This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: 4dcoS3haq0zInRkPzWu2yG59jN7hfJUYe3gQUFrVWgE= Subject key identifier: C3:96:8F:C7:ED:2F:43:FE:A2:C4:CA:E2:BF:C1:A7:01:D9:A0:90:C1 Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 24497AAFC72A504ED932C8DDFB10CF79B02AE396 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 01ED Signing time: Sat 31 Jan 2026 21:12:35 +0000 Manifest this update: Sat 31 Jan 2026 21:07:35 +0000 Manifest next update: Wed 04 Feb 2026 08:48:35 +0000 Files and hashes: 1: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: Sh/uW9aUlYmns674VC/3EQDEJjmYQNSXDMXSfx+QzvU=) 2: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: ISunJUZQ+jD6TVwznIAx6q1r9Nu7SIkgdyYyZesKLoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:49:7a:af:c7:2a:50:4e:d9:32:c8:dd:fb:10:cf:79:b0:2a:e3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Jan 31 21:07:35 2026 GMT Not After : Feb 4 08:48:35 2026 GMT Subject: CN=C3968FC7ED2F43FEA2C4CAE2BFC1A701D9A090C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:8c:4d:29:bb:88:0f:96:2b:4e:35:6f:23: ed:74:bc:33:b1:4e:f8:df:4e:64:42:e2:87:2e:eb: b4:55:d5:aa:ff:86:45:8a:58:bc:cf:94:62:05:13: d9:b8:41:17:5e:a6:d6:83:64:76:19:a5:70:c5:9b: e2:55:41:c5:dd:35:20:20:3e:20:47:7d:77:33:e8: d7:9d:d3:f3:e5:a3:4e:4a:cc:0b:06:87:97:45:cc: 44:2b:2a:a2:79:28:97:9b:fb:c8:f1:e9:d6:f5:26: 7d:98:5d:96:07:fd:92:a5:37:b0:54:db:ab:90:2d: fa:e7:f9:5c:73:6d:eb:cb:37:cb:1f:4a:b0:4e:34: 97:c3:c7:95:37:13:a4:c2:a9:2f:dc:3b:fa:40:41: 31:94:4b:6a:dc:e4:dc:8f:e8:e2:b9:4d:64:8e:35: 38:9c:17:12:81:18:b5:5e:c2:1e:95:d6:21:c4:d9: c2:26:42:89:69:f9:7d:0e:38:b5:09:91:6c:f6:cd: be:c7:30:ba:60:86:fe:5a:ec:6a:0a:b7:b0:ac:34: 55:7a:4e:92:b7:2b:30:1a:c0:4a:60:75:c4:4e:39: 8d:4d:59:1f:11:10:c2:85:96:d5:9b:5b:2d:dd:61: 12:6b:c2:42:de:80:5f:d3:48:48:93:97:d9:10:a5: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:8F:C7:ED:2F:43:FE:A2:C4:CA:E2:BF:C1:A7:01:D9:A0:90:C1 X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:58:d7:cb:d3:ca:c7:b0:8b:a4:9e:11:b9:ea:1a:c2:dd:a2: 6c:3f:2f:d5:54:34:b7:1e:06:8f:2f:e3:4b:88:77:4b:3a:fb: 2f:b4:35:c7:bf:de:85:2e:b7:d0:2b:53:e8:47:73:66:24:bb: 94:05:69:59:02:10:da:2e:8c:9f:4f:26:0d:b2:df:7d:7e:45: 99:a0:a4:e8:c8:d1:cb:25:08:fd:4d:62:88:b4:01:57:20:ad: 61:9a:09:f9:ec:6a:78:f5:6a:d2:70:2f:22:5f:0b:26:ca:93: bc:b8:f6:b1:9b:ba:d9:12:bb:4e:9c:13:c0:1e:0b:ec:30:fe: b5:e5:9f:e5:a7:93:72:c4:e7:4f:a0:a8:ad:7e:12:6a:d8:79: f1:06:1b:72:09:c1:13:f7:c0:db:e0:10:6c:c2:92:a6:84:5b: 22:04:ff:17:67:99:a8:b4:d0:dd:f5:9d:f5:6f:9a:21:c7:29: 76:64:36:45:29:e2:9a:5d:8c:b8:8a:83:81:fb:6f:8c:f3:e0: 7c:c0:41:e5:4a:9b:5c:a7:8f:ae:0c:0c:cb:cd:38:1e:c7:cf: 50:e2:ca:dd:7f:9b:fc:1f:26:21:43:88:b1:ad:7f:dc:a9:95: 08:ae:7f:41:a5:e9:1d:54:09:3d:83:42:fc:4a:b6:93:62:f3: 80:75:0e:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEl6r8cqUE7ZMsjd+xDPebAq45YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNjAxMzEyMTA3MzVaFw0yNjAyMDQwODQ4MzVaMDMxMTAvBgNV BAMTKEMzOTY4RkM3RUQyRjQzRkVBMkM0Q0FFMkJGQzFBNzAxRDlBMDkwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicoxNKbuID5YrTjVvI+10vDOx TvjfTmRC4ocu67RV1ar/hkWKWLzPlGIFE9m4QRdeptaDZHYZpXDFm+JVQcXdNSAg PiBHfXcz6Ned0/Plo05KzAsGh5dFzEQrKqJ5KJeb+8jx6db1Jn2YXZYH/ZKlN7BU 26uQLfrn+VxzbevLN8sfSrBONJfDx5U3E6TCqS/cO/pAQTGUS2rc5NyP6OK5TWSO NTicFxKBGLVewh6V1iHE2cImQolp+X0OOLUJkWz2zb7HMLpghv5a7GoKt7CsNFV6 TpK3KzAawEpgdcROOY1NWR8REMKFltWbWy3dYRJrwkLegF/TSEiTl9kQpS4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5aPx+0vQ/6ixMriv8GnAdmgkMEwHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpY18vTysewi6SeEbnqGsLdomw/L9VUNLce Bo8v40uId0s6+y+0Nce/3oUut9ArU+hHc2Yku5QFaVkCENoujJ9PJg2y331+RZmg pOjI0cslCP1NYoi0AVcgrWGaCfnsanj1atJwLyJfCybKk7y49rGbutkSu06cE8Ae C+ww/rXln+Wnk3LE50+gqK1+EmrYefEGG3IJwRP3wNvgEGzCkqaEWyIE/xdnmai0 0N31nfVvmiHHKXZkNkUp4ppdjLiKg4H7b4zz4HzAQeVKm1ynj64MDMvNOB7Hz1Di yt1/m/wfJiFDiLGtf9yplQiuf0Gl6R1UCT2DQvxKtpNi84B1Dgo= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:42 2026 by rpki-client