This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: Bp0DNCV/BaWfu7dmPWVBwbUULINVJvXSiR0mEoZjLlg= Subject key identifier: AD:99:85:E3:CF:60:19:53:D2:83:A8:4D:78:0F:95:E2:72:47:A4:92 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 43C87412A0EF6D638E7BF4BA1A5A4FE6EBDD6CF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0297 Signing time: Sun 01 Feb 2026 17:01:20 +0000 Manifest this update: Sun 01 Feb 2026 16:56:20 +0000 Manifest next update: Wed 04 Feb 2026 20:01:20 +0000 Files and hashes: 1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) 2: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: nY7xzaw58r6dueCAvArW/7s2mL3RZMRQGZqdsi11Ums=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c8:74:12:a0:ef:6d:63:8e:7b:f4:ba:1a:5a:4f:e6:eb:dd:6c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Feb 1 16:56:20 2026 GMT Not After : Feb 4 20:01:20 2026 GMT Subject: CN=AD9985E3CF601953D283A84D780F95E27247A492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:64:11:e9:48:8b:ae:d5:cb:0b:db:27:2f: 94:a0:6a:90:af:a1:40:2a:4f:9a:ab:c9:0a:4b:0e: 26:16:ed:4c:98:74:5f:27:f8:21:45:ae:71:80:df: e9:2b:37:82:6a:82:7f:8e:4b:ae:80:79:5c:d4:8c: 2d:88:93:30:08:7c:e7:e4:c3:6f:25:5f:87:8e:ba: 41:bc:cb:c1:e7:6e:2f:84:ab:10:33:12:c0:44:27: c1:30:e4:78:aa:e0:86:86:79:77:ee:80:e8:70:f8: 2c:db:2e:83:54:ed:6c:a6:1c:31:55:db:64:0c:45: ec:d0:ee:08:ce:49:e9:c5:15:9c:57:df:ef:30:ec: 43:f4:2d:c1:1b:5b:57:07:56:49:67:70:18:0d:a2: 5a:df:5a:4e:63:01:00:4c:f9:c3:ab:04:63:80:36: 37:c4:70:78:a7:52:73:33:7f:86:0c:b3:3b:47:2a: da:80:9c:71:b3:77:96:b9:ae:26:30:a8:88:60:07: b9:b7:af:55:2d:9b:c9:53:c2:9b:8e:77:5f:24:5c: f2:d8:fe:79:c2:fd:dd:29:7f:7f:1d:1b:ca:c3:3a: f2:9d:9d:7c:6c:d9:77:3d:ea:f3:eb:b0:c5:71:04: 54:6c:c3:bb:d1:eb:54:e9:fe:be:fd:11:3a:b8:68: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:99:85:E3:CF:60:19:53:D2:83:A8:4D:78:0F:95:E2:72:47:A4:92 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:ef:ed:93:1f:b8:53:e1:d8:f2:b6:68:1f:36:12:e8:e4: 3e:08:74:aa:80:81:a3:2f:3a:dd:16:57:33:72:ae:cc:cd:9c: 83:6c:b0:da:c3:a7:94:8d:30:04:96:91:dd:e7:d3:25:c4:dd: 16:7d:f4:0e:56:c4:f7:b1:9d:1b:9e:2f:da:5e:0a:44:92:2a: 07:03:15:61:82:65:e1:3d:b9:ea:39:cf:ea:fe:0c:98:8c:c7: 2a:f6:62:73:c4:b1:cb:c3:ed:80:9a:c1:01:ae:74:ee:c1:1c: 86:1a:e7:e2:e9:41:39:97:9f:9b:4a:bf:f7:78:d2:ae:be:d0: 23:a9:2d:d5:b3:b9:28:aa:a6:1c:4f:53:0a:d3:9b:1e:ee:5f: 68:84:fa:c9:fc:22:65:11:67:4a:3c:5c:94:81:f3:53:13:6c: 69:6e:d1:aa:4c:3b:40:ad:bb:ec:f2:37:7c:0f:ba:47:e7:f9: af:9a:07:51:cc:72:54:fe:2d:3c:16:bb:27:0b:ce:b3:66:8b: ff:4f:37:4f:f4:a2:9e:66:c3:be:ef:8d:a8:ff:75:c3:0e:c3: af:0e:9a:38:0c:ae:58:01:2a:6e:a6:e0:1b:04:f5:66:05:01: 36:a2:c3:7f:ed:e4:7e:ee:55:98:e4:df:90:0d:e9:bb:b3:17: da:fd:ae:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8h0EqDvbWOOe/S6GlpP5uvdbPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNjAyMDExNjU2MjBaFw0yNjAyMDQyMDAxMjBaMDMxMTAvBgNV BAMTKEFEOTk4NUUzQ0Y2MDE5NTNEMjgzQTg0RDc4MEY5NUUyNzI0N0E0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslWQR6UiLrtXLC9snL5SgapCv oUAqT5qryQpLDiYW7UyYdF8n+CFFrnGA3+krN4Jqgn+OS66AeVzUjC2IkzAIfOfk w28lX4eOukG8y8Hnbi+EqxAzEsBEJ8Ew5Hiq4IaGeXfugOhw+CzbLoNU7WymHDFV 22QMRezQ7gjOSenFFZxX3+8w7EP0LcEbW1cHVklncBgNolrfWk5jAQBM+cOrBGOA NjfEcHinUnMzf4YMsztHKtqAnHGzd5a5riYwqIhgB7m3r1Utm8lTwpuOd18kXPLY /nnC/d0pf38dG8rDOvKdnXxs2Xc96vPrsMVxBFRsw7vR61Tp/r79ETq4aO8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZmF489gGVPSg6hNeA+V4nJHpJIwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6+7+2TH7hT4djytmgfNhLo5D4IdKqAgaMv Ot0WVzNyrszNnINssNrDp5SNMASWkd3n0yXE3RZ99A5WxPexnRueL9peCkSSKgcD FWGCZeE9ueo5z+r+DJiMxyr2YnPEscvD7YCawQGudO7BHIYa5+LpQTmXn5tKv/d4 0q6+0COpLdWzuSiqphxPUwrTmx7uX2iE+sn8ImURZ0o8XJSB81MTbGlu0apMO0Ct u+zyN3wPukfn+a+aB1HMclT+LTwWuycLzrNmi/9PN0/0op5mw77vjaj/dcMOw68O mjgMrlgBKm6m4BsE9WYFATaiw3/t5H7uVZjk35AN6buzF9r9rhc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:39 2026 by rpki-client