This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: a5HGBJAa3bkf5UH67ESmK2qKMDabw0CH5Cr4Urm18ro= Subject key identifier: 52:94:39:56:E6:D7:B2:72:5F:D0:44:74:F3:70:01:4B:B5:54:8F:F0 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 2F09830203621B206C6F9977CA043EC7CB7D49F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 0224 Signing time: Sat 31 Jan 2026 07:21:52 +0000 Manifest this update: Sat 31 Jan 2026 07:16:52 +0000 Manifest next update: Tue 03 Feb 2026 13:19:52 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: JR6T+iJA2UUw7W18TtcIu3+Ztsm8FPsi+QAt0HqrVUI=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:09:83:02:03:62:1b:20:6c:6f:99:77:ca:04:3e:c7:cb:7d:49:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Jan 31 07:16:52 2026 GMT Not After : Feb 3 13:19:52 2026 GMT Subject: CN=52943956E6D7B2725FD04474F370014BB5548FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:23:a1:a9:ad:e2:ee:48:91:cf:de:bb:70: d2:c6:27:14:25:15:52:70:ba:e5:71:37:e3:db:3f: 25:6e:7b:58:35:8b:7a:be:09:00:eb:54:13:56:2d: 0b:66:c4:9b:16:90:58:4b:83:eb:10:dc:9a:a5:af: 64:7d:69:c2:92:17:f7:7a:63:7b:8c:1c:68:5a:67: a3:f5:dd:80:18:26:e1:3b:ad:7a:a9:d3:a2:fb:42: 8e:f3:d4:26:ec:91:52:ee:52:f9:79:df:f2:c3:3c: 09:56:42:ed:10:4a:cb:83:28:19:db:9c:d0:2d:1e: 9f:f8:0f:f2:89:cf:01:98:90:6c:0c:37:f9:80:ce: 37:80:ac:db:56:a3:50:f8:75:77:2b:57:a4:18:e1: 09:42:f7:5a:87:98:d1:4d:56:5b:9a:79:e4:23:5e: 6d:d6:25:a6:09:fa:83:16:70:be:24:78:2f:35:85: 00:7e:89:a9:e3:39:41:68:f3:9c:27:44:8b:29:0b: 57:04:e0:92:61:ba:ab:c5:7d:99:1c:98:7a:42:0e: 66:0c:6b:04:34:5e:f1:d6:7f:9f:d4:86:01:a2:3a: da:c0:e6:39:ee:5d:83:0e:0b:91:d3:86:73:54:db: 24:9b:8f:2d:ae:ce:26:cf:91:9c:6b:f0:b6:77:32: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:94:39:56:E6:D7:B2:72:5F:D0:44:74:F3:70:01:4B:B5:54:8F:F0 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f0:df:57:f2:3e:04:30:3e:03:79:19:6b:e8:fd:4f:53:bd: 88:12:5e:ff:e1:58:87:a1:c5:8d:98:9b:a4:d2:be:af:7a:21: 2f:90:0d:0a:b1:28:a8:13:e5:ab:05:f4:5e:4f:69:a4:62:41: a3:a5:5d:73:b7:7b:73:94:84:1b:b5:e8:c9:21:91:7f:8a:31: 7e:69:28:77:03:de:f8:a8:61:f9:fa:6c:ad:a6:85:29:a0:c8: ca:84:c1:bc:cc:a6:0b:7c:0a:c4:4d:24:8b:e3:6c:8b:da:b5: 2d:86:6c:75:0b:c2:d9:53:d3:8e:3e:64:d8:ce:e7:44:c0:73: 54:20:4c:a0:86:39:eb:4a:d5:76:2d:90:52:d1:d2:18:76:cd: 07:45:9a:e5:9c:65:70:e0:17:78:df:98:fe:50:1e:70:66:93: 7b:72:5e:88:39:91:ff:0f:cb:9f:fd:d6:61:e3:fe:d8:50:b1: 7f:90:a6:28:7d:80:b2:b7:b3:a4:62:cc:85:eb:12:17:06:6d: e5:0e:97:5a:f0:09:89:df:4b:39:a2:b9:0d:5d:a6:99:fb:57: 0b:27:f3:a0:00:ed:c6:3c:1b:58:ac:f4:97:45:39:62:3a:37: 26:69:51:77:f2:39:6c:98:1d:d1:ff:3a:49:20:ff:cd:97:0c: a7:f3:34:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwmDAgNiGyBsb5l3ygQ+x8t9SfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNjAxMzEwNzE2NTJaFw0yNjAyMDMxMzE5NTJaMDMxMTAvBgNV BAMTKDUyOTQzOTU2RTZEN0IyNzI1RkQwNDQ3NEYzNzAwMTRCQjU1NDhGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLCOhqa3i7kiRz967cNLGJxQl FVJwuuVxN+PbPyVue1g1i3q+CQDrVBNWLQtmxJsWkFhLg+sQ3Jqlr2R9acKSF/d6 Y3uMHGhaZ6P13YAYJuE7rXqp06L7Qo7z1CbskVLuUvl53/LDPAlWQu0QSsuDKBnb nNAtHp/4D/KJzwGYkGwMN/mAzjeArNtWo1D4dXcrV6QY4QlC91qHmNFNVluaeeQj Xm3WJaYJ+oMWcL4keC81hQB+ianjOUFo85wnRIspC1cE4JJhuqvFfZkcmHpCDmYM awQ0XvHWf5/UhgGiOtrA5jnuXYMOC5HThnNU2ySbjy2uzibPkZxr8LZ3Mi4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpQ5VubXsnJf0ER083ABS7VUj/AwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrw31fyPgQwPgN5GWvo/U9TvYgSXv/hWIeh xY2Ym6TSvq96IS+QDQqxKKgT5asF9F5PaaRiQaOlXXO3e3OUhBu16MkhkX+KMX5p KHcD3vioYfn6bK2mhSmgyMqEwbzMpgt8CsRNJIvjbIvatS2GbHULwtlT044+ZNjO 50TAc1QgTKCGOetK1XYtkFLR0hh2zQdFmuWcZXDgF3jfmP5QHnBmk3tyXog5kf8P y5/91mHj/thQsX+Qpih9gLK3s6RizIXrEhcGbeUOl1rwCYnfSzmiuQ1dppn7Vwsn 86AA7cY8G1is9JdFOWI6NyZpUXfyOWyYHdH/Okkg/82XDKfzNAE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:44 2026 by rpki-client