This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: knQw4f+qhRiu75qxfKZaUBTJwMj996+MTnQJ5MPVPZA= Subject key identifier: 5E:AC:56:4F:1B:F5:15:86:4C:E1:85:EF:6B:7D:AE:8D:21:14:32:04 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 25BFE34EF0DC0786E5B547E40261B219E9A8A21E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 01D8 Signing time: Sun 01 Feb 2026 17:21:45 +0000 Manifest this update: Sun 01 Feb 2026 17:16:45 +0000 Manifest next update: Wed 04 Feb 2026 23:01:45 +0000 Files and hashes: 1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: dQEw2/q0jb+KQe+GF06aed8m+MpEA25/2ivEEFSNjyQ=) 2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: 3f5S4rIqUbXtW4RCEKb67P0WLtgICGzi4Ly71eQQW7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bf:e3:4e:f0:dc:07:86:e5:b5:47:e4:02:61:b2:19:e9:a8:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Feb 1 17:16:45 2026 GMT Not After : Feb 4 23:01:45 2026 GMT Subject: CN=5EAC564F1BF515864CE185EF6B7DAE8D21143204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:0f:06:79:e5:05:76:fc:88:79:40:9f:bb: 87:e7:03:4d:26:2e:7f:de:12:ac:0e:77:60:f1:00: f0:89:32:80:c6:28:2b:62:d4:95:f6:e0:b4:7e:ed: 35:7f:a8:5b:7b:5f:48:98:25:e0:11:b6:7e:ed:6d: b2:41:6f:ac:18:5a:c4:a1:cc:1b:a3:01:21:eb:60: e9:38:cd:08:95:78:20:6d:fc:1a:30:2f:c4:fc:f0: f6:fc:92:fd:6b:87:51:f5:2b:a0:2e:f9:bd:5d:26: 5f:ec:1f:46:b8:69:12:23:e3:47:96:4a:80:30:22: 69:c5:cf:70:48:0b:a7:fb:c9:5b:56:f0:bd:aa:c8: ca:4e:7c:44:b2:5f:f6:a6:59:f8:74:2d:27:39:00: c3:18:23:a9:17:de:7e:d1:1f:69:6b:86:77:39:c1: b4:76:f2:fa:29:a2:fe:b0:cc:8b:45:69:39:35:92: 85:3e:11:0f:c8:a7:8c:fb:36:9e:db:c3:e8:6c:5e: 2d:cc:a5:7b:b4:97:fd:fd:dd:37:9f:74:03:9d:65: 9f:53:29:b8:80:db:52:73:5e:ab:72:66:72:7b:f8: 49:fa:11:24:21:fd:a3:c0:5e:5e:27:90:94:e0:53: 19:a7:3c:23:46:c5:9c:63:41:8e:d2:1c:fd:4f:4d: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:56:4F:1B:F5:15:86:4C:E1:85:EF:6B:7D:AE:8D:21:14:32:04 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f1:85:2d:aa:3a:9f:2f:8c:72:5d:6f:ea:18:99:86:3d:6f: 80:5e:d3:ca:78:d1:94:a9:df:53:db:25:8a:94:15:88:9f:25: c4:6a:28:50:c6:17:28:56:f6:b1:fe:bf:73:9d:e3:c3:3e:a2: df:51:a8:7e:a4:fa:4b:4f:96:49:e4:77:31:29:5e:10:7f:91: 19:21:0d:9b:b5:29:5c:7b:c1:de:0d:83:43:f7:78:e5:87:d2: c5:f0:21:c4:d7:56:f4:1c:5d:78:d4:de:43:71:87:97:e6:f1: d8:e2:3e:9e:ad:fd:a8:55:d9:c7:d2:e5:5c:d2:0b:59:5b:26: 44:4d:98:31:94:7f:df:3c:11:e9:fc:a0:c9:18:90:a5:c4:5a: 00:8f:11:4a:f5:ed:6e:b3:5e:22:bf:76:6b:cf:29:8f:4b:2b: 08:97:41:d1:9d:10:d2:03:86:b2:c0:2f:56:19:17:70:17:e0: 40:f7:45:1a:81:e8:e2:6d:12:95:d8:4f:75:2a:85:ce:60:13: b5:64:2f:20:be:22:b6:eb:58:09:20:2b:38:78:48:b8:0c:e1: 0d:19:39:d0:4f:e7:e7:dc:45:37:44:84:b7:e4:a2:0d:32:7d: 86:46:18:63:4a:af:f9:9b:60:16:53:2e:44:bc:85:77:37:de: 41:74:1c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJb/jTvDcB4bltUfkAmGyGemooh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNjAyMDExNzE2NDVaFw0yNjAyMDQyMzAxNDVaMDMxMTAvBgNV BAMTKDVFQUM1NjRGMUJGNTE1ODY0Q0UxODVFRjZCN0RBRThEMjExNDMyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJw8GeeUFdvyIeUCfu4fnA00m Ln/eEqwOd2DxAPCJMoDGKCti1JX24LR+7TV/qFt7X0iYJeARtn7tbbJBb6wYWsSh zBujASHrYOk4zQiVeCBt/BowL8T88Pb8kv1rh1H1K6Au+b1dJl/sH0a4aRIj40eW SoAwImnFz3BIC6f7yVtW8L2qyMpOfESyX/amWfh0LSc5AMMYI6kX3n7RH2lrhnc5 wbR28vopov6wzItFaTk1koU+EQ/Ip4z7Np7bw+hsXi3MpXu0l/393TefdAOdZZ9T KbiA21JzXqtyZnJ7+En6ESQh/aPAXl4nkJTgUxmnPCNGxZxjQY7SHP1PTeGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqxWTxv1FYZM4YXva32ujSEUMgQwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzxhS2qOp8vjHJdb+oYmYY9b4Be08p40ZSp 31PbJYqUFYifJcRqKFDGFyhW9rH+v3Od48M+ot9RqH6k+ktPlknkdzEpXhB/kRkh DZu1KVx7wd4Ng0P3eOWH0sXwIcTXVvQcXXjU3kNxh5fm8djiPp6t/ahV2cfS5VzS C1lbJkRNmDGUf988Een8oMkYkKXEWgCPEUr17W6zXiK/dmvPKY9LKwiXQdGdENID hrLAL1YZF3AX4ED3RRqB6OJtEpXYT3Uqhc5gE7VkLyC+IrbrWAkgKzh4SLgM4Q0Z OdBP5+fcRTdEhLfkog0yfYZGGGNKr/mbYBZTLkS8hXc33kF0HOA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:09 2026 by rpki-client