This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: pjHv7FqF5Q0j97z1gZTSPrF7l0rPhqRIhkgr2Tr7PEQ= Subject key identifier: C9:89:CA:5D:A3:E0:F5:A9:0F:49:B5:87:B0:AB:65:96:76:E3:11:91 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 49D55B8A5FC62E8AF501EC6A77444FB4FD4DD9EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 01FA Signing time: Sun 01 Feb 2026 16:01:56 +0000 Manifest this update: Sun 01 Feb 2026 15:56:56 +0000 Manifest next update: Wed 04 Feb 2026 19:40:56 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: ewTooOJwEFFs8urQzCotZUoy/Rka2YcFW9QywvzwVXM=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 19:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d5:5b:8a:5f:c6:2e:8a:f5:01:ec:6a:77:44:4f:b4:fd:4d:d9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Feb 1 15:56:56 2026 GMT Not After : Feb 4 19:40:56 2026 GMT Subject: CN=C989CA5DA3E0F5A90F49B587B0AB659676E31191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:53:3b:dc:35:5a:96:3c:c7:be:9a:9f:5f: e3:5b:e3:0a:9c:8f:c2:94:a3:0e:78:3e:13:94:49: bb:ee:67:81:0f:a8:f9:52:c6:68:ba:1a:26:ad:67: 9c:00:f8:e8:cb:f3:c9:ca:92:c9:fc:ad:02:42:bf: 7c:12:8f:e7:40:86:04:93:81:38:31:67:ef:fe:49: 50:ee:63:45:31:6e:04:3f:25:de:d0:10:66:0b:cd: 50:29:a3:e3:b0:1a:61:28:5b:ae:28:f4:60:c7:97: 84:48:11:71:02:f8:23:31:ce:53:56:ad:f2:7d:49: d1:98:46:2c:bd:54:58:7e:8a:05:64:a0:26:57:0c: c2:52:ff:9a:8f:07:5a:30:16:15:f7:85:5a:8d:eb: 5e:31:97:8c:1d:1e:d8:1d:fe:c2:1d:cb:7e:39:94: fd:a8:52:ac:9d:3a:b9:ae:1f:41:cb:7a:74:ea:ba: 34:07:2c:3a:20:84:f0:43:56:0a:43:63:83:9a:2e: 92:a5:3f:71:47:76:0e:05:8a:d6:42:58:b8:17:23: 1e:72:85:69:1d:4c:a0:f6:d8:37:0d:a8:f2:b7:30: e1:4d:fb:69:26:21:0f:be:14:0b:5f:00:d4:55:96: 29:c2:1a:f0:10:7d:41:07:d9:e2:6c:f6:3d:e5:30: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:89:CA:5D:A3:E0:F5:A9:0F:49:B5:87:B0:AB:65:96:76:E3:11:91 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c9:e9:14:a4:2c:24:b2:36:18:7f:49:93:f9:1f:15:5f:e5: e7:fa:3c:de:95:ef:6e:7f:53:a5:63:d2:a0:20:fc:32:82:c3: 3c:ca:14:af:11:13:68:fe:f6:be:13:79:a1:61:45:2d:4e:e6: 3b:cc:9f:8c:f3:61:ea:7f:0b:5b:6e:61:ed:a5:d6:69:48:de: 6a:d9:91:f2:8e:b9:4a:59:46:cc:f6:6c:a4:bc:33:0c:4a:48: 1b:7a:87:b1:7f:33:00:88:de:9d:2e:7b:44:2c:64:0f:7e:86: 70:a9:7f:d0:7f:72:85:e9:b2:d0:be:1b:da:04:73:98:8c:98: a4:75:79:30:97:dc:c6:01:29:3a:72:64:62:f9:a8:74:9d:fd: 73:aa:f4:a2:a0:08:9b:50:1d:32:be:b6:31:ee:35:9d:fb:e8: 86:5b:6d:8d:35:e2:d8:2f:70:35:aa:ad:56:30:9d:62:25:c0: 98:6e:b9:49:80:48:0a:01:8c:a2:76:08:8d:61:6f:3c:35:54: b7:bf:37:25:49:6a:fd:23:54:5a:3c:5d:54:35:0b:06:8c:4f: 26:64:50:a4:f4:0c:d8:c5:ae:db:24:90:dd:59:02:54:00:6b: 08:49:d9:ef:4d:44:8a:f6:ef:b3:04:f6:c9:1d:6b:88:6e:4a: d5:fb:16:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdVbil/GLor1Aexqd0RPtP1N2eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNjAyMDExNTU2NTZaFw0yNjAyMDQxOTQwNTZaMDMxMTAvBgNV BAMTKEM5ODlDQTVEQTNFMEY1QTkwRjQ5QjU4N0IwQUI2NTk2NzZFMzExOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAVM73DValjzHvpqfX+Nb4wqc j8KUow54PhOUSbvuZ4EPqPlSxmi6GiatZ5wA+OjL88nKksn8rQJCv3wSj+dAhgST gTgxZ+/+SVDuY0UxbgQ/Jd7QEGYLzVApo+OwGmEoW64o9GDHl4RIEXEC+CMxzlNW rfJ9SdGYRiy9VFh+igVkoCZXDMJS/5qPB1owFhX3hVqN614xl4wdHtgd/sIdy345 lP2oUqydOrmuH0HLenTqujQHLDoghPBDVgpDY4OaLpKlP3FHdg4FitZCWLgXIx5y hWkdTKD22DcNqPK3MOFN+2kmIQ++FAtfANRVlinCGvAQfUEH2eJs9j3lMGBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYnKXaPg9akPSbWHsKtllnbjEZEwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTJ6RSkLCSyNhh/SZP5HxVf5ef6PN6V725/ U6Vj0qAg/DKCwzzKFK8RE2j+9r4TeaFhRS1O5jvMn4zzYep/C1tuYe2l1mlI3mrZ kfKOuUpZRsz2bKS8MwxKSBt6h7F/MwCI3p0ue0QsZA9+hnCpf9B/coXpstC+G9oE c5iMmKR1eTCX3MYBKTpyZGL5qHSd/XOq9KKgCJtQHTK+tjHuNZ376IZbbY014tgv cDWqrVYwnWIlwJhuuUmASAoBjKJ2CI1hbzw1VLe/NyVJav0jVFo8XVQ1CwaMTyZk UKT0DNjFrtskkN1ZAlQAawhJ2e9NRIr277ME9skda4huStX7Fis= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:56 2026 by rpki-client