This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: S+jKh99TF6tStGaOH4m0epF20010Hm4NAYxjRMl2kOY= Subject key identifier: 6E:26:3B:DD:AA:20:A2:96:A2:98:EE:80:DB:B9:92:10:BB:5C:C6:D7 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 2A92391D9A46A5404A9401F0089A04B69D336E09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 054C Signing time: Mon 02 Feb 2026 01:51:45 +0000 Manifest this update: Mon 02 Feb 2026 01:46:45 +0000 Manifest next update: Thu 05 Feb 2026 07:53:45 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: g9sR/jusfYjt4EuCOaZBRuAJpo+BCVhWphs+4xTeJLc=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:39:1d:9a:46:a5:40:4a:94:01:f0:08:9a:04:b6:9d:33:6e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Feb 2 01:46:45 2026 GMT Not After : Feb 5 07:53:45 2026 GMT Subject: CN=6E263BDDAA20A296A298EE80DBB99210BB5CC6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:86:38:c0:86:cf:72:db:7a:01:9b:89:40: ea:ce:e1:fc:d0:0c:78:0d:39:97:40:16:8c:63:82: b2:ad:f4:c8:33:78:32:61:31:d1:46:da:29:21:06: 13:3c:06:00:0c:6a:67:58:a4:dd:cf:e4:dd:23:f1: c2:15:52:99:22:38:03:f7:4a:49:82:bf:fb:28:77: c5:5a:17:f9:6e:68:b1:93:99:89:a3:37:09:eb:c9: e8:ee:56:d7:d5:ad:65:2d:ed:06:75:89:6d:9d:e4: 4b:8f:5a:99:43:46:78:35:c4:4c:7c:75:06:38:1f: 57:08:0e:17:79:8d:cf:4a:e0:ad:41:bf:74:44:c1: 8d:81:9e:81:28:b1:01:6a:f5:74:71:32:4c:a0:65: 5e:ae:1c:7c:b8:19:a8:f1:2d:7c:5b:73:dc:ef:02: 62:e9:2e:41:18:64:f9:8d:a8:35:0b:5a:aa:85:61: 17:05:ec:51:97:0b:41:c2:ec:d3:a9:d5:b6:f4:c5: af:9c:63:2f:5a:80:89:57:66:f8:cb:e9:33:05:4d: 86:bf:6b:0b:cd:f1:ae:8f:1c:82:81:64:ee:60:bb: c0:2e:84:5f:e0:85:3c:34:3b:93:25:8f:ee:21:f6: c2:57:42:38:cc:69:0e:9c:bc:15:9b:e7:0a:21:98: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:3B:DD:AA:20:A2:96:A2:98:EE:80:DB:B9:92:10:BB:5C:C6:D7 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:dd:04:17:06:f8:1a:78:03:50:82:75:b8:52:6a:fd:c4:63: 6b:8e:6b:8b:83:cf:52:c2:1c:16:4d:40:42:29:49:a6:58:ae: bb:c4:93:c2:40:0a:9c:84:18:38:22:94:bf:f4:97:91:50:87: d4:02:3f:87:3e:37:d6:06:fb:0b:67:7d:e6:08:26:75:18:47: c2:ef:2a:bf:db:4f:41:90:89:98:db:4f:48:a7:f0:b2:ff:af: 6b:d5:8f:85:96:85:37:1c:5d:7e:d4:b1:12:e3:81:61:83:f7: a7:07:1b:8a:a9:c5:01:ec:d6:84:dd:a7:a0:4b:93:27:59:d4: 82:4c:4a:a4:90:e2:fe:ca:f3:d8:f7:50:cb:53:7d:48:14:1a: bf:c5:0c:8c:8c:b2:95:4f:f2:a7:09:18:20:65:d8:05:7b:d6: f0:00:ea:27:be:ab:74:f4:1c:7c:4d:44:99:8d:6d:8e:7b:1b: 94:ec:5b:8a:c1:be:03:93:15:31:18:ce:84:85:40:98:ec:73: 43:54:34:74:c5:12:b4:9b:4e:e0:ab:49:c3:f6:f0:35:ec:36: c1:86:5e:a3:42:99:48:a3:13:64:2b:27:01:b3:69:a9:fb:d2: 5b:a9:8c:91:97:87:3b:ec:c9:ea:37:3d:6c:37:9e:3a:6e:64: 12:20:59:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpI5HZpGpUBKlAHwCJoEtp0zbgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNjAyMDIwMTQ2NDVaFw0yNjAyMDUwNzUzNDVaMDMxMTAvBgNV BAMTKDZFMjYzQkREQUEyMEEyOTZBMjk4RUU4MERCQjk5MjEwQkI1Q0M2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTT4Y4wIbPctt6AZuJQOrO4fzQ DHgNOZdAFoxjgrKt9MgzeDJhMdFG2ikhBhM8BgAMamdYpN3P5N0j8cIVUpkiOAP3 SkmCv/sod8VaF/luaLGTmYmjNwnryejuVtfVrWUt7QZ1iW2d5EuPWplDRng1xEx8 dQY4H1cIDhd5jc9K4K1Bv3REwY2BnoEosQFq9XRxMkygZV6uHHy4GajxLXxbc9zv AmLpLkEYZPmNqDULWqqFYRcF7FGXC0HC7NOp1bb0xa+cYy9agIlXZvjL6TMFTYa/ awvN8a6PHIKBZO5gu8AuhF/ghTw0O5Mlj+4h9sJXQjjMaQ6cvBWb5wohmPTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbiY73aogopaimO6A27mSELtcxtcwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrdBBcG+Bp4A1CCdbhSav3EY2uOa4uDz1LC HBZNQEIpSaZYrrvEk8JACpyEGDgilL/0l5FQh9QCP4c+N9YG+wtnfeYIJnUYR8Lv Kr/bT0GQiZjbT0in8LL/r2vVj4WWhTccXX7UsRLjgWGD96cHG4qpxQHs1oTdp6BL kydZ1IJMSqSQ4v7K89j3UMtTfUgUGr/FDIyMspVP8qcJGCBl2AV71vAA6ie+q3T0 HHxNRJmNbY57G5TsW4rBvgOTFTEYzoSFQJjsc0NUNHTFErSbTuCrScP28DXsNsGG XqNCmUijE2QrJwGzaan70lupjJGXhzvsyeo3PWw3njpuZBIgWQE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:40 2026 by rpki-client