This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: tye5xaa2Jh+AoD5NLf9RRknjuB82dxvzKXuPsMY+3pA= Subject key identifier: 98:B0:D7:D9:70:3D:A5:F8:19:82:1E:BD:1C:77:C8:F6:48:59:3C:30 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 17DE232D5736798739FC418667254C6E8E2A86A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 022D Signing time: Sun 25 Jan 2026 06:21:22 +0000 Manifest this update: Sun 25 Jan 2026 06:16:22 +0000 Manifest next update: Wed 28 Jan 2026 14:37:22 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: L7z+hDoC3WE8dWm0sQi82f71kn1VcvSOlRPEpSqSlBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:de:23:2d:57:36:79:87:39:fc:41:86:67:25:4c:6e:8e:2a:86:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Jan 25 06:16:22 2026 GMT Not After : Jan 28 14:37:22 2026 GMT Subject: CN=98B0D7D9703DA5F819821EBD1C77C8F648593C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6f:35:ce:33:a3:73:6c:d3:88:00:ff:d5:58: 45:8a:1d:ad:20:41:59:f6:e8:a1:7b:0a:00:4b:12: 40:ce:82:00:8a:78:14:79:57:59:38:1d:88:e0:78: e5:9e:8c:d6:3c:39:c9:a7:c5:c7:be:48:f7:15:26: 21:ba:9c:ec:62:c6:de:27:d0:00:17:53:d9:55:86: 6b:14:b6:58:b5:16:18:73:ba:f2:58:90:59:dd:99: 35:1a:18:b3:36:6e:f1:7b:8c:71:21:9d:d9:7a:1a: fa:ef:5d:4f:8e:fe:8a:b7:f6:55:6a:3d:07:5c:79: 47:14:1e:83:78:74:03:7c:6a:52:75:51:27:69:a9: 2d:c6:0d:10:19:bd:99:d6:e1:3d:bb:cd:e9:b1:58: 12:4b:dc:a9:3e:f3:ec:e9:ae:52:2e:e9:7d:2c:26: 55:d5:06:63:8c:55:de:d8:ff:32:90:fb:dc:da:d2: 09:50:07:e2:47:c3:87:1f:98:27:f7:92:1e:d9:25: 07:9d:09:d2:a4:15:17:b2:cf:ef:22:1a:f5:ca:9a: 02:7b:a0:32:8c:44:18:0b:6d:2c:0a:7f:69:a1:52: dc:dc:50:54:df:ab:55:32:aa:45:ce:1e:8a:5f:fa: c6:5d:73:1d:07:2e:c3:3c:35:bc:39:2a:3c:42:6f: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B0:D7:D9:70:3D:A5:F8:19:82:1E:BD:1C:77:C8:F6:48:59:3C:30 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:79:ba:bd:c2:85:f1:62:5b:c2:28:1d:83:cf:2f:cb:49:fd: ba:de:82:e0:91:c7:ad:c0:76:e9:63:3d:c8:7f:e1:6e:e9:0f: df:c2:63:e8:f6:db:61:92:73:75:89:c1:29:7d:62:63:82:df: 07:38:fe:85:0d:b5:4e:ce:bf:c2:40:fd:f4:84:09:85:09:60: 5c:e2:be:7d:23:5c:25:b8:74:b7:8e:3c:51:27:af:e1:55:60: 1d:4f:cb:f6:b5:93:db:f7:7f:98:d2:2d:31:5c:63:5c:29:c2: 25:48:bc:0a:21:f7:9a:fa:90:d6:25:3b:7b:0a:f1:f3:b6:35: d9:8f:af:7c:47:c9:5c:b7:1b:f3:20:de:22:a1:88:39:f8:9a: b5:bc:7f:a1:ac:17:39:c0:9a:80:69:e7:ed:50:1d:21:9f:3a: 45:82:ce:6b:3a:49:8b:67:da:27:b2:69:1a:ce:e5:0c:ff:58: 4a:5b:8e:4a:ce:9f:d7:dc:5b:6a:32:78:c6:53:13:88:9f:27: 92:09:ff:d3:f2:ec:33:11:62:7b:93:33:2f:08:39:60:0f:6e: e2:ae:c4:c9:d5:d4:77:52:51:a0:bf:bb:0a:4d:08:20:ea:49: 09:31:c2:7e:aa:a3:75:dd:ea:91:8a:0e:1d:17:da:78:da:3b: a8:e5:c3:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF94jLVc2eYc5/EGGZyVMbo4qhqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNjAxMjUwNjE2MjJaFw0yNjAxMjgxNDM3MjJaMDMxMTAvBgNV BAMTKDk4QjBEN0Q5NzAzREE1RjgxOTgyMUVCRDFDNzdDOEY2NDg1OTNDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbzXOM6NzbNOIAP/VWEWKHa0g QVn26KF7CgBLEkDOggCKeBR5V1k4HYjgeOWejNY8Ocmnxce+SPcVJiG6nOxixt4n 0AAXU9lVhmsUtli1FhhzuvJYkFndmTUaGLM2bvF7jHEhndl6GvrvXU+O/oq39lVq PQdceUcUHoN4dAN8alJ1USdpqS3GDRAZvZnW4T27zemxWBJL3Kk+8+zprlIu6X0s JlXVBmOMVd7Y/zKQ+9za0glQB+JHw4cfmCf3kh7ZJQedCdKkFReyz+8iGvXKmgJ7 oDKMRBgLbSwKf2mhUtzcUFTfq1UyqkXOHopf+sZdcx0HLsM8Nbw5KjxCb1+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLDX2XA9pfgZgh69HHfI9khZPDAwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANd5ur3ChfFiW8IoHYPPL8tJ/breguCRx63A duljPch/4W7pD9/CY+j222GSc3WJwSl9YmOC3wc4/oUNtU7Ov8JA/fSECYUJYFzi vn0jXCW4dLeOPFEnr+FVYB1Py/a1k9v3f5jSLTFcY1wpwiVIvAoh95r6kNYlO3sK 8fO2NdmPr3xHyVy3G/Mg3iKhiDn4mrW8f6GsFznAmoBp5+1QHSGfOkWCzms6SYtn 2ieyaRrO5Qz/WEpbjkrOn9fcW2oyeMZTE4ifJ5IJ/9Py7DMRYnuTMy8IOWAPbuKu xMnV1HdSUaC/uwpNCCDqSQkxwn6qo3Xd6pGKDh0X2njaO6jlw5o= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:35 2026 by rpki-client