This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: kbzZqq0imeWlMrHKjR7yFsbcybepGs9EA1ydRBNTdps= Subject key identifier: F1:69:DF:A4:C9:F9:CE:A5:60:38:41:B4:26:96:E8:6D:F6:A0:5A:37 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 28B2868745063D67E279AB37A05F41DFEDF29E5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 0290 Signing time: Sun 01 Feb 2026 23:32:27 +0000 Manifest this update: Sun 01 Feb 2026 23:27:27 +0000 Manifest next update: Thu 05 Feb 2026 01:39:27 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: HofDLGmwqIsnj587taUbViIIFJnwZV6L29IBKkzVuIE=) 2: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: DuqvHGZs1uEPRqG1gwC1lhmoFI5mqJxGn5o4+DCDTTc=) 3: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 01:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b2:86:87:45:06:3d:67:e2:79:ab:37:a0:5f:41:df:ed:f2:9e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Feb 1 23:27:27 2026 GMT Not After : Feb 5 01:39:27 2026 GMT Subject: CN=F169DFA4C9F9CEA5603841B42696E86DF6A05A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:80:d7:5c:40:89:64:08:cb:5b:61:02:48: de:54:8d:0f:eb:0e:a7:d4:5c:23:11:52:fd:9a:32: 13:ef:d6:a4:7f:8b:a5:a0:fa:67:5e:ab:7a:7b:e9: 2c:a6:86:77:11:9d:4d:9d:8d:94:55:0a:78:43:4e: ac:cb:60:81:46:82:38:bf:31:e6:86:b8:30:a7:18: c3:ff:e7:37:18:c0:67:33:d6:b8:73:84:5a:61:f2: d6:71:50:db:a9:82:7c:23:5d:03:ae:e9:cd:10:d5: a9:85:fd:4f:21:6f:87:82:1c:ac:a1:e5:38:06:65: 4a:32:c9:7d:b4:c6:87:35:24:84:e4:37:f7:77:3a: f6:b9:47:ec:fc:97:76:d4:07:d4:3f:7d:41:67:85: 8a:54:90:2c:50:30:b8:9a:49:3f:74:cf:fd:2b:2e: d7:aa:4a:fe:15:fb:ba:38:7b:aa:ba:0d:51:db:a4: 01:52:ac:31:48:34:06:4e:45:19:36:54:f3:79:2c: 43:f0:09:18:6c:f9:7a:05:e4:be:c6:62:9f:6b:b9: ce:eb:65:8f:4f:57:91:3d:82:ff:a5:4c:3e:85:a3: c3:89:43:c7:3a:cd:ad:2b:80:97:49:e5:0c:a3:9f: c5:f2:60:d7:22:05:93:b3:4f:b5:cc:02:93:aa:9f: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:DF:A4:C9:F9:CE:A5:60:38:41:B4:26:96:E8:6D:F6:A0:5A:37 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ef:12:09:15:6e:0e:98:77:5a:03:e1:e0:41:e0:02:37:4f: 9f:1b:a2:f6:f6:79:10:69:8d:44:f8:2c:21:82:7d:79:11:43: 3b:03:26:7b:30:c3:b3:a9:1b:fe:e7:c8:2c:61:e5:7e:ca:a5: ed:d0:56:a4:76:a0:6e:1b:a4:87:c8:b9:91:cb:a9:11:8c:44: e6:57:36:b4:5a:d1:38:c4:c7:48:51:ca:22:4e:7b:e0:85:e7: 84:7e:5d:29:ea:48:f2:2d:ed:d6:06:5c:48:ab:a8:93:55:78: b7:01:b0:74:2d:4c:e2:ba:6a:e1:81:96:7b:13:6d:6f:23:9f: c6:b8:41:98:ca:85:61:f1:20:a3:d9:53:cd:18:e4:19:0f:7b: 26:9f:7f:3d:d4:87:73:ba:90:84:73:39:f7:83:94:4a:f7:0f: 78:0d:f0:cd:44:00:b6:57:da:51:39:40:bf:fc:46:59:ef:7d: 1c:51:d3:22:76:c6:89:fc:3d:3d:20:24:d0:ed:3a:83:41:65: 48:7c:99:d2:9a:de:22:20:2d:d9:ca:39:e4:6f:8f:90:6e:33: c5:97:4e:8d:68:eb:03:04:ca:a0:2a:0c:a2:0c:b2:a6:f8:5d: 5a:81:19:20:d1:af:70:cb:50:42:1b:c8:f1:ab:c8:ad:28:55: 7f:7c:37:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLKGh0UGPWfieas3oF9B3+3ynl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNjAyMDEyMzI3MjdaFw0yNjAyMDUwMTM5MjdaMDMxMTAvBgNV BAMTKEYxNjlERkE0QzlGOUNFQTU2MDM4NDFCNDI2OTZFODZERjZBMDVBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzM4DXXECJZAjLW2ECSN5UjQ/r DqfUXCMRUv2aMhPv1qR/i6Wg+mdeq3p76SymhncRnU2djZRVCnhDTqzLYIFGgji/ MeaGuDCnGMP/5zcYwGcz1rhzhFph8tZxUNupgnwjXQOu6c0Q1amF/U8hb4eCHKyh 5TgGZUoyyX20xoc1JITkN/d3Ova5R+z8l3bUB9Q/fUFnhYpUkCxQMLiaST90z/0r LteqSv4V+7o4e6q6DVHbpAFSrDFINAZORRk2VPN5LEPwCRhs+XoF5L7GYp9ruc7r ZY9PV5E9gv+lTD6Fo8OJQ8c6za0rgJdJ5Qyjn8XyYNciBZOzT7XMApOqnyt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WnfpMn5zqVgOEG0JpbobfagWjcwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzvEgkVbg6Yd1oD4eBB4AI3T58bovb2eRBp jUT4LCGCfXkRQzsDJnsww7OpG/7nyCxh5X7Kpe3QVqR2oG4bpIfIuZHLqRGMROZX NrRa0TjEx0hRyiJOe+CF54R+XSnqSPIt7dYGXEirqJNVeLcBsHQtTOK6auGBlnsT bW8jn8a4QZjKhWHxIKPZU80Y5BkPeyaffz3Uh3O6kIRzOfeDlEr3D3gN8M1EALZX 2lE5QL/8RlnvfRxR0yJ2xon8PT0gJNDtOoNBZUh8mdKa3iIgLdnKOeRvj5BuM8WX To1o6wMEyqAqDKIMsqb4XVqBGSDRr3DLUEIbyPGryK0oVX98NyI= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:07 2026 by rpki-client