This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: YsQutf0Zia3cYKYBnR0EkJozlVBYRsa8UxOHRh8UMcI= Subject key identifier: 8C:A2:C0:45:36:8B:6B:A2:E0:2E:9C:CF:13:56:E0:C6:C6:F6:2D:CF Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 72BA2D38B138E29B1839348D89AD09BEF5E165A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 0248 Signing time: Sun 01 Feb 2026 11:01:26 +0000 Manifest this update: Sun 01 Feb 2026 10:56:26 +0000 Manifest next update: Wed 04 Feb 2026 15:05:26 +0000 Files and hashes: 1: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: a4tKIOtg/63YG0PtL4inTxcC8D5/p+Z450+p72xoGEk=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ba:2d:38:b1:38:e2:9b:18:39:34:8d:89:ad:09:be:f5:e1:65:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Feb 1 10:56:26 2026 GMT Not After : Feb 4 15:05:26 2026 GMT Subject: CN=8CA2C045368B6BA2E02E9CCF1356E0C6C6F62DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:d2:10:ca:2c:f1:ca:ea:b1:4e:e5:06:cb: 5a:ad:a6:d2:c7:40:2b:a3:1b:70:95:aa:ba:f5:54: eb:91:a7:df:01:26:bc:cf:9e:c0:8e:67:f8:6b:18: aa:1d:0a:68:0e:c1:0c:8a:f1:3d:b4:1a:70:5f:c3: 7b:e5:2b:45:de:ed:f6:1f:2f:f6:99:ec:fe:68:4a: 4c:cb:25:d1:b5:47:60:9e:0c:2f:87:b9:ad:9b:b1: ea:a2:c2:61:e7:f7:09:7b:a1:d7:dd:88:d6:a7:e8: 38:62:27:b6:63:2a:23:41:4b:18:d3:f8:05:ef:06: d5:70:bb:f7:22:07:a3:71:d9:b0:57:ff:de:c1:81: b1:31:a9:5b:55:72:fa:0f:f7:d4:be:06:0d:14:71: 40:24:aa:50:f9:f0:34:5d:c7:17:4e:f0:e0:ec:31: fb:17:d0:c7:45:36:df:57:03:5f:25:2c:cc:13:4a: 09:9f:53:b9:70:54:85:47:4d:e0:76:6a:e1:0f:e9: 77:e4:3e:09:48:25:44:a6:cd:07:b1:47:e4:0a:2f: 19:93:66:40:bc:bf:7d:0a:bc:a4:f3:ed:74:d9:4f: a5:66:8b:05:ec:d8:1b:ec:9e:f7:e7:ab:79:72:bc: ed:f6:3f:a0:b9:61:15:8d:c9:c2:79:c3:34:d2:b9: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A2:C0:45:36:8B:6B:A2:E0:2E:9C:CF:13:56:E0:C6:C6:F6:2D:CF X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9f:d4:97:5d:9b:e9:18:c0:ff:ee:25:6b:ba:85:82:38:15: 3f:c4:3d:fd:20:d7:f1:b5:73:bd:83:dd:a4:60:ea:f3:1d:f6: 2b:e7:40:f9:a6:6c:39:eb:23:5b:a0:6b:01:9d:82:41:96:b4: f5:65:ee:40:0e:7a:d0:3a:bf:af:83:0f:83:fd:d8:e6:ac:60: ab:5a:25:3d:40:7b:56:42:65:2d:fd:5f:15:59:7c:a1:7d:b3: 40:8f:a1:20:f7:0b:5f:b5:ef:fd:e3:85:37:66:fd:b9:55:8c: 29:d8:b2:8b:42:bc:a6:a8:fe:53:af:43:28:b8:86:78:73:34: cd:e5:04:8c:0b:1c:df:cc:48:78:5b:89:1a:af:ce:17:f1:80: 23:90:9d:33:40:48:de:a3:c0:35:79:3a:59:3c:23:0e:6e:dc: 84:d1:b5:d0:41:47:3a:e2:f4:93:cf:8e:81:4d:53:9d:85:9b: f0:96:87:8a:3c:37:c1:71:aa:88:16:aa:b9:01:31:5b:cd:cf: 02:58:67:24:eb:0c:77:6f:a0:dd:7f:43:2f:92:20:f2:42:83: a2:11:eb:39:af:4b:a5:04:08:7e:da:01:07:e4:f4:49:90:4e: f6:08:6f:c6:9a:7b:3c:6b:bb:06:1b:b3:71:65:e7:50:bb:06: 8b:2f:26:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrotOLE44psYOTSNia0JvvXhZaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNjAyMDExMDU2MjZaFw0yNjAyMDQxNTA1MjZaMDMxMTAvBgNV BAMTKDhDQTJDMDQ1MzY4QjZCQTJFMDJFOUNDRjEzNTZFMEM2QzZGNjJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTtIQyizxyuqxTuUGy1qtptLH QCujG3CVqrr1VOuRp98BJrzPnsCOZ/hrGKodCmgOwQyK8T20GnBfw3vlK0Xe7fYf L/aZ7P5oSkzLJdG1R2CeDC+Hua2bseqiwmHn9wl7odfdiNan6DhiJ7ZjKiNBSxjT +AXvBtVwu/ciB6Nx2bBX/97BgbExqVtVcvoP99S+Bg0UcUAkqlD58DRdxxdO8ODs MfsX0MdFNt9XA18lLMwTSgmfU7lwVIVHTeB2auEP6XfkPglIJUSmzQexR+QKLxmT ZkC8v30KvKTz7XTZT6VmiwXs2Bvsnvfnq3lyvO32P6C5YRWNycJ5wzTSuT4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKLARTaLa6LgLpzPE1bgxsb2Lc8wHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmf1Jddm+kYwP/uJWu6hYI4FT/EPf0g1/G1 c72D3aRg6vMd9ivnQPmmbDnrI1ugawGdgkGWtPVl7kAOetA6v6+DD4P92OasYKta JT1Ae1ZCZS39XxVZfKF9s0CPoSD3C1+17/3jhTdm/blVjCnYsotCvKao/lOvQyi4 hnhzNM3lBIwLHN/MSHhbiRqvzhfxgCOQnTNASN6jwDV5Olk8Iw5u3ITRtdBBRzri 9JPPjoFNU52Fm/CWh4o8N8FxqogWqrkBMVvNzwJYZyTrDHdvoN1/Qy+SIPJCg6IR 6zmvS6UECH7aAQfk9EmQTvYIb8aaezxruwYbs3Fl51C7BosvJu0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:06 2026 by rpki-client