This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: lQY8hH8I7EepswOYLtSR/rk/JUrOieSs3r2Wh2zT5Zg= Subject key identifier: DD:F5:A5:73:7C:A5:11:87:B2:FC:E5:CF:83:CE:94:0F:31:E9:CB:DA Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 55BB87AD774FA164F9AE29512B81C8C8AB710C51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 054D Signing time: Sun 01 Feb 2026 02:02:30 +0000 Manifest this update: Sun 01 Feb 2026 01:57:30 +0000 Manifest next update: Wed 04 Feb 2026 04:07:30 +0000 Files and hashes: 1: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: cY65fBz3QhgDWatr4wnrexT5mlIRL1TPioPkLIdN9gE=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bb:87:ad:77:4f:a1:64:f9:ae:29:51:2b:81:c8:c8:ab:71:0c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Feb 1 01:57:30 2026 GMT Not After : Feb 4 04:07:30 2026 GMT Subject: CN=DDF5A5737CA51187B2FCE5CF83CE940F31E9CBDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:d3:51:62:96:3f:d5:11:2b:06:08:52:7d: 10:59:53:66:3b:ac:ef:d0:de:e1:6a:68:a0:9d:99: 78:ae:c2:1e:c7:7e:44:46:b5:a0:e1:11:d8:df:85: bc:10:e6:18:ce:cb:92:6e:ba:98:b6:aa:a7:bc:e9: 9f:50:0c:25:d3:4a:4a:39:3a:6e:01:b4:49:4c:82: 3f:22:36:6a:6c:6d:b0:5a:d1:4e:50:ea:7a:ef:43: 16:12:f8:cc:ec:26:d6:6e:d2:d8:64:7a:4c:6e:cc: 36:dd:2e:c0:80:7b:ba:25:c3:cd:28:9c:4d:9c:3e: b8:ce:44:aa:d9:a8:f9:74:c6:88:e4:b6:a6:59:18: 5a:17:8e:ed:82:96:fc:4b:e8:8b:de:d8:34:dd:32: f8:6f:4b:84:c5:36:1d:55:09:4c:1a:03:6b:b4:c5: e5:e7:72:1f:45:c0:b1:c7:88:80:02:c1:ff:d5:d1: dc:9c:d7:0f:80:ff:ed:2f:97:3e:7f:35:e0:f9:be: 3f:0f:14:30:74:de:04:92:8c:87:19:be:a1:49:95: 55:c4:be:5d:9a:2f:89:aa:79:c4:e1:13:69:5e:d0: 85:eb:2f:9b:fb:03:fb:db:73:ca:db:f7:36:55:69: 93:3d:01:8e:b1:c0:a6:dd:e9:28:5e:4e:6e:80:97: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F5:A5:73:7C:A5:11:87:B2:FC:E5:CF:83:CE:94:0F:31:E9:CB:DA X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e8:23:75:3b:02:e9:3f:3f:3c:3d:8b:e5:c5:fb:90:55:4a: f4:6e:8c:5b:8a:94:a6:0c:47:6a:62:2f:21:2a:9a:a4:01:f9: 6b:f6:af:17:0c:3f:79:56:88:7e:0a:4a:14:a9:01:e6:41:b6: d2:85:fe:ae:ca:5e:eb:33:29:4d:1c:d5:83:ce:27:b7:18:0a: 0f:83:5e:76:ba:43:b1:08:99:71:a8:ba:83:59:dc:0f:5c:7f: b9:9b:61:b0:f5:50:24:6a:45:9b:ef:f8:ae:0e:da:fc:27:ab: 8a:f1:3c:1f:94:da:e6:3f:1f:87:69:7e:4e:3c:1f:9d:17:db: bb:c7:91:5c:ea:ab:17:e3:e2:07:0a:00:65:8d:6a:51:92:47: 2a:83:21:ee:d4:17:25:64:f7:1f:12:75:d7:b5:3a:9c:d7:62: d3:cf:a2:16:03:e5:b5:f7:74:f5:00:7a:55:3e:e2:51:c0:a8: 9b:df:0c:82:71:38:f4:c2:0c:10:b1:6f:05:88:69:98:0a:5d: b9:51:f2:f3:25:b9:7f:4c:db:9d:33:24:e3:10:2e:11:14:4d: 63:51:a2:f1:5e:96:97:07:b4:b1:ec:06:9b:00:43:df:f6:8d: 7f:b7:70:6f:9d:68:05:87:c7:d5:6b:1f:8f:bb:b4:32:fe:02: ba:b5:5e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbuHrXdPoWT5rilRK4HIyKtxDFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNjAyMDEwMTU3MzBaFw0yNjAyMDQwNDA3MzBaMDMxMTAvBgNV BAMTKERERjVBNTczN0NBNTExODdCMkZDRTVDRjgzQ0U5NDBGMzFFOUNCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIptNRYpY/1RErBghSfRBZU2Y7 rO/Q3uFqaKCdmXiuwh7HfkRGtaDhEdjfhbwQ5hjOy5Juupi2qqe86Z9QDCXTSko5 Om4BtElMgj8iNmpsbbBa0U5Q6nrvQxYS+MzsJtZu0thkekxuzDbdLsCAe7olw80o nE2cPrjORKrZqPl0xojktqZZGFoXju2ClvxL6Ive2DTdMvhvS4TFNh1VCUwaA2u0 xeXnch9FwLHHiIACwf/V0dyc1w+A/+0vlz5/NeD5vj8PFDB03gSSjIcZvqFJlVXE vl2aL4mqecThE2le0IXrL5v7A/vbc8rb9zZVaZM9AY6xwKbd6SheTm6Al45XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3fWlc3ylEYey/OXPg86UDzHpy9owHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHoI3U7Auk/Pzw9i+XF+5BVSvRujFuKlKYM R2piLyEqmqQB+Wv2rxcMP3lWiH4KShSpAeZBttKF/q7KXuszKU0c1YPOJ7cYCg+D Xna6Q7EImXGouoNZ3A9cf7mbYbD1UCRqRZvv+K4O2vwnq4rxPB+U2uY/H4dpfk48 H50X27vHkVzqqxfj4gcKAGWNalGSRyqDIe7UFyVk9x8Sdde1OpzXYtPPohYD5bX3 dPUAelU+4lHAqJvfDIJxOPTCDBCxbwWIaZgKXblR8vMluX9M250zJOMQLhEUTWNR ovFelpcHtLHsBpsAQ9/2jX+3cG+daAWHx9VrH4+7tDL+Arq1XkE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:33 2026 by rpki-client