This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: gSwJMRpit7RNbXk95/N97LyDsmebTi4yn5Im3yFUeyY= Subject key identifier: 99:0B:3D:C8:04:4D:1E:FE:19:B4:CD:C3:1A:F1:5E:40:90:23:19:9D Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 7DE158DF86750FAB5D7F6590EF79609295D51226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 0210 Signing time: Sat 31 Jan 2026 16:32:26 +0000 Manifest this update: Sat 31 Jan 2026 16:27:26 +0000 Manifest next update: Tue 03 Feb 2026 22:02:26 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: AV3rGad+pR2CfGj6hRixdMb9/pIekHMoe0MsqEY6KaU=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) 3: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: o8nDAJaAvWinmc3Z4YAlpvVlMtuLdAP8yAjpUiEUK14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e1:58:df:86:75:0f:ab:5d:7f:65:90:ef:79:60:92:95:d5:12:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Jan 31 16:27:26 2026 GMT Not After : Feb 3 22:02:26 2026 GMT Subject: CN=990B3DC8044D1EFE19B4CDC31AF15E409023199D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:f2:be:b9:0e:26:3e:bd:45:f4:1c:4a:42: 04:29:9a:c4:c5:6c:82:eb:55:19:0f:d8:f1:eb:53: f7:a0:8f:b6:0d:0c:a7:5f:3e:6e:9c:87:b8:6b:78: 67:5e:92:4b:48:d9:c1:3d:06:45:d5:be:f4:96:47: 2a:9b:a3:27:42:b7:7c:c0:c3:a7:03:99:49:49:c6: a7:68:fe:95:b0:58:59:8f:2b:20:6c:1d:34:82:e3: 53:fb:4a:c8:47:b1:dc:6c:6c:e7:94:fe:4f:94:bb: 23:96:9d:5e:d1:9f:cd:1a:47:3a:df:be:7e:21:d5: 72:93:20:b3:28:3c:00:8c:8f:d6:cf:1c:b3:39:79: 60:8d:a2:8b:3b:30:98:7f:3e:8a:14:42:95:b0:39: c9:58:c4:5a:73:ce:b3:99:52:ba:de:ca:dc:82:c1: 95:ea:36:41:c7:99:f2:9f:11:be:20:35:8a:b4:94: bc:4a:b5:fc:3b:8b:3a:b8:72:ed:45:34:a3:25:79: 98:57:1b:8e:c3:9f:50:ee:2b:e9:82:30:88:1c:e4: b8:fb:31:ee:1a:1f:d4:56:9b:ad:0b:5b:aa:11:5e: 85:f9:ef:9c:71:9f:38:a9:f7:b3:95:4b:c2:01:9d: 50:4f:3e:52:35:fb:2f:4d:1f:43:e1:9e:92:83:66: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0B:3D:C8:04:4D:1E:FE:19:B4:CD:C3:1A:F1:5E:40:90:23:19:9D X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:17:78:3b:05:51:4e:26:26:7d:d7:41:71:6b:80:17:86:f7: 25:ab:ef:97:4b:21:01:1a:13:0e:65:d9:57:ad:2e:78:e6:22: 7b:5a:57:27:cf:0a:92:86:5a:5f:a3:ab:20:51:cc:47:6d:1c: 13:23:6a:e3:ff:65:d1:9d:62:18:ab:34:e6:e3:2f:df:ab:ae: e6:61:64:eb:55:f4:90:79:e6:5d:f2:92:d6:ae:32:02:27:c5: c1:7e:91:c8:60:21:f6:37:d3:30:09:af:95:ad:a1:b9:2c:35: 8d:16:8b:96:69:a3:38:3a:d6:eb:b5:40:48:9e:2e:98:54:39: 7c:dc:41:d3:3d:b6:44:13:4a:c4:15:1b:0b:9b:49:af:04:2a: ef:5d:95:11:27:43:91:5c:32:df:ea:b6:9f:f7:39:b9:f3:73: a6:16:3e:82:91:7b:10:4e:8a:62:23:7a:34:83:af:56:60:d5: 79:eb:d3:e7:8e:69:3a:c7:ae:34:06:2e:b6:08:a5:22:94:d4: 8d:58:f6:eb:92:f6:20:a4:84:8a:51:00:e8:f4:54:d8:38:bb: d4:2e:47:49:f1:a9:12:eb:b2:7f:15:a8:d3:d0:83:cd:d9:bd: c9:37:39:a0:b7:ec:2c:a7:e2:5f:b0:1a:94:6d:e8:a2:6e:c7: b2:67:bd:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeFY34Z1D6tdf2WQ73lgkpXVEiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNjAxMzExNjI3MjZaFw0yNjAyMDMyMjAyMjZaMDMxMTAvBgNV BAMTKDk5MEIzREM4MDQ0RDFFRkUxOUI0Q0RDMzFBRjE1RTQwOTAyMzE5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/fK+uQ4mPr1F9BxKQgQpmsTF bILrVRkP2PHrU/egj7YNDKdfPm6ch7hreGdekktI2cE9BkXVvvSWRyqboydCt3zA w6cDmUlJxqdo/pWwWFmPKyBsHTSC41P7SshHsdxsbOeU/k+UuyOWnV7Rn80aRzrf vn4h1XKTILMoPACMj9bPHLM5eWCNoos7MJh/PooUQpWwOclYxFpzzrOZUrreytyC wZXqNkHHmfKfEb4gNYq0lLxKtfw7izq4cu1FNKMleZhXG47Dn1DuK+mCMIgc5Lj7 Me4aH9RWm60LW6oRXoX575xxnzip97OVS8IBnVBPPlI1+y9NH0PhnpKDZnVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQs9yARNHv4ZtM3DGvFeQJAjGZ0wHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAXeDsFUU4mJn3XQXFrgBeG9yWr75dLIQEa Ew5l2VetLnjmIntaVyfPCpKGWl+jqyBRzEdtHBMjauP/ZdGdYhirNObjL9+rruZh ZOtV9JB55l3yktauMgInxcF+kchgIfY30zAJr5WtobksNY0Wi5Zpozg61uu1QEie LphUOXzcQdM9tkQTSsQVGwubSa8EKu9dlREnQ5FcMt/qtp/3Obnzc6YWPoKRexBO imIjejSDr1Zg1Xnr0+eOaTrHrjQGLrYIpSKU1I1Y9uuS9iCkhIpRAOj0VNg4u9Qu R0nxqRLrsn8VqNPQg83Zvck3OaC37Cyn4l+wGpRt6KJux7JnvVc= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:43 2026 by rpki-client