This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: z2QxmABEFcWOywyJ9GLoRcec/Ad9CMdooig+Gy/q97s= Subject key identifier: 72:5B:93:34:22:9D:36:9D:C0:EC:5C:86:2B:36:90:A2:F9:63:F4:A0 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 55C0075525878D38AAE75E88F65CD6B32BB78143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 023F Signing time: Sun 01 Feb 2026 09:02:22 +0000 Manifest this update: Sun 01 Feb 2026 08:57:22 +0000 Manifest next update: Wed 04 Feb 2026 09:33:22 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: m8/pPOzz/IdOZ/POixv5SASCD996WrhXNRUal0uXmwg=) 2: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c0:07:55:25:87:8d:38:aa:e7:5e:88:f6:5c:d6:b3:2b:b7:81:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Feb 1 08:57:22 2026 GMT Not After : Feb 4 09:33:22 2026 GMT Subject: CN=725B9334229D369DC0EC5C862B3690A2F963F4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:c1:44:87:ed:64:23:22:bc:a1:44:7a:43: ae:25:c7:ab:87:e6:2e:f8:9a:ff:b8:38:1c:ac:17: f0:be:75:d1:59:fc:75:d1:73:11:1c:d9:5d:1a:63: 02:4c:a4:71:88:82:41:26:f8:cd:2f:bf:87:cd:81: eb:e4:2e:71:40:15:d1:23:ca:93:40:f9:09:2e:cf: b3:d7:2c:43:bf:ba:5c:ef:1f:b0:6b:57:e3:38:f7: 22:86:23:32:54:50:90:6f:85:67:f7:4a:5d:98:a2: 3b:97:8e:c2:26:65:3c:29:0d:7c:94:4b:9c:7f:03: 5e:c1:0a:5e:02:93:14:41:cd:1e:8f:dc:c3:eb:4c: a4:cf:69:5c:3e:28:58:d6:54:5d:5a:f2:a5:03:58: 92:57:36:b0:48:0b:ad:ec:66:a4:8f:9b:06:36:db: 25:c3:23:14:24:1a:44:b2:ed:3e:2f:a9:87:c6:34: 65:6c:a3:52:36:72:ab:73:ef:8d:4d:b9:36:94:8c: 92:ec:b9:24:19:2d:df:96:4b:a6:7f:60:60:c6:d4: f2:05:3b:12:e1:85:3f:46:2e:b0:96:08:34:88:82: d3:ed:31:f7:0f:8b:38:f7:aa:e2:9b:18:ea:47:79: 81:cf:91:4d:b5:97:0f:ec:9d:92:73:ce:c0:1d:76: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5B:93:34:22:9D:36:9D:C0:EC:5C:86:2B:36:90:A2:F9:63:F4:A0 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b9:54:79:16:04:e3:30:9e:2c:4e:6a:bb:3c:19:39:c3:6f: 65:e1:7b:4d:7f:e5:c9:f8:32:35:26:03:9d:3a:d1:1f:de:6f: 19:1b:ae:ef:27:f8:6a:03:0f:c8:0b:6b:e0:d5:d3:09:65:04: 71:a2:13:3b:fb:fe:a1:69:dc:77:d7:71:50:e9:12:27:7b:3e: 3f:e6:30:2e:aa:e8:0b:9a:4e:a4:4f:89:ce:24:6c:b9:5f:0e: fe:d3:0f:24:59:ba:9d:ee:6f:db:c1:2a:fa:38:5d:be:e1:c9: dc:83:c0:df:b9:95:e4:fe:ae:11:79:c3:84:f6:d2:66:a9:9c: e7:23:dd:54:a9:75:b1:f4:97:3b:9b:44:a6:fc:3b:c3:83:d2: de:3d:38:f2:e7:40:ee:c6:0c:0f:4f:19:38:aa:9a:45:30:b3: 34:f9:fe:e0:48:53:e5:71:1b:b1:e1:ec:e4:ac:10:ad:9d:6d: 08:9c:bb:6b:10:91:cb:6f:8a:d3:78:2e:56:24:0b:35:08:88: 36:18:11:ee:b7:29:65:b3:0c:b8:33:60:72:33:52:38:27:5f: 8b:01:ef:d1:ac:f7:82:a5:f1:00:14:92:51:e9:ee:0e:1e:23: 31:9c:bf:ed:71:9d:54:8d:df:1d:7c:87:db:49:ab:74:d8:40: e9:0b:c7:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcAHVSWHjTiq516I9lzWsyu3gUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNjAyMDEwODU3MjJaFw0yNjAyMDQwOTMzMjJaMDMxMTAvBgNV BAMTKDcyNUI5MzM0MjI5RDM2OURDMEVDNUM4NjJCMzY5MEEyRjk2M0Y0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZ8FEh+1kIyK8oUR6Q64lx6uH 5i74mv+4OBysF/C+ddFZ/HXRcxEc2V0aYwJMpHGIgkEm+M0vv4fNgevkLnFAFdEj ypNA+Qkuz7PXLEO/ulzvH7BrV+M49yKGIzJUUJBvhWf3Sl2YojuXjsImZTwpDXyU S5x/A17BCl4CkxRBzR6P3MPrTKTPaVw+KFjWVF1a8qUDWJJXNrBIC63sZqSPmwY2 2yXDIxQkGkSy7T4vqYfGNGVso1I2cqtz741NuTaUjJLsuSQZLd+WS6Z/YGDG1PIF OxLhhT9GLrCWCDSIgtPtMfcPizj3quKbGOpHeYHPkU21lw/snZJzzsAddn8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcluTNCKdNp3A7FyGKzaQovlj9KAwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+5VHkWBOMwnixOars8GTnDb2Xhe01/5cn4 MjUmA5060R/ebxkbru8n+GoDD8gLa+DV0wllBHGiEzv7/qFp3HfXcVDpEid7Pj/m MC6q6AuaTqRPic4kbLlfDv7TDyRZup3ub9vBKvo4Xb7hydyDwN+5leT+rhF5w4T2 0mapnOcj3VSpdbH0lzubRKb8O8OD0t49OPLnQO7GDA9PGTiqmkUwszT5/uBIU+Vx G7Hh7OSsEK2dbQicu2sQkctvitN4LlYkCzUIiDYYEe63KWWzDLgzYHIzUjgnX4sB 79Gs94Kl8QAUklHp7g4eIzGcv+1xnVSN3x18h9tJq3TYQOkLxwo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:14 2026 by rpki-client