This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: Jj0hM6smC3Hog9/n3COKm78oDuZd9g9abyYnxeQJieI= Subject key identifier: 51:5C:24:7D:50:06:5B:02:62:95:44:C6:A2:49:9F:AF:75:4E:F9:70 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 28A6F77923CC373FCB2C3583D2B046797F84CAFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 021B Signing time: Sun 01 Feb 2026 20:51:48 +0000 Manifest this update: Sun 01 Feb 2026 20:46:48 +0000 Manifest next update: Thu 05 Feb 2026 06:10:48 +0000 Files and hashes: 1: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 2: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) 3: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: 7mrIaREPsVC5833RRbO+0XeVHpBVLo+tKCzaMAza0O8=) 4: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a6:f7:79:23:cc:37:3f:cb:2c:35:83:d2:b0:46:79:7f:84:ca:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Feb 1 20:46:48 2026 GMT Not After : Feb 5 06:10:48 2026 GMT Subject: CN=515C247D50065B02629544C6A2499FAF754EF970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:31:c6:3a:bf:66:cd:d6:58:6d:e7:8b:b7: 2d:8b:34:d8:e1:b1:7b:1f:62:b4:4c:68:c2:e1:48: 3e:6f:ca:a6:ea:40:b7:d5:92:7d:dd:e5:ef:e8:77: 3d:d1:c6:a7:a4:ef:b8:6f:ff:1a:e6:96:d6:5e:67: d4:5a:7c:fb:6f:f1:3f:d8:4d:3f:87:a3:19:6f:0c: f3:1f:28:93:aa:46:00:ec:96:46:16:c6:e7:bf:88: 96:85:a0:6a:89:3d:27:75:07:d3:de:13:9d:19:e8: c9:ed:e2:92:a8:db:88:01:5b:c1:8a:b9:0d:86:94: df:cb:5f:cd:2f:e0:8a:79:ef:cc:41:fe:61:60:e4: 5c:18:5e:ad:7f:32:2e:35:a8:f4:ac:ce:43:2d:6a: 68:20:9b:80:19:b2:b8:52:9c:f4:a4:58:4f:9d:03: ce:ba:fe:d7:a2:42:3e:46:86:c6:37:37:39:5d:99: d5:41:3d:ed:8f:d5:b2:ea:0a:29:a1:13:b6:78:26: c8:7c:c9:2a:cd:eb:a3:ae:8d:23:d4:f5:44:3b:d0: 69:33:64:17:f9:f6:55:f3:c8:05:09:ba:ec:f5:e4: 1f:9b:99:a9:da:a2:9e:76:13:a3:b9:16:ba:80:26: 77:6e:16:b5:0e:d4:d8:c1:88:24:17:2f:25:07:69: c6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5C:24:7D:50:06:5B:02:62:95:44:C6:A2:49:9F:AF:75:4E:F9:70 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a1:46:cc:b4:6d:22:94:1b:cd:78:f4:c8:8b:58:8d:ba:8e: 64:34:bf:75:6f:46:a3:a8:c7:67:f8:f9:2f:09:c9:32:c7:50: 0e:4b:a8:ab:67:03:47:0e:c9:30:27:7c:71:63:ca:69:76:43: 3b:98:30:96:dc:de:90:b6:6e:e5:48:0f:37:c0:5d:4c:3c:54: fd:a1:77:3f:bb:13:b4:ce:98:ff:57:45:13:f7:dc:1b:af:1b: a2:94:29:1c:bc:88:c6:4d:7f:4a:95:58:78:b5:2a:8d:f2:d4: 0c:90:fd:a6:3e:28:bb:15:45:b8:98:cd:1c:c5:8f:39:73:71: ee:90:a2:21:a6:8e:a7:cd:81:80:0b:7b:fb:6e:2b:00:4b:de: bf:2a:47:47:81:2a:86:0a:cf:14:ea:cc:7c:7d:df:91:18:fe: 99:dc:59:65:2f:dd:74:aa:00:b3:d3:fb:9d:0d:14:e8:0e:13: 32:96:87:a9:48:64:6e:1b:c1:f7:dd:03:cb:90:8f:77:07:9f: c7:1d:20:1b:5c:77:03:ee:1e:ff:4e:c7:97:48:b5:44:1e:ae: 74:25:be:72:c3:3c:ef:0a:32:4d:48:07:69:71:4b:f9:cf:1b: 9b:26:91:fc:7b:0c:eb:e7:04:ba:32:83:9c:d9:e4:31:6a:3d: a5:68:af:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKb3eSPMNz/LLDWD0rBGeX+Eyv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNjAyMDEyMDQ2NDhaFw0yNjAyMDUwNjEwNDhaMDMxMTAvBgNV BAMTKDUxNUMyNDdENTAwNjVCMDI2Mjk1NDRDNkEyNDk5RkFGNzU0RUY5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAjHGOr9mzdZYbeeLty2LNNjh sXsfYrRMaMLhSD5vyqbqQLfVkn3d5e/odz3Rxqek77hv/xrmltZeZ9RafPtv8T/Y TT+HoxlvDPMfKJOqRgDslkYWxue/iJaFoGqJPSd1B9PeE50Z6Mnt4pKo24gBW8GK uQ2GlN/LX80v4Ip578xB/mFg5FwYXq1/Mi41qPSszkMtamggm4AZsrhSnPSkWE+d A866/teiQj5GhsY3NzldmdVBPe2P1bLqCimhE7Z4Jsh8ySrN66OujSPU9UQ70Gkz ZBf59lXzyAUJuuz15B+bmanaop52E6O5FrqAJnduFrUO1NjBiCQXLyUHacaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVwkfVAGWwJilUTGokmfr3VO+XAwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIihRsy0bSKUG8149MiLWI26jmQ0v3VvRqOo x2f4+S8JyTLHUA5LqKtnA0cOyTAnfHFjyml2QzuYMJbc3pC2buVIDzfAXUw8VP2h dz+7E7TOmP9XRRP33BuvG6KUKRy8iMZNf0qVWHi1Ko3y1AyQ/aY+KLsVRbiYzRzF jzlzce6QoiGmjqfNgYALe/tuKwBL3r8qR0eBKoYKzxTqzHx935EY/pncWWUv3XSq ALPT+50NFOgOEzKWh6lIZG4bwffdA8uQj3cHn8cdIBtcdwPuHv9Ox5dItUQernQl vnLDPO8KMk1IB2lxS/nPG5smkfx7DOvnBLoyg5zZ5DFqPaVorwc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:48:04 2026 by rpki-client