This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: +yBscM+iTr4zF9YWSN0K2TdTCDdkEeb3RuK+VQ8oaOQ= Subject key identifier: FF:1B:CB:F4:C2:29:34:DE:7C:23:FB:F0:81:53:82:74:08:9E:C9:D5 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 1A15E5F09508248074D773BCCD21175376ACE5AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 035A Signing time: Sun 01 Feb 2026 21:50:39 +0000 Manifest this update: Sun 01 Feb 2026 21:45:39 +0000 Manifest next update: Thu 05 Feb 2026 00:42:39 +0000 Files and hashes: 1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: qxnZ5Go+Ru9F0i8+WmS5DFKTD5aYCZfja0biZepm0pU=) 2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: ZHafjJKgXW9RsmPF8VNVEw6T28/f2O0/FZCCLymCOMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 00:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:15:e5:f0:95:08:24:80:74:d7:73:bc:cd:21:17:53:76:ac:e5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Feb 1 21:45:39 2026 GMT Not After : Feb 5 00:42:39 2026 GMT Subject: CN=FF1BCBF4C22934DE7C23FBF081538274089EC9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:5d:d5:a3:38:c1:fe:b9:c8:bc:89:1f:2f: f8:5a:f7:ff:73:52:23:dc:a1:c3:de:48:0c:86:d2: 63:7e:d8:f4:45:09:20:c6:01:b1:37:75:46:66:4d: fc:4f:89:c7:e9:d4:44:72:14:3f:72:8d:a1:21:fd: 47:9c:5b:4a:4c:22:e5:d6:95:3c:d5:d4:6c:51:c6: 68:c6:2c:43:69:f3:07:e0:3e:b8:eb:84:37:3b:38: 15:38:67:eb:27:f5:c6:89:28:8f:35:b7:b9:6a:d5: 51:38:81:4b:f8:68:23:a7:20:53:5a:3e:c0:ac:c1: 92:23:ea:31:e6:ee:0b:8f:ab:49:ed:20:c0:7e:84: b1:62:c6:da:fa:cb:f4:fe:f8:87:fc:99:d8:d8:fc: 43:59:f6:b5:29:59:0d:35:40:d4:bf:f4:c0:d0:30: 2e:92:cb:a0:45:d2:a3:06:7b:21:26:02:74:d2:55: 7b:d7:5c:5d:2e:c9:36:e2:35:3a:01:f2:97:50:e7: 64:36:10:21:e2:2a:54:73:70:03:fb:da:24:6e:e0: 17:41:7b:36:69:a5:7d:4f:e4:60:4d:ad:66:da:67: 0a:0f:62:86:a6:23:93:66:6e:95:9a:bd:51:21:1d: dc:c0:b5:85:e3:0d:33:b4:10:0a:6b:c7:f8:a5:8b: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:CB:F4:C2:29:34:DE:7C:23:FB:F0:81:53:82:74:08:9E:C9:D5 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:64:ec:3b:7b:98:cb:73:c0:02:d8:6c:03:16:13:ea:e9:25: f7:b0:96:0c:e1:2c:87:14:99:96:05:e9:88:05:be:82:25:d2: 4a:69:2f:9e:89:01:97:9a:b8:42:0c:fc:75:7f:1c:ec:35:55: 5b:62:d8:36:b5:c7:33:41:88:23:01:d1:8f:ae:da:24:64:27: 05:3b:45:a3:1e:72:f1:26:2e:2c:6c:32:bb:e5:dc:2b:1b:46: b4:e0:e6:38:1a:17:24:34:eb:d9:15:7e:16:83:8d:73:ae:51: 53:a1:3a:83:e5:60:29:c2:6b:aa:7e:50:73:9e:86:92:88:4b: 60:ba:81:32:7d:95:e0:09:9b:88:0c:16:37:78:b5:74:ff:69: 9b:cc:d0:d7:30:f3:e0:0f:00:b2:7e:19:96:c2:0a:f2:7f:09: 3b:ce:b7:27:ef:36:92:e8:ec:0a:28:d8:4d:98:a9:dc:6a:56: ac:05:f6:0b:9b:7a:73:e7:17:ef:d0:68:a1:ed:3e:71:4f:25: 11:78:a0:ed:77:ac:7b:de:f9:3c:1f:18:57:ef:3d:b6:0c:1b: e9:36:62:ba:f7:ce:18:0b:c6:0e:49:0d:00:05:7b:9d:99:33: 45:f7:86:fe:c1:6c:8c:ab:5d:14:b6:a3:f6:27:50:05:40:4e: e7:8c:85:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhXl8JUIJIB013O8zSEXU3as5a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNjAyMDEyMTQ1MzlaFw0yNjAyMDUwMDQyMzlaMDMxMTAvBgNV BAMTKEZGMUJDQkY0QzIyOTM0REU3QzIzRkJGMDgxNTM4Mjc0MDg5RUM5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGG13VozjB/rnIvIkfL/ha9/9z UiPcocPeSAyG0mN+2PRFCSDGAbE3dUZmTfxPicfp1ERyFD9yjaEh/UecW0pMIuXW lTzV1GxRxmjGLENp8wfgPrjrhDc7OBU4Z+sn9caJKI81t7lq1VE4gUv4aCOnIFNa PsCswZIj6jHm7guPq0ntIMB+hLFixtr6y/T++If8mdjY/ENZ9rUpWQ01QNS/9MDQ MC6Sy6BF0qMGeyEmAnTSVXvXXF0uyTbiNToB8pdQ52Q2ECHiKlRzcAP72iRu4BdB ezZppX1P5GBNrWbaZwoPYoamI5NmbpWavVEhHdzAtYXjDTO0EAprx/ili9i7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xvL9MIpNN58I/vwgVOCdAieydUwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNk7Dt7mMtzwALYbAMWE+rpJfewlgzhLIcU mZYF6YgFvoIl0kppL56JAZeauEIM/HV/HOw1VVti2Da1xzNBiCMB0Y+u2iRkJwU7 RaMecvEmLixsMrvl3CsbRrTg5jgaFyQ069kVfhaDjXOuUVOhOoPlYCnCa6p+UHOe hpKIS2C6gTJ9leAJm4gMFjd4tXT/aZvM0Ncw8+APALJ+GZbCCvJ/CTvOtyfvNpLo 7Aoo2E2YqdxqVqwF9gubenPnF+/QaKHtPnFPJRF4oO13rHve+TwfGFfvPbYMG+k2 Yrr3zhgLxg5JDQAFe52ZM0X3hv7BbIyrXRS2o/YnUAVATueMhQA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:06 2026 by rpki-client