This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: 1ZuvQVZfOaHN/6FYTzjwiLM3OMX6JelYzv2HT+6Zv7w= Subject key identifier: 99:71:4C:CD:A5:AE:07:F1:06:29:E6:DE:FD:5E:E1:92:B0:C3:83:CA Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 258F21D62274F38B36057F90459A47440892D160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: E4 Signing time: Sat 31 Jan 2026 17:50:01 +0000 Manifest this update: Sat 31 Jan 2026 17:45:01 +0000 Manifest next update: Tue 03 Feb 2026 22:49:01 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: DOhEk71zyH3RgBm2SADmpYVd0trPcXA04mfk7ZnAlGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8f:21:d6:22:74:f3:8b:36:05:7f:90:45:9a:47:44:08:92:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Jan 31 17:45:01 2026 GMT Not After : Feb 3 22:49:01 2026 GMT Subject: CN=99714CCDA5AE07F10629E6DEFD5EE192B0C383CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:41:21:a9:e0:4b:ca:20:d4:68:83:04:f1: 28:5b:e6:46:3e:e5:ed:46:b5:6d:e6:4d:da:46:cf: 6b:6a:23:fc:77:ff:ad:76:5b:f3:a3:a3:2e:64:b4: e7:41:ef:c7:74:c1:51:35:ab:bd:64:76:55:3e:2e: 1e:8a:06:7c:bd:40:8a:7b:47:e1:8e:dc:60:96:30: e9:aa:5b:ca:34:32:ac:b3:20:8f:f8:8a:c4:e8:9b: d2:9b:37:0a:e6:77:aa:b5:e2:83:f0:ee:ac:c8:f7: 55:1e:c4:82:77:bb:c0:9b:c1:05:c3:9f:8a:58:83: d6:42:f2:42:ba:6f:6e:01:fb:f6:27:d5:fd:28:cc: 14:c7:2e:0d:80:dd:5d:06:be:f7:73:e5:3b:8f:98: 0c:c9:f9:a2:76:8e:ee:31:82:d8:5e:89:56:80:9d: 54:58:57:ee:ac:1e:fd:24:c4:30:ec:46:fd:05:0c: de:14:c0:93:72:f4:a7:85:f5:84:8d:f4:1b:9c:6e: db:f3:f4:a7:8c:6a:80:21:fc:03:fd:f1:34:ce:67: 70:12:47:78:fe:71:91:ac:5c:21:9f:19:fa:3d:1b: f3:2b:6c:8f:b6:3e:1d:2d:f3:ce:16:25:bc:93:08: 01:ee:e8:0b:59:24:dd:b2:b8:af:33:80:b0:26:dc: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:71:4C:CD:A5:AE:07:F1:06:29:E6:DE:FD:5E:E1:92:B0:C3:83:CA X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:69:1d:ad:45:f5:8e:2f:be:30:4e:ec:3f:a5:b0:38:0d:bf: ee:68:e3:50:b3:31:14:30:b3:77:92:c0:28:d4:f8:26:fb:90: 6d:fe:87:e1:47:a8:37:c9:ad:01:04:b4:a4:7a:6d:be:e5:80: 0f:9c:d6:25:4a:3e:ae:7a:6a:9f:a4:fe:d8:2b:4b:c3:a4:07: d3:76:93:d2:e8:53:3a:b5:15:6e:b1:75:b9:3d:7a:63:28:d5: de:cc:a7:28:3d:71:e1:86:c0:ac:16:35:df:db:fa:67:39:62: b4:26:42:70:d1:74:ff:db:69:4d:75:40:3e:36:9d:a8:fd:9f: a4:ad:bb:8c:34:3f:32:a5:6e:b3:30:57:c4:67:7d:3e:82:57: 66:e6:6c:cb:5d:ac:6b:83:09:91:ff:86:f8:1d:56:3d:b8:1b: df:36:8b:2b:0a:00:76:7c:2f:16:f8:39:55:18:90:50:d6:82: 81:84:ff:2b:52:b8:52:c9:fd:38:7f:0a:a7:85:be:4b:17:9f: 82:a6:85:ad:31:d0:df:ca:ba:98:74:df:4b:06:98:b2:c5:97: 03:b5:65:04:52:7b:e6:c1:52:71:c8:9a:56:d2:16:b7:46:34: 53:b6:e6:b1:9f:a0:b9:2e:97:b3:c3:59:c6:d5:70:19:47:bd: 0a:d5:e5:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJY8h1iJ084s2BX+QRZpHRAiS0WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNjAxMzExNzQ1MDFaFw0yNjAyMDMyMjQ5MDFaMDMxMTAvBgNV BAMTKDk5NzE0Q0NEQTVBRTA3RjEwNjI5RTZERUZENUVFMTkyQjBDMzgzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh8UEhqeBLyiDUaIME8Shb5kY+ 5e1GtW3mTdpGz2tqI/x3/612W/Ojoy5ktOdB78d0wVE1q71kdlU+Lh6KBny9QIp7 R+GO3GCWMOmqW8o0MqyzII/4isTom9KbNwrmd6q14oPw7qzI91UexIJ3u8CbwQXD n4pYg9ZC8kK6b24B+/Yn1f0ozBTHLg2A3V0Gvvdz5TuPmAzJ+aJ2ju4xgtheiVaA nVRYV+6sHv0kxDDsRv0FDN4UwJNy9KeF9YSN9Bucbtvz9KeMaoAh/AP98TTOZ3AS R3j+cZGsXCGfGfo9G/MrbI+2Ph0t884WJbyTCAHu6AtZJN2yuK8zgLAm3CxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXFMzaWuB/EGKebe/V7hkrDDg8owHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRpHa1F9Y4vvjBO7D+lsDgNv+5o41CzMRQw s3eSwCjU+Cb7kG3+h+FHqDfJrQEEtKR6bb7lgA+c1iVKPq56ap+k/tgrS8OkB9N2 k9LoUzq1FW6xdbk9emMo1d7Mpyg9ceGGwKwWNd/b+mc5YrQmQnDRdP/baU11QD42 naj9n6Stu4w0PzKlbrMwV8RnfT6CV2bmbMtdrGuDCZH/hvgdVj24G982iysKAHZ8 Lxb4OVUYkFDWgoGE/ytSuFLJ/Th/CqeFvksXn4Kmha0x0N/Kuph030sGmLLFlwO1 ZQRSe+bBUnHImlbSFrdGNFO25rGfoLkul7PDWcbVcBlHvQrV5RU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:46:27 2026 by rpki-client