This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: /h/V7QhRpyOj86EStxNVWMPvr2KPMq7NiL3yp2amjZM= Subject key identifier: 4D:9E:AC:66:61:4B:59:CA:C8:A7:36:61:A6:86:E5:86:62:BB:3A:3D Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 1FC663F1BA3BAE5032B6DB1909479025C86EC597 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 011A Signing time: Mon 02 Feb 2026 02:51:05 +0000 Manifest this update: Mon 02 Feb 2026 02:46:05 +0000 Manifest next update: Thu 05 Feb 2026 06:19:05 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: AFNnBClzEEXlU/qk0lLfouXBeWSRfrGUKw9lfuWDjKU=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c6:63:f1:ba:3b:ae:50:32:b6:db:19:09:47:90:25:c8:6e:c5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Feb 2 02:46:05 2026 GMT Not After : Feb 5 06:19:05 2026 GMT Subject: CN=4D9EAC66614B59CAC8A73661A686E58662BB3A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:6c:6a:e8:8c:ca:a1:ad:fa:04:6a:73:14: 8b:ae:b4:6c:d5:61:7c:fe:97:ec:35:8b:47:00:34: d3:fd:13:ed:8e:49:5d:e4:2a:f2:cd:b0:62:55:a8: 29:23:5c:9e:2a:3b:63:e0:4c:d1:04:25:d6:28:06: 9a:95:32:92:8a:4d:74:3d:db:2a:84:e5:f4:db:ae: b4:cf:17:72:c2:24:ba:0c:56:45:09:c6:d6:07:8a: 12:2c:6a:3f:2b:4d:a1:2f:23:ac:42:e8:97:97:2d: da:c6:2e:3a:cf:7b:6e:1c:81:c8:89:41:8e:ce:ed: 04:43:bf:46:14:03:e0:55:53:0e:f2:19:3f:26:e1: 89:8a:d1:23:86:bc:f4:30:4a:c9:09:67:22:da:07: 31:84:46:f7:b1:65:8f:09:53:ca:9a:ad:59:8f:76: cd:e6:91:71:02:9c:bb:9e:6e:d6:3b:1a:81:9d:bc: a7:5f:71:9f:50:c6:21:9a:d3:67:44:d6:a9:b7:91: ec:23:11:0a:6a:d6:39:b0:cc:3f:67:b6:80:70:1d: ca:43:d6:2a:31:01:24:86:c0:57:d0:55:13:8d:8e: 7a:80:c8:28:0d:15:e7:ad:7d:82:b9:37:06:0d:05: 8b:ef:10:ff:59:13:d3:13:39:32:0f:c8:9b:e4:8e: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9E:AC:66:61:4B:59:CA:C8:A7:36:61:A6:86:E5:86:62:BB:3A:3D X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c5:e2:66:af:59:80:6c:7f:de:6c:c1:33:4f:9b:28:22:3d: 96:28:1f:06:c8:33:77:62:2a:95:29:ea:33:2e:45:d3:9a:6d: 65:bb:7e:cc:02:49:0a:27:2b:94:2f:3b:b5:75:e1:6a:82:14: bf:8a:f2:73:42:c8:2a:7d:59:29:6c:27:7e:c6:4f:b9:d1:e4: c8:9c:53:11:15:f5:dd:e6:ab:a2:e9:b9:37:7e:98:72:1c:91: 68:b6:bb:3d:6d:23:a8:e0:50:26:fe:68:6e:d0:6c:ec:bf:93: c0:28:ec:65:fc:fe:7b:ae:f9:38:1a:f3:74:37:54:75:84:cd: e0:6e:f9:83:79:ee:9a:69:4b:b1:13:2d:43:80:0b:78:79:23: f1:2d:51:a3:59:14:2e:75:3c:89:9f:79:80:5f:48:ce:23:d6: 25:5b:55:56:e3:7e:e1:cc:3d:81:d1:c9:b4:c3:f4:3d:24:d6: 5d:49:77:bc:8e:6f:85:de:b9:c2:36:07:b9:52:61:76:6e:aa: 45:ca:df:6b:e3:50:f2:ee:02:a2:a3:75:db:f5:e6:57:5c:90: f5:7e:7d:cb:de:fc:0c:22:a4:6a:4c:d9:4a:76:25:e1:43:66: 64:45:6a:42:2d:21:fb:33:71:ce:50:a5:2f:f6:e6:3d:c8:df: 30:a6:6d:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8Zj8bo7rlAyttsZCUeQJchuxZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNjAyMDIwMjQ2MDVaFw0yNjAyMDUwNjE5MDVaMDMxMTAvBgNV BAMTKDREOUVBQzY2NjE0QjU5Q0FDOEE3MzY2MUE2ODZFNTg2NjJCQjNBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaWxq6IzKoa36BGpzFIuutGzV YXz+l+w1i0cANNP9E+2OSV3kKvLNsGJVqCkjXJ4qO2PgTNEEJdYoBpqVMpKKTXQ9 2yqE5fTbrrTPF3LCJLoMVkUJxtYHihIsaj8rTaEvI6xC6JeXLdrGLjrPe24cgciJ QY7O7QRDv0YUA+BVUw7yGT8m4YmK0SOGvPQwSskJZyLaBzGERvexZY8JU8qarVmP ds3mkXECnLuebtY7GoGdvKdfcZ9QxiGa02dE1qm3kewjEQpq1jmwzD9ntoBwHcpD 1ioxASSGwFfQVRONjnqAyCgNFeetfYK5NwYNBYvvEP9ZE9MTOTIPyJvkjkvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTZ6sZmFLWcrIpzZhpoblhmK7Oj0wHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHF4mavWYBsf95swTNPmygiPZYoHwbIM3di KpUp6jMuRdOabWW7fswCSQonK5QvO7V14WqCFL+K8nNCyCp9WSlsJ37GT7nR5Mic UxEV9d3mq6LpuTd+mHIckWi2uz1tI6jgUCb+aG7QbOy/k8Ao7GX8/nuu+Tga83Q3 VHWEzeBu+YN57pppS7ETLUOAC3h5I/EtUaNZFC51PImfeYBfSM4j1iVbVVbjfuHM PYHRybTD9D0k1l1Jd7yOb4XeucI2B7lSYXZuqkXK32vjUPLuAqKjddv15ldckPV+ fcve/AwipGpM2Up2JeFDZmRFakItIfszcc5QpS/25j3I3zCmbSY= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:47 2026 by rpki-client