This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: jw+09fUKkXEnQdk4GsjuWsgYUove2hFQ7HJfutx+KpA= Subject key identifier: AF:FE:0A:90:02:7A:D4:5C:03:67:A6:FC:4A:F0:AB:4B:40:62:DA:E3 Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 607B4D70E9011F5FF66EC97CCF6CBC57D43FBC83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 04DA Signing time: Mon 02 Feb 2026 04:41:23 +0000 Manifest this update: Mon 02 Feb 2026 04:36:23 +0000 Manifest next update: Thu 05 Feb 2026 08:06:23 +0000 Files and hashes: 1: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: BgsjrCyINYCKrv4ftuIPSu2mOPXD+eUAe7xDO9Rvd78=) 2: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=) 3: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=) 4: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7b:4d:70:e9:01:1f:5f:f6:6e:c9:7c:cf:6c:bc:57:d4:3f:bc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Feb 2 04:36:23 2026 GMT Not After : Feb 5 08:06:23 2026 GMT Subject: CN=AFFE0A90027AD45C0367A6FC4AF0AB4B4062DAE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:e7:84:1c:5f:cd:4e:61:db:da:13:9d:34: cf:fe:32:55:7d:ad:16:3b:83:f4:29:22:ec:da:94: e6:26:d3:03:aa:a7:20:e5:16:18:2c:b4:82:05:76: 61:a3:76:04:aa:48:0f:a4:f3:4b:05:3d:41:65:a3: 1d:b9:1f:e6:a4:cf:c6:48:77:99:6d:f5:cc:bb:dd: 4b:53:a6:6a:08:bb:76:a7:e5:1e:52:69:34:b6:f4: fc:71:b4:6c:f0:2f:18:21:47:3b:b9:f7:c0:49:e5: 01:a9:17:4b:48:aa:d4:bc:c3:d1:0a:51:64:c4:bf: a2:6b:d7:c2:95:ba:10:fa:6a:77:c5:d0:9a:08:e3: ed:ed:1f:5f:b7:67:89:3d:03:dd:9d:a0:6c:af:e9: 09:00:35:88:9d:06:f9:fe:0a:37:ef:a3:75:0d:59: 19:d3:36:40:9c:7f:4f:2d:a7:82:8d:e2:81:8c:9b: 89:97:65:c7:1e:65:47:39:08:8b:4c:3e:1e:c2:6d: 78:53:21:cc:5d:c8:a0:a2:51:a9:76:7d:84:ca:15: eb:14:f5:1d:c2:63:99:1b:ea:e3:57:0e:39:1e:ca: b9:b7:2c:cd:00:9d:75:bc:8f:72:02:47:67:8b:69: 68:81:1c:58:9e:89:0a:98:f0:bd:72:ba:b2:0b:46: a4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:0A:90:02:7A:D4:5C:03:67:A6:FC:4A:F0:AB:4B:40:62:DA:E3 X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d8:73:91:49:66:5e:e6:0c:4f:7c:4e:48:34:4c:f6:41:19: f4:77:52:bb:12:31:61:21:d5:ef:e7:48:f9:96:9a:04:ef:ea: b0:88:40:dd:14:31:bc:28:51:e6:95:6a:cf:96:0b:59:63:9f: cd:c3:f2:56:2d:b3:75:63:a6:77:62:e8:7b:88:68:8f:e5:8e: 1b:7e:8a:3d:da:ea:8f:7f:81:1b:5f:40:7a:f3:45:7b:4e:24: 91:f9:5d:7a:72:17:62:f1:7f:88:4c:44:1f:b3:8a:ed:49:4e: be:f1:a5:06:53:36:b7:f0:bb:ab:90:1c:75:c5:04:26:02:70: 8d:75:fd:51:be:6b:a7:8e:e2:54:1b:01:a4:13:e1:56:79:11: 28:fa:b3:22:3b:f4:64:1b:2f:eb:1d:ee:43:b8:d7:0a:6b:9c: 65:15:14:b6:d9:82:45:f9:2c:9f:14:09:ab:36:fc:19:99:6c: 6f:da:e6:c4:24:c4:4e:d4:8e:ee:d8:96:3e:b6:df:e5:87:d5: 0c:a6:8a:02:47:8c:6d:8c:b8:06:02:7a:f5:43:63:71:e7:b1: 7b:1f:ed:84:70:c0:fe:e7:d9:c1:2d:70:39:43:cc:73:3b:e7: 02:be:47:20:81:d9:fd:61:84:70:8b:de:b8:fb:fe:09:e2:b8: 3e:e1:56:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHtNcOkBH1/2bsl8z2y8V9Q/vIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNjAyMDIwNDM2MjNaFw0yNjAyMDUwODA2MjNaMDMxMTAvBgNV BAMTKEFGRkUwQTkwMDI3QUQ0NUMwMzY3QTZGQzRBRjBBQjRCNDA2MkRBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLueEHF/NTmHb2hOdNM/+MlV9 rRY7g/QpIuzalOYm0wOqpyDlFhgstIIFdmGjdgSqSA+k80sFPUFlox25H+akz8ZI d5lt9cy73UtTpmoIu3an5R5SaTS29PxxtGzwLxghRzu598BJ5QGpF0tIqtS8w9EK UWTEv6Jr18KVuhD6anfF0JoI4+3tH1+3Z4k9A92doGyv6QkANYidBvn+Cjfvo3UN WRnTNkCcf08tp4KN4oGMm4mXZcceZUc5CItMPh7CbXhTIcxdyKCiUal2fYTKFesU 9R3CY5kb6uNXDjkeyrm3LM0AnXW8j3ICR2eLaWiBHFieiQqY8L1yurILRqQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/4KkAJ61FwDZ6b8SvCrS0Bi2uMwHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnYc5FJZl7mDE98Tkg0TPZBGfR3UrsSMWEh 1e/nSPmWmgTv6rCIQN0UMbwoUeaVas+WC1ljn83D8lYts3Vjpndi6HuIaI/ljht+ ij3a6o9/gRtfQHrzRXtOJJH5XXpyF2Lxf4hMRB+ziu1JTr7xpQZTNrfwu6uQHHXF BCYCcI11/VG+a6eO4lQbAaQT4VZ5ESj6syI79GQbL+sd7kO41wprnGUVFLbZgkX5 LJ8UCas2/BmZbG/a5sQkxE7Uju7Ylj623+WH1QymigJHjG2MuAYCevVDY3HnsXsf 7YRwwP7n2cEtcDlDzHM75wK+RyCB2f1hhHCL3rj7/gniuD7hVlQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:23 2026 by rpki-client