This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: yU19qXkmDkHM/uyw89ZUs7oCt0gUuqY6/0HkvM/h8uU= Subject key identifier: 70:81:5D:59:9F:9D:E5:4E:2F:CC:5F:46:A7:9F:FA:88:46:FE:2A:EF Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 5B88092CED6FBA2453D6B97E6DDC82CDA0E44197 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 0519 Signing time: Sun 01 Feb 2026 18:11:53 +0000 Manifest this update: Sun 01 Feb 2026 18:06:53 +0000 Manifest next update: Wed 04 Feb 2026 22:39:53 +0000 Files and hashes: 1: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: Fpi7pliHuQuJxkf19hqeRVOpTQ8nLVnWKf64Iuhdhs8=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: lbqLm4gtIn2PpfyD5NIDm37sX2MwPhaC2Wn66mlRkRA=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:88:09:2c:ed:6f:ba:24:53:d6:b9:7e:6d:dc:82:cd:a0:e4:41:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Feb 1 18:06:53 2026 GMT Not After : Feb 4 22:39:53 2026 GMT Subject: CN=70815D599F9DE54E2FCC5F46A79FFA8846FE2AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:8a:81:cb:06:00:c3:ab:3c:ef:95:72:1b: cf:a8:d1:87:73:f7:6e:2c:6a:7d:5f:cf:85:19:5c: c2:19:bd:a5:15:42:c9:e3:da:47:47:a6:f6:18:e0: a0:f6:e6:3a:f5:20:50:4f:99:e5:f2:2b:4f:e8:90: ea:a7:9f:13:ec:45:de:05:39:a2:29:68:cc:34:2e: a7:68:db:81:8b:91:a9:f8:d3:52:d8:e7:2c:1b:26: a3:6c:c8:21:41:98:28:6b:34:a6:4a:34:e5:6b:1d: d6:6c:00:8d:4a:d5:b4:b3:f3:db:cb:71:de:fb:e1: 88:4f:74:8c:17:8d:35:73:3c:91:74:23:07:e9:7e: 6f:51:07:df:9e:f7:bb:a8:b0:e6:46:a4:12:37:79: 2b:14:97:d0:01:27:0d:da:c3:35:c5:5b:30:e5:d7: 89:e5:88:78:69:0f:4a:ec:c7:ac:97:dc:18:ed:b2: 03:43:fc:a0:43:d4:a6:cf:3e:62:e1:b6:fe:8c:67: 40:4f:25:af:3c:3c:77:fe:e8:dd:18:ad:20:0d:5d: 7d:4e:4a:86:14:a7:ee:40:05:d9:4c:2d:f3:f7:b7: 9e:0c:6a:05:f2:d0:8e:21:d7:c7:7f:37:98:23:4c: 74:48:14:ec:76:14:a8:fd:99:03:21:c8:96:e7:96: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:81:5D:59:9F:9D:E5:4E:2F:CC:5F:46:A7:9F:FA:88:46:FE:2A:EF X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:61:82:8b:0e:f8:35:b6:bb:1f:fe:7f:35:06:07:6d:50:55: 49:65:d7:75:99:38:7e:30:da:39:ee:27:da:4d:9e:53:58:6d: 62:ab:23:59:14:19:d4:32:67:48:2c:7b:1f:2b:71:9f:ee:f6: 5e:57:0f:d2:b2:8a:30:5f:b6:54:58:04:35:b8:59:6a:c7:7e: e7:b7:18:b5:86:67:00:91:1c:dc:a5:ba:87:8d:75:ad:bf:a2: 46:d2:2d:78:88:00:d0:d6:d6:8e:d9:58:d8:98:ba:57:86:86: ea:c3:e7:a4:e3:a6:97:b6:8b:06:57:52:64:70:f5:08:07:c4: fd:c6:5f:10:99:8a:e4:bf:3f:30:78:d8:06:0b:85:e3:23:76: f0:c4:70:34:a4:a6:5f:18:4d:02:fe:5d:7f:bc:c6:66:bf:26: da:59:2d:93:79:ec:e8:25:12:7d:dc:52:5e:bc:99:5f:1c:1e: 48:74:2d:de:20:f0:3c:d1:95:30:5a:b4:e1:ce:e2:25:94:d9: bb:b7:71:2f:aa:f2:a8:39:49:4d:ad:03:c0:4e:99:c8:e9:a2: 25:2c:7f:83:5c:3f:73:cb:99:df:e5:93:74:e2:a5:d9:48:7a: 61:ea:be:6e:b6:5c:33:32:86:bd:9a:6a:02:4e:6f:62:4a:f8: 66:cf:e1:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4gJLO1vuiRT1rl+bdyCzaDkQZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNjAyMDExODA2NTNaFw0yNjAyMDQyMjM5NTNaMDMxMTAvBgNV BAMTKDcwODE1RDU5OUY5REU1NEUyRkNDNUY0NkE3OUZGQTg4NDZGRTJBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7toqBywYAw6s875VyG8+o0Ydz 924san1fz4UZXMIZvaUVQsnj2kdHpvYY4KD25jr1IFBPmeXyK0/okOqnnxPsRd4F OaIpaMw0Lqdo24GLkan401LY5ywbJqNsyCFBmChrNKZKNOVrHdZsAI1K1bSz89vL cd774YhPdIwXjTVzPJF0Iwfpfm9RB9+e97uosOZGpBI3eSsUl9ABJw3awzXFWzDl 14nliHhpD0rsx6yX3BjtsgND/KBD1KbPPmLhtv6MZ0BPJa88PHf+6N0YrSANXX1O SoYUp+5ABdlMLfP3t54MagXy0I4h18d/N5gjTHRIFOx2FKj9mQMhyJbnlqzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcIFdWZ+d5U4vzF9Gp5/6iEb+Ku8wHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhhgosO+DW2ux/+fzUGB21QVUll13WZOH4w 2jnuJ9pNnlNYbWKrI1kUGdQyZ0gsex8rcZ/u9l5XD9KyijBftlRYBDW4WWrHfue3 GLWGZwCRHNyluoeNda2/okbSLXiIANDW1o7ZWNiYuleGhurD56Tjppe2iwZXUmRw 9QgHxP3GXxCZiuS/PzB42AYLheMjdvDEcDSkpl8YTQL+XX+8xma/JtpZLZN57Ogl En3cUl68mV8cHkh0Ld4g8DzRlTBatOHO4iWU2bu3cS+q8qg5SU2tA8BOmcjpoiUs f4NcP3PLmd/lk3TipdlIemHqvm62XDMyhr2aagJOb2JK+GbP4Zw= -----END CERTIFICATE-----Generated at Mon Feb 2 15:58:55 2026 by rpki-client