This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft File: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft (raw, json) Hash identifier: BVeqiGT9JIWo5paqYhER8lEO9QgffUlMlZZ9aZmkyz0= Subject key identifier: D4:50:77:E5:C7:F9:0A:60:14:0F:95:78:C7:FC:94:58:76:D0:CB:22 Authority key identifier: 3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 Certificate issuer: /CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Certificate serial: 7CBAE65859A1381EF4EF45C8B714E4E595B06AA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft Manifest number: 0231 Signing time: Sat 31 Jan 2026 15:02:27 +0000 Manifest this update: Sat 31 Jan 2026 14:57:27 +0000 Manifest next update: Tue 03 Feb 2026 16:33:27 +0000 Files and hashes: 1: 3130332e3235342e3137312e302f32342d3234203d3e203539313439.roa (hash: j7/0o24Y/Dntb2SDxDz2B+Eis79rWFB0ghqmTnU55LQ=) 2: 3130332e3235342e3136392e302f32342d3234203d3e203539313439.roa (hash: sJUN/+XYslzThounXZW+MFwCm1lc8VEvrGvUm5/WqYY=) 3: 3130332e3235342e3136382e302f32342d3234203d3e203539313439.roa (hash: mvmoi8dcnfPzFCUL4IZOH3T40kp0yAQpvbAqzxB1zYc=) 4: 3130332e3235342e3137302e302f32342d3234203d3e203539313439.roa (hash: Htm5ahdXQHhKpRzE/h5i9KHcwL0XsZbOLaHTHLcsMN8=) 5: 3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl (hash: ZEI/b7RKB7i8HFZ3R9sy7X9W4xFY0++ohqUc2+UlYdg=) 6: 3130332e3235342e3136382e302f32322d3232203d3e203539313439.roa (hash: wNLC96dZ0hf5g5SQzM5GoaCW4xx90rlAQngevEb0OMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ba:e6:58:59:a1:38:1e:f4:ef:45:c8:b7:14:e4:e5:95:b0:6a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074 Validity Not Before: Jan 31 14:57:27 2026 GMT Not After : Feb 3 16:33:27 2026 GMT Subject: CN=D45077E5C7F90A60140F9578C7FC945876D0CB22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:b0:97:21:2f:67:d0:48:7a:10:70:a4:e8: 7c:91:a4:0e:e2:21:3d:9d:c0:7c:af:ba:73:98:cc: 65:dd:6f:47:65:c2:b9:20:b9:1d:2a:ed:f9:c9:9c: 0d:81:f6:89:7d:65:70:e9:1d:a2:5f:dc:d3:d0:2d: a5:ca:7e:aa:fd:86:81:f2:cb:9c:30:09:0f:55:80: 61:e8:88:6a:9f:53:6f:e6:1f:13:de:a5:b7:17:33: 8c:a4:d3:aa:81:27:ea:b5:3b:02:26:0b:e9:2f:f6: 52:c5:b5:eb:02:e3:52:a6:e8:5e:01:8e:0e:84:c5: cc:f5:70:04:de:6c:ef:f4:08:21:37:a7:61:a3:6f: 07:2d:3c:4b:37:03:fe:32:19:56:0b:19:a7:08:0c: 91:08:86:78:98:56:21:4b:c2:28:49:a7:be:fa:19: 93:11:84:c2:a2:3b:27:47:46:50:4b:80:99:31:0f: 7f:69:c9:a4:73:7c:1e:95:42:88:87:47:fc:19:67: 6e:da:a9:2d:21:11:c8:27:24:e2:67:ce:72:76:06: cc:25:c3:81:d8:6c:5e:a1:07:0e:90:f8:32:1b:93: e4:82:a1:99:b7:7f:ff:d8:91:ed:0b:f2:0f:66:b2: b8:a3:20:cf:11:38:b6:56:fe:92:0b:a1:21:f7:9a: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:77:E5:C7:F9:0A:60:14:0F:95:78:C7:FC:94:58:76:D0:CB:22 X509v3 Authority Key Identifier: keyid:3B:2B:A9:E8:D5:35:7A:BD:77:6B:6E:C4:CA:F7:C1:C5:9E:18:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae7d461-0e32-4e65-bb88-d72405b24451/0/3B2BA9E8D5357ABD776B6EC4CAF7C1C59E182074.