This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: Hfw5zML+uO9czMgd/LyOyp4hVZ4epAddqOLMrJVAyRc= Subject key identifier: 80:F8:6E:92:95:8F:BB:91:35:AA:1C:D5:EA:1B:5D:4C:05:C7:F6:78 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 5BD904AA0881180264F7220DB5867E0482B27BEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 0343 Signing time: Sat 31 Jan 2026 07:32:04 +0000 Manifest this update: Sat 31 Jan 2026 07:27:04 +0000 Manifest next update: Tue 03 Feb 2026 12:52:04 +0000 Files and hashes: 1: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 2: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: K7+e73I1MbBT4VimjDWOpm5oK9T4c1c07ZJ5h/vqGSc=) 3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 4: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d9:04:aa:08:81:18:02:64:f7:22:0d:b5:86:7e:04:82:b2:7b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Jan 31 07:27:04 2026 GMT Not After : Feb 3 12:52:04 2026 GMT Subject: CN=80F86E92958FBB9135AA1CD5EA1B5D4C05C7F678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:4a:d0:78:44:a7:61:e6:e8:71:2d:45:3f: 82:d0:8b:93:6b:32:d9:07:ec:6c:6f:7d:c1:6c:b2: 7f:48:ac:dc:cc:b6:