This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft File: 21AC220B77A77D0516BC73B4C29C8363DD00911B.mft (raw, json) Hash identifier: 0Vkoj2Nr0K3M/9oUX9Ob67Q4RBQ+uL5r48Yxd+LP4zM= Subject key identifier: C0:CC:87:17:F7:B6:4C:44:3C:44:7B:A9:F0:65:7A:A0:7B:2E:44:77 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 6F2DF08C81FA46D8C636F275A7AF2FD06D9AF8E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft Manifest number: 0504 Signing time: Sun 01 Feb 2026 15:51:04 +0000 Manifest this update: Sun 01 Feb 2026 15:46:04 +0000 Manifest next update: Wed 04 Feb 2026 17:45:04 +0000 Files and hashes: 1: 21AC220B77A77D0516BC73B4C29C8363DD00911B.crl (hash: ETTl08AMetiQgegq45MWZqhwLYo+fgV8ePyNdLEmYYQ=) 2: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: IywsBHZCpESzPvpzBYMa3aM5xr+uzQrgr/hs4zyGEfk=) 3: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: J7Eqzk0rLCECjOwGjEdw1vCeBneDceSExg8FEmGDsVA=) 4: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: p7znIjGrzIeqiJgSyw1Go9JzIhUPDTiZx2kzEBcMX+M=) 5: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: FqumLAE5ExkmaatbD11ff744L2iTMEhUHWhZUQWOtLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 17:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2d:f0:8c:81:fa:46:d8:c6:36:f2:75:a7:af:2f:d0:6d:9a:f8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Feb 1 15:46:04 2026 GMT Not After : Feb 4 17:45:04 2026 GMT Subject: CN=C0CC8717F7B64C443C447BA9F0657AA07B2E4477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:16:43:d7:cb:69:83:6c:06:0b:9d:a5:1c: a0:d8:3f:42:e3:4f:db:cc:59:54:c4:8e:bc:80:72: 12:00:74:68:d9:cb:d7:ad:14:31:dc:2b:f7:f8:ca: dd:e5:0f:dc:15:3d:1c:83:12:39:9b:ee:a7:6f:42: fa:fd:eb:0f:fb:2c:0a:f9:a3:0a:a7:90:7d:4e:f5: 31:0a:8d:ae:af:eb:4e:67:ef:9b:70:12:40:6a:75: 2d:e4:88:de:9f:9c:e6:79:4c:b7:07:af:e3:a7:71: 88:de:a3:a0:1a:72:f9:41:39:e9:05:e4:33:06:c1: 91:7a:be:bd:b3:79:c9:66:26:cd:42:14:a7:b6:84: c0:fd:b2:5b:da:d5:eb:b0:a5:dc:ef:8e:94:a9:ae: 69:9a:c4:d1:71:de:38:ab:53:a9:53:15:c2:51:11: f8:f4:46:57:24:da:58:cb:0f:55:80:2f:4e:af:63: 98:14:de:3b:37:50:ca:d6:2b:db:50:30:f2:5c:4c: ba:1e:f7:ee:36:ae:3e:ba:b7:54:ad:d5:d8:b2:3f: 4a:9f:3d:e3:c2:83:b8:0b:3b:1f:85:25:3b:b8:af: 95:da:ce:ee:c9:91:4a:6b:b1:da:1e:77:33:86:dd: 8c:0c:11:3f:3b:95:09:27:2e:a3:06:a5:c9:09:5c: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CC:87:17:F7:B6:4C:44:3C:44:7B:A9:F0:65:7A:A0:7B:2E:44:77 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1a:48:f5:fd:46:a4:95:89:ba:24:06:0c:cb:ee:f9:9e:50: ab:42:ca:d3:b4:eb:04:e3:a1:2e:bc:9c:b9:f2:cd:e9:8f:31: 54:1d:47:8d:9c:c0:13:07:4b:f5:29:52:00:ba:ed:8a:08:61: ae:d3:cb:f1:a1:61:bc:ef:23:42:9e:2e:af:dd:4e:36:5f:43: 62:8d:2b:15:ac:dd:74:46:2b:e2:dd:9a:f5:3b:b1:70:8b:5a: 1e:ba:ba:58:07:75:38:3a:3b:30:35:a8:b7:d9:db:85:74:f6: de:8b:60:48:83:44:80:c3:4f:07:8a:97:8e:e3:af:22:14:30: da:6b:f5:f3:34:22:99:0e:05:0f:48:22:45:fc:29:9d:f9:74: 3c:34:82:e4:21:0f:db:fd:f4:50:52:30:28:f1:bc:0f:19:18: 13:ad:36:59:d9:59:19:7b:03:a2:6b:89:1d:c4:40:86:48:cc: 1a:87:5a:92:d9:26:da:7f:f6:4a:c2:ec:ec:20:08:b0:2d:25: df:a4:99:97:92:5c:7e:b9:57:ef:ae:a9:9b:fe:2c:34:e7:30: 51:cc:f7:49:7a:b9:bf:d8:66:f5:19:66:c4:9f:17:d5:75:dc: 80:0b:6b:ad:30:9d:4d:93:c1:15:37:24:b0:26:8a:76:ed:09: d6:26:b3:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUby3wjIH6RtjGNvJ1p68v0G2a+OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNjAyMDExNTQ2MDRaFw0yNjAyMDQxNzQ1MDRaMDMxMTAvBgNV BAMTKEMwQ0M4NzE3RjdCNjRDNDQzQzQ0N0JBOUYwNjU3QUEwN0IyRTQ0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTShZD18tpg2wGC52lHKDYP0Lj T9vMWVTEjryAchIAdGjZy9etFDHcK/f4yt3lD9wVPRyDEjmb7qdvQvr96w/7LAr5 owqnkH1O9TEKja6v605n75twEkBqdS3kiN6fnOZ5TLcHr+OncYjeo6AacvlBOekF 5DMGwZF6vr2zeclmJs1CFKe2hMD9slva1euwpdzvjpSprmmaxNFx3jirU6lTFcJR Efj0Rlck2ljLD1WAL06vY5gU3js3UMrWK9tQMPJcTLoe9+42rj66t1St1diyP0qf PePCg7gLOx+FJTu4r5Xazu7JkUprsdoedzOG3YwMET87lQknLqMGpckJXAQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMyHF/e2TEQ8RHup8GV6oHsuRHcwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5Qzgz NjNERDAwOTExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYaSPX9RqSVibokBgzL7vmeUKtCytO06wTj oS68nLnyzemPMVQdR42cwBMHS/UpUgC67YoIYa7Ty/GhYbzvI0KeLq/dTjZfQ2KN KxWs3XRGK+LdmvU7sXCLWh66ulgHdTg6OzA1qLfZ24V09t6LYEiDRIDDTweKl47j ryIUMNpr9fM0IpkOBQ9IIkX8KZ35dDw0guQhD9v99FBSMCjxvA8ZGBOtNlnZWRl7 A6JriR3EQIZIzBqHWpLZJtp/9krC7OwgCLAtJd+kmZeSXH65V++uqZv+LDTnMFHM 90l6ub/YZvUZZsSfF9V13IALa60wnU2TwRU3JLAminbtCdYmsws= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:11 2026 by rpki-client