This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: UkFiIlN3Q/Hv94bCK/XOZ2y/nov7MBxpdmYZXnHeg2Y= Subject key identifier: 8C:ED:07:DF:74:EE:AA:2F:72:A2:EB:CD:35:8E:40:E8:0C:7C:77:A3 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 12E10C4B40FC6120248F4D095C651FCE20B4F95E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 04C6 Signing time: Sat 31 Jan 2026 03:10:57 +0000 Manifest this update: Sat 31 Jan 2026 03:05:57 +0000 Manifest next update: Tue 03 Feb 2026 15:02:57 +0000 Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: NxUfSTs+o4y49KJqzzCvLvRJmV1ctiR4iGydszaWllw=) 2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: beBQaTk2//EAP6NnfuhmfkJxxOAnhB8nJqrnoVbonBA=) 3: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: G6AVvsrRjYvVrTGhPh+QaWlbxKgDXucuqnS1IYkRnII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:0c:4b:40:fc:61:20:24:8f:4d:09:5c:65:1f:ce:20:b4:f9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Jan 31 03:05:57 2026 GMT Not After : Feb 3 15:02:57 2026 GMT Subject: CN=8CED07DF74EEAA2F72A2EBCD358E40E80C7C77A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:3f:96:3d:3f:fa:cd:05:fa:29:75:a9:57: 57:c2:99:ce:ec:b3:75:7f:f1:ec:96:b2:cd:9c:9f: dd:a9:c4:f9:d3:e1:d5:6b:31:3c:ca:c9:6d:90:21: d6:8d:9e:51:9f:9c:04:53:8e:c0:c0:79:ac:f2:8a: ed:1f:ab:a4:d6:86:94:b9:2a:d2:f5:ff:5c:86:c0: 0e:0a:de:e3:d4:47:66:32:f7:4c:4f:aa:0f:d3:d0: e0:e2:48:23:d2:2a:3e:4f:a5:52:3d:72:9f:3b:e0: ff:1c:37:3b:aa:d4:00:d6:11:cc:40:c0:88:71:66: e1:fe:2b:6e:21:11:dc:fc:a0:9d:89:47:0b:54:32: 3d:f6:bd:9a:8c:51:18:13:da:61:1e:d8:7f:ef:a2: 7b:98:9b:fb:ff:d5:a7:f1:ba:79:4f:24:47:c6:6b: 9a:f8:ea:ab:71:f2:db:31:f7:2e:2e:56:90:3a:61: 1b:eb:99:f8:64:d0:2a:ee:81:9a:d8:74:3a:b2:6f: d8:64:65:6b:e3:6e:f2:5b:9e:44:df:84:0f:7b:45: 86:07:6b:58:de:1c:38:0e:bb:50:52:61:6d:a5:86: 0b:fc:e8:2d:e1:46:5a:41:f8:64:46:2b:6d:4e:b3: 75:5b:dc:18:26:70:b4:83:c6:bf:a7:63:09:ca:64: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:07:DF:74:EE:AA:2F:72:A2:EB:CD:35:8E:40:E8:0C:7C:77:A3 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:71:4d:91:d1:8f:98:44:c5:30:86:f8:ea:d6:f8:be:06:e8: 3f:78:f5:6e:b6:a7:b5:8f:c4:88:72:29:8e:11:c8:ed:4d:11: f8:c6:ad:b5:2b:b0:62:cc:e2:ce:b2:f8:ae:1f:66:ef:d8:a5: f9:ec:fa:44:16:61:96:24:a4:77:f1:0c:45:bb:20:4d:22:8c: 53:c8:4f:c9:0d:f9:0c:6e:67:c1:31:6b:9d:5c:d8:14:8d:d3: e8:c5:45:e3:b6:0e:35:be:19:6b:14:1a:95:6a:ad:e3:3c:5e: d9:88:4f:a1:52:ab:38:89:f1:78:00:ea:a3:3c:ea:36:1d:c1: bc:5c:f3:31:1f:8a:93:57:ae:3b:39:cb:c2:7b:52:01:41:1d: 78:7c:20:16:f8:40:2c:be:ec:a3:08:25:46:79:85:e3:2b:a8: 4b:a9:41:d9:2b:fb:f7:0b:96:b2:6e:a3:3b:73:92:2c:70:cb: 36:8d:1b:0a:42:45:b2:43:06:72:f9:74:3e:d2:91:a1:a8:5b: 20:c5:9a:b5:f7:2f:4d:7f:35:85:eb:5d:c2:df:9b:c3:12:23: 68:0e:99:06:23:f3:4f:d9:16:37:ca:54:fc:32:b6:24:f4:21: df:8f:b7:6f:05:d3:6f:0c:52:d4:6c:8a:ac:75:59:25:2f:14: fd:fa:eb:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuEMS0D8YSAkj00JXGUfziC0+V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNjAxMzEwMzA1NTdaFw0yNjAyMDMxNTAyNTdaMDMxMTAvBgNV BAMTKDhDRUQwN0RGNzRFRUFBMkY3MkEyRUJDRDM1OEU0MEU4MEM3Qzc3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33z+WPT/6zQX6KXWpV1fCmc7s s3V/8eyWss2cn92pxPnT4dVrMTzKyW2QIdaNnlGfnARTjsDAeazyiu0fq6TWhpS5 KtL1/1yGwA4K3uPUR2Yy90xPqg/T0ODiSCPSKj5PpVI9cp874P8cNzuq1ADWEcxA wIhxZuH+K24hEdz8oJ2JRwtUMj32vZqMURgT2mEe2H/vonuYm/v/1afxunlPJEfG a5r46qtx8tsx9y4uVpA6YRvrmfhk0CrugZrYdDqyb9hkZWvjbvJbnkTfhA97RYYH a1jeHDgOu1BSYW2lhgv86C3hRlpB+GRGK21Os3Vb3BgmcLSDxr+nYwnKZBVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjO0H33Tuqi9youvNNY5A6Ax8d6MwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNxTZHRj5hExTCG+OrW+L4G6D949W62p7WP xIhyKY4RyO1NEfjGrbUrsGLM4s6y+K4fZu/Ypfns+kQWYZYkpHfxDEW7IE0ijFPI T8kN+QxuZ8Exa51c2BSN0+jFReO2DjW+GWsUGpVqreM8XtmIT6FSqziJ8XgA6qM8 6jYdwbxc8zEfipNXrjs5y8J7UgFBHXh8IBb4QCy+7KMIJUZ5heMrqEupQdkr+/cL lrJuoztzkixwyzaNGwpCRbJDBnL5dD7SkaGoWyDFmrX3L01/NYXrXcLfm8MSI2gO mQYj80/ZFjfKVPwytiT0Id+Pt28F028MUtRsiqx1WSUvFP366+E= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:42 2026 by rpki-client