This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: Tr27WKcc744GhR5Izwr5ZJUFWhFOCcS3lRuEYUin/XM= Subject key identifier: 51:EC:9C:30:82:21:A7:20:C9:67:98:2E:DA:08:7F:0B:91:BE:98:A1 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 78FE77EA44EDA18651554496F2096C1042DE9CCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 024A Signing time: Sat 31 Jan 2026 22:10:42 +0000 Manifest this update: Sat 31 Jan 2026 22:05:42 +0000 Manifest next update: Wed 04 Feb 2026 08:54:42 +0000 Files and hashes: 1: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: SabAm2R+3Dg9C3yDT5zXwVibjn98HKgsDQ7Ar8+Ht+c=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 3: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 4: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fe:77:ea:44:ed:a1:86:51:55:44:96:f2:09:6c:10:42:de:9c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Jan 31 22:05:42 2026 GMT Not After : Feb 4 08:54:42 2026 GMT Subject: CN=51EC9C308221A720C967982EDA087F0B91BE98A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:62:8b:0a:56:85:a1:eb:b6:32:fd:f6:bd: b9:97:e7:cb:db:ea:05:ac:56:b5:0e:f2:a5:a2:60: 2a:e9:00:c4:8e:ae:48:a3:02:7b:ee:72:08:8e:f3: b9:04:b5:6e:60:c2:8f:06:fe:90:f0:36:d7:14:e0: f0:dc:da:e5:52:51:02:e1:6d:f4:ca:ae:27:3b:10: af:09:0e:95:0a:36:f5:59:05:8a:1e:c4:40:d0:8b: f7:f8:e3:24:e4:85:0c:41:53:c4:5f:35:00:f9:e3: 1e:57:09:e3:79:a5:a0:6f:95:76:ca:55:e3:1a:ac: 3f:86:06:b4:97:a2:a0:ec:39:9f:d6:5a:ff:30:10: d0:25:f1:42:39:cc:97:c0:0b:10:73:2e:d5:e9:5e: 85:4c:56:c8:fb:6e:dd:78:c7:20:2c:5a:ee:7c:f0: 68:6c:e4:5e:f3:a5:f8:f9:46:98:56:53:73:52:72: e5:c6:b6:75:be:2c:14:ae:1a:3d:e3:62:93:68:fd: 60:6c:4b:a3:5e:fe:41:a1:81:0d:6d:b8:c3:f5:a2: c9:72:0e:e9:80:35:70:d9:9d:7f:07:6a:6d:10:25: af:b2:d4:6b:7c:70:72:2d:f7:8c:57:45:dd:66:93: c3:b8:90:82:e8:d7:85:bf:5c:e3:ad:bf:f8:50:2b: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EC:9C:30:82:21:A7:20:C9:67:98:2E:DA:08:7F:0B:91:BE:98:A1 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:59:3a:a5:c3:1f:60:5a:29:81:aa:6a:21:26:af:27:8c: 55:89:e5:c2:c3:90:4b:f4:28:a1:cb:80:ba:1f:48:d1:04:6f: 18:12:13:61:08:7b:47:36:cb:67:4c:bb:3b:50:cc:33:cb:c8: 0c:46:6e:ef:9c:9f:ee:86:35:b3:fd:6b:8e:6e:c7:e0:31:33: 76:4d:b3:b1:3f:36:c7:b8:f0:04:9c:b8:47:21:9e:65:8a:ec: a1:09:0f:cf:10:58:91:22:97:7c:c6:09:ee:ad:4f:02:36:e6: ff:1c:e7:5e:51:80:2b:b5:a5:b4:03:df:f4:0a:b8:43:24:41: 93:49:0a:82:4c:75:5f:19:2c:ca:19:ec:d7:d8:de:6e:b0:23: d1:2c:71:b1:c8:ef:e2:fd:62:bb:60:a4:bb:44:90:5f:eb:6a: 39:28:2f:73:dc:3a:56:4c:0e:39:69:81:62:fd:b9:60:b0:6a: 62:6c:74:ff:7e:38:dc:38:4c:21:ce:fa:39:4d:72:f2:0f:5a: d2:1c:73:23:0f:71:d3:f3:93:58:e8:b9:c5:24:00:4e:c0:15: 58:c1:da:49:a6:ce:25:0a:9b:26:e9:9a:59:01:a2:8b:0a:55: 9a:5e:f4:9d:56:62:f9:bc:e2:a4:b7:08:38:c9:06:7a:63:4f: 5f:d5:8c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeP536kTtoYZRVUSW8glsEELenMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNjAxMzEyMjA1NDJaFw0yNjAyMDQwODU0NDJaMDMxMTAvBgNV BAMTKDUxRUM5QzMwODIyMUE3MjBDOTY3OTgyRURBMDg3RjBCOTFCRTk4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbmKLClaFoeu2Mv32vbmX58vb 6gWsVrUO8qWiYCrpAMSOrkijAnvucgiO87kEtW5gwo8G/pDwNtcU4PDc2uVSUQLh bfTKric7EK8JDpUKNvVZBYoexEDQi/f44yTkhQxBU8RfNQD54x5XCeN5paBvlXbK VeMarD+GBrSXoqDsOZ/WWv8wENAl8UI5zJfACxBzLtXpXoVMVsj7bt14xyAsWu58 8Ghs5F7zpfj5RphWU3NScuXGtnW+LBSuGj3jYpNo/WBsS6Ne/kGhgQ1tuMP1osly DumANXDZnX8Ham0QJa+y1Gt8cHIt94xXRd1mk8O4kILo14W/XOOtv/hQK4apAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeycMIIhpyDJZ5gu2gh/C5G+mKEwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhcWTqlwx9gWimBqmohJq8njFWJ5cLDkEv0 KKHLgLofSNEEbxgSE2EIe0c2y2dMuztQzDPLyAxGbu+cn+6GNbP9a45ux+AxM3ZN s7E/Nse48AScuEchnmWK7KEJD88QWJEil3zGCe6tTwI25v8c515RgCu1pbQD3/QK uEMkQZNJCoJMdV8ZLMoZ7NfY3m6wI9EscbHI7+L9YrtgpLtEkF/rajkoL3PcOlZM DjlpgWL9uWCwamJsdP9+ONw4TCHO+jlNcvIPWtIccyMPcdPzk1joucUkAE7AFVjB 2kmmziUKmybpmlkBoosKVZpe9J1WYvm84qS3CDjJBnpjT1/VjCU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:26 2026 by rpki-client