This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: mWCfmE9i7HbU+7t+QUxp+m3fbS+bOyw6SmeQZnC7y+Q= Subject key identifier: E7:E2:9E:B7:B9:E4:9F:F3:B8:B4:62:2B:FD:2D:0E:AE:FA:3C:A4:3C Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 065F7533B11F7B13C8915C868CE9CD47D78CBAA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 0141 Signing time: Mon 02 Feb 2026 02:32:53 +0000 Manifest this update: Mon 02 Feb 2026 02:27:53 +0000 Manifest next update: Thu 05 Feb 2026 09:30:53 +0000 Files and hashes: 1: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: Q7J+lXReq04oQmiQRNToM8BW/q0kwnO8GGywtfmLn68=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: sQjzMKfSbeLjhatpOUa2jqoPr0yDGU2BnKpmrQbbfNA=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: VwqZQ2hYIJIpswzvgku070aTaUCXAfj4FutWWR2nxCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5f:75:33:b1:1f:7b:13:c8:91:5c:86:8c:e9:cd:47:d7:8c:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Feb 2 02:27:53 2026 GMT Not After : Feb 5 09:30:53 2026 GMT Subject: CN=E7E29EB7B9E49FF3B8B4622BFD2D0EAEFA3CA43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:3e:4d:47:f6:3e:d1:05:96:13:64:ff:4e: 49:b5:8b:0e:ee:e7:5c:75:8e:69:8a:12:23:43:1f: da:09:23:05:56:d6:d5:18:30:95:03:5e:9a:9f:55: 77:5e:ac:b4:b1:81:10:be:66:18:ab:e1:83:cc:03: 81:b7:b0:b3:3a:de:11:63:89:87:48:83:1b:f8:ce: d1:ce:bb:89:61:67:d6:a6:a9:c6:b0:6e:f6:21:20: a2:e8:f3:29:94:9a:19:8f:00:0b:76:02:bc:58:87: 4d:f7:dc:06:eb:77:d1:4a:ec:72:cd:f9:88:cb:78: 99:c4:ec:2d:0c:b6:17:6c:47:ef:82:31:6c:16:b8: 89:3e:59:47:4a:35:60:9f:72:e7:1e:87:21:b2:da: 5e:d7:21:56:4e:d6:3b:77:61:26:e4:f8:48:9c:87: 8f:9d:64:58:4c:ff:4e:c7:2a:3f:61:26:24:44:c5: 66:f3:2b:61:d9:b9:32:fb:85:da:30:ad:bb:f2:81: 5b:e7:9c:a8:31:c1:a0:0b:61:9f:d5:cb:44:b7:0a: 29:52:f7:4d:b4:51:7a:25:ef:04:dd:9c:fa:d9:ae: 40:20:7e:71:e1:c3:01:eb:07:37:a5:b6:86:8f:49: 56:45:6c:7b:a1:62:3e:c4:88:1c:4c:d5:3e:4a:ca: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E2:9E:B7:B9:E4:9F:F3:B8:B4:62:2B:FD:2D:0E:AE:FA:3C:A4:3C X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:bd:76:09:ea:b8:f7:dd:75:dc:62:29:79:ce:67:e3:90:84: d9:58:35:51:d0:a5:3f:35:16:4a:d1:a0:d3:36:a1:e5:ab:25: fb:23:41:73:29:1a:f6:27:c0:71:40:77:59:73:53:41:91:ef: d7:2b:56:68:cd:14:f0:8d:ce:6c:b6:7e:c1:da:22:2b:93:2d: 58:ab:ce:85:49:6c:a2:68:9d:c6:01:5d:2c:c6:ba:b9:ac:3a: a8:79:6a:18:47:31:23:d1:60:42:c7:df:f3:47:f7:25:b9:63: 75:fd:5f:9e:e4:ad:c5:db:32:ad:8c:3d:12:8f:45:32:3d:14: f4:96:e4:7a:65:f5:0b:3f:a3:0f:1b:8f:97:41:c6:e0:af:af: 9e:ea:be:8f:89:b1:31:0f:71:3f:f2:8c:16:21:8e:99:d3:39: 47:2f:c1:32:c3:e9:e8:eb:9a:64:dc:99:6f:ed:44:94:71:7c: 69:d5:4b:95:bc:5c:a7:5a:e0:81:17:25:73:33:b3:f7:41:df: a6:13:74:8a:a6:b3:e6:e0:49:30:4d:48:39:54:86:c2:21:21: 65:94:8c:c7:b1:d8:97:ce:11:2e:2e:7d:ba:bf:9d:61:b2:d4: 6e:2c:ea:e7:ef:ac:4b:bd:e5:70:54:48:5b:b3:49:89:f1:a6: e0:bb:59:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBl91M7EfexPIkVyGjOnNR9eMuqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNjAyMDIwMjI3NTNaFw0yNjAyMDUwOTMwNTNaMDMxMTAvBgNV BAMTKEU3RTI5RUI3QjlFNDlGRjNCOEI0NjIyQkZEMkQwRUFFRkEzQ0E0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmz5NR/Y+0QWWE2T/Tkm1iw7u 51x1jmmKEiNDH9oJIwVW1tUYMJUDXpqfVXderLSxgRC+Zhir4YPMA4G3sLM63hFj iYdIgxv4ztHOu4lhZ9amqcawbvYhIKLo8ymUmhmPAAt2ArxYh0333Abrd9FK7HLN +YjLeJnE7C0MthdsR++CMWwWuIk+WUdKNWCfcucehyGy2l7XIVZO1jt3YSbk+Eic h4+dZFhM/07HKj9hJiRExWbzK2HZuTL7hdowrbvygVvnnKgxwaALYZ/Vy0S3CilS 9020UXol7wTdnPrZrkAgfnHhwwHrBzeltoaPSVZFbHuhYj7EiBxM1T5KyiTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+Ket7nkn/O4tGIr/S0Orvo8pDwwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi9dgnquPfdddxiKXnOZ+OQhNlYNVHQpT81 FkrRoNM2oeWrJfsjQXMpGvYnwHFAd1lzU0GR79crVmjNFPCNzmy2fsHaIiuTLVir zoVJbKJoncYBXSzGurmsOqh5ahhHMSPRYELH3/NH9yW5Y3X9X57krcXbMq2MPRKP RTI9FPSW5Hpl9Qs/ow8bj5dBxuCvr57qvo+JsTEPcT/yjBYhjpnTOUcvwTLD6ejr mmTcmW/tRJRxfGnVS5W8XKda4IEXJXMzs/dB36YTdIqms+bgSTBNSDlUhsIhIWWU jMex2JfOES4ufbq/nWGy1G4s6ufvrEu95XBUSFuzSYnxpuC7WYo= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:05 2026 by rpki-client