This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: x7stTpDxlgbitPI06Bi88ocd8Qzm5RRX/wY3YsKkR4c= Subject key identifier: 4B:6F:FB:EF:6F:69:A0:82:A3:10:7F:BF:51:FB:A5:38:C1:BE:1C:8C Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 52912FF2916551A0DA0336DCB5FE4FF45931649E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04F4 Signing time: Fri 02 Jan 2026 14:21:23 +0000 Manifest this update: Fri 02 Jan 2026 14:16:23 +0000 Manifest next update: Tue 06 Jan 2026 02:00:23 +0000 Files and hashes: 1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: op/rqv8WwBIE8oeYouFLoa3QVxn2AJVVCYLcDh85DvQ=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 11:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:91:2f:f2:91:65:51:a0:da:03:36:dc:b5:fe:4f:f4:59:31:64:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Jan 2 14:16:23 2026 GMT Not After : Jan 6 02:00:23 2026 GMT Subject: CN=4B6FFBEF6F69A082A3107FBF51FBA538C1BE1C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:1a:25:87:68:0d:bd:8f:3e:e3:e5:84:80: 33:5d:55:c3:b4:b1:db:2d:50:43:60:e2:f8:33:10: a9:40:c5:bb:71:69:a2:71:d6:77:d6:54:c5:54:b7: 54:0c:ae:3f:fb:e4:78:30:6c:4d:61:4b:5c:72:25: 7f:2c:1b:24:db:89:f7:ed:28:81:68:c5:16:f0:c1: 95:03:58:20:47:a7:58:cb:fb:2c:8a:1c:74:2d:4e: da:ac:bc:38:42:76:82:7a:11:53:a7:23:b3:bc:46: ec:ca:a4:f4:f2:27:ca:60:8c:9c:4d:9c:21:e7:42: af:69:7e:b4:ce:07:52:f1:5f:f7:b8:56:db:a9:17: 6a:bb:2b:46:f6:8b:eb:e4:b1:b5:0f:28:e9:78:6e: 76:41:35:6b:1e:2b:00:dd:93:cb:10:ce:e7:43:7e: 57:b4:de:2c:de:95:73:b2:d0:6d:d4:c7:d8:5a:88: 1f:1e:d8:4c:5b:f6:61:80:29:39:a1:45:7b:3b:e1: a5:6d:21:39:1f:6d:c6:7b:1f:bc:e3:85:86:10:82: e0:13:b4:95:1e:73:cb:57:40:45:f5:9d:0a:03:1d: 5d:7a:27:06:ef:91:74:42:02:a6:74:07:72:ea:62: 0e:53:1c:be:a7:cd:6e:d4:45:91:2d:2c:0e:91:7d: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6F:FB:EF:6F:69:A0:82:A3:10:7F:BF:51:FB:A5:38:C1:BE:1C:8C X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c3:17:8e:4d:b8:a8:fc:77:11:ba:fa:d7:1f:25:02:a2:10: e9:5d:16:c7:7e:22:82:c3:8d:7b:2c:f9:b2:0a:a6:22:7b:c4: ae:ce:91:7d:b2:dc:26:6c:11:16:ce:0e:f5:fb:4d:19:3d:17: 0c:5b:d3:f6:45:22:66:e2:89:8a:73:66:45:9a:e0:f9:59:36: f6:4b:8b:48:06:8c:d5:00:9a:11:02:9a:02:a4:86:b5:be:a7: 5c:35:3b:1a:d5:70:d7:9f:52:41:cd:49:bc:07:a3:7c:b2:a8: 4d:42:9e:42:3d:73:31:3e:29:fc:30:8f:3d:e8:0c:e9:cb:01: f6:30:c6:34:7a:33:6b:5c:54:19:51:25:95:07:67:a9:8b:70: f8:a7:3d:c1:f6:6a:19:03:23:65:7e:d9:16:2f:1d:80:73:bb: 02:7e:93:b5:c2:e1:53:d8:41:f0:1f:a1:ce:13:05:0f:d5:cb: 6d:9a:44:a5:50:b6:01:34:90:3f:ac:9a:87:92:1b:14:f2:48: f9:fd:f7:95:e0:dd:99:19:27:f2:15:2b:f7:97:b3:87:12:58: 56:b3:e8:39:fe:9e:b7:e6:ca:ee:34:b7:07:f1:8a:62:33:d8: b5:f2:5c:fc:66:e5:bb:fb:ab:db:2a:35:0f:5b:b5:c9:a2:49: 7a:08:b8:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpEv8pFlUaDaAzbctf5P9FkxZJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNjAxMDIxNDE2MjNaFw0yNjAxMDYwMjAwMjNaMDMxMTAvBgNV BAMTKDRCNkZGQkVGNkY2OUEwODJBMzEwN0ZCRjUxRkJBNTM4QzFCRTFDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxxolh2gNvY8+4+WEgDNdVcO0 sdstUENg4vgzEKlAxbtxaaJx1nfWVMVUt1QMrj/75HgwbE1hS1xyJX8sGyTbifft KIFoxRbwwZUDWCBHp1jL+yyKHHQtTtqsvDhCdoJ6EVOnI7O8RuzKpPTyJ8pgjJxN nCHnQq9pfrTOB1LxX/e4VtupF2q7K0b2i+vksbUPKOl4bnZBNWseKwDdk8sQzudD fle03izelXOy0G3Ux9haiB8e2Exb9mGAKTmhRXs74aVtITkfbcZ7H7zjhYYQguAT tJUec8tXQEX1nQoDHV16JwbvkXRCAqZ0B3LqYg5THL6nzW7URZEtLA6RfbaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2/7729poIKjEH+/UfulOMG+HIwwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfDF45NuKj8dxG6+tcfJQKiEOldFsd+IoLD jXss+bIKpiJ7xK7OkX2y3CZsERbODvX7TRk9Fwxb0/ZFImbiiYpzZkWa4PlZNvZL i0gGjNUAmhECmgKkhrW+p1w1OxrVcNefUkHNSbwHo3yyqE1CnkI9czE+Kfwwjz3o DOnLAfYwxjR6M2tcVBlRJZUHZ6mLcPinPcH2ahkDI2V+2RYvHYBzuwJ+k7XC4VPY QfAfoc4TBQ/Vy22aRKVQtgE0kD+smoeSGxTySPn995Xg3ZkZJ/IVK/eXs4cSWFaz 6Dn+nrfmyu40twfximIz2LXyXPxm5bv7q9sqNQ9btcmiSXoIuG0= -----END CERTIFICATE-----Generated at Fri Jan 2 17:36:40 2026 by rpki-client