This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: IBpo1mIwoQf2NTh+z0Z/rKC824bqKy59ne9dZ9D1RGI= Subject key identifier: 73:61:33:32:AE:B6:26:81:13:2C:3B:C2:40:A3:CA:FC:D5:8A:1C:33 Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 4D77F566F8C9F6BD0D7C17D258967D7A472F4152 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 050E Signing time: Sun 01 Feb 2026 14:21:30 +0000 Manifest this update: Sun 01 Feb 2026 14:16:30 +0000 Manifest next update: Thu 05 Feb 2026 01:06:30 +0000 Files and hashes: 1: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: yfXflO78U5vdZaHGMSwShaAjYYtLyNFfYM4xtotF6RQ=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: z4oYCZWDew+XBZrkivYPBIEa8esU/2et9t2LDZPakkY=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 8uluz9oQUOC33A/yP5J6qEWwFa5BN6LUXooNJ8KA6Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 01:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:77:f5:66:f8:c9:f6:bd:0d:7c:17:d2:58:96:7d:7a:47:2f:41:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Feb 1 14:16:30 2026 GMT Not After : Feb 5 01:06:30 2026 GMT Subject: CN=73613332AEB62681132C3BC240A3CAFCD58A1C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:02:f6:dc:25:86:b2:91:6e:05:bb:3b:37: db:af:4d:da:5b:30:19:f7:f3:98:c9:d8:a5:78:7d: 2a:b5:ac:81:eb:b0:06:4c:16:72:14:3f:68:a4:fc: bb:cd:66:5c:a5:34:6b:0a:4f:84:09:ea:cc:1f:53: 9c:fb:c6:fb:83:91:cd:66:a2:96:7a:38:3d:49:1d: ad:e7:db:ea:ad:0e:0f:bc:92:f9:98:13:a8:ca:72: 89:de:ba:7d:18:f6:bd:51:67:31:37:01:11:31:98: 9c:e4:ca:24:05:aa:67:ef:63:5c:8a:32:85:28:cb: 48:da:9e:6a:2f:04:e5:35:bb:ff:2f:64:11:cf:38: 3b:6b:dc:26:60:e2:8c:a4:26:36:ca:9e:aa:d9:a2: 92:5d:b0:5e:7c:49:d8:79:51:df:7d:9f:49:c5:34: 16:12:a1:d4:b5:12:c8:49:6e:34:ba:8d:04:d5:d6: d7:54:18:2d:d6:a9:a2:b2:f1:36:46:f8:f4:b7:e0: 18:8c:28:d5:99:b8:dc:75:34:70:dd:cc:9f:de:6e: 91:45:24:98:f3:dd:fd:fd:8b:b2:4e:f9:8d:86:f7: c3:f0:d7:ed:64:9a:6e:07:74:11:02:a0:e3:2b:cd: b5:16:1b:9d:8f:76:a5:98:dc:c8:fc:10:72:5c:93: 6d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:33:32:AE:B6:26:81:13:2C:3B:C2:40:A3:CA:FC:D5:8A:1C:33 X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d2:cb:88:a9:1f:ee:bf:17:ee:3c:45:77:b7:6f:7f:8e:34: e6:f0:91:ba:0d:38:6c:ca:02:e0:26:54:c2:dd:77:bd:47:ec: 16:ac:d6:23:8a:08:cd:be:6c:f4:ce:d0:12:c7:84:2e:18:f8: b1:5a:11:e3:e8:f7:e0:8e:0a:6b:ec:8a:59:44:3c:96:26:29: ff:0c:57:60:5a:2a:b3:a2:87:aa:d7:96:8b:a6:80:07:ba:92: 0b:ee:42:53:16:9d:c6:b9:e5:80:7f:f3:51:b6:36:fb:57:f5: 66:e4:58:4f:aa:f0:cf:ea:58:7b:00:6d:ff:d6:72:31:e7:0f: 5a:2b:5d:eb:45:96:c5:2e:bf:1d:55:92:db:9b:b9:24:a1:3c: bd:87:ef:11:7a:36:5d:81:c7:04:40:fe:2c:8a:f5:8c:f9:1b: a3:ad:ec:cc:4d:4e:12:0d:4a:a2:33:94:25:84:93:a7:7a:be: d1:23:49:3f:c2:96:25:e4:e0:9a:80:1c:ad:ab:3d:ea:f3:0d: 3e:f0:0f:70:ca:43:52:19:f6:fd:18:06:d3:4b:8b:8b:b5:76: 09:a7:47:85:80:63:3f:08:c1:b1:6d:52:9d:c0:9a:eb:c2:2f: 24:6d:93:d9:8f:14:b6:81:9c:3b:67:22:9d:25:75:6b:08:bf: 8e:5a:33:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXf1ZvjJ9r0NfBfSWJZ9ekcvQVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNjAyMDExNDE2MzBaFw0yNjAyMDUwMTA2MzBaMDMxMTAvBgNV BAMTKDczNjEzMzMyQUVCNjI2ODExMzJDM0JDMjQwQTNDQUZDRDU4QTFDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbLQL23CWGspFuBbs7N9uvTdpb MBn385jJ2KV4fSq1rIHrsAZMFnIUP2ik/LvNZlylNGsKT4QJ6swfU5z7xvuDkc1m opZ6OD1JHa3n2+qtDg+8kvmYE6jKconeun0Y9r1RZzE3ARExmJzkyiQFqmfvY1yK MoUoy0janmovBOU1u/8vZBHPODtr3CZg4oykJjbKnqrZopJdsF58Sdh5Ud99n0nF NBYSodS1EshJbjS6jQTV1tdUGC3WqaKy8TZG+PS34BiMKNWZuNx1NHDdzJ/ebpFF JJjz3f39i7JO+Y2G98Pw1+1kmm4HdBECoOMrzbUWG52PdqWY3Mj8EHJck20nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc2EzMq62JoETLDvCQKPK/NWKHDMwHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/Sy4ipH+6/F+48RXe3b3+ONObwkboNOGzK AuAmVMLdd71H7Bas1iOKCM2+bPTO0BLHhC4Y+LFaEePo9+COCmvsillEPJYmKf8M V2BaKrOih6rXloumgAe6kgvuQlMWnca55YB/81G2NvtX9WbkWE+q8M/qWHsAbf/W cjHnD1orXetFlsUuvx1VktubuSShPL2H7xF6Nl2BxwRA/iyK9Yz5G6Ot7MxNThIN SqIzlCWEk6d6vtEjST/CliXk4JqAHK2rPerzDT7wD3DKQ1IZ9v0YBtNLi4u1dgmn R4WAYz8IwbFtUp3AmuvCLyRtk9mPFLaBnDtnIp0ldWsIv45aM0I= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:52 2026 by rpki-client