This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: L6owHLwm+hEix1y6ulURfOZ1H/VSGZfLCw8mG+9rzfg= Subject key identifier: C2:24:B1:60:6F:74:6B:43:9F:9B:15:21:15:2A:03:A5:42:41:AD:CD Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 13387766ED50B01D2CFE32758ED601614F5578D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01D1 Signing time: Mon 02 Feb 2026 08:02:16 +0000 Manifest this update: Mon 02 Feb 2026 07:57:16 +0000 Manifest next update: Thu 05 Feb 2026 12:01:16 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: m+R5xIRDWhK54GmNZEtf0q3yof3HfH/igDQgqrY1CrU=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: yZ/MChZHB5tDzBnd1w3tnaq3ghVO7uYw0Z7Ua0KxMJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:38:77:66:ed:50:b0:1d:2c:fe:32:75:8e:d6:01:61:4f:55:78:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Feb 2 07:57:16 2026 GMT Not After : Feb 5 12:01:16 2026 GMT Subject: CN=C224B1606F746B439F9B1521152A03A54241ADCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:7a:dd:2e:b2:96:75:e8:6d:fd:16:63:64: 14:fe:29:f3:34:11:ac:c3:e6:8b:4b:b7:8c:fa:2f: e8:94:83:14:78:8e:3a:88:0c:84:62:fd:3f:2a:d6: 5b:bc:87:7c:70:bd:7a:45:d8:f8:0e:7e:8e:0e:35: 29:2f:6b:9a:f1:77:61:33:a6:30:a1:01:81:9a:b6: 36:82:bd:c6:10:92:ff:bf:d4:7e:a7:e2:d8:d4:6c: c5:c2:69:1f:5a:dc:ce:12:d5:03:5c:d5:2d:29:9c: 5b:3f:68:b0:1f:7c:4e:bc:77:07:ba:21:2d:04:34: 9a:48:d1:1d:92:7b:92:6a:5f:b9:24:ef:82:24:45: 4e:3c:cc:49:45:21:0d:db:9c:b1:73:98:b1:67:95: 29:b8:64:90:58:65:cb:ac:cf:4f:71:ac:67:2b:58: 97:05:9d:74:e8:c1:c6:43:cb:b2:a2:99:44:9c:5e: 4b:cb:5a:13:3c:01:b0:eb:0a:17:65:ce:60:f8:b0: 17:90:68:6b:e6:5b:16:be:2c:fe:2c:46:d3:6c:d0: 09:64:eb:52:81:bb:35:c9:12:f5:d6:c9:26:08:7c: e6:1b:07:57:3f:b1:fb:5b:ca:61:85:64:bd:82:08: a7:bf:a9:88:ca:50:74:29:9d:fc:74:5f:9d:68:3a: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:24:B1:60:6F:74:6B:43:9F:9B:15:21:15:2A:03:A5:42:41:AD:CD X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:27:cc:43:f0:81:03:32:6c:d6:05:44:84:d7:e2:e1:49:96: 7b:92:98:db:a0:8b:fb:79:a0:22:1d:cb:4b:e9:70:bf:55:7b: 68:75:76:a8:98:80:df:1e:48:6c:1c:a7:98:84:a9:06:83:63: dc:61:5a:c3:2e:74:60:4a:05:2f:1d:a0:d2:ba:42:b1:e7:2a: 92:e4:c1:72:75:6b:03:01:bd:cf:5b:45:b2:8d:0b:31:db:24: ab:76:2d:21:60:58:5c:45:96:20:19:f1:0d:7d:df:a3:3f:bd: 8e:b1:a3:67:a7:a6:be:65:55:75:b2:05:9c:93:2a:80:08:d8: cf:0e:c5:61:53:06:2e:21:e0:50:70:d4:ca:e0:e5:47:5e:95: 39:b2:64:93:a4:a4:f7:42:2a:b6:26:e4:ed:09:e0:88:9a:e9: 43:94:07:09:9e:9a:ea:cc:61:bd:2e:97:12:6e:e0:4a:5f:2e: b2:34:bf:22:be:b0:a7:c6:f8:12:3e:96:1b:9b:e3:3a:33:17: f4:d8:e6:fb:96:d1:0b:3d:43:80:af:cf:16:83:55:9d:0d:3a: db:36:92:20:8d:fc:94:e6:1d:0f:94:37:15:ff:bd:8f:1c:b1: 31:74:a9:65:be:d9:ae:e8:90:1f:a0:b0:15:c2:8b:c0:f5:b1: 4f:4b:4c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzh3Zu1QsB0s/jJ1jtYBYU9VeNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNjAyMDIwNzU3MTZaFw0yNjAyMDUxMjAxMTZaMDMxMTAvBgNV BAMTKEMyMjRCMTYwNkY3NDZCNDM5RjlCMTUyMTE1MkEwM0E1NDI0MUFEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9nrdLrKWdeht/RZjZBT+KfM0 EazD5otLt4z6L+iUgxR4jjqIDIRi/T8q1lu8h3xwvXpF2PgOfo4ONSkva5rxd2Ez pjChAYGatjaCvcYQkv+/1H6n4tjUbMXCaR9a3M4S1QNc1S0pnFs/aLAffE68dwe6 IS0ENJpI0R2Se5JqX7kk74IkRU48zElFIQ3bnLFzmLFnlSm4ZJBYZcusz09xrGcr WJcFnXTowcZDy7KimUScXkvLWhM8AbDrChdlzmD4sBeQaGvmWxa+LP4sRtNs0Alk 61KBuzXJEvXWySYIfOYbB1c/sftbymGFZL2CCKe/qYjKUHQpnfx0X51oOtxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwiSxYG90a0OfmxUhFSoDpUJBrc0wHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYnzEPwgQMybNYFRITX4uFJlnuSmNugi/t5 oCIdy0vpcL9Ve2h1dqiYgN8eSGwcp5iEqQaDY9xhWsMudGBKBS8doNK6QrHnKpLk wXJ1awMBvc9bRbKNCzHbJKt2LSFgWFxFliAZ8Q1936M/vY6xo2enpr5lVXWyBZyT KoAI2M8OxWFTBi4h4FBw1Mrg5UdelTmyZJOkpPdCKrYm5O0J4Iia6UOUBwmemurM Yb0ulxJu4EpfLrI0vyK+sKfG+BI+lhub4zozF/TY5vuW0Qs9Q4CvzxaDVZ0NOts2 kiCN/JTmHQ+UNxX/vY8csTF0qWW+2a7okB+gsBXCi8D1sU9LTJY= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:47 2026 by rpki-client