This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: DeJulKHBWBExBXwElWD3yrJU4Q9ho47NdvxxTUSgCGc= Subject key identifier: 64:0F:E6:E6:4D:81:F3:0F:69:9D:91:2F:4B:93:45:3F:07:D5:9F:3D Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 7A9DA54455888BC5F569C625BA6DB92583F49FA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 022D Signing time: Sun 01 Feb 2026 05:00:39 +0000 Manifest this update: Sun 01 Feb 2026 04:55:39 +0000 Manifest next update: Wed 04 Feb 2026 06:02:39 +0000 Files and hashes: 1: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: RO3O/i8n9Wl/Njqnh9GoH9YnEQLpUs0Mx+mxBwWPv9Q=) 3: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 4: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 5: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 06:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9d:a5:44:55:88:8b:c5:f5:69:c6:25:ba:6d:b9:25:83:f4:9f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Feb 1 04:55:39 2026 GMT Not After : Feb 4 06:02:39 2026 GMT Subject: CN=640FE6E64D81F30F699D912F4B93453F07D59F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:05:99:f6:d9:e1:73:b3:8e:7f:2b:b2:f1: 23:31:61:56:25:07:b4:ea:2a:54:02:08:12:ab:c9: 63:33:46:bf:13:9e:47:eb:01:2d:ae:66:89:a8:a3: de:8c:d6:08:c3:d3:1f:a6:64:4c:9c:9e:91:94:75: 6b:a3:37:e3:14:35:80:ac:9f:7e:c6:e2:a8:37:89: cf:38:9f:9a:64:cc:9c:55:f6:a7:12:6d:39:48:f7: 8d:54:80:03:c3:d2:23:c8:f3:09:fa:41:99:bc:74: a0:09:59:00:5f:c9:09:85:60:2d:7c:29:1f:d4:42: c0:9a:51:c6:e2:72:1f:dd:03:e2:53:ed:5c:b9:ca: f4:31:8e:e4:a6:8c:78:72:23:97:33:cd:90:94:1b: b3:03:8a:ea:aa:8d:db:be:77:aa:04:19:98:e2:af: 1e:7f:be:ee:98:6a:2f:94:ba:6d:0a:a9:e6:15:7d: c3:56:16:7a:38:19:84:5d:a1:61:8a:77:d3:81:47: 0e:c7:04:84:c3:a7:5a:4e:f8:eb:cc:b8:55:1c:2c: 9b:84:d2:f6:9c:8c:7e:f3:fa:5f:90:e3:c0:ca:9f: 96:53:80:a5:5c:a3:71:06:35:db:ce:5f:8a:6d:05: 43:1f:ed:b4:5f:0a:03:50:c5:b0:05:ec:1e:c9:0e: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0F:E6:E6:4D:81:F3:0F:69:9D:91:2F:4B:93:45:3F:07:D5:9F:3D X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4e:41:c5:aa:a6:68:05:6e:a8:3f:be:5a:42:6f:6f:ab:a7: 65:e5:50:d2:c5:8a:a0:ea:df:0c:c4:76:d7:e7:6c:d9:7f:f0: 57:5c:5d:1c:79:f5:ad:1e:6d:64:71:db:93:4f:e8:b5:9b:20: e9:c9:89:43:a0:74:74:be:4f:09:54:5c:6e:3a:51:87:87:2e: 90:4d:df:ca:4c:08:73:67:76:c0:f3:de:43:a7:9b:65:a4:a6: a7:b2:a4:2f:7f:1f:32:b7:48:0a:5c:16:49:ba:2d:b1:51:84: 2d:42:cc:d8:b8:4d:98:31:72:1d:58:6c:f5:94:a2:2b:b9:75: ec:07:25:8f:ed:cb:c9:ea:60:44:d5:47:27:32:9c:7a:22:d1: 5d:ed:02:7b:2d:d7:50:88:32:bc:6e:67:cc:fd:d4:97:12:0c: 2b:b9:d9:54:84:6e:37:5d:a8:5d:ff:78:14:e0:31:79:2f:2a: ff:95:e5:39:e4:49:49:0a:aa:5f:e8:e8:c9:2d:66:0a:9e:87: 98:f5:e5:43:45:f9:02:48:a7:ce:2f:24:23:a8:fe:f8:05:6b: 3f:3b:73:9b:ec:94:86:a5:b3:8f:db:55:72:11:ed:82:44:67: d5:f8:9c:62:9c:71:cd:7b:dc:de:b2:70:21:6b:82:11:1e:54: a5:72:7e:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUep2lRFWIi8X1acYlum25JYP0n6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNjAyMDEwNDU1MzlaFw0yNjAyMDQwNjAyMzlaMDMxMTAvBgNV BAMTKDY0MEZFNkU2NEQ4MUYzMEY2OTlEOTEyRjRCOTM0NTNGMDdENTlGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4swWZ9tnhc7OOfyuy8SMxYVYl B7TqKlQCCBKryWMzRr8TnkfrAS2uZomoo96M1gjD0x+mZEycnpGUdWujN+MUNYCs n37G4qg3ic84n5pkzJxV9qcSbTlI941UgAPD0iPI8wn6QZm8dKAJWQBfyQmFYC18 KR/UQsCaUcbich/dA+JT7Vy5yvQxjuSmjHhyI5czzZCUG7MDiuqqjdu+d6oEGZji rx5/vu6Yai+Uum0KqeYVfcNWFno4GYRdoWGKd9OBRw7HBITDp1pO+OvMuFUcLJuE 0vacjH7z+l+Q48DKn5ZTgKVco3EGNdvOX4ptBUMf7bRfCgNQxbAF7B7JDncLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZA/m5k2B8w9pnZEvS5NFPwfVnz0wHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxOQcWqpmgFbqg/vlpCb2+rp2XlUNLFiqDq 3wzEdtfnbNl/8FdcXRx59a0ebWRx25NP6LWbIOnJiUOgdHS+TwlUXG46UYeHLpBN 38pMCHNndsDz3kOnm2WkpqeypC9/HzK3SApcFkm6LbFRhC1CzNi4TZgxch1YbPWU oiu5dewHJY/ty8nqYETVRycynHoi0V3tAnst11CIMrxuZ8z91JcSDCu52VSEbjdd qF3/eBTgMXkvKv+V5TnkSUkKql/o6MktZgqeh5j15UNF+QJIp84vJCOo/vgFaz87 c5vslIals4/bVXIR7YJEZ9X4nGKccc173N6ycCFrghEeVKVyfks= -----END CERTIFICATE-----Generated at Mon Feb 2 09:50:42 2026 by rpki-client