This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: SjUAoeIO4VbMbYy+HjhlCHv9+44Aix/p3bdYHf5ppJc= Subject key identifier: 0C:5F:C7:03:30:80:43:29:38:83:A6:08:EA:61:C7:F3:F3:6A:93:7E Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 49FD9B6FCEDF296E719B0A90DBB07251CA147224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 0103 Signing time: Sat 31 Jan 2026 18:21:39 +0000 Manifest this update: Sat 31 Jan 2026 18:16:39 +0000 Manifest next update: Wed 04 Feb 2026 06:09:39 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: 49teRokrmWRS39HYLCe6CI+naUhDzf/XVRHdxx509BI=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 06:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fd:9b:6f:ce:df:29:6e:71:9b:0a:90:db:b0:72:51:ca:14:72:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Jan 31 18:16:39 2026 GMT Not After : Feb 4 06:09:39 2026 GMT Subject: CN=0C5FC703308043293883A608EA61C7F3F36A937E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:f6:de:23:3f:a6:30:56:91:a2:d2:27:ab: d5:85:c7:0e:b7:db:3b:e2:3f:67:6d:99:d2:95:8e: 78:9b:af:0e:bb:ca:06:f5:f0:fc:86:80:e9:9f:81: 3a:88:68:11:99:4e:79:08:c5:59:16:57:bf:54:60: ec:4b:f9:2f:f3:5d:f1:c7:9b:65:75:59:3a:d2:e0: db:90:0e:f0:b9:8d:a9:30:9b:5b:ce:bb:a9:29:2e: 3e:d0:4b:fc:79:21:94:d5:a3:c0:c0:cb:4e:37:5e: 90:68:d4:93:60:2b:3e:e7:87:ba:ea:5f:83:35:af: 3b:82:c1:63:b1:0e:93:b7:4f:8c:f5:97:bb:17:f4: 4f:dc:99:b7:de:50:91:93:2d:c8:a4:49:a8:72:be: 16:29:d7:a8:a9:7d:2b:ae:45:1e:43:c8:67:35:b2: c6:e0:c0:a7:db:d6:cb:c0:61:f5:c0:24:25:b4:12: fb:4d:96:c9:1a:de:ae:96:da:fd:a3:f9:18:b2:77: 81:5a:64:d6:50:60:b0:72:1f:c0:b9:30:39:d9:b8: 9c:2b:ef:32:6a:8f:6e:ff:13:1c:96:ef:cc:af:2e: 6b:2a:3f:db:b1:a8:24:b3:79:1f:c4:8f:22:41:3b: 36:9a:60:9c:38:45:0e:5e:99:32:f3:df:1b:ab:1f: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5F:C7:03:30:80:43:29:38:83:A6:08:EA:61:C7:F3:F3:6A:93:7E X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:35:fd:ed:f6:01:fe:e8:65:6f:5b:73:39:b7:03:af:aa:d2: 08:14:6a:c2:b5:85:f5:ef:0f:00:f3:95:51:37:78:dd:6e:4f: f4:3b:74:a0:4c:2f:f0:ba:f6:12:6c:83:21:f4:1c:65:a5:65: 38:98:84:df:54:94:27:17:9c:84:be:53:19:d3:da:4c:4f:c9: 1d:17:e6:05:9d:2f:e0:3a:73:ba:39:4f:c0:75:39:28:d9:f0: 1d:09:e9:c9:9c:90:3a:72:99:09:89:9b:6a:7c:f6:03:77:46: 09:e6:7f:f1:c2:22:6e:2f:23:c0:6b:a1:fb:a1:a7:67:44:6f: 99:cc:19:6e:f6:93:0d:b1:32:9e:ec:12:70:3d:2f:74:b8:36: 30:c8:5b:39:37:37:26:e3:72:fc:7a:14:22:fb:19:21:27:51: 07:5e:1a:8f:2a:c3:6f:32:be:49:53:65:c8:77:3f:a7:41:ae: 21:89:00:87:f1:9f:e5:e2:9e:a4:36:35:8e:2b:ce:68:b6:d9: 1d:e6:e3:eb:98:ed:d8:17:1a:16:0f:69:95:a6:89:18:7e:63: 3b:ef:79:21:53:11:9f:22:d4:24:3b:93:ed:75:a1:c5:73:f2: c4:3f:60:df:67:6f:ed:d6:dd:52:c3:5b:45:0c:a3:10:b8:c6: 62:29:3e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSf2bb87fKW5xmwqQ27ByUcoUciQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNjAxMzExODE2MzlaFw0yNjAyMDQwNjA5MzlaMDMxMTAvBgNV BAMTKDBDNUZDNzAzMzA4MDQzMjkzODgzQTYwOEVBNjFDN0YzRjM2QTkzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe/beIz+mMFaRotInq9WFxw63 2zviP2dtmdKVjnibrw67ygb18PyGgOmfgTqIaBGZTnkIxVkWV79UYOxL+S/zXfHH m2V1WTrS4NuQDvC5jakwm1vOu6kpLj7QS/x5IZTVo8DAy043XpBo1JNgKz7nh7rq X4M1rzuCwWOxDpO3T4z1l7sX9E/cmbfeUJGTLcikSahyvhYp16ipfSuuRR5DyGc1 ssbgwKfb1svAYfXAJCW0EvtNlska3q6W2v2j+Riyd4FaZNZQYLByH8C5MDnZuJwr 7zJqj27/ExyW78yvLmsqP9uxqCSzeR/EjyJBOzaaYJw4RQ5emTLz3xurH8zJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDF/HAzCAQyk4g6YI6mHH8/Nqk34wHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC41/e32Af7oZW9bczm3A6+q0ggUasK1hfXv DwDzlVE3eN1uT/Q7dKBML/C69hJsgyH0HGWlZTiYhN9UlCcXnIS+UxnT2kxPyR0X 5gWdL+A6c7o5T8B1OSjZ8B0J6cmckDpymQmJm2p89gN3Rgnmf/HCIm4vI8Brofuh p2dEb5nMGW72kw2xMp7sEnA9L3S4NjDIWzk3Nybjcvx6FCL7GSEnUQdeGo8qw28y vklTZch3P6dBriGJAIfxn+XinqQ2NY4rzmi22R3m4+uY7dgXGhYPaZWmiRh+Yzvv eSFTEZ8i1CQ7k+11ocVz8sQ/YN9nb+3W3VLDW0UMoxC4xmIpPpc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:19 2026 by rpki-client