This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: aBidBRMehScMbCC1kDFiGsat6WEFtmU5pJIGZiBrFag= Subject key identifier: 6E:42:C2:07:F3:D4:51:B2:37:DE:7A:D4:B8:06:A0:D3:F5:BC:CD:3F Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 1235A1532141467FF64ACEF7331EFF9566DAF7B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: CF Signing time: Sun 01 Feb 2026 09:31:31 +0000 Manifest this update: Sun 01 Feb 2026 09:26:31 +0000 Manifest next update: Wed 04 Feb 2026 16:18:31 +0000 Files and hashes: 1: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 2: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 3: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 4: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: WWfIkXiFb+zl5ptNDo4UsWX+G2z7yCiuVLbXJbubXVc=) 5: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) 6: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 7: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 8: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 16:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:35:a1:53:21:41:46:7f:f6:4a:ce:f7:33:1e:ff:95:66:da:f7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Feb 1 09:26:31 2026 GMT Not After : Feb 4 16:18:31 2026 GMT Subject: CN=6E42C207F3D451B237DE7AD4B806A0D3F5BCCD3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:77:97:bd:fc:b2:17:bd:b0:82:2a:cf:cb: 10:19:ba:1c:c3:8f:fd:5b:3c:f6:e6:9f:c5:dd:47: 88:7a:86:6d:3a:ab:7d:60:7d:38:c1:c1:38:12:2f: b1:93:91:16:9f:f5:37:5c:ed:a7:da:a2:32:36:ae: 82:16:33:e1:73:88:44:a9:6a:0a:a3:25:f3:11:79: 74:89:73:02:9f:40:f3:90:9e:b0:bc:7e:b6:62:6f: 9d:42:0d:21:fe:d5:3d:c1:23:59:45:9f:25:38:f8: 0a:41:d0:42:5a:d6:83:1b:40:0b:3a:cb:4b:0a:4b: dd:74:e5:3d:6f:72:78:7a:96:67:57:70:81:e5:23: 16:bf:ce:7c:52:34:9a:d1:62:6e:75:82:5b:7c:31: a2:cd:00:58:b1:7e:ce:46:af:b3:98:14:4c:72:87: 4e:b5:0d:cf:a8:8e:d1:3f:70:8e:8a:68:ea:61:86: 9b:ef:20:e1:83:a5:11:ab:be:95:c0:f9:58:6f:b3: d8:94:29:ec:5b:4f:07:9a:df:d3:74:38:c2:e0:ab: e0:cd:b6:ad:c9:1c:2d:4c:d2:eb:aa:a2:8e:a4:40: 55:b5:b8:fb:ff:a0:22:8d:81:16:29:2e:b6:44:87: a6:a7:c7:1e:d9:12:0e:61:1f:bc:17:a8:d5:9d:31: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:42:C2:07:F3:D4:51:B2:37:DE:7A:D4:B8:06:A0:D3:F5:BC:CD:3F X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:27:ad:d0:ef:dc:16:a2:c6:4b:49:19:9c:8d:31:80:23: 5f:4b:82:8b:3c:3d:5f:0b:8f:9d:99:4a:41:8f:e7:96:69:2b: 16:e7:7a:7d:ec:12:77:2e:34:68:77:2f:19:4f:f3:ca:ab:65: e1:c9:29:ec:3d:5e:e7:a7:16:2d:be:85:3f:ca:bc:d3:ac:1c: 85:aa:36:3b:47:90:23:2d:74:4e:14:d5:fa:09:f9:40:fd:94: 2e:07:6f:05:88:12:0f:06:52:9f:ac:be:b4:7e:51:06:73:e8: 90:a9:4c:a0:11:b4:8f:e3:f8:3f:39:72:4d:c3:cb:ab:29:37: 64:51:e7:70:92:f3:48:5b:cd:0e:a3:8b:27:f9:69:0d:58:b9: 4b:93:7f:5c:a8:eb:3e:d7:82:ea:cc:65:d5:ce:de:5b:a0:6d: 11:a7:17:ae:02:8c:45:f0:47:c3:78:3a:b3:75:15:22:2b:db: d9:f3:3b:75:06:0f:8b:0a:71:1a:d4:f9:2e:34:a8:2a:6b:48: 16:8a:a7:bc:a7:58:bd:91:0c:a7:4b:7b:30:0b:93:fc:33:da: f4:f0:ad:12:40:88:ac:ee:67:c6:0f:b8:ba:47:56:cb:cb:f4: cf:9b:a4:f5:0c:66:a4:85:28:4d:9b:70:dc:05:c9:2e:04:a8: d6:62:9f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjWhUyFBRn/2Ss73Mx7/lWba97EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNjAyMDEwOTI2MzFaFw0yNjAyMDQxNjE4MzFaMDMxMTAvBgNV BAMTKDZFNDJDMjA3RjNENDUxQjIzN0RFN0FENEI4MDZBMEQzRjVCQ0NEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2neXvfyyF72wgirPyxAZuhzD j/1bPPbmn8XdR4h6hm06q31gfTjBwTgSL7GTkRaf9Tdc7afaojI2roIWM+FziESp agqjJfMReXSJcwKfQPOQnrC8frZib51CDSH+1T3BI1lFnyU4+ApB0EJa1oMbQAs6 y0sKS9105T1vcnh6lmdXcIHlIxa/znxSNJrRYm51glt8MaLNAFixfs5Gr7OYFExy h061Dc+ojtE/cI6KaOphhpvvIOGDpRGrvpXA+Vhvs9iUKexbTwea39N0OMLgq+DN tq3JHC1M0uuqoo6kQFW1uPv/oCKNgRYpLrZEh6anxx7ZEg5hH7wXqNWdMcGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbkLCB/PUUbI33nrUuAag0/W8zT8wHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCuJ63Q79wWosZLSRmcjTGAI19Lgos8PV8L j52ZSkGP55ZpKxbnen3sEncuNGh3LxlP88qrZeHJKew9XuenFi2+hT/KvNOsHIWq NjtHkCMtdE4U1foJ+UD9lC4HbwWIEg8GUp+svrR+UQZz6JCpTKARtI/j+D85ck3D y6spN2RR53CS80hbzQ6jiyf5aQ1YuUuTf1yo6z7XgurMZdXO3lugbRGnF64CjEXw R8N4OrN1FSIr29nzO3UGD4sKcRrU+S40qCprSBaKp7ynWL2RDKdLezALk/wz2vTw rRJAiKzuZ8YPuLpHVsvL9M+bpPUMZqSFKE2bcNwFyS4EqNZinx4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:39 2026 by rpki-client