This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: pc2noIdfH+c6CalWCdbEWVzjGGstmRS6ID2/xl0XoF8= Subject key identifier: 73:40:AF:30:7F:63:35:16:E0:87:59:5D:6E:A7:B6:AC:88:F0:6B:C9 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 422D3DD1CA400AEC90B7ADDEB73582FF9F37A86E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 01EC Signing time: Sun 01 Feb 2026 11:30:47 +0000 Manifest this update: Sun 01 Feb 2026 11:25:47 +0000 Manifest next update: Wed 04 Feb 2026 16:58:47 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: mf26q435nT7+SOKi1z87l8rSaSrOG0vE0W7XqqGbdss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 16:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2d:3d:d1:ca:40:0a:ec:90:b7:ad:de:b7:35:82:ff:9f:37:a8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Feb 1 11:25:47 2026 GMT Not After : Feb 4 16:58:47 2026 GMT Subject: CN=7340AF307F633516E087595D6EA7B6AC88F06BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:42:43:1e:c9:8e:ab:b1:78:81:1e:79:4c: 8e:ca:ff:3e:6c:4a:41:ff:95:8c:c5:52:2e:4d:77: 9c:a3:6e:be:ec:98:8d:86:dc:0c:6d:94:b9:b1:12: 6b:cb:5f:12:ff:f8:da:e6:ab:0b:a8:e0:7c:06:f9: 99:24:b7:42:b9:b7:70:37:b4:a0:11:34:13:87:3a: 00:b4:a0:d6:10:02:30:e8:05:2b:03:93:80:58:30: ad:53:79:09:f0:58:99:54:13:88:56:b8:34:1c:30: 4f:61:e3:fe:7d:bc:02:45:09:bd:c9:e3:d9:66:97: 6e:71:ed:09:b1:01:7e:b9:e4:62:d4:38:44:a2:d8: 55:83:30:87:2b:87:fa:4f:39:41:d7:17:a5:72:af: 36:0f:36:8a:26:5f:58:6c:ab:6e:3c:83:8c:6a:13: a0:b7:b4:7e:1f:c5:19:d8:51:e5:97:04:7b:a2:df: 30:15:c5:1e:9f:17:b8:4b:e1:2d:e1:94:a4:07:c2: 85:56:40:31:47:0a:f8:38:d5:66:4d:cc:40:b4:38: c2:85:1e:c6:7d:5c:54:50:10:53:4b:52:8c:b9:c3: ab:d1:bc:6d:87:f4:bc:df:2c:2f:e0:2f:83:bd:73: b7:2b:ad:1e:62:5c:89:11:cf:36:15:c9:15:ef:2d: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:40:AF:30:7F:63:35:16:E0:87:59:5D:6E:A7:B6:AC:88:F0:6B:C9 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ba:db:5a:8a:16:c6:1d:04:85:be:99:c0:63:09:20:55:09: 0a:e0:88:88:fa:60:3d:c5:a6:fb:ca:b2:a2:95:6f:cf:73:49: c7:f5:1a:ff:4c:36:88:12:7b:f4:a8:8f:ff:ea:60:c7:c3:3d: 18:bd:dc:c2:fa:cb:18:59:a7:46:86:c3:e3:c7:a6:87:0d:aa: 57:fb:dc:23:2a:a6:ba:c3:66:38:74:ac:49:f3:0c:89:26:04: 45:34:8d:81:bf:76:14:c7:39:f8:a4:7e:8b:e1:56:46:12:8f: 75:2a:5a:60:da:04:b8:2a:ea:9c:93:f0:43:ef:8a:21:d9:14: d9:08:73:38:52:7b:d7:e9:ca:06:98:dd:e8:c4:98:c8:f9:f1: eb:09:d3:bf:a6:72:6d:37:c6:b9:05:9f:2f:31:5e:c3:04:e0: 68:4a:cc:5a:fd:db:5e:b1:0a:99:3d:eb:4e:f9:1a:ce:8c:ed: d1:c8:5c:cb:a8:b5:76:fc:f1:10:33:fd:50:28:77:2c:13:89: e4:d2:91:73:7c:40:a3:cb:e7:06:ca:a1:00:a3:ec:85:a5:8f: 53:ed:d8:54:c3:1a:46:da:cc:96:32:11:f6:40:b5:5e:6f:d3: dc:87:1c:e2:cb:70:ba:c0:f1:d2:27:11:ab:a4:bc:fe:ba:56: ca:8e:8d:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi090cpACuyQt63etzWC/583qG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNjAyMDExMTI1NDdaFw0yNjAyMDQxNjU4NDdaMDMxMTAvBgNV BAMTKDczNDBBRjMwN0Y2MzM1MTZFMDg3NTk1RDZFQTdCNkFDODhGMDZCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKUJDHsmOq7F4gR55TI7K/z5s SkH/lYzFUi5Nd5yjbr7smI2G3AxtlLmxEmvLXxL/+Nrmqwuo4HwG+Zkkt0K5t3A3 tKARNBOHOgC0oNYQAjDoBSsDk4BYMK1TeQnwWJlUE4hWuDQcME9h4/59vAJFCb3J 49lml25x7QmxAX655GLUOESi2FWDMIcrh/pPOUHXF6VyrzYPNoomX1hsq248g4xq E6C3tH4fxRnYUeWXBHui3zAVxR6fF7hL4S3hlKQHwoVWQDFHCvg41WZNzEC0OMKF HsZ9XFRQEFNLUoy5w6vRvG2H9LzfLC/gL4O9c7crrR5iXIkRzzYVyRXvLdPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0CvMH9jNRbgh1ldbqe2rIjwa8kwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm621qKFsYdBIW+mcBjCSBVCQrgiIj6YD3F pvvKsqKVb89zScf1Gv9MNogSe/Soj//qYMfDPRi93ML6yxhZp0aGw+PHpocNqlf7 3CMqprrDZjh0rEnzDIkmBEU0jYG/dhTHOfikfovhVkYSj3UqWmDaBLgq6pyT8EPv iiHZFNkIczhSe9fpygaY3ejEmMj58esJ07+mcm03xrkFny8xXsME4GhKzFr9216x Cpk96075Gs6M7dHIXMuotXb88RAz/VAodywTieTSkXN8QKPL5wbKoQCj7IWlj1Pt 2FTDGkbazJYyEfZAtV5v09yHHOLLcLrA8dInEaukvP66VsqOjf0= -----END CERTIFICATE-----Generated at Mon Feb 2 15:59:19 2026 by rpki-client