This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: tMr2Y4ofu+ZamPO58z2F3ZO2wjkD1/zKlbktmb0+Idk= Subject key identifier: B0:8C:71:47:0D:54:89:86:F1:98:A3:94:89:1F:5E:69:B8:82:B4:97 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 5D953B2B1AAB7E5CA68C921DE3365EFA67F31BAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 0238 Signing time: Sat 31 Jan 2026 12:31:02 +0000 Manifest this update: Sat 31 Jan 2026 12:26:02 +0000 Manifest next update: Tue 03 Feb 2026 19:56:02 +0000 Files and hashes: 1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 2: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: 2SD3yIcqCQgPHGsWvKhxXA2Ld1Dnr1AF9HrEnpX6xxQ=) 3: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) 4: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:3b:2b:1a:ab:7e:5c:a6:8c:92:1d:e3:36:5e:fa:67:f3:1b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Jan 31 12:26:02 2026 GMT Not After : Feb 3 19:56:02 2026 GMT Subject: CN=B08C71470D548986F198A394891F5E69B882B497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:7b:35:0d:a2:33:26:cc:cb:11:de:dd:34: fa:dc:62:b2:1d:1d:1d:46:52:2f:09:ba:ee:b5:11: 91:9a:99:5d:51:a1:3f:34:1d:e9:b5:4c:75:b3:ec: 74:1d:89:4d:9f:68:fc:10:b7:f6:b5:d6:51:fa:5a: 0f:d4:1f:9f:a2:95:e1:95:95:3a:74:57:95:2f:8d: 8f:6e:13:e8:50:5e:a6:24:45:40:c7:e5:3e:df:d2: 17:c8:61:65:8e:f3:29:b7:83:2d:89:d3:c1:a8:6c: f9:72:24:01:ae:12:66:92:e1:cb:ee:9b:3e:93:48: 98:1d:ce:9c:bd:3a:60:20:6b:77:ce:f3:44:86:20: a8:86:f3:41:b8:79:cf:b5:33:53:40:f5:66:76:99: 3f:a4:1f:59:aa:b3:ee:db:86:fd:18:22:b0:fc:73: 94:1c:89:6d:11:2f:56:56:b5:13:06:bd:5b:17:c9: 20:70:f5:fd:37:cd:8c:ad:bf:25:60:c0:be:47:62: 44:52:5f:92:39:c3:62:1a:e0:fc:20:4f:a8:b0:9b: 2f:88:1e:aa:f0:ad:66:d3:3d:ea:9a:9e:b9:3d:48: 7d:08:01:e7:b8:50:6c:2c:25:93:2a:5b:4f:c3:15: 35:ef:89:37:5a:6e:4a:c9:7c:97:90:93:ca:99:9f: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:71:47:0D:54:89:86:F1:98:A3:94:89:1F:5E:69:B8:82:B4:97 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:2d:aa:6b:66:3a:72:cf:78:de:98:3b:d3:67:7f:5e:67:33: 2a:51:2f:0b:f7:e8:4b:5b:a4:82:1e:13:1c:1c:2c:2c:68:15: ac:8a:4c:a5:67:7a:af:63:14:64:da:4c:77:c9:f8:0d:da:50: c6:ec:da:b3:f6:6f:6e:dd:32:f1:b7:05:ed:b6:4f:86:b3:89: 84:a5:a4:c3:a2:8d:e6:49:ff:4f:ce:d2:a3:9d:3c:dc:36:c6: 9c:8b:04:2b:83:d6:88:f2:57:9b:ca:99:dd:db:bd:9d:1c:28: c8:9d:48:d6:d8:56:51:88:bd:b8:b5:ff:7e:c2:e8:f5:f1:97: eb:06:5a:96:10:7c:f5:cf:bd:04:25:ff:b8:88:79:bd:ba:02: ce:bc:f2:d0:05:73:9a:72:c0:aa:0a:d3:db:36:7e:bc:d5:37: cd:d9:ae:7b:90:9f:83:8a:a4:1c:7c:7e:77:22:40:af:e8:ea: c4:ed:a7:47:8d:4f:d3:76:25:07:24:3c:52:1a:ba:1b:45:65: 47:8b:56:cf:06:58:e2:59:e4:54:80:bb:f8:ab:b0:c6:cc:77: 38:fc:ea:bf:fa:8b:46:10:6f:23:b6:e6:81:4d:bb:0b:7f:01: 3c:e6:a0:9f:c2:68:5d:79:c9:ad:29:ed:2f:8b:db:c0:7a:48: 1c:e2:94:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZU7KxqrflymjJId4zZe+mfzG6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNjAxMzExMjI2MDJaFw0yNjAyMDMxOTU2MDJaMDMxMTAvBgNV BAMTKEIwOEM3MTQ3MEQ1NDg5ODZGMTk4QTM5NDg5MUY1RTY5Qjg4MkI0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkns1DaIzJszLEd7dNPrcYrId HR1GUi8Juu61EZGamV1RoT80Hem1THWz7HQdiU2faPwQt/a11lH6Wg/UH5+ileGV lTp0V5UvjY9uE+hQXqYkRUDH5T7f0hfIYWWO8ym3gy2J08GobPlyJAGuEmaS4cvu mz6TSJgdzpy9OmAga3fO80SGIKiG80G4ec+1M1NA9WZ2mT+kH1mqs+7bhv0YIrD8 c5QciW0RL1ZWtRMGvVsXySBw9f03zYytvyVgwL5HYkRSX5I5w2Ia4PwgT6iwmy+I HqrwrWbTPeqanrk9SH0IAee4UGwsJZMqW0/DFTXviTdabkrJfJeQk8qZnyPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsIxxRw1UiYbxmKOUiR9eabiCtJcwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgtqmtmOnLPeN6YO9Nnf15nMypRLwv36Etb pIIeExwcLCxoFayKTKVneq9jFGTaTHfJ+A3aUMbs2rP2b27dMvG3Be22T4aziYSl pMOijeZJ/0/O0qOdPNw2xpyLBCuD1ojyV5vKmd3bvZ0cKMidSNbYVlGIvbi1/37C 6PXxl+sGWpYQfPXPvQQl/7iIeb26As688tAFc5pywKoK09s2frzVN83ZrnuQn4OK pBx8fnciQK/o6sTtp0eNT9N2JQckPFIauhtFZUeLVs8GWOJZ5FSAu/irsMbMdzj8 6r/6i0YQbyO25oFNuwt/ATzmoJ/CaF15ya0p7S+L28B6SBzilFQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:02 2026 by rpki-client