This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: OJBHWTU8+HMpcOYuwy0zZpVlUIeB8jSqd0cy89w5WLo= Subject key identifier: 98:D9:46:F1:D2:DD:26:5B:BF:C3:54:BC:15:03:1C:F4:95:6D:B9:BC Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 1A353AE50FFD32E7E15ED56F32425CEBE0D8B379 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0269 Signing time: Sat 31 Jan 2026 23:51:32 +0000 Manifest this update: Sat 31 Jan 2026 23:46:32 +0000 Manifest next update: Wed 04 Feb 2026 03:21:32 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: wdg18zJQmcMX1jP6b67v/A0N+8jFBnFGoxqu8Vs9QZM=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: e866bgD8+WV+E66L19k4qbdrOD68wAEFfxlCAZGgSi4=) 3: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: lk20qMQrVucj6A01KA/N1d2+EsU88S+0sWXvjOiDy2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:35:3a:e5:0f:fd:32:e7:e1:5e:d5:6f:32:42:5c:eb:e0:d8:b3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Jan 31 23:46:32 2026 GMT Not After : Feb 4 03:21:32 2026 GMT Subject: CN=98D946F1D2DD265BBFC354BC15031CF4956DB9BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:9f:fb:de:44:4f:75:2c:55:1a:8e:f6:c7: 3d:9a:78:cd:4a:fe:85:f4:09:61:86:eb:24:40:66: 52:b7:fd:3b:7b:c5:1b:80:b2:10:6b:54:fa:89:ea: 29:29:c7:ec:24:f3:83:ad:9e:0a:77:e3:bd:4b:aa: 67:de:f4:68:91:1c:33:0f:3a:66:d9:76:14:88:b1: d5:6b:71:f4:75:5c:8e:b8:5d:2d:e1:2a:0a:6b:71: 0a:17:7d:28:3e:05:16:a3:95:a7:16:26:50:f4:78: 79:96:cd:2b:2c:a7:9f:2b:c2:8f:d3:ad:98:41:42: 34:e5:7b:c5:c1:56:4e:76:c9:48:4b:f7:d9:26:b7: 0c:60:f7:83:ba:6c:e8:1b:81:b6:bc:aa:82:06:90: de:0d:f7:08:39:9a:f3:4a:f6:8b:25:c3:0d:0a:73: 7a:a2:7f:89:25:3f:48:86:69:d8:be:a7:6c:52:41: f7:2f:0b:56:12:9c:39:55:e9:d9:7d:52:5d:c1:2a: 40:31:dd:cd:06:b1:12:45:6a:b6:70:0d:13:a5:40: 8c:3c:44:1d:ad:45:17:bb:fd:c1:bd:14:ed:9d:15: 8d:24:c2:8d:ce:a3:88:95:13:dd:95:e7:69:0c:50: cf:66:2c:83:a7:97:da:9a:68:48:27:28:ef:cf:4e: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D9:46:F1:D2:DD:26:5B:BF:C3:54:BC:15:03:1C:F4:95:6D:B9:BC X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1d:16:43:ae:00:05:83:57:76:d0:c9:5f:68:0b:16:a2:ba: ab:a8:fe:ea:0f:c2:1a:e2:c6:fb:cd:1e:ff:6a:1e:23:45:21: 6f:45:6b:db:fa:f8:ef:14:db:44:be:bc:f1:59:fc:a1:ab:cc: 24:36:74:7d:dc:1a:87:24:6e:6d:18:99:56:52:63:37:ae:e3: ce:66:44:96:44:96:ef:80:ee:2d:36:36:a1:5d:5b:84:5b:6d: e4:34:a5:c9:0b:b8:e4:fd:ca:d6:85:7b:89:ce:42:68:b8:f4: 30:5c:f7:57:e1:0f:67:1a:43:bd:16:11:e8:2c:36:36:40:49: 15:45:cd:93:ea:21:87:bb:fc:a9:bd:29:4e:5b:29:b6:1f:b8: 3e:63:7f:33:4b:6d:5d:5e:fc:5f:c4:e3:e5:32:42:1a:a9:de: d7:95:69:7a:54:f5:25:6a:83:6e:85:81:26:6b:1c:ad:c9:02: 7d:c6:fd:36:fc:f2:b1:13:f6:a9:03:e9:7c:ac:d0:ab:db:31: c7:22:61:ba:81:eb:cb:62:18:7c:87:b4:49:df:3f:fe:ec:b9: 0b:f0:2c:f1:04:76:62:16:99:25:f0:25:4d:04:d0:9d:df:ad: 35:a5:28:0b:0e:ab:ff:63:cf:5b:1d:e2:41:7d:7b:c3:14:61: de:1e:5c:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjU65Q/9MufhXtVvMkJc6+DYs3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNjAxMzEyMzQ2MzJaFw0yNjAyMDQwMzIxMzJaMDMxMTAvBgNV BAMTKDk4RDk0NkYxRDJERDI2NUJCRkMzNTRCQzE1MDMxQ0Y0OTU2REI5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuZ/73kRPdSxVGo72xz2aeM1K /oX0CWGG6yRAZlK3/Tt7xRuAshBrVPqJ6ikpx+wk84Otngp3471Lqmfe9GiRHDMP OmbZdhSIsdVrcfR1XI64XS3hKgprcQoXfSg+BRajlacWJlD0eHmWzSssp58rwo/T rZhBQjTle8XBVk52yUhL99kmtwxg94O6bOgbgba8qoIGkN4N9wg5mvNK9oslww0K c3qif4klP0iGadi+p2xSQfcvC1YSnDlV6dl9Ul3BKkAx3c0GsRJFarZwDROlQIw8 RB2tRRe7/cG9FO2dFY0kwo3Oo4iVE92V52kMUM9mLIOnl9qaaEgnKO/PTk63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNlG8dLdJlu/w1S8FQMc9JVtubwwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkdFkOuAAWDV3bQyV9oCxaiuquo/uoPwhri xvvNHv9qHiNFIW9Fa9v6+O8U20S+vPFZ/KGrzCQ2dH3cGockbm0YmVZSYzeu485m RJZElu+A7i02NqFdW4RbbeQ0pckLuOT9ytaFe4nOQmi49DBc91fhD2caQ70WEegs NjZASRVFzZPqIYe7/Km9KU5bKbYfuD5jfzNLbV1e/F/E4+UyQhqp3teVaXpU9SVq g26FgSZrHK3JAn3G/Tb88rET9qkD6Xys0KvbMcciYbqB68tiGHyHtEnfP/7suQvw LPEEdmIWmSXwJU0E0J3frTWlKAsOq/9jz1sd4kF9e8MUYd4eXJQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:20 2026 by rpki-client