cfvr38h8= Subject key identifier: 32:FB:EC:42:93:82:D7:F5:6F:AA:42:93:9B:2A:BA:8A:7D:C8:CC:27 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 2F5FC3D663954AEE0FDC45F77EB7D0435BD60FE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 028D Signing time: Sun 01 Feb 2026 00:51:00 +0000 Manifest this update: Sun 01 Feb 2026 00:46:00 +0000 Manifest next update: Wed 04 Feb 2026 04:26:00 +0000 Files and hashes: 1: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: VGC8e4Q9XkEvD+r7byY6mcxmCoNf6W/cwuxYflI1QcA=) 2: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) 3: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5f:c3:d6:63:95:4a:ee:0f:dc:45:f7:7e:b7:d0:43:5b:d6:0f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Feb 1 00:46:00 2026 GMT Not After : Feb 4 04:26:00 2026 GMT Subject: CN=32FBEC429382D7F56FAA42939B2ABA8A7DC8CC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:f3:1b:d7:a5:c0:b2:ad:61:58:92:6c:db: 34:46:2a:d1:8d:1c:8f:d7:22:1d:29:ba:76:cc:7d: 0d:62:d3:7e:eb:73:f2:69:ac:ca:20:f0:60:ec:b3: 2c:c6:3b:9d:9e:7e:e0:1a:88:1d:56:ee:62:f0:94: 1d:35:cd:05:76:31:d6:ab:66:75:66:78:0b:bd:e5: cc:47:0a:40:1c:d0:ae:80:42:6b:e9:20:54:f6:f3: e8:71:75:f2:06:af:1a:6b:e1:48:2b:b1:a1:3a:e4: d2:4c:67:71:25:86:b6:85:5f:84:22:a0:bb:d3:f1: 2b:18:1b:2f:77:aa:9c:6f:13:37:29:3b:3c:99:d6: 8e:a8:e1:2c:0f:ff:b0:47:fb:77:7b:93:57:63:7b: 00:cd:8a:5c:74:35:80:78:3d:4a:b5:fc:5f:ab:88: 83:3e:f6:66:14:3e:1c:9c:e1:a1:a6:94:bb:06:81: 07:32:b0:8b:c9:2a:25:eb:82:1f:a0:8b:82:6f:af: 5e:90:d0:0f:98:7d:aa:9d:e8:ba:a6:22:47:9e:00: 53:10:9f:1c:13:93:1e:87:d6:b9:e6:2d:f9:a5:3b: 5a:71:a2:fa:0e:e4:2c:1b:77:f2:e5:49:c6:25:78: 9c:e4:26:fd:41:7e:0f:e4:ac:3a:62:de:e1:d1:40: 49:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:EC:42:93:82:D7:F5:6F:AA:42:93:9B:2A:BA:8A:7D:C8:CC:27 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:79:37:3c:63:1b:4e:7f:7d:3e:33:38:a4:fe:52:5e:ca:3e: d8:67:67:d1:05:51:ec:d0:9f:dc:0e:f9:46:64:e6:8d:6f:40: d9:e5:da:ab:ae:8e:37:b2:06:e0:e7:80:4f:de:b8:52:2c:85: e5:75:13:ed:6c:8d:bc:d3:24:47:3a:11:1d:8b:69:b6:b8:5c: 38:f4:cb:9e:84:d1:d5:46:27:36:67:6e:86:6e:86:a8:d2:e9: 4e:57:54:86:1d:cb:fd:30:e4:0c:e9:d4:52:8e:ea:64:2d:fd: d9:56:4b:8d:dd:da:09:c3:3b:f7:b4:1c:4b:02:55:54:74:c7: 96:f0:19:37:63:10:52:6b:7e:c3:1e:30:68:ee:86:b5:f9:c5: 90:91:49:cc:53:fa:7a:00:05:7c:2e:f7:45:42:71:b3:e5:94: cd:c0:0d:59:41:30:15:56:fd:72:77:25:d3:61:23:0a:e2:e3: 5f:b9:ab:cb:86:0b:92:85:fa:c7:a1:76:34:23:4f:bb:a9:50: 9b:03:2d:d1:12:69:c2:82:7a:80:4e:c5:5b:5f:ba:f6:99:c7: b2:45:81:87:0b:40:ca:85:35:e6:5b:a8:32:84:1c:e2:10:9a: 90:c6:e8:db:71:02:b2:58:e8:61:9d:c3:84:8a:26:4a:95:f6: 75:0f:14:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1/D1mOVSu4P3EX3frfQQ1vWD+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNjAyMDEwMDQ2MDBaFw0yNjAyMDQwNDI2MDBaMDMxMTAvBgNV BAMTKDMyRkJFQzQyOTM4MkQ3RjU2RkFBNDI5MzlCMkFCQThBN0RDOENDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWt/Mb16XAsq1hWJJs2zRGKtGN HI/XIh0punbMfQ1i037rc/JprMog8GDssyzGO52efuAaiB1W7mLwlB01zQV2Mdar ZnVmeAu95cxHCkAc0K6AQmvpIFT28+hxdfIGrxpr4UgrsaE65NJMZ3ElhraFX4Qi oLvT8SsYGy93qpxvEzcpOzyZ1o6o4SwP/7BH+3d7k1djewDNilx0NYB4PUq1/F+r iIM+9mYUPhyc4aGmlLsGgQcysIvJKiXrgh+gi4Jvr16Q0A+Yfaqd6LqmIkeeAFMQ nxwTkx6H1rnmLfmlO1pxovoO5Cwbd/LlScYleJzkJv1Bfg/krDpi3uHRQEnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMvvsQpOC1/VvqkKTmyq6in3IzCcwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF5NzxjG05/fT4zOKT+Ul7KPthnZ9EFUezQ n9wO+UZk5o1vQNnl2quujjeyBuDngE/euFIsheV1E+1sjbzTJEc6ER2Laba4XDj0 y56E0dVGJzZnboZuhqjS6U5XVIYdy/0w5Azp1FKO6mQt/dlWS43d2gnDO/e0HEsC VVR0x5bwGTdjEFJrfsMeMGjuhrX5xZCRScxT+noABXwu90VCcbPllM3ADVlBMBVW /XJ3JdNhIwri41+5q8uGC5KF+sehdjQjT7upUJsDLdESacKCeoBOxVtfuvaZx7JF gYcLQMqFNeZbqDKEHOIQmpDG6NtxArJY6GGdw4SKJkqV9nUPFM4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:25 2026 by rpki-client