This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: Xga9jGmCYCLZ2mcwxBm13WCwqY/ceU4OZ9/WigW/LvY= Subject key identifier: 84:DC:29:AA:9E:B1:F1:2E:DE:41:C5:12:4D:6F:E3:60:1B:79:C5:7C Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 577339C012861D8DBE1369340912A7B53F75BBB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0152 Signing time: Sun 01 Feb 2026 07:40:52 +0000 Manifest this update: Sun 01 Feb 2026 07:35:52 +0000 Manifest next update: Wed 04 Feb 2026 14:14:52 +0000 Files and hashes: 1: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=) 2: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=) 3: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: 3xe4GRIYcY1CXUX01flfbIoRAadYPqM6RxWtYonkE98=) 4: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:73:39:c0:12:86:1d:8d:be:13:69:34:09:12:a7:b5:3f:75:bb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Feb 1 07:35:52 2026 GMT Not After : Feb 4 14:14:52 2026 GMT Subject: CN=84DC29AA9EB1F12EDE41C5124D6FE3601B79C57C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:b6:d7:64:ed:c7:1d:4c:df:46:3a:e6:34: bb:d2:ba:c8:e3:52:a9:b6:18:ee:6a:16:c3:b0:60: 4b:14:0c:93:51:b7:fe:9a:43:42:61:ef:c3:e4:30: 40:42:52:c6:92:3f:90:95:ed:38:20:f0:f9:de:20: aa:28:35:bf:3f:a8:c4:79:1c:d5:aa:3f:79:44:e6: 0b:78:48:60:23:9d:f0:fc:2b:2b:fd:6a:d0:e8:bc: 75:62:4f:16:06:30:f0:75:ed:6f:23:b3:d0:1b:a4: 66:3d:af:ed:f5:53:86:21:62:40:a1:1c:16:e4:f7: 7d:69:26:8a:9e:21:dc:87:ac:2a:6d:cf:dc:e9:c1: 30:54:54:bf:11:be:3c:38:24:62:b0:cf:df:a9:d7: fc:0c:b1:3a:e4:cc:f5:90:ff:36:9b:9d:6a:fe:e9: 42:46:f6:85:af:6e:ab:fd:4c:95:58:55:d2:12:73: 2b:b3:e8:62:7a:91:9f:38:de:65:12:61:d4:a0:68: 5f:0b:63:3a:9d:01:27:18:92:fb:31:35:d8:de:40: 4c:ef:55:c0:bc:84:38:87:11:06:0d:8e:72:ca:99: 7a:2b:52:bd:ad:65:df:2d:5a:bf:39:ad:84:7e:bb: 8c:96:bd:e5:18:09:d8:62:15:3b:ae:20:10:45:3f: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DC:29:AA:9E:B1:F1:2E:DE:41:C5:12:4D:6F:E3:60:1B:79:C5:7C X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:e5:d4:36:35:bd:c4:6f:64:98:8d:e2:74:51:ca:76:13: cc:cd:37:02:9e:7f:62:2d:c0:c8:3f:28:48:b6:17:bb:88:fb: 65:7f:f4:e8:58:21:35:62:bc:65:f0:62:08:d3:26:f0:d0:bc: 6b:1b:e9:69:8c:1b:13:1b:e0:e1:34:1b:7d:20:03:d8:ba:91: 25:26:29:1a:ad:05:38:d2:e8:a4:ac:94:d1:8e:fc:ae:7a:8f: 94:fd:81:93:f9:e8:11:af:96:4d:1b:bc:aa:5b:4d:7f:6a:39: 69:b9:1f:ec:78:75:f1:0f:c9:6f:87:d3:39:43:44:ae:15:1d: 87:71:18:07:6b:92:32:ae:18:3d:2e:55:b0:a9:17:8f:53:4e: 52:91:9b:c6:77:18:79:11:24:5e:12:0b:c8:d3:d7:82:ad:2c: a9:3e:c9:ca:09:b6:34:9a:7c:50:4d:e6:73:ed:97:38:1e:56: 26:59:0f:27:28:f2:e3:0b:e4:31:fb:72:2c:57:bd:77:90:ee: 51:73:1b:08:32:16:f5:6b:46:19:2b:b1:d9:51:e2:fa:92:59: d3:7b:35:12:55:73:95:c9:c2:ee:28:83:08:54:d9:f6:d2:9b: 7d:fd:70:36:bc:f0:88:39:1b:7c:20:e5:41:a6:f6:04:d2:90: 26:46:70:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3M5wBKGHY2+E2k0CRKntT91u7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNjAyMDEwNzM1NTJaFw0yNjAyMDQxNDE0NTJaMDMxMTAvBgNV BAMTKDg0REMyOUFBOUVCMUYxMkVERTQxQzUxMjRENkZFMzYwMUI3OUM1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S7bXZO3HHUzfRjrmNLvSusjj Uqm2GO5qFsOwYEsUDJNRt/6aQ0Jh78PkMEBCUsaSP5CV7Tgg8PneIKooNb8/qMR5 HNWqP3lE5gt4SGAjnfD8Kyv9atDovHViTxYGMPB17W8js9AbpGY9r+31U4YhYkCh HBbk931pJoqeIdyHrCptz9zpwTBUVL8Rvjw4JGKwz9+p1/wMsTrkzPWQ/zabnWr+ 6UJG9oWvbqv9TJVYVdIScyuz6GJ6kZ843mUSYdSgaF8LYzqdAScYkvsxNdjeQEzv VcC8hDiHEQYNjnLKmXorUr2tZd8tWr85rYR+u4yWveUYCdhiFTuuIBBFPzNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNwpqp6x8S7eQcUSTW/jYBt5xXwwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuv5dQ2Nb3Eb2SYjeJ0Ucp2E8zNNwKef2It wMg/KEi2F7uI+2V/9OhYITVivGXwYgjTJvDQvGsb6WmMGxMb4OE0G30gA9i6kSUm KRqtBTjS6KSslNGO/K56j5T9gZP56BGvlk0bvKpbTX9qOWm5H+x4dfEPyW+H0zlD RK4VHYdxGAdrkjKuGD0uVbCpF49TTlKRm8Z3GHkRJF4SC8jT14KtLKk+ycoJtjSa fFBN5nPtlzgeViZZDyco8uML5DH7cixXvXeQ7lFzGwgyFvVrRhkrsdlR4vqSWdN7 NRJVc5XJwu4ogwhU2fbSm339cDa88Ig5G3wg5UGm9gTSkCZGcLE= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:52 2026 by rpki-client