This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft File: 285A5330FE006D3660B306BEE40EC7FEABA96574.mft (raw, json) Hash identifier: 4CEov8kFJ7r0ixgPSC0nd+nP0G3NZ9gGdeJzdvHRpM8= Subject key identifier: 9A:C6:D4:2D:33:F7:4C:F5:6C:C0:B6:B0:B9:0B:2C:73:7C:1B:9A:76 Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 Certificate issuer: /CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Certificate serial: 2947797B3B644283C791B63290201C89366E70C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft Manifest number: 0241 Signing time: Mon 02 Feb 2026 05:50:55 +0000 Manifest this update: Mon 02 Feb 2026 05:45:55 +0000 Manifest next update: Thu 05 Feb 2026 11:30:55 +0000 Files and hashes: 1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: NcRBqt1Wn/tuGvM1xfS0JFewwd6sRo22gfKxjNahc88=) 2: 285A5330FE006D3660B306BEE40EC7FEABA96574.crl (hash: BNUQEGK0dd94WSgDNqjRX9Fq17GkM3Er/a4vcg3h0RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:47:79:7b:3b:64:42:83:c7:91:b6:32:90:20:1c:89:36:6e:70:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Validity Not Before: Feb 2 05:45:55 2026 GMT Not After : Feb 5 11:30:55 2026 GMT Subject: CN=9AC6D42D33F74CF56CC0B6B0B90B2C737C1B9A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:5b:32:66:3d:6b:3e:a5:e4:de:3b:6b:8a: f5:97:99:31:c6:9b:5c:cd:20:31:b0:9b:84:a3:b0: 92:1b:22:4b:84:54:d2:14:45:51:30:e6:63:96:94: 6a:00:a0:27:20:88:8f:66:25:0a:53:c0:d4:5e:3e: 03:7c:81:69:bd:42:c7:a5:71:ee:57:69:d0:8d:2c: a0:05:06:d7:70:88:ac:8d:3f:b2:da:78:cf:aa:13: df:e9:f8:97:57:14:32:b1:67:83:42:13:48:c3:25: 6d:3a:25:0e:15:74:2a:31:5e:ae:a2:b9:f2:1b:a9: 0b:87:db:77:07:39:37:87:b2:8f:26:b3:37:bc:03: da:3f:21:e4:02:a6:6f:87:6b:22:6c:36:25:05:39: 2c:b9:04:f4:e6:48:f6:55:6f:c1:24:71:2d:64:b1: d6:80:34:43:53:f3:bc:57:be:d2:51:a2:12:29:51: ea:dd:d1:0e:b7:76:27:98:f1:f7:18:c7:5f:b7:cb: fd:17:3a:bb:f4:fd:85:69:78:81:72:2b:42:8e:8f: 4e:84:ed:46:c2:fa:39:14:ba:7c:30:41:6d:0a:8c: 4e:77:81:07:3d:0a:a3:f7:f4:c6:0d:47:96:2d:a1: 53:ad:72:ce:48:6f:be:1f:50:10:41:87:14:d5:3e: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C6:D4:2D:33:F7:4C:F5:6C:C0:B6:B0:B9:0B:2C:73:7C:1B:9A:76 X509v3 Authority Key Identifier: keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ee:d0:70:28:28:eb:f4:df:24:f1:00:b2:ca:89:b8:44:bc: 0a:12:8b:61:7a:06:8b:d8:84:09:78:c8:3a:cf:06:ff:0a:1d: af:fa:35:d9:36:69:93:c1:ee:74:cb:e3:60:c9:c6:ca:bc:dc: 59:63:37:88:f7:2c:1d:27:d8:43:06:50:81:70:4c:89:dd:d5: fe:b4:d6:9d:5f:69:0e:76:4f:ac:77:2d:da:b3:9e:a3:38:66: 73:a2:93:f2:cb:52:b0:a5:87:04:bd:ef:f6:dd:a1:c1:39:91: 9b:77:23:44:ea:72:02:6c:dd:fe:c2:c5:0b:23:a8:62:2f:c8: 8b:cd:d7:b3:c3:cf:5d:ea:76:12:a4:72:65:4d:fa:ca:5d:e6: 43:dd:02:e4:6d:a4:c1:9f:a1:17:66:b0:80:1d:28:7d:b5:b5: 11:28:fb:58:b5:ba:b0:d3:3a:5e:30:76:0a:cc:62:63:25:68: 83:b5:63:01:37:d7:d2:d1:f7:3d:d8:e9:56:a0:aa:94:84:77: d6:2a:b5:91:13:60:ca:d4:87:9d:fa:56:b4:c7:32:f6:e0:94: 2f:19:d5:6f:29:5a:7c:75:7c:c8:84:85:0a:c6:70:92:13:94: 3f:f7:a2:83:38:84:00:c4:61:2a:f1:33:f8:6b:53:d0:e0:d9: 64:8e:b0:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUd5eztkQoPHkbYykCAciTZucMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVB QkE5NjU3NDAeFw0yNjAyMDIwNTQ1NTVaFw0yNjAyMDUxMTMwNTVaMDMxMTAvBgNV BAMTKDlBQzZENDJEMzNGNzRDRjU2Q0MwQjZCMEI5MEIyQzczN0MxQjlBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETlsyZj1rPqXk3jtrivWXmTHG m1zNIDGwm4SjsJIbIkuEVNIURVEw5mOWlGoAoCcgiI9mJQpTwNRePgN8gWm9Qsel ce5XadCNLKAFBtdwiKyNP7LaeM+qE9/p+JdXFDKxZ4NCE0jDJW06JQ4VdCoxXq6i ufIbqQuH23cHOTeHso8msze8A9o/IeQCpm+HayJsNiUFOSy5BPTmSPZVb8EkcS1k sdaANENT87xXvtJRohIpUerd0Q63dieY8fcYx1+3y/0XOrv0/YVpeIFyK0KOj06E 7UbC+jkUunwwQW0KjE53gQc9CqP39MYNR5YtoVOtcs5Ib74fUBBBhxTVPrKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsbULTP3TPVswLawuQssc3wbmnYwHwYDVR0j BBgwFoAUKFpTMP4AbTZgswa+5A7H/qupZXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8yODVBNTMzMEZF MDA2RDM2NjBCMzA2QkVFNDBFQzdGRUFCQTk2NTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVBQkE5 NjU3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3 RkVBQkE5NjU3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnu0HAoKOv03yTxALLKibhEvAoSi2F6BovY hAl4yDrPBv8KHa/6Ndk2aZPB7nTL42DJxsq83FljN4j3LB0n2EMGUIFwTInd1f60 1p1faQ52T6x3LdqznqM4ZnOik/LLUrClhwS97/bdocE5kZt3I0TqcgJs3f7CxQsj qGIvyIvN17PDz13qdhKkcmVN+spd5kPdAuRtpMGfoRdmsIAdKH21tREo+1i1urDT Ol4wdgrMYmMlaIO1YwE319LR9z3Y6VagqpSEd9YqtZETYMrUh536VrTHMvbglC8Z 1W8pWnx1fMiEhQrGcJITlD/3ooM4hADEYSrxM/hrU9Dg2WSOsMw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:35 2026 by rpki-client