This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: e/0/riETP3txHwBgW9Kmn6R4RxV5+t+Z4N9PJgKlFKQ= Subject key identifier: C7:7A:DF:08:E6:3E:25:23:55:0C:DA:D9:5C:6A:27:7B:61:CE:16:CE Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 4231C173EB2047A87DF654C84740ECF9A51966D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: 013E Signing time: Sat 31 Jan 2026 16:10:53 +0000 Manifest this update: Sat 31 Jan 2026 16:05:53 +0000 Manifest next update: Wed 04 Feb 2026 00:12:53 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: Ytw+F2IuhNctJo7Mq4Aaa3GXpRtkG7WpHGa2dilsfso=) 2: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: Bs643yZfS+XvuORzCdz3AhUr1hNjH9tFOShxF89Njgc=) 3: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: ILDuTAsK8lVD87kg3m/pYLNNkFpQ3NK/TkzPdZb+cXI=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: 8PwAQvSewzdVUf4Jq+quL23phhlsATOC3lb6zK0pxD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 00:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:31:c1:73:eb:20:47:a8:7d:f6:54:c8:47:40:ec:f9:a5:19:66:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Jan 31 16:05:53 2026 GMT Not After : Feb 4 00:12:53 2026 GMT Subject: CN=C77ADF08E63E2523550CDAD95C6A277B61CE16CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:05:1a:97:34:4e:af:f9:36:d9:20:f5:a5: 0b:b8:da:cb:39:a6:37:f9:9b:b0:3e:83:fc:f0:e4: 5e:3d:bc:26:e6:fa:54:08:b6:e6:63:17:38:08:36: 53:35:1c:9b:a9:91:5b:03:44:b9:71:f8:79:bf:66: 47:a2:bb:cc:88:7c:e7:1c:6e:8c:08:a5:c7:6b:6d: 2f:3e:ad:06:31:a4:3f:90:d7:28:49:cb:81:cd:c4: dc:5f:17:11:8b:b8:33:be:73:21:65:74:7b:0c:d2: 32:32:69:2f:9a:77:92:e6:f0:9a:42:d1:eb:ce:92: aa:bd:ae:31:b9:54:66:13:e1:e1:35:88:46:ec:00: b3:67:fc:ef:f0:6b:b6:51:e8:70:7f:45:b5:8d:3b: ce:09:28:58:f3:2e:5f:1d:20:c0:95:e3:a6:ca:ad: 5f:36:67:b3:2f:de:b0:9b:13:d6:5e:1c:f0:3a:0a: a5:2d:f1:6e:8e:03:80:eb:d7:e0:ea:fb:c8:0a:54: 1a:a9:18:40:0b:2e:62:dc:8c:4d:bb:b3:97:fd:a7: a6:0b:70:8e:4d:4a:8f:e9:20:6c:79:c2:ae:ea:fe: 28:db:69:2e:ec:5c:94:40:e5:42:c4:33:a2:66:a2: 25:4a:37:91:b5:98:97:1e:99:f3:2f:18:72:f9:e2: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7A:DF:08:E6:3E:25:23:55:0C:DA:D9:5C:6A:27:7B:61:CE:16:CE X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:46:f9:5b:6f:e5:60:9e:69:07:e6:9a:39:a0:18:ee:10:49: 18:45:09:52:c7:a7:61:fb:91:6b:89:d0:91:be:df:4a:c1:30: 90:cf:e7:4f:39:67:43:48:74:8b:84:04:33:44:2a:a5:a9:4c: c8:5c:aa:25:9b:de:ca:21:fb:4b:76:95:ef:74:3f:9a:0d:f0: ab:2c:48:8d:cc:ba:d3:30:c1:7f:1a:39:5c:42:4d:ed:00:c5: 35:8c:3f:ee:42:23:d5:03:81:8e:7e:69:1c:f2:7f:c0:d4:2e: 31:b7:d7:c6:84:9f:4d:80:f8:b7:84:fe:dd:b4:2c:4d:f6:82: 2d:ff:ce:57:46:1f:06:96:ad:6d:7d:51:8d:9f:0b:44:f2:85: 97:cd:4b:f9:21:de:00:fb:c6:7c:3c:10:21:ca:58:21:66:4f: 4d:23:63:b7:34:01:0d:92:a6:2c:3c:74:92:65:3b:1d:25:f4: 60:6a:3f:b0:58:5c:37:89:4a:34:b2:09:95:12:fd:6c:c2:94: 88:19:08:b9:61:1f:79:27:48:43:8e:7a:2b:0f:08:32:cb:c0: ad:f1:97:67:03:a0:ae:36:9f:3f:ea:b4:0a:d1:97:43:10:a6: 10:34:e1:58:9a:01:16:6b:f9:3a:66:a4:2e:99:5e:82:68:18: 12:85:71:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjHBc+sgR6h99lTIR0Ds+aUZZtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNjAxMzExNjA1NTNaFw0yNjAyMDQwMDEyNTNaMDMxMTAvBgNV BAMTKEM3N0FERjA4RTYzRTI1MjM1NTBDREFEOTVDNkEyNzdCNjFDRTE2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpQUalzROr/k22SD1pQu42ss5 pjf5m7A+g/zw5F49vCbm+lQItuZjFzgINlM1HJupkVsDRLlx+Hm/Zkeiu8yIfOcc bowIpcdrbS8+rQYxpD+Q1yhJy4HNxNxfFxGLuDO+cyFldHsM0jIyaS+ad5Lm8JpC 0evOkqq9rjG5VGYT4eE1iEbsALNn/O/wa7ZR6HB/RbWNO84JKFjzLl8dIMCV46bK rV82Z7Mv3rCbE9ZeHPA6CqUt8W6OA4Dr1+Dq+8gKVBqpGEALLmLcjE27s5f9p6YL cI5NSo/pIGx5wq7q/ijbaS7sXJRA5ULEM6JmoiVKN5G1mJcemfMvGHL54nTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3rfCOY+JSNVDNrZXGone2HOFs4wHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJG+Vtv5WCeaQfmmjmgGO4QSRhFCVLHp2H7 kWuJ0JG+30rBMJDP5085Z0NIdIuEBDNEKqWpTMhcqiWb3soh+0t2le90P5oN8Kss SI3MutMwwX8aOVxCTe0AxTWMP+5CI9UDgY5+aRzyf8DULjG318aEn02A+LeE/t20 LE32gi3/zldGHwaWrW19UY2fC0TyhZfNS/kh3gD7xnw8ECHKWCFmT00jY7c0AQ2S piw8dJJlOx0l9GBqP7BYXDeJSjSyCZUS/WzClIgZCLlhH3knSEOOeisPCDLLwK3x l2cDoK42nz/qtArRl0MQphA04ViaARZr+TpmpC6ZXoJoGBKFcaM= -----END CERTIFICATE-----Generated at Mon Feb 2 08:31:36 2026 by rpki-client