This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: PJu2KxRfxfoLZCC2hDs8Ou4S+gEBmLVni4ybjY//Kyo= Subject key identifier: 90:94:81:D2:0C:75:23:A0:71:A7:5A:1F:C4:2A:6C:3A:70:F9:61:8F Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 7849A8BC69220BAAA920AF7A36902BEC6CBC6AA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 054A Signing time: Sun 01 Feb 2026 19:11:59 +0000 Manifest this update: Sun 01 Feb 2026 19:06:59 +0000 Manifest next update: Wed 04 Feb 2026 22:53:59 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: Rc/1Q5eSqAi4w8reEpPVjUtUZKZ5MBT0DoM+0vF2uz8=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:49:a8:bc:69:22:0b:aa:a9:20:af:7a:36:90:2b:ec:6c:bc:6a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Feb 1 19:06:59 2026 GMT Not After : Feb 4 22:53:59 2026 GMT Subject: CN=909481D20C7523A071A75A1FC42A6C3A70F9618F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:72:bb:4d:70:64:69:75:6b:49:3c:55:e0: 02:04:2d:10:b0:d5:5a:c6:33:e9:f4:b2:bb:2c:56: 6f:93:e4:b0:1e:81:8a:dc:b2:30:6d:59:32:1c:fb: 03:0f:cb:bd:22:89:ba:20:3f:5a:a6:7b:f1:e4:a5: ce:a2:0b:84:9b:14:6e:ae:71:53:4e:23:84:66:fa: 9c:65:d2:e6:e8:4a:8d:f3:2c:97:1e:d2:1e:70:86: 8a:98:eb:a8:fb:af:97:d7:56:22:12:c1:71:75:8b: cb:af:88:e6:31:9e:c3:85:cf:f9:72:d2:be:d5:3b: b0:35:ce:34:0c:9c:d8:17:a2:4d:c4:26:44:d4:ee: 5c:e2:cd:da:1d:de:f2:1f:5d:4c:6b:8c:4c:0f:00: ee:33:b1:24:eb:cb:48:da:ad:1f:ba:32:cd:e9:43: 9d:b2:2b:8d:ea:c0:fe:00:9f:59:f4:ac:29:d1:b2: 49:bc:ff:9c:e1:02:db:29:e2:34:06:65:7c:d6:3f: 1b:06:27:01:d0:2f:39:f1:16:77:92:25:53:df:98: 41:69:cd:47:93:9b:e5:db:ad:00:cb:18:0e:9b:b9: 92:f0:c7:c5:13:58:4d:66:86:76:bc:76:5d:87:d5: 9a:f5:55:49:88:88:f9:bf:da:d1:5c:6f:a3:88:81: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:94:81:D2:0C:75:23:A0:71:A7:5A:1F:C4:2A:6C:3A:70:F9:61:8F X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:87:5e:8c:fe:57:6b:91:85:0a:06:9d:c5:58:9b:0e:a4:34: 89:02:ca:f2:8e:19:14:a6:43:65:f2:0f:69:49:b5:86:ce:3a: 41:7c:a6:d3:8c:a8:47:c6:0f:e1:eb:64:72:58:46:59:db:30: 9d:f3:92:be:35:e7:fb:ae:14:ea:2f:72:d9:0e:2d:68:c4:ec: 87:e8:41:23:d7:1f:52:b1:a9:6d:02:b8:f5:a5:6b:fd:ef:11: f5:01:c8:cf:b7:57:0a:e3:4c:6f:40:ff:0b:cc:18:15:a4:f4: a5:29:1e:25:44:37:e7:b1:9b:6a:b7:92:3c:18:9e:0d:c2:67: 56:46:2f:c6:fa:a4:30:92:9a:2f:4b:11:6b:96:ed:3a:58:d1: 80:d0:62:26:70:6d:a3:2d:9a:4d:d6:ab:a9:60:c9:ea:f9:84: 81:21:d6:b8:c1:d6:42:a6:cb:59:03:06:9e:8f:fc:70:d0:30: 10:f6:52:d1:3e:ba:d0:ac:d8:6c:31:f4:a6:b4:9a:9d:91:73: ff:0c:88:72:f9:f0:7e:ff:a2:35:ba:06:06:2d:71:4b:71:27: aa:7c:e1:22:8e:0e:ff:af:f7:50:31:b9:a4:a6:94:73:24:78: eb:81:9e:ca:29:e4:f1:5d:ba:01:0d:2f:ee:43:27:48:7d:0f: a4:54:b0:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEmovGkiC6qpIK96NpAr7Gy8aqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNjAyMDExOTA2NTlaFw0yNjAyMDQyMjUzNTlaMDMxMTAvBgNV BAMTKDkwOTQ4MUQyMEM3NTIzQTA3MUE3NUExRkM0MkE2QzNBNzBGOTYxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3w3K7TXBkaXVrSTxV4AIELRCw 1VrGM+n0srssVm+T5LAegYrcsjBtWTIc+wMPy70iibogP1qme/Hkpc6iC4SbFG6u cVNOI4Rm+pxl0uboSo3zLJce0h5whoqY66j7r5fXViISwXF1i8uviOYxnsOFz/ly 0r7VO7A1zjQMnNgXok3EJkTU7lzizdod3vIfXUxrjEwPAO4zsSTry0jarR+6Ms3p Q52yK43qwP4An1n0rCnRskm8/5zhAtsp4jQGZXzWPxsGJwHQLznxFneSJVPfmEFp zUeTm+XbrQDLGA6buZLwx8UTWE1mhna8dl2H1Zr1VUmIiPm/2tFcb6OIgWoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJSB0gx1I6Bxp1ofxCpsOnD5YY8wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmHXoz+V2uRhQoGncVYmw6kNIkCyvKOGRSm Q2XyD2lJtYbOOkF8ptOMqEfGD+HrZHJYRlnbMJ3zkr415/uuFOovctkOLWjE7Ifo QSPXH1KxqW0CuPWla/3vEfUByM+3VwrjTG9A/wvMGBWk9KUpHiVEN+exm2q3kjwY ng3CZ1ZGL8b6pDCSmi9LEWuW7TpY0YDQYiZwbaMtmk3Wq6lgyer5hIEh1rjB1kKm y1kDBp6P/HDQMBD2UtE+utCs2Gwx9Ka0mp2Rc/8MiHL58H7/ojW6BgYtcUtxJ6p8 4SKODv+v91AxuaSmlHMkeOuBnsop5PFdugENL+5DJ0h9D6RUsNs= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:24 2026 by rpki-client