This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: YMfHEwcesl1z05yUTLu8Nt8Ez3FjcabZtwTDZM7Qdfg= Subject key identifier: BD:92:A2:80:BF:CA:24:59:F6:5E:99:55:D3:97:DE:85:CA:4B:EB:C8 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 7E4B321D6F3318E59147A4C6C8CCD1D0B07E7BD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01CE Signing time: Sun 01 Feb 2026 14:32:25 +0000 Manifest this update: Sun 01 Feb 2026 14:27:25 +0000 Manifest next update: Wed 04 Feb 2026 16:03:25 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: Zv8fuUsXlNcSMomK2OEOO59UGappsLZu9bjdvi4DOP8=) 2: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: JaUrvzsC48sGgo6t/8V56h/3RhAryL32k2OarONQk4Y=) 3: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 4: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: ySXhmeuQa/ravZ/63eUXi8++rwA7T1v6qPCXDpB636I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 16:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4b:32:1d:6f:33:18:e5:91:47:a4:c6:c8:cc:d1:d0:b0:7e:7b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Feb 1 14:27:25 2026 GMT Not After : Feb 4 16:03:25 2026 GMT Subject: CN=BD92A280BFCA2459F65E9955D397DE85CA4BEBC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:e6:41:08:f5:2c:b5:36:af:42:e3:51:bd: de:79:e3:55:b6:ce:c9:7d:e9:84:34:7b:ea:7d:8c: cc:b7:e9:11:86:95:e1:b4:c3:a5:0d:13:29:3c:68: bd:da:00:dd:d4:65:da:61:5b:72:25:5c:db:a6:40: a3:73:da:fd:ae:fd:a5:2d:fc:49:07:10:0c:08:2e: 30:b9:7d:43:02:47:65:6f:68:73:05:30:3f:fb:5a: a3:52:2a:5f:44:af:0c:70:8a:67:3c:d4:21:8f:4e: be:47:43:04:92:73:97:28:4b:35:12:54:a2:34:70: e2:d0:b7:a7:a5:e3:1a:da:a2:8c:38:fa:67:97:09: ae:ce:f8:d4:f7:af:d2:5a:cb:20:16:8b:1c:6f:48: 4e:58:e6:63:90:0e:da:07:c4:66:6b:3c:89:78:61: d8:2c:e1:ac:1f:30:fd:38:f5:31:84:2c:b2:ff:13: eb:e0:6a:af:ea:5d:b8:fe:00:64:d6:34:b8:ec:fc: fd:2e:f8:22:06:f9:02:ed:66:f2:6b:ec:14:0e:56: 62:e3:e6:17:98:9d:c5:49:00:36:19:6b:52:26:e9: d2:85:5f:a8:a2:8f:03:83:66:1a:a4:4f:86:ac:83: 44:e7:ba:14:b2:5c:11:d7:6f:2f:66:d4:7e:8a:a9: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:92:A2:80:BF:CA:24:59:F6:5E:99:55:D3:97:DE:85:CA:4B:EB:C8 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f1:fe:d0:64:77:4e:4e:99:bf:61:ba:30:3c:18:c9:c2:07: d9:c8:77:d1:75:21:6c:a4:71:90:15:4f:fc:70:f0:b9:0a:3f: eb:51:43:81:25:d5:ed:aa:1e:12:f5:3e:09:80:4e:70:f7:85: 4c:bf:ce:3f:8e:e9:e0:84:e5:08:20:15:5f:5b:e2:94:1a:61: c9:66:7c:71:90:4c:8c:4c:be:e4:69:ef:16:ce:fc:9f:51:dd: 1d:c8:ce:89:4b:07:d6:37:98:d7:f6:b4:5f:88:3f:ce:80:8e: 40:6d:b9:60:8a:ad:9f:69:31:91:19:49:46:f4:9a:c7:21:2f: df:a1:81:f8:75:41:26:ad:4d:ea:e4:3b:72:90:ee:68:45:96: 25:4a:fb:05:a4:2d:b8:12:4d:8d:a3:4f:f4:6e:f9:8e:a8:ba: 21:55:a1:4f:15:c8:4d:ac:df:cf:54:3a:0d:1f:08:f3:6d:8e: 7b:9c:28:4e:7b:e3:f3:64:67:76:29:53:b8:39:5e:c3:68:6f: a4:0f:b7:08:82:a4:fd:79:7e:2c:39:ce:ea:f2:c4:c1:d9:c4: 3b:bd:fb:7b:aa:51:42:ff:ed:13:38:01:8e:05:70:3d:00:f8: 62:e3:06:08:48:6f:66:75:3c:01:bb:55:5e:4c:d1:36:87:b7: f8:7d:0d:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfksyHW8zGOWRR6TGyMzR0LB+e9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNjAyMDExNDI3MjVaFw0yNjAyMDQxNjAzMjVaMDMxMTAvBgNV BAMTKEJEOTJBMjgwQkZDQTI0NTlGNjVFOTk1NUQzOTdERTg1Q0E0QkVCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1eZBCPUstTavQuNRvd5541W2 zsl96YQ0e+p9jMy36RGGleG0w6UNEyk8aL3aAN3UZdphW3IlXNumQKNz2v2u/aUt /EkHEAwILjC5fUMCR2VvaHMFMD/7WqNSKl9Erwxwimc81CGPTr5HQwSSc5coSzUS VKI0cOLQt6el4xraoow4+meXCa7O+NT3r9JayyAWixxvSE5Y5mOQDtoHxGZrPIl4 Ydgs4awfMP049TGELLL/E+vgaq/qXbj+AGTWNLjs/P0u+CIG+QLtZvJr7BQOVmLj 5heYncVJADYZa1Im6dKFX6iijwODZhqkT4asg0TnuhSyXBHXby9m1H6KqXULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZKigL/KJFn2XplV05fehcpL68gwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXx/tBkd05Omb9hujA8GMnCB9nId9F1IWyk cZAVT/xw8LkKP+tRQ4El1e2qHhL1PgmATnD3hUy/zj+O6eCE5QggFV9b4pQaYclm fHGQTIxMvuRp7xbO/J9R3R3IzolLB9Y3mNf2tF+IP86AjkBtuWCKrZ9pMZEZSUb0 mschL9+hgfh1QSatTerkO3KQ7mhFliVK+wWkLbgSTY2jT/Ru+Y6ouiFVoU8VyE2s 389UOg0fCPNtjnucKE574/NkZ3YpU7g5XsNob6QPtwiCpP15fiw5zuryxMHZxDu9 +3uqUUL/7RM4AY4FcD0A+GLjBghIb2Z1PAG7VV5M0TaHt/h9Dfw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:14 2026 by rpki-client