This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: NgrRoRUUKNtONQzia2Tu4aA8xV8AFmpBbRFdRr9gPEo= Subject key identifier: 0B:25:6E:58:A2:C4:5A:B6:44:70:82:DD:AD:7B:C0:42:7C:38:41:D9 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 5AAB0C4595C6D374D8AE55F16D1B1B3BB0C68D51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 0114 Signing time: Sun 01 Feb 2026 09:12:10 +0000 Manifest this update: Sun 01 Feb 2026 09:07:10 +0000 Manifest next update: Wed 04 Feb 2026 19:41:10 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: M9NqXk74Ua4J03S+12ND2CvC+pbBr9Vu7IIb3lm2Lqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 19:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ab:0c:45:95:c6:d3:74:d8:ae:55:f1:6d:1b:1b:3b:b0:c6:8d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Feb 1 09:07:10 2026 GMT Not After : Feb 4 19:41:10 2026 GMT Subject: CN=0B256E58A2C45AB6447082DDAD7BC0427C3841D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:df:a5:11:d9:61:e2:68:c5:79:85:8c:b8: fe:64:8b:85:77:d7:e7:99:3f:08:3b:63:9e:28:f3: 8f:b9:ef:b4:6b:8c:15:bc:62:39:21:5b:0d:c9:70: 46:aa:21:fd:0d:e4:49:2a:5e:0e:87:c9:95:2c:bf: 7f:11:7f:a4:0d:82:de:d3:33:e4:aa:3c:d9:e3:84: a8:97:67:a7:c5:0b:fa:7a:28:ac:16:50:8f:b0:ef: 38:b1:b8:78:6b:31:7e:4b:e5:4b:6b:70:e0:42:bf: 58:d1:5b:dd:33:02:a9:eb:73:69:ec:16:a7:b4:83: d2:3d:a5:2c:d6:c8:17:1c:e9:df:5c:d9:04:2f:6d: 1a:18:b1:be:b9:c1:9c:50:32:99:94:9d:23:f5:77: 87:5a:94:28:ac:b5:b9:35:e6:08:68:66:34:c3:50: 47:8f:7d:a8:d9:30:9e:d3:03:20:5b:65:77:13:2b: df:a6:13:8b:dd:8d:6a:5d:25:ce:ec:85:01:60:9e: 4f:a4:f6:39:27:a7:74:12:ba:1a:6a:cd:4b:7a:e6: cd:a5:ec:80:b2:69:66:85:5d:3e:a5:7d:f3:3b:f9: 16:af:81:cc:4f:04:fe:ad:22:c1:4c:4b:4f:46:21: 32:71:aa:f9:af:18:3d:a3:24:27:a8:97:b1:e3:59: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:25:6E:58:A2:C4:5A:B6:44:70:82:DD:AD:7B:C0:42:7C:38:41:D9 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ed:3e:34:a6:9c:0f:9e:86:7e:22:ca:61:bb:27:5a:96:83: ae:83:19:e1:05:2e:c9:07:ee:e9:04:4f:4c:42:08:5a:27:3b: 34:6b:5f:b6:b7:ca:3b:df:a9:4e:28:66:6d:fa:2b:43:e4:3b: 64:62:9d:92:2a:f5:9b:84:97:fe:75:42:a2:80:81:fd:24:a8: 81:99:f0:b5:59:4f:7d:a0:3e:a1:2a:4f:5a:de:35:ff:73:1f: 9b:de:4b:e7:79:4b:6c:53:eb:a6:95:bb:84:70:05:5c:41:c7: ca:1e:7c:fa:33:7d:9e:44:0d:ba:3c:0d:ab:ef:dc:80:43:08: 1a:b8:ef:d4:88:96:49:d6:5b:9f:37:79:4d:4b:e9:b9:ee:1e: 00:36:4f:9e:13:27:30:b9:5c:a5:6e:a8:e5:0d:96:50:1b:e2: a7:f3:4f:d9:6c:b3:7f:69:68:cc:14:89:3a:34:86:0e:15:8e: 29:e5:0d:e0:fd:fb:e9:e1:4d:36:51:7a:87:0d:f4:15:12:c9: 58:30:33:c2:70:2a:ac:02:0a:ef:07:58:58:9c:6c:51:a5:a6: 34:e0:10:7f:3a:cc:1c:d0:7a:20:ad:52:e0:cf:c3:ab:1f:49: c1:8e:33:78:8f:06:70:f6:7a:34:c8:cc:b0:e9:5f:f7:11:75: 5c:40:96:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqsMRZXG03TYrlXxbRsbO7DGjVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNjAyMDEwOTA3MTBaFw0yNjAyMDQxOTQxMTBaMDMxMTAvBgNV BAMTKDBCMjU2RTU4QTJDNDVBQjY0NDcwODJEREFEN0JDMDQyN0MzODQxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6N+lEdlh4mjFeYWMuP5ki4V3 1+eZPwg7Y54o84+577RrjBW8YjkhWw3JcEaqIf0N5EkqXg6HyZUsv38Rf6QNgt7T M+SqPNnjhKiXZ6fFC/p6KKwWUI+w7zixuHhrMX5L5UtrcOBCv1jRW90zAqnrc2ns Fqe0g9I9pSzWyBcc6d9c2QQvbRoYsb65wZxQMpmUnSP1d4dalCistbk15ghoZjTD UEePfajZMJ7TAyBbZXcTK9+mE4vdjWpdJc7shQFgnk+k9jknp3QSuhpqzUt65s2l 7ICyaWaFXT6lffM7+RavgcxPBP6tIsFMS09GITJxqvmvGD2jJCeol7HjWRN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCyVuWKLEWrZEcILdrXvAQnw4QdkwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7tPjSmnA+ehn4iymG7J1qWg66DGeEFLskH 7ukET0xCCFonOzRrX7a3yjvfqU4oZm36K0PkO2RinZIq9ZuEl/51QqKAgf0kqIGZ 8LVZT32gPqEqT1reNf9zH5veS+d5S2xT66aVu4RwBVxBx8oefPozfZ5EDbo8Davv 3IBDCBq479SIlknWW583eU1L6bnuHgA2T54TJzC5XKVuqOUNllAb4qfzT9lss39p aMwUiTo0hg4VjinlDeD9++nhTTZReocN9BUSyVgwM8JwKqwCCu8HWFicbFGlpjTg EH86zBzQeiCtUuDPw6sfScGOM3iPBnD2ejTIzLDpX/cRdVxAliM= -----END CERTIFICATE-----Generated at Mon Feb 2 20:56:57 2026 by rpki-client