This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: DFWc1kw9kEjN8SBQSii76RZQnwZT2M4IRQ9fMd+xv/w= Subject key identifier: AD:AA:D5:85:72:AD:45:B7:72:4E:84:51:BE:16:6E:6B:64:BF:91:59 Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 42E4A139A87E1E6A02D3BF4DF2648ACF53F51816 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 0252 Signing time: Sun 01 Feb 2026 05:22:01 +0000 Manifest this update: Sun 01 Feb 2026 05:17:01 +0000 Manifest next update: Wed 04 Feb 2026 11:05:01 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) 2: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) 3: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: vN2tMZlNOrmbKRQjyJZhTd7ETVgQnt14ombr0kOMbYM=) 4: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 11:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e4:a1:39:a8:7e:1e:6a:02:d3:bf:4d:f2:64:8a:cf:53:f5:18:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Feb 1 05:17:01 2026 GMT Not After : Feb 4 11:05:01 2026 GMT Subject: CN=ADAAD58572AD45B7724E8451BE166E6B64BF9159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c8:6a:a8:8d:d7:7e:b6:54:51:e0:3a:35:b0: 3f:7b:a8:ca:da:a0:52:89:eb:ee:49:e8:bb:5a:28: 1c:c8:fa:85:e4:08:6a:63:f8:e8:c2:44:89:ae:56: 0e:c6:c0:d9:c5:05:07:d6:41:35:92:57:d0:e2:3b: 3c:a3:1a:45:89:38:aa:7a:53:42:4e:67:0b:2e:83: 27:81:1b:61:9c:80:eb:cb:a7:95:ac:f6:1d:67:ad: 12:7b:c2:62:14:42:ed:78:08:32:d5:4b:3e:3e:ed: e7:7a:41:d2:ca:79:51:73:3d:e4:d9:5e:c5:2b:c6: eb:cd:2c:d0:93:76:36:82:32:40:89:c7:c1:6e:ed: b2:6f:b8:9b:b7:89:2b:79:c5:ba:3d:41:ee:1a:30: 67:82:80:06:2e:86:23:4f:1e:c3:26:55:c4:fe:26: 69:eb:09:f3:1b:ef:8c:76:9e:fe:44:7c:f3:9d:30: ab:39:7c:23:7e:7e:a5:cc:97:4b:0e:61:39:2b:87: 5f:52:13:8e:62:7e:b1:7c:b0:a1:78:53:a9:4e:92: f7:32:a0:07:73:60:19:0a:4a:13:6e:69:25:be:61: 55:88:47:49:1b:36:f3:12:02:e3:51:16:66:8f:72: 61:3e:6a:89:13:28:95:33:0d:2a:1e:db:82:02:f3: 03:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:D5:85:72:AD:45:B7:72:4E:84:51:BE:16:6E:6B:64:BF:91:59 X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bb:f2:2c:ca:cb:c4:a7:47:bf:f5:54:73:33:dc:41:a6:49: a1:09:c8:7b:37:f9:2f:43:f1:62:c0:71:2e:f4:57:c1:d5:c1: 3b:56:b2:5e:fe:59:67:fb:8f:95:02:83:2a:ce:24:40:e6:26: 0c:fc:85:b6:08:95:cf:ce:87:04:b3:f4:65:4b:b4:c3:3e:ae: 74:81:8f:d5:84:25:8a:99:77:d6:9c:70:e4:be:9f:57:6a:28: dc:de:bd:65:fe:aa:44:bc:6a:d6:f9:84:d1:86:42:65:0c:09: 5c:6c:88:b4:1d:2d:54:f6:ec:60:34:68:ff:94:b5:21:ce:56: e6:89:3b:3a:8f:0a:5a:c4:fc:d9:f4:ca:62:8c:0e:76:0b:bd: 7c:47:c1:a9:1c:42:09:70:8b:da:98:40:9c:d1:c3:51:32:ff: 80:5c:99:61:09:5c:43:48:c2:8b:14:05:e8:ec:7f:7d:1c:16: 3d:e4:13:a9:9f:b6:02:2e:ba:e3:10:89:ac:0c:6f:d5:08:00: 72:8b:83:f2:6e:e6:f6:fe:f9:13:3e:36:5e:1d:66:63:46:c1: 32:cf:8d:62:14:1b:68:76:5c:1b:04:e2:0e:39:a3:6e:da:02: d1:87:2e:5a:6b:72:e2:23:aa:bf:49:1f:23:13:cc:21:65:73: d4:f2:bb:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuShOah+HmoC079N8mSKz1P1GBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNjAyMDEwNTE3MDFaFw0yNjAyMDQxMTA1MDFaMDMxMTAvBgNV BAMTKEFEQUFENTg1NzJBRDQ1Qjc3MjRFODQ1MUJFMTY2RTZCNjRCRjkxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRyGqojdd+tlRR4Do1sD97qMra oFKJ6+5J6LtaKBzI+oXkCGpj+OjCRImuVg7GwNnFBQfWQTWSV9DiOzyjGkWJOKp6 U0JOZwsugyeBG2GcgOvLp5Ws9h1nrRJ7wmIUQu14CDLVSz4+7ed6QdLKeVFzPeTZ XsUrxuvNLNCTdjaCMkCJx8Fu7bJvuJu3iSt5xbo9Qe4aMGeCgAYuhiNPHsMmVcT+ JmnrCfMb74x2nv5EfPOdMKs5fCN+fqXMl0sOYTkrh19SE45ifrF8sKF4U6lOkvcy oAdzYBkKShNuaSW+YVWIR0kbNvMSAuNRFmaPcmE+aokTKJUzDSoe24IC8wPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrarVhXKtRbdyToRRvhZua2S/kVkwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO78izKy8SnR7/1VHMz3EGmSaEJyHs3+S9D 8WLAcS70V8HVwTtWsl7+WWf7j5UCgyrOJEDmJgz8hbYIlc/OhwSz9GVLtMM+rnSB j9WEJYqZd9accOS+n1dqKNzevWX+qkS8atb5hNGGQmUMCVxsiLQdLVT27GA0aP+U tSHOVuaJOzqPClrE/Nn0ymKMDnYLvXxHwakcQglwi9qYQJzRw1Ey/4BcmWEJXENI wosUBejsf30cFj3kE6mftgIuuuMQiawMb9UIAHKLg/Ju5vb++RM+Nl4dZmNGwTLP jWIUG2h2XBsE4g45o27aAtGHLlprcuIjqr9JHyMTzCFlc9Tyu0c= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:05 2026 by rpki-client