This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: GHjcGltEodJTGykAwX8ReTKHki3RfR54zMgPAzsatlo= Subject key identifier: E3:E2:F3:AC:1E:25:29:1C:9D:A2:27:BD:D4:75:6E:F9:F0:39:A6:48 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 4ABEB4D01C26BAAFB01E8F423AEFA5829EC17674 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 013C Signing time: Sun 01 Feb 2026 15:51:06 +0000 Manifest this update: Sun 01 Feb 2026 15:46:06 +0000 Manifest next update: Thu 05 Feb 2026 01:06:06 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: 4im0dAUjJ5EmF2QitBsdvP03bvYCuVuY3T2j8x1WL4g=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: 5tmgJpVkGQ2qsyCWuTw76Zw0hGyA3Vz2B7ue8FtLftI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 01:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:be:b4:d0:1c:26:ba:af:b0:1e:8f:42:3a:ef:a5:82:9e:c1:76:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Feb 1 15:46:06 2026 GMT Not After : Feb 5 01:06:06 2026 GMT Subject: CN=E3E2F3AC1E25291C9DA227BDD4756EF9F039A648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:cc:c1:ec:b0:03:83:4e:f0:fe:5d:31:a1: 34:75:90:16:6f:fb:fb:4c:ef:76:83:a9:73:7a:82: e1:88:f5:90:67:2f:a1:ad:f6:7b:64:4b:b8:59:51: c3:f8:f8:df:4d:1d:01:c5:db:89:a2:b5:24:2b:3a: 74:e8:5d:03:b4:7d:b1:56:3a:65:0a:a4:88:16:42: de:da:15:f2:74:35:d6:75:d2:03:ff:4a:05:94:86: 4f:ac:2f:d0:70:17:2b:89:df:b9:1f:1b:e3:d4:7b: a2:70:1a:8a:f1:eb:d4:86:77:c3:aa:b9:d5:9b:34: 45:c1:ee:05:a8:ac:38:d6:f8:67:4d:36:5a:36:43: 8b:21:a2:f1:1e:e2:7a:83:3f:44:12:d0:a7:11:23: 5f:52:52:75:ee:55:67:35:3f:4f:f8:16:84:18:2a: d3:1a:a9:9a:23:77:e9:ae:d1:da:62:ac:b4:0a:11: 6d:5d:9b:ae:37:56:25:bc:5c:84:a3:69:ed:8b:9d: bb:e9:ef:7c:c6:5f:58:bc:87:90:26:80:0c:6a:bd: 11:29:69:85:f3:e0:9e:57:4a:f7:e0:c6:8b:f0:1d: 84:6e:d6:1b:c3:2c:13:70:03:22:a6:97:11:7c:08: b2:1f:42:f8:27:d1:d0:77:17:9e:14:d2:2b:38:bc: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:F3:AC:1E:25:29:1C:9D:A2:27:BD:D4:75:6E:F9:F0:39:A6:48 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:d5:e7:1c:96:64:89:f1:5c:0c:9c:53:04:06:6c:9b:7b: 78:79:0f:6f:b0:d6:ae:27:9b:fd:15:61:20:3f:9b:b1:c3:14: fa:ab:67:7c:dc:e6:80:88:cd:bc:9a:c6:c8:a9:d2:47:c7:60: 3f:23:04:91:e5:a1:49:30:21:53:3c:5d:a3:b7:01:44:1e:33: c8:93:61:3c:16:e2:39:30:e4:0b:fc:c8:d9:50:97:ae:64:80: 66:18:51:02:5a:9b:6c:05:09:57:36:fd:94:6d:10:05:bd:65: 96:70:8a:2e:0e:d5:0a:54:a7:28:9b:1c:49:cb:af:5b:27:1d: e3:b0:69:86:70:4f:18:81:b7:78:5a:12:22:6e:e4:04:5a:e4: 67:a4:fe:68:34:1a:12:9e:d2:59:6b:f9:fa:b4:48:d5:b2:e7: 4a:94:a9:db:dd:8e:6a:72:66:67:a5:a1:77:a6:c4:79:c3:15: 3d:ed:dc:93:99:89:58:a9:b1:7f:5b:31:d2:68:02:20:df:53: 66:ad:5d:f3:aa:c6:24:c8:18:f4:ff:37:79:0b:d6:93:f8:f2: 95:35:20:68:6d:bb:39:06:78:01:99:3e:3b:f8:68:6e:0f:33: 54:63:22:fb:c3:a3:66:8b:eb:d3:fb:04:d9:47:a4:eb:4c:69: 82:b4:2f:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSr600Bwmuq+wHo9COu+lgp7BdnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNjAyMDExNTQ2MDZaFw0yNjAyMDUwMTA2MDZaMDMxMTAvBgNV BAMTKEUzRTJGM0FDMUUyNTI5MUM5REEyMjdCREQ0NzU2RUY5RjAzOUE2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYl8zB7LADg07w/l0xoTR1kBZv +/tM73aDqXN6guGI9ZBnL6Gt9ntkS7hZUcP4+N9NHQHF24mitSQrOnToXQO0fbFW OmUKpIgWQt7aFfJ0NdZ10gP/SgWUhk+sL9BwFyuJ37kfG+PUe6JwGorx69SGd8Oq udWbNEXB7gWorDjW+GdNNlo2Q4shovEe4nqDP0QS0KcRI19SUnXuVWc1P0/4FoQY KtMaqZojd+mu0dpirLQKEW1dm643ViW8XISjae2Lnbvp73zGX1i8h5AmgAxqvREp aYXz4J5XSvfgxovwHYRu1hvDLBNwAyKmlxF8CLIfQvgn0dB3F54U0is4vCM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+LzrB4lKRydoie91HVu+fA5pkgwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGN1ecclmSJ8VwMnFMEBmybe3h5D2+w1q4n m/0VYSA/m7HDFPqrZ3zc5oCIzbyaxsip0kfHYD8jBJHloUkwIVM8XaO3AUQeM8iT YTwW4jkw5Av8yNlQl65kgGYYUQJam2wFCVc2/ZRtEAW9ZZZwii4O1QpUpyibHEnL r1snHeOwaYZwTxiBt3haEiJu5ARa5Gek/mg0GhKe0llr+fq0SNWy50qUqdvdjmpy ZmeloXemxHnDFT3t3JOZiVipsX9bMdJoAiDfU2atXfOqxiTIGPT/N3kL1pP48pU1 IGhtuzkGeAGZPjv4aG4PM1RjIvvDo2aL69P7BNlHpOtMaYK0L70= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:08 2026 by rpki-client