This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: PKMxZji641E7OuU4nJoY6sBtJ616kshgfQqNpXmg9HU= Subject key identifier: A9:C5:42:AC:D7:40:7C:C0:5A:A1:35:80:01:AD:6E:5E:42:03:78:2F Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 310686F7AD315137CF39336AACEA8D1B64C0CAAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 027F Signing time: Mon 02 Feb 2026 02:20:03 +0000 Manifest this update: Mon 02 Feb 2026 02:15:03 +0000 Manifest next update: Thu 05 Feb 2026 02:29:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) 2: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: yfcyjLMhJcSiRF3fEMQODiHjH4iryZBdqhbwTBaD62g=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:06:86:f7:ad:31:51:37:cf:39:33:6a:ac:ea:8d:1b:64:c0:ca:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Feb 2 02:15:03 2026 GMT Not After : Feb 5 02:29:03 2026 GMT Subject: CN=A9C542ACD7407CC05AA1358001AD6E5E4203782F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:64:52:e4:0e:2a:f0:68:80:33:f5:2f:91: 5d:10:70:93:63:ae:dc:15:b6:cd:b7:31:bf:6a:cd: 27:7c:54:59:c0:56:23:68:fd:ca:3d:c8:cf:0a:e9: ad:a6:7c:70:0e:a7:00:f1:4a:9c:93:48:0a:22:c5: d8:10:02:95:44:da:ab:3a:e8:ca:a8:e5:7a:05:2c: 1f:a8:b8:6e:c7:db:c5:11:1e:98:1e:6c:c7:6e:a5: ad:bd:f4:32:c3:45:3e:df:a9:c8:9e:f6:2b:e0:58: ca:19:ca:55:dc:db:60:e2:1a:6a:7b:bb:39:f5:31: f2:29:03:86:b8:8d:da:23:1f:6c:20:7e:ad:57:c3: 0d:b3:5f:32:72:42:ed:34:3c:ab:78:2a:8b:87:76: b6:f8:ec:9e:36:7b:78:25:3c:39:6b:20:1c:8a:57: e6:0f:af:ed:92:9f:20:38:62:cc:f0:ee:4e:9f:af: cf:40:22:39:6c:07:89:48:37:09:23:82:cf:60:76: 97:72:ea:0b:26:f0:3f:73:d5:fa:d8:95:ca:01:9c: f8:0c:84:d1:38:92:3f:76:fa:da:e1:7e:ca:11:b6: 7d:3c:a0:fc:3e:5a:52:bd:e1:fc:e5:23:97:13:51: 95:94:c8:87:aa:9d:a3:57:b0:33:d2:15:1f:54:74: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C5:42:AC:D7:40:7C:C0:5A:A1:35:80:01:AD:6E:5E:42:03:78:2F X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:79:ac:b3:44:ba:e6:08:ec:f1:32:19:eb:b2:6d:03:b6:19: 78:4d:c3:82:62:87:f2:a9:cd:3d:79:8b:61:3e:3c:42:f5:78: bd:4b:5b:a6:79:be:0d:23:c3:43:7b:eb:08:d8:10:2a:0e:53: e9:82:7e:a4:60:2f:c2:d5:8d:de:0b:4e:cc:f2:84:40:f0:08: ab:5d:5b:e9:a3:cf:7a:25:83:ec:09:12:82:ac:5d:60:82:f1: 6a:ed:0c:c8:bb:30:5e:e2:97:2a:b9:25:21:13:ea:a6:10:5b: c2:2f:fc:37:1f:54:75:82:9e:e4:80:b1:25:77:d2:84:d2:0b: fc:b5:e8:7f:e8:8a:24:69:9e:04:f9:5f:da:be:64:93:7c:c6: 5a:7a:ee:0e:44:62:b9:0e:c1:51:d1:f8:65:bb:04:fa:c0:36: 08:74:b8:08:26:54:de:1c:dd:97:96:18:29:de:11:8e:0d:fa: 19:1c:1f:60:a1:c1:f7:5c:85:07:fb:8a:98:ed:98:2e:83:92: 5d:d4:58:b5:6c:24:bc:97:c1:be:ff:89:eb:5a:ec:90:91:8a: cd:b8:6e:5a:70:50:4a:2f:cb:df:42:a7:00:eb:ce:5d:60:f3: 18:cf:90:46:2f:b2:b1:7e:c7:c5:09:d8:0d:16:54:12:b6:22: 2b:80:6e:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQaG960xUTfPOTNqrOqNG2TAyqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNjAyMDIwMjE1MDNaFw0yNjAyMDUwMjI5MDNaMDMxMTAvBgNV BAMTKEE5QzU0MkFDRDc0MDdDQzA1QUExMzU4MDAxQUQ2RTVFNDIwMzc4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBWRS5A4q8GiAM/UvkV0QcJNj rtwVts23Mb9qzSd8VFnAViNo/co9yM8K6a2mfHAOpwDxSpyTSAoixdgQApVE2qs6 6Mqo5XoFLB+ouG7H28URHpgebMdupa299DLDRT7fqcie9ivgWMoZylXc22DiGmp7 uzn1MfIpA4a4jdojH2wgfq1Xww2zXzJyQu00PKt4KouHdrb47J42e3glPDlrIByK V+YPr+2SnyA4Yszw7k6fr89AIjlsB4lINwkjgs9gdpdy6gsm8D9z1frYlcoBnPgM hNE4kj92+trhfsoRtn08oPw+WlK94fzlI5cTUZWUyIeqnaNXsDPSFR9UdAYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcVCrNdAfMBaoTWAAa1uXkIDeC8wHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR5rLNEuuYI7PEyGeuybQO2GXhNw4Jih/Kp zT15i2E+PEL1eL1LW6Z5vg0jw0N76wjYECoOU+mCfqRgL8LVjd4LTszyhEDwCKtd W+mjz3olg+wJEoKsXWCC8WrtDMi7MF7ilyq5JSET6qYQW8Iv/DcfVHWCnuSAsSV3 0oTSC/y16H/oiiRpngT5X9q+ZJN8xlp67g5EYrkOwVHR+GW7BPrANgh0uAgmVN4c 3ZeWGCneEY4N+hkcH2ChwfdchQf7ipjtmC6Dkl3UWLVsJLyXwb7/ieta7JCRis24 blpwUEovy99CpwDrzl1g8xjPkEYvsrF+x8UJ2A0WVBK2IiuAbn8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:22 2026 by rpki-client