This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: kAV99ULfjBZ8MBKLQYlSAGGugdIH4yRTbgVQ8EZl6gw= Subject key identifier: 1D:26:4E:E3:43:50:97:98:37:9F:A9:E3:52:66:DF:78:F7:D5:A2:5C Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 1A958E0DC3C4CFFF771F72A5422B581C3662E4E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 0163 Signing time: Sun 01 Feb 2026 09:01:32 +0000 Manifest this update: Sun 01 Feb 2026 08:56:32 +0000 Manifest next update: Wed 04 Feb 2026 10:40:32 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: 5p6wjGyXDMhYJEnC8e2hHCinkGJrBkWoW7KvueEj5dQ=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: Y1BreLVa1ZjV8+fm+79oJJhjLUjz8il238UQwEnA8vE=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: OvVOe5WGsOrBnNv79Zx+2ifTOqEKy0DNMGZ2XIxE0f8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:95:8e:0d:c3:c4:cf:ff:77:1f:72:a5:42:2b:58:1c:36:62:e4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Feb 1 08:56:32 2026 GMT Not After : Feb 4 10:40:32 2026 GMT Subject: CN=1D264EE343509798379FA9E35266DF78F7D5A25C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:5a:81:7e:20:01:cc:4d:62:ec:76:cc:39: 6b:c8:85:bf:79:2c:db:72:b4:d0:e9:6d:79:a4:3c: 4c:7c:b0:91:51:a8:a5:9e:b4:df:16:27:27:68:e7: 20:09:98:16:57:ff:e7:53:2e:8f:cc:3d:94:8c:fe: 73:e0:63:a7:f3:99:4f:f2:e2:ed:47:63:0d:42:c9: c4:ae:cc:90:29:24:ea:c4:13:65:c1:41:72:00:a1: fb:61:d8:b1:0c:70:ef:84:62:4d:72:bc:4f:74:92: 10:a0:14:fa:2c:b2:17:c5:d8:2d:8a:55:17:1b:1a: 2d:a5:57:18:fe:68:86:18:aa:05:65:73:5f:59:13: c5:6a:c3:84:90:38:35:82:42:8c:7a:9b:19:57:35: 5c:3d:a9:86:48:3f:19:80:a7:0d:ad:6b:dc:7b:3d: cd:6f:4e:e9:64:4c:3c:e1:9a:96:9b:b6:ab:57:72: ff:3b:ae:55:ee:d7:81:73:4c:3d:ed:8a:c0:61:9d: 28:03:4b:48:e9:48:48:c5:12:d8:3f:6a:aa:f7:e7: 78:22:2e:5f:e2:e4:92:86:fc:05:f9:3b:61:52:11: 31:8b:bf:d2:9e:fd:2c:14:e2:fa:19:82:37:39:db: b5:4f:c6:41:0c:da:94:47:c1:97:4d:af:c4:7e:24: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:26:4E:E3:43:50:97:98:37:9F:A9:E3:52:66:DF:78:F7:D5:A2:5C X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1e:99:7c:30:86:a1:c2:e9:91:98:14:81:77:23:1a:c0:d8: 9f:3e:3e:a5:d3:53:0b:bd:52:fa:4e:e2:b6:c2:dc:57:5a:53: ef:eb:92:19:17:62:1a:84:42:e7:4a:99:b3:a8:32:42:5a:e2: 5b:54:36:6f:17:19:de:4b:8e:c2:c2:97:e7:71:54:af:8a:95: 06:e5:c9:86:d4:49:e8:4f:fc:d6:0c:06:b1:73:c6:15:5a:55: e2:56:00:6b:98:c3:ea:37:d2:cf:80:7e:13:15:ef:40:23:86: b7:51:7b:9f:8b:42:88:db:a9:89:61:2e:17:c5:38:87:10:15: 3c:be:bb:63:9d:c3:97:19:69:8f:10:99:13:8e:31:90:0b:09: 39:19:dd:e0:65:c4:87:0d:a7:8a:d1:f6:86:cc:dc:89:e1:e9: a8:b5:db:12:23:13:09:f0:1f:d4:39:34:9c:f6:6a:f6:91:a3: de:9d:a6:1e:1b:d3:68:5c:29:8a:4d:b7:0b:f5:3f:f4:e7:b1: 6e:c0:c5:c5:78:18:22:89:06:76:9e:4f:4a:3c:ea:ea:13:8a: 98:05:16:66:3f:0a:62:96:78:55:a9:a0:d4:ac:4e:0c:3e:a2: 4b:ad:c6:db:43:a3:cb:be:b4:1f:cb:9b:d1:a1:8b:50:d1:3c: 44:3d:77:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpWODcPEz/93H3KlQitYHDZi5OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNjAyMDEwODU2MzJaFw0yNjAyMDQxMDQwMzJaMDMxMTAvBgNV BAMTKDFEMjY0RUUzNDM1MDk3OTgzNzlGQTlFMzUyNjZERjc4RjdENUEyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1lqBfiABzE1i7HbMOWvIhb95 LNtytNDpbXmkPEx8sJFRqKWetN8WJydo5yAJmBZX/+dTLo/MPZSM/nPgY6fzmU/y 4u1HYw1CycSuzJApJOrEE2XBQXIAofth2LEMcO+EYk1yvE90khCgFPosshfF2C2K VRcbGi2lVxj+aIYYqgVlc19ZE8Vqw4SQODWCQox6mxlXNVw9qYZIPxmApw2ta9x7 Pc1vTulkTDzhmpabtqtXcv87rlXu14FzTD3tisBhnSgDS0jpSEjFEtg/aqr353gi Ll/i5JKG/AX5O2FSETGLv9Ke/SwU4voZgjc527VPxkEM2pRHwZdNr8R+JCT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHSZO40NQl5g3n6njUmbfePfVolwwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEemXwwhqHC6ZGYFIF3IxrA2J8+PqXTUwu9 UvpO4rbC3FdaU+/rkhkXYhqEQudKmbOoMkJa4ltUNm8XGd5LjsLCl+dxVK+KlQbl yYbUSehP/NYMBrFzxhVaVeJWAGuYw+o30s+AfhMV70AjhrdRe5+LQojbqYlhLhfF OIcQFTy+u2Odw5cZaY8QmROOMZALCTkZ3eBlxIcNp4rR9obM3Inh6ai12xIjEwnw H9Q5NJz2avaRo96dph4b02hcKYpNtwv1P/TnsW7AxcV4GCKJBnaeT0o86uoTipgF FmY/CmKWeFWpoNSsTgw+okutxttDo8u+tB/Lm9Ghi1DRPEQ9d0o= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:52 2026 by rpki-client