This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: zIU6YHjRUk9GwUlLFz2VqHtSGYTL8VCWN6kyNSym010= Subject key identifier: 37:FB:B9:2B:BF:F2:3E:F8:34:4D:A2:A0:AB:A9:78:38:E9:7E:27:DE Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 28296DDBD81D027B783279EF53420533B4599F9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 03C9 Signing time: Sat 31 Jan 2026 00:01:06 +0000 Manifest this update: Fri 30 Jan 2026 23:56:06 +0000 Manifest next update: Tue 03 Feb 2026 09:22:06 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: Rq94gecORhqQwiU/gM9BItcFeepiy3d+Rn00JYanCao=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 09:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:29:6d:db:d8:1d:02:7b:78:32:79:ef:53:42:05:33:b4:59:9f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Jan 30 23:56:06 2026 GMT Not After : Feb 3 09:22:06 2026 GMT Subject: CN=37FBB92BBFF23EF8344DA2A0ABA97838E97E27DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:31:bd:70:4c:55:89:ea:85:ec:94:08:c2: 54:18:18:f8:45:3c:dd:97:c2:2a:42:62:b3:ff:28: 1a:b5:df:12:78:88:73:1b:00:06:f2:89:4a:0f:a4: 41:cc:e9:33:4c:da:84:87:d2:9b:74:07:a4:f8:90: d9:f9:64:0b:0b:15:84:f1:fc:90:5a:06:2e:57:2d: 82:43:39:de:27:d0:d0:31:d8:fc:db:f4:93:71:1f: 01:f6:6a:ba:f8:bb:d5:5e:20:43:11:ea:9b:d7:80: 90:47:ab:6c:ed:f1:59:81:ac:e1:4e:c5:83:95:5f: ac:73:ac:24:a9:17:86:a3:32:fb:e5:ed:99:a9:cc: 9d:7a:99:22:c7:05:50:aa:dd:e3:9e:f6:5e:5e:39: 78:95:3b:b9:00:1d:6c:f8:c3:37:d9:45:77:7a:5d: b3:dc:78:e9:55:e4:41:06:46:8d:05:af:d9:42:cc: 34:03:b0:68:1a:e8:0a:70:7a:03:fc:ea:e8:31:ff: 63:96:5d:b8:b5:5f:2c:bb:c8:c2:c3:cf:c2:81:a4: 12:6c:b1:9b:b9:2f:ff:31:9a:a9:0a:8b:04:54:b3: 60:57:e2:d5:ae:cc:c8:a5:c5:dd:d3:d0:55:92:98: f3:0b:ae:89:5a:bb:46:a6:85:de:18:e7:74:0e:24: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:B9:2B:BF:F2:3E:F8:34:4D:A2:A0:AB:A9:78:38:E9:7E:27:DE X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cd:81:ec:89:38:41:47:e4:81:a6:4d:4f:6b:5c:8f:50:15: fb:9b:83:c3:fe:7c:16:a8:f4:85:3a:22:e9:78:ad:1a:35:40: 4c:1c:13:5f:08:4a:5f:ff:62:52:2f:c1:72:82:33:e6:46:1b: 83:2c:a6:ca:4c:39:bf:10:97:8b:6b:8a:9e:f8:0d:35:d0:e2: 04:43:07:f5:15:e4:a3:8d:35:3f:20:d4:fc:1b:ae:8c:b2:ad: 7e:7b:5a:99:c2:79:89:b1:91:8d:5d:11:48:9c:65:eb:60:52: b7:5a:8c:14:a4:d0:ec:6a:a9:e4:11:b0:fd:a0:eb:a2:2b:c4: d7:fe:e0:a0:bf:3d:7d:d7:05:41:50:db:89:73:e8:ec:6d:d3: e2:df:12:78:79:51:6b:5c:06:9b:c9:83:0b:b1:e9:92:79:59: 03:52:7a:16:39:5f:5a:41:c8:21:67:35:35:cf:ab:fc:6a:7e: af:64:c6:6f:06:ef:8d:d3:fb:d5:e1:4c:c2:5e:d0:ac:ac:11: 59:62:6f:a2:80:88:57:c4:1f:2f:d7:c2:9f:32:1f:84:49:2c: b1:e7:1c:a1:d9:a9:71:a9:40:de:ae:df:65:90:86:0d:2f:fb: 37:2d:67:8a:5b:1d:e0:2f:57:b3:18:76:9f:77:e0:ba:0b:7f: bf:e9:78:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKClt29gdAnt4MnnvU0IFM7RZn5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNjAxMzAyMzU2MDZaFw0yNjAyMDMwOTIyMDZaMDMxMTAvBgNV BAMTKDM3RkJCOTJCQkZGMjNFRjgzNDREQTJBMEFCQTk3ODM4RTk3RTI3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkTG9cExVieqF7JQIwlQYGPhF PN2XwipCYrP/KBq13xJ4iHMbAAbyiUoPpEHM6TNM2oSH0pt0B6T4kNn5ZAsLFYTx /JBaBi5XLYJDOd4n0NAx2Pzb9JNxHwH2arr4u9VeIEMR6pvXgJBHq2zt8VmBrOFO xYOVX6xzrCSpF4ajMvvl7ZmpzJ16mSLHBVCq3eOe9l5eOXiVO7kAHWz4wzfZRXd6 XbPceOlV5EEGRo0Fr9lCzDQDsGga6ApwegP86ugx/2OWXbi1Xyy7yMLDz8KBpBJs sZu5L/8xmqkKiwRUs2BX4tWuzMilxd3T0FWSmPMLrolau0amhd4Y53QOJJfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/u5K7/yPvg0TaKgq6l4OOl+J94wHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7NgeyJOEFH5IGmTU9rXI9QFfubg8P+fBao 9IU6Iul4rRo1QEwcE18ISl//YlIvwXKCM+ZGG4MspspMOb8Ql4trip74DTXQ4gRD B/UV5KONNT8g1PwbroyyrX57WpnCeYmxkY1dEUicZetgUrdajBSk0OxqqeQRsP2g 66IrxNf+4KC/PX3XBUFQ24lz6Oxt0+LfEnh5UWtcBpvJgwux6ZJ5WQNSehY5X1pB yCFnNTXPq/xqfq9kxm8G743T+9XhTMJe0KysEVlib6KAiFfEHy/Xwp8yH4RJLLHn HKHZqXGpQN6u32WQhg0v+zctZ4pbHeAvV7MYdp934LoLf7/peFg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:39 2026 by rpki-client