This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: hHSeGtBmsx3humN6xJG3BS8ZTxJOm6VdlMnMx69Z9I0= Subject key identifier: F4:54:70:AC:E9:C4:9E:37:00:F9:7D:30:72:84:32:35:5E:A8:06:CB Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 5BB91E9CFFF9226518BB7475AE2D9A094248482C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0485 Signing time: Sun 01 Feb 2026 20:51:59 +0000 Manifest this update: Sun 01 Feb 2026 20:46:59 +0000 Manifest next update: Thu 05 Feb 2026 02:34:59 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: O4CpY/CW1FHOPOJeQJ/zVG2khOn+hBjEcPJ1v+WZIms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b9:1e:9c:ff:f9:22:65:18:bb:74:75:ae:2d:9a:09:42:48:48:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Feb 1 20:46:59 2026 GMT Not After : Feb 5 02:34:59 2026 GMT Subject: CN=F45470ACE9C49E3700F97D30728432355EA806CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fd:a2:aa:8a:5c:b9:2b:ac:f2:a5:90:ec:bf: 77:c7:cd:c7:50:c8:eb:1e:d5:b1:e9:73:0b:73:84: 4f:78:9c:5a:0b:73:b0:bc:9f:ea:4c:3e:7d:d0:4a: bf:f0:58:ec:bb:08:a5:36:d9:d3:2b:8a:0d:c0:8a: 19:21:b6:f8:25:11:5e:3d:c8:e6:9f:80:b6:5f:e3: 7d:b0:fa:e9:97:80:c5:eb:1a:a7:17:94:df:10:68: 4e:60:28:d7:3f:87:a3:3c:6e:32:fb:a3:2c:79:e7: 30:ac:e1:47:8b:64:54:3d:0d:2f:47:4e:62:a2:09: 88:7e:18:3b:99:9a:0d:f2:fb:ea:18:e3:f2:68:96: 11:28:cc:6c:0e:dd:12:4b:15:3f:31:81:a4:c8:02: 9f:1d:80:a1:0b:95:ea:62:13:42:d1:3d:ac:f7:e6: fe:9e:c0:e2:5b:8f:72:8c:36:01:47:b4:3a:58:49: 61:4e:4b:87:fb:1c:b7:b1:29:bd:25:7f:85:6c:9e: 8f:eb:8a:47:28:14:fe:32:45:f2:d2:d8:51:7c:c2: b0:e7:f2:8c:64:00:f5:73:b7:f7:18:4e:ca:50:04: ac:ae:56:f4:6a:40:dd:57:26:ea:f1:c0:3b:0e:10: 80:1e:89:2f:80:1e:18:82:2a:a3:2b:fa:2a:a5:9e: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:54:70:AC:E9:C4:9E:37:00:F9:7D:30:72:84:32:35:5E:A8:06:CB X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:53:52:18:ad:4a:15:94:c1:fa:b7:f0:e9:3b:6d:13:e6:79: 40:d7:94:cf:79:2d:1c:64:10:ee:e6:dc:ec:6b:b8:fd:b2:db: 28:50:1c:e1:69:00:0c:55:23:f6:fc:0a:33:b1:a5:2b:0f:ad: 5d:6b:59:5e:c7:a4:62:ae:2b:1c:44:4b:49:3d:31:f3:6a:15: b9:4e:00:75:e4:b6:e2:98:ba:37:e7:39:76:73:36:be:05:97: ff:c2:1b:b3:9e:c3:39:56:82:45:2b:33:bc:00:85:b4:77:5d: 85:18:6c:47:7f:d9:09:4b:30:ec:de:9b:43:42:fd:4c:5b:84: 53:a4:7b:57:30:79:7c:10:38:1c:e4:89:a9:fd:76:40:bb:98: 05:5a:ca:ce:c6:ff:66:89:10:79:74:f8:5c:e7:27:45:2d:ed: e3:69:d5:82:a9:82:a6:47:47:0d:b2:d6:d7:94:ba:39:50:a3: 1c:39:85:86:5f:b3:56:eb:96:27:eb:4a:d4:d2:4d:0e:01:2f: af:c0:70:e6:8e:57:de:23:d8:7b:72:73:fb:da:c3:c6:91:19: bd:21:3c:f0:91:62:d2:af:a1:62:53:04:47:bb:e9:e5:89:db: 6b:9c:c9:cd:9c:79:ed:a8:9e:af:fd:b5:e6:0b:d9:75:23:13: 7f:07:3a:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7kenP/5ImUYu3R1ri2aCUJISCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNjAyMDEyMDQ2NTlaFw0yNjAyMDUwMjM0NTlaMDMxMTAvBgNV BAMTKEY0NTQ3MEFDRTlDNDlFMzcwMEY5N0QzMDcyODQzMjM1NUVBODA2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1/aKqily5K6zypZDsv3fHzcdQ yOse1bHpcwtzhE94nFoLc7C8n+pMPn3QSr/wWOy7CKU22dMrig3AihkhtvglEV49 yOafgLZf432w+umXgMXrGqcXlN8QaE5gKNc/h6M8bjL7oyx55zCs4UeLZFQ9DS9H TmKiCYh+GDuZmg3y++oY4/JolhEozGwO3RJLFT8xgaTIAp8dgKELlepiE0LRPaz3 5v6ewOJbj3KMNgFHtDpYSWFOS4f7HLexKb0lf4Vsno/rikcoFP4yRfLS2FF8wrDn 8oxkAPVzt/cYTspQBKyuVvRqQN1XJurxwDsOEIAeiS+AHhiCKqMr+iqlnihnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9FRwrOnEnjcA+X0wcoQyNV6oBsswHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxTUhitShWUwfq38Ok7bRPmeUDXlM95LRxk EO7m3OxruP2y2yhQHOFpAAxVI/b8CjOxpSsPrV1rWV7HpGKuKxxES0k9MfNqFblO AHXktuKYujfnOXZzNr4Fl//CG7OewzlWgkUrM7wAhbR3XYUYbEd/2QlLMOzem0NC /UxbhFOke1cweXwQOBzkian9dkC7mAVays7G/2aJEHl0+FznJ0Ut7eNp1YKpgqZH Rw2y1teUujlQoxw5hYZfs1brlifrStTSTQ4BL6/AcOaOV94j2Htyc/vaw8aRGb0h PPCRYtKvoWJTBEe76eWJ22ucyc2cee2onq/9teYL2XUjE38HOj4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:23 2026 by rpki-client