This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: L3RVukIeDqjP17cOwKIlMeXkm7PFt3dqOo4VC2vEPOs= Subject key identifier: ED:0D:2A:0A:8E:F9:B7:42:DB:CC:F3:1F:04:EF:8F:CB:F0:53:62:63 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 291C73B7A22253F5989C09CA1BA782E4B1D0D56D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: A5 Signing time: Sun 01 Feb 2026 23:31:18 +0000 Manifest this update: Sun 01 Feb 2026 23:26:18 +0000 Manifest next update: Thu 05 Feb 2026 08:28:18 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: dAJLtki4FgwnK/unJlVFNpErDDTi2ZipLAQh4u/cBa4=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 3AL9wnFX7NUdd15jINa43wjhnEOlPugDH4MAafaXB/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1c:73:b7:a2:22:53:f5:98:9c:09:ca:1b:a7:82:e4:b1:d0:d5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Feb 1 23:26:18 2026 GMT Not After : Feb 5 08:28:18 2026 GMT Subject: CN=ED0D2A0A8EF9B742DBCCF31F04EF8FCBF0536263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:e9:91:8f:ed:7c:a6:37:99:09:59:a3:a8: 9b:be:b4:bd:b1:0a:05:19:67:39:89:60:6d:63:b1: e6:51:f1:e5:b7:fd:cb:b0:89:39:41:36:46:76:59: ad:17:b4:a3:e5:61:05:4a:99:b2:d3:e6:dd:f9:67: 6c:dc:50:93:a9:a2:c6:88:a5:3b:2f:b0:24:16:da: 5e:8d:93:53:09:b5:d7:46:e0:fb:b1:cb:6c:5b:7c: cc:d0:aa:2f:25:08:e7:fa:3e:2d:2b:0b:ca:0e:aa: 7d:1a:a7:6f:6d:b4:2e:67:76:40:4f:21:7a:47:15: d3:1f:f9:fc:02:22:5b:0a:24:f9:c6:56:0a:c7:3d: 3b:97:77:0f:37:81:ec:c1:c8:2b:a8:ac:2a:81:38: c8:0e:da:c3:78:9d:fc:05:1a:98:47:b1:84:fd:5d: 1a:6f:84:33:f7:61:21:99:33:a6:ce:72:36:15:e5: d3:fb:74:0d:68:fc:91:f2:d5:35:34:87:fb:4e:26: 7f:e8:3e:92:3e:f9:f4:a2:34:09:52:cf:1b:12:1e: 15:04:ba:e7:7a:bf:f1:0c:7e:1b:97:ff:92:7a:59: a2:86:d2:21:fc:35:00:0f:1c:56:61:7e:8d:fa:f5: 51:67:9d:97:62:c5:d4:6a:71:c1:9e:3b:da:0c:2d: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0D:2A:0A:8E:F9:B7:42:DB:CC:F3:1F:04:EF:8F:CB:F0:53:62:63 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:45:69:13:27:7e:0a:91:29:9c:0f:8d:28:f8:6f:24:4e:40: c8:fb:d5:09:9d:1f:bf:99:d3:15:04:3b:ee:9c:22:3d:b2:86: 69:98:62:7f:51:f6:e7:17:97:3c:76:cc:8f:21:6c:31:df:ce: 3d:e9:00:ba:f1:3c:e1:a8:e7:27:23:cd:fe:e5:9b:63:d2:f1: ed:77:9f:74:db:29:24:14:b3:b4:b5:06:c3:bf:26:0d:97:ee: 3b:65:1a:90:93:ea:40:f9:79:27:06:3d:ac:23:bd:54:dd:c8: a9:58:21:05:37:9a:97:b5:2b:ab:00:41:fa:ad:36:53:a9:14: 8a:f8:65:d9:9c:c5:97:bf:46:c5:c5:f8:06:b7:06:a0:77:de: aa:07:f3:83:95:8c:7e:25:60:f8:fe:c4:a5:aa:0f:51:ce:20: bf:ee:73:c0:15:4b:b4:26:60:10:ff:34:b3:67:3d:7d:74:5e: 96:34:ff:a7:f3:6b:db:2d:58:52:43:0b:ac:34:0f:9f:63:82: 59:b4:50:88:9b:33:a9:98:3e:35:30:44:98:93:7c:c0:b9:fa: d9:08:1b:17:04:f8:1e:76:8f:b4:76:dc:15:b4:f6:5a:b4:26: 06:b7:ab:26:c0:67:b6:e1:d6:61:a6:c1:60:fc:6d:d9:0a:5e: b4:f7:e2:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRxzt6IiU/WYnAnKG6eC5LHQ1W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNjAyMDEyMzI2MThaFw0yNjAyMDUwODI4MThaMDMxMTAvBgNV BAMTKEVEMEQyQTBBOEVGOUI3NDJEQkNDRjMxRjA0RUY4RkNCRjA1MzYyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+OmRj+18pjeZCVmjqJu+tL2x CgUZZzmJYG1jseZR8eW3/cuwiTlBNkZ2Wa0XtKPlYQVKmbLT5t35Z2zcUJOposaI pTsvsCQW2l6Nk1MJtddG4Puxy2xbfMzQqi8lCOf6Pi0rC8oOqn0ap29ttC5ndkBP IXpHFdMf+fwCIlsKJPnGVgrHPTuXdw83gezByCuorCqBOMgO2sN4nfwFGphHsYT9 XRpvhDP3YSGZM6bOcjYV5dP7dA1o/JHy1TU0h/tOJn/oPpI++fSiNAlSzxsSHhUE uud6v/EMfhuX/5J6WaKG0iH8NQAPHFZhfo369VFnnZdixdRqccGeO9oMLQ3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Q0qCo75t0LbzPMfBO+Py/BTYmMwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9FaRMnfgqRKZwPjSj4byROQMj71QmdH7+Z 0xUEO+6cIj2yhmmYYn9R9ucXlzx2zI8hbDHfzj3pALrxPOGo5ycjzf7lm2PS8e13 n3TbKSQUs7S1BsO/Jg2X7jtlGpCT6kD5eScGPawjvVTdyKlYIQU3mpe1K6sAQfqt NlOpFIr4ZdmcxZe/RsXF+Aa3BqB33qoH84OVjH4lYPj+xKWqD1HOIL/uc8AVS7Qm YBD/NLNnPX10XpY0/6fza9stWFJDC6w0D59jglm0UIibM6mYPjUwRJiTfMC5+tkI GxcE+B52j7R23BW09lq0Jga3qybAZ7bh1mGmwWD8bdkKXrT34vg= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:48 2026 by rpki-client