This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: HAl40Co13FAKpTrwm320erUQ21xXEjnTnsMyiMxne4I= Subject key identifier: 2F:AF:11:C8:EC:61:33:40:90:62:2C:19:EF:28:98:61:04:0A:9B:C2 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 56BDE07E8EC9A91AB33A55611709CA525A223EE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 019D Signing time: Sun 01 Feb 2026 09:40:51 +0000 Manifest this update: Sun 01 Feb 2026 09:35:51 +0000 Manifest next update: Wed 04 Feb 2026 14:58:51 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: j9MEH8qXdmT11l6VjsDCQO0FHzDI78N/Z48Z0r7wyfA=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bd:e0:7e:8e:c9:a9:1a:b3:3a:55:61:17:09:ca:52:5a:22:3e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Feb 1 09:35:51 2026 GMT Not After : Feb 4 14:58:51 2026 GMT Subject: CN=2FAF11C8EC61334090622C19EF289861040A9BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:a6:1f:15:7f:8b:d2:f3:4a:fa:d1:56:8a: ad:7f:c1:24:0e:28:cc:6c:aa:e7:d3:8b:40:a6:68: b7:cd:41:07:d1:01:c1:01:9d:ac:e2:a1:bf:d7:09: b6:f1:65:5c:1d:a9:3d:93:38:39:4a:07:bd:94:95: d1:39:66:6b:f9:06:bf:3b:53:3f:4c:4a:6d:10:37: 7f:f8:19:b7:f5:4b:dc:89:d9:ba:e1:f6:c3:a5:a5: d2:f2:07:25:2b:1c:6c:5f:a1:39:7d:05:25:fe:6e: 6c:e5:7a:53:de:77:87:f0:e4:7f:39:83:d7:4d:57: aa:d8:e2:bb:fe:2b:fa:86:f0:01:4a:67:06:dc:3b: 58:32:62:52:1c:12:bf:7d:79:1b:37:55:11:3e:d9: 95:ee:c9:e9:44:5e:70:09:46:f6:9e:c3:b3:dd:60: 5d:eb:0f:eb:5e:23:c9:1a:f3:a4:4a:62:71:d2:92: 93:94:4a:9a:77:c4:48:bc:b0:b7:27:32:9f:ef:e2: 00:53:5b:a3:a2:c4:17:b0:de:34:9b:86:b5:30:72: 4e:08:9e:49:4c:d0:c6:d4:a5:cf:0d:90:2d:cd:90: 59:33:08:74:e9:95:45:cc:a5:6e:0f:f5:bf:e3:cc: b4:61:7d:0f:72:6b:85:7c:63:3e:27:17:47:6a:ea: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:11:C8:EC:61:33:40:90:62:2C:19:EF:28:98:61:04:0A:9B:C2 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:df:1a:c2:9d:97:4b:7c:26:37:5e:2c:26:15:c6:f6:e7: eb:6b:50:be:d5:f0:32:85:e3:24:b7:c6:43:e0:ca:3d:cd:b2: 44:ef:b9:aa:ae:94:18:06:38:7d:45:af:40:c9:ca:d3:83:ef: 3e:f1:1f:8f:c8:95:d2:20:32:fc:3a:86:9f:3a:a1:88:ca:98: 77:f4:1b:cc:cf:d8:8b:7f:63:d1:ae:a7:6e:5f:52:64:b8:63: 27:87:ea:5e:a5:8b:20:61:6e:c1:fe:7f:5e:24:13:ed:84:09: 1c:29:53:d5:00:a4:ae:c8:f8:63:e8:03:f9:19:df:88:3f:79: 48:4d:fd:dd:9d:2c:f0:77:f6:7b:65:f9:cb:4b:7f:6b:64:eb: a9:09:61:cc:40:5a:4d:73:fe:e7:8e:aa:b6:8b:44:17:e8:1e: 8b:7b:d4:72:e5:4f:65:4f:d0:57:78:1b:73:ac:df:6d:1a:a9: 42:1f:2c:19:7c:e8:81:b1:39:d4:c1:f4:d3:19:b1:8a:01:11: 59:7f:6c:66:e2:cb:1d:e0:60:da:08:c7:a9:2e:76:c3:72:61: 5f:1b:a5:04:02:18:ed:ee:84:b4:10:85:5b:96:66:8e:c2:64: 5b:89:2a:ec:48:dd:3f:35:52:9f:b6:1c:23:a9:08:55:87:ce: 62:af:29:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVr3gfo7JqRqzOlVhFwnKUloiPuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNjAyMDEwOTM1NTFaFw0yNjAyMDQxNDU4NTFaMDMxMTAvBgNV BAMTKDJGQUYxMUM4RUM2MTMzNDA5MDYyMkMxOUVGMjg5ODYxMDQwQTlCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KKYfFX+L0vNK+tFWiq1/wSQO KMxsqufTi0CmaLfNQQfRAcEBnaziob/XCbbxZVwdqT2TODlKB72UldE5Zmv5Br87 Uz9MSm0QN3/4Gbf1S9yJ2brh9sOlpdLyByUrHGxfoTl9BSX+bmzlelPed4fw5H85 g9dNV6rY4rv+K/qG8AFKZwbcO1gyYlIcEr99eRs3VRE+2ZXuyelEXnAJRvaew7Pd YF3rD+teI8ka86RKYnHSkpOUSpp3xEi8sLcnMp/v4gBTW6OixBew3jSbhrUwck4I nklM0MbUpc8NkC3NkFkzCHTplUXMpW4P9b/jzLRhfQ9ya4V8Yz4nF0dq6u2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL68RyOxhM0CQYiwZ7yiYYQQKm8IwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGk3xrCnZdLfCY3XiwmFcb25+trUL7V8DKF 4yS3xkPgyj3NskTvuaqulBgGOH1Fr0DJytOD7z7xH4/IldIgMvw6hp86oYjKmHf0 G8zP2It/Y9Gup25fUmS4YyeH6l6liyBhbsH+f14kE+2ECRwpU9UApK7I+GPoA/kZ 34g/eUhN/d2dLPB39ntl+ctLf2tk66kJYcxAWk1z/ueOqraLRBfoHot71HLlT2VP 0Fd4G3Os320aqUIfLBl86IGxOdTB9NMZsYoBEVl/bGbiyx3gYNoIx6kudsNyYV8b pQQCGO3uhLQQhVuWZo7CZFuJKuxI3T81Up+2HCOpCFWHzmKvKSM= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:26 2026 by rpki-client