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:46:89:63:ab:5e:39:c9:c7:3a:d7:85:ff:df:04:69:a8:bb: 78:b5:09:01:97:55:20:65:4c:0b:57:7c:92:03:7b:97:a0:84: 7f:5e:ff:32:9c:35:ec:5b:ad:bb:5d:c6:09:67:33:86:0c:79: 0a:6c:08:66:20:df:c3:2a:e7:a7:5e:b9:49:21:55:45:1c:ec: d0:7b:81:b9:75:07:d3:79:e9:75:61:c3:37:79:b4:b9:69:7a: 65:78:96:a4:40:f7:a4:82:45:c1:96:53:15:62:e2:be:2a:72: 0d:bf:e5:2f:a0:4b:af:00:97:fa:78:00:d4:0a:01:82:aa:b0: c2:0e:6c:10:34:90:96:d3:33:ff:be:ce:e8:88:c9:32:56:84: bb:d1:f6:60:ba:2d:19:bc:45:c3:8c:5e:ce:d7:cf:d8:d2:18: dd:e0:34:fc:95:42:b7:37:ce:2b:e9:38:83:2e:3c:fc:a2:03: 84:8c:02:02:d6:56:64:fc:97:2a:58:b7:df:a9:be:fa:28:32: ed:30:01:9e:8d:a4:e4:e8:06:90:a3:92:8c:20:29:1d:2f:b2: c9:41:5c:c1:a3:c6:bd:48:92:f7:8b:a6:62:d2:8f:9b:aa:b8: c5:b5:10:cc:20:c4:ab:5b:a0:fe:88:b5:5d:84:3e:00:6c:e7: 85:4b:17:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLrmWFmhOB7070XItxTk5ZWwaqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5 RTE4MjA3NDAeFw0yNjAxMzExNDU3MjdaFw0yNjAyMDMxNjMzMjdaMDMxMTAvBgNV BAMTKEQ0NTA3N0U1QzdGOTBBNjAxNDBGOTU3OEM3RkM5NDU4NzZEMENCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNybCXIS9n0Eh6EHCk6HyRpA7i IT2dwHyvunOYzGXdb0dlwrkguR0q7fnJnA2B9ol9ZXDpHaJf3NPQLaXKfqr9hoHy y5wwCQ9VgGHoiGqfU2/mHxPepbcXM4yk06qBJ+q1OwImC+kv9lLFtesC41Km6F4B jg6Excz1cATebO/0CCE3p2GjbwctPEs3A/4yGVYLGacIDJEIhniYViFLwihJp776 GZMRhMKiOydHRlBLgJkxD39pyaRzfB6VQoiHR/wZZ27aqS0hEcgnJOJnznJ2Bswl w4HYbF6hBw6Q+DIbk+SCoZm3f//Yke0L8g9msrijIM8ROLZW/pILoSH3mkz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1FB35cf5CmAUD5V4x/yUWHbQyyIwHwYDVR0j BBgwFoAUOyup6NU1er13a27EyvfBxZ4YIHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU3ZDQ2MS0wZTMyLTRlNjUtYmI4OC1kNzI0MDViMjQ0NTEvMC8zQjJCQTlFOEQ1 MzU3QUJENzc2QjZFQzRDQUY3QzFDNTlFMTgyMDc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0MxQzU5RTE4 MjA3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlN2Q0NjEtMGUzMi00ZTY1LWJi ODgtZDcyNDA1YjI0NDUxLzAvM0IyQkE5RThENTM1N0FCRDc3NkI2RUM0Q0FGN0Mx QzU5RTE4MjA3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1GiWOrXjnJxzrXhf/fBGmou3i1CQGXVSBl TAtXfJIDe5eghH9e/zKcNexbrbtdxglnM4YMeQpsCGYg38Mq56deuUkhVUUc7NB7 gbl1B9N56XVhwzd5tLlpemV4lqRA96SCRcGWUxVi4r4qcg2/5S+gS68Al/p4ANQK AYKqsMIObBA0kJbTM/++zuiIyTJWhLvR9mC6LRm8RcOMXs7Xz9jSGN3gNPyVQrc3 zivpOIMuPPyiA4SMAgLWVmT8lypYt9+pvvooMu0wAZ6NpOToBpCjkowgKR0vsslB XMGjxr1IkveLpmLSj5uquMW1EMwgxKtboP6ItV2EPgBs54VLF88= -----END CERTIFICATE-----Generated at Mon Feb 2 09:47:08 2026 by rpki-client