This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: ETz3ABS/PHYJBNc/AgOYr/dh2ZJQOFTSG5amz2G3nEA= Subject key identifier: 5B:D4:71:DE:BC:01:1F:FC:10:03:96:0E:6F:F5:85:9F:28:6F:D1:4C Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 0A8A842B38BCBC3EFF6D1023171EEFB0DA3C9723 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03C7 Signing time: Sun 01 Feb 2026 21:31:37 +0000 Manifest this update: Sun 01 Feb 2026 21:26:37 +0000 Manifest next update: Thu 05 Feb 2026 03:25:37 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: uqSmPSXApIU5PiLveYvUsvBrqzSAdVRt/i9RRrX565Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8a:84:2b:38:bc:bc:3e:ff:6d:10:23:17:1e:ef:b0:da:3c:97:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Feb 1 21:26:37 2026 GMT Not After : Feb 5 03:25:37 2026 GMT Subject: CN=5BD471DEBC011FFC1003960E6FF5859F286FD14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:2d:78:f9:d3:ca:8c:87:0f:9d:ec:7a:6b: f0:4d:bb:2c:e1:cf:e6:8f:45:ba:87:12:d5:14:36: 2d:46:a9:f6:58:1b:f8:d3:9c:94:20:14:16:c2:b0: e2:8f:b4:b1:1e:d7:87:d7:3f:f0:f9:6a:e7:9e:88: 0e:1f:d7:86:65:1d:2d:b2:d9:f9:de:b1:a8:4d:88: d6:73:d3:aa:c7:b6:73:a0:f2:f1:27:9c:7c:6d:3f: bc:a8:f2:2f:65:17:ba:1b:0b:50:12:b4:57:99:a1: b7:5f:12:57:b5:78:98:93:63:59:42:34:1b:f6:34: bd:ab:68:1c:56:cd:83:51:65:6d:96:92:c3:99:30: ee:d2:50:6a:bc:d5:9e:d7:86:d4:f6:a1:bd:70:be: ae:29:48:7e:b3:21:ab:92:5d:2f:87:41:8b:73:64: 7a:7d:a2:2e:bb:24:20:c1:3e:15:ea:35:66:27:1c: 5e:5f:76:0a:35:6d:02:ad:c2:7b:9e:d1:f0:8e:2c: f0:0e:44:3a:57:f4:08:a0:d3:14:4e:af:a4:17:f1: 46:a1:22:82:1a:88:e6:d8:b0:0d:df:61:b8:56:90: 1c:06:8c:62:fa:5c:07:c7:44:d2:0b:76:2e:95:c4: 01:c1:41:41:f3:26:b4:50:0d:0c:f1:8a:f7:15:69: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:71:DE:BC:01:1F:FC:10:03:96:0E:6F:F5:85:9F:28:6F:D1:4C X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:36:32:f5:02:d4:96:52:d2:7c:0e:56:35:f7:0f:f2:d7:39: 05:c3:6d:1c:4e:5c:01:85:3a:14:9b:79:71:89:dd:47:b6:fc: fd:ea:bd:fe:e0:78:17:9f:df:0a:43:be:31:1c:85:c0:ce:44: a2:cd:d3:8a:4b:75:a1:b0:3f:85:3a:b8:f3:cb:3c:fe:c5:9c: 38:ff:0c:95:6b:0d:92:8f:eb:16:d8:1b:e1:cc:4f:f8:0e:66: c0:6c:77:2b:26:11:52:f4:53:6e:9c:29:61:73:fb:e0:a7:c1: c6:19:76:c5:10:34:7e:3a:cb:cb:9c:ad:6e:aa:80:e6:b0:0a: 72:b4:5f:3f:ee:5c:a5:4a:f9:55:dd:54:40:b3:ae:f3:40:77: 86:6a:73:86:da:cf:60:30:de:db:5d:b2:02:3e:3c:4d:9b:5a: 02:6d:ad:ac:ce:1f:66:2c:6b:f8:c7:b0:2d:37:86:ab:09:cc: 8a:01:f3:c0:31:d1:65:2e:85:94:eb:3d:21:f0:e2:f1:47:a8: c2:46:76:0c:f5:21:48:59:86:a3:f3:7d:9d:e3:38:5a:00:56: 17:8a:5e:9c:6a:19:96:ce:2c:46:18:b0:12:d5:80:a7:cd:cf: ef:0b:dc:f1:6d:34:23:1f:6d:a0:d6:63:e7:32:b9:e8:ea:52: ae:b7:96:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCoqEKzi8vD7/bRAjFx7vsNo8lyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNjAyMDEyMTI2MzdaFw0yNjAyMDUwMzI1MzdaMDMxMTAvBgNV BAMTKDVCRDQ3MURFQkMwMTFGRkMxMDAzOTYwRTZGRjU4NTlGMjg2RkQxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePi14+dPKjIcPnex6a/BNuyzh z+aPRbqHEtUUNi1GqfZYG/jTnJQgFBbCsOKPtLEe14fXP/D5aueeiA4f14ZlHS2y 2fnesahNiNZz06rHtnOg8vEnnHxtP7yo8i9lF7obC1AStFeZobdfEle1eJiTY1lC NBv2NL2raBxWzYNRZW2WksOZMO7SUGq81Z7XhtT2ob1wvq4pSH6zIauSXS+HQYtz ZHp9oi67JCDBPhXqNWYnHF5fdgo1bQKtwnue0fCOLPAORDpX9Aig0xROr6QX8Uah IoIaiObYsA3fYbhWkBwGjGL6XAfHRNILdi6VxAHBQUHzJrRQDQzxivcVaQ/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9Rx3rwBH/wQA5YOb/WFnyhv0UwwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALI2MvUC1JZS0nwOVjX3D/LXOQXDbRxOXAGF OhSbeXGJ3Ue2/P3qvf7geBef3wpDvjEchcDORKLN04pLdaGwP4U6uPPLPP7FnDj/ DJVrDZKP6xbYG+HMT/gOZsBsdysmEVL0U26cKWFz++CnwcYZdsUQNH46y8ucrW6q gOawCnK0Xz/uXKVK+VXdVECzrvNAd4Zqc4baz2Aw3ttdsgI+PE2bWgJtrazOH2Ys a/jHsC03hqsJzIoB88Ax0WUuhZTrPSHw4vFHqMJGdgz1IUhZhqPzfZ3jOFoAVheK XpxqGZbOLEYYsBLVgKfNz+8L3PFtNCMfbaDWY+cyuejqUq63lpM= -----END CERTIFICATE-----Generated at Mon Feb 2 17:33:53 2026 by rpki-client