This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: feerQeFw/tfqY2aBvw973XKrfI6HQiIXp6XLQUBRFkY= Subject key identifier: FF:77:BC:8E:AB:13:2E:E8:FA:C1:66:03:66:06:EF:42:21:8C:8D:DA Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 0D21D9B95C25A2A66DB7C25E52CC16C757255D78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 0516 Signing time: Sat 31 Jan 2026 20:22:26 +0000 Manifest this update: Sat 31 Jan 2026 20:17:26 +0000 Manifest next update: Tue 03 Feb 2026 22:14:26 +0000 Files and hashes: 1: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) 2: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 3: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: fhysfj4xEaL1ZfJL4anTwFjivq+8v7QyfS3Jc/bD+y8=) 4: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: sZ7Y9HidNwNbLqaWtw5ljbRqMh/n0NpDyP/tNJF266g=) 5: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 6: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:21:d9:b9:5c:25:a2:a6:6d:b7:c2:5e:52:cc:16:c7:57:25:5d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Jan 31 20:17:26 2026 GMT Not After : Feb 3 22:14:26 2026 GMT Subject: CN=FF77BC8EAB132EE8FAC166036606EF42218C8DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:db:05:ca:b7:67:74:98:81:89:59:78:a2: 47:ee:13:05:99:de:cd:09:28:bb:68:81:0c:4d:7a: e1:7f:09:e3:13:be:ee:6d:3e:3d:e0:cd:42:d1:79: 57:d9:96:c5:53:66:a2:06:50:68:f0:b6:d5:fa:b3: 76:c6:6f:b8:96:ef:36:5c:80:88:38:53:7e:c3:2e: 4f:10:54:fb:61:ba:65:2f:81:f1:e2:b2:e8:2a:48: 2b:ff:e3:f3:dc:a1:fe:78:0a:b1:49:5b:6c:23:c5: 51:10:bc:8c:dc:54:e7:0a:dd:84:d9:73:5f:6f:f5: f8:03:81:fa:36:7d:e8:c3:ce:23:ee:f6:d9:b8:0f: 34:5d:6e:8b:5f:a7:10:4f:10:34:fa:fc:06:16:bf: b8:f3:7d:e4:8b:2a:84:4c:80:c7:9d:bf:03:ca:cf: 1a:33:c2:a2:1c:71:2d:d4:d8:00:af:72:01:d6:46: df:8d:7f:f6:ce:7b:b2:cb:7b:08:92:6c:6b:b0:f5: ce:c9:57:20:87:57:76:98:7b:cc:56:3a:7d:4c:7a: 20:4f:22:b1:01:e8:63:24:ff:2f:f1:56:de:c5:e8: 8d:3b:15:60:39:a0:01:e5:15:99:74:24:0e:8b:ec: 65:51:8f:28:25:af:f9:6e:49:77:80:dc:b1:0d:6a: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:77:BC:8E:AB:13:2E:E8:FA:C1:66:03:66:06:EF:42:21:8C:8D:DA X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:46:8f:33:64:d3:2c:dc:fe:df:23:87:a1:84:53:30:65:1f: 66:22:e3:5f:e2:4b:ae:0b:61:62:39:0c:5b:06:37:4c:da:26: ed:0c:01:5b:34:03:1b:51:6a:77:b4:f9:7f:c4:bf:f2:ee:2e: 10:26:0b:ae:f3:2d:8a:c9:e7:58:ac:cd:81:14:74:30:be:df: 76:a1:48:8c:c3:44:e8:ce:f3:c0:7a:05:fc:f2:f1:64:57:c1: 78:25:05:0b:d9:39:83:54:41:db:68:6f:57:d6:a6:48:a5:e9: e6:52:60:d9:6a:b1:b1:46:2c:7d:fd:2d:3b:09:9c:56:e3:e4: 69:f1:c6:77:08:31:27:81:0a:33:a7:b0:89:46:0b:87:df:7d: c4:6d:8e:e2:60:db:90:51:43:61:f8:8f:36:98:8c:2c:0f:cf: 19:0e:ea:f9:ec:56:4e:6b:a9:39:6e:20:81:5c:99:cc:38:b3: 6d:ac:31:0f:37:0f:f0:7d:68:04:0f:f2:fe:b4:37:78:4f:7d: 91:15:10:57:78:b6:13:d2:dd:4c:f1:7c:9e:e2:a4:02:5e:0b: 17:cd:89:0c:b4:c0:f0:3e:d3:af:84:82:c9:97:08:ab:fd:6b: 28:1e:d9:ec:03:53:c0:09:23:d1:9f:a9:65:dc:6d:15:82:d1: c6:59:8a:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSHZuVwloqZtt8JeUswWx1clXXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNjAxMzEyMDE3MjZaFw0yNjAyMDMyMjE0MjZaMDMxMTAvBgNV BAMTKEZGNzdCQzhFQUIxMzJFRThGQUMxNjYwMzY2MDZFRjQyMjE4QzhEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+dsFyrdndJiBiVl4okfuEwWZ 3s0JKLtogQxNeuF/CeMTvu5tPj3gzULReVfZlsVTZqIGUGjwttX6s3bGb7iW7zZc gIg4U37DLk8QVPthumUvgfHisugqSCv/4/Pcof54CrFJW2wjxVEQvIzcVOcK3YTZ c19v9fgDgfo2fejDziPu9tm4DzRdbotfpxBPEDT6/AYWv7jzfeSLKoRMgMedvwPK zxozwqIccS3U2ACvcgHWRt+Nf/bOe7LLewiSbGuw9c7JVyCHV3aYe8xWOn1MeiBP IrEB6GMk/y/xVt7F6I07FWA5oAHlFZl0JA6L7GVRjyglr/luSXeA3LENam/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3e8jqsTLuj6wWYDZgbvQiGMjdowHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9GjzNk0yzc/t8jh6GEUzBlH2Yi41/iS64L YWI5DFsGN0zaJu0MAVs0AxtRane0+X/Ev/LuLhAmC67zLYrJ51iszYEUdDC+33ah SIzDROjO88B6Bfzy8WRXwXglBQvZOYNUQdtob1fWpkil6eZSYNlqsbFGLH39LTsJ nFbj5GnxxncIMSeBCjOnsIlGC4fffcRtjuJg25BRQ2H4jzaYjCwPzxkO6vnsVk5r qTluIIFcmcw4s22sMQ83D/B9aAQP8v60N3hPfZEVEFd4thPS3UzxfJ7ipAJeCxfN iQy0wPA+06+EgsmXCKv9ayge2ewDU8AJI9GfqWXcbRWC0cZZigs= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:11 2026 by rpki-client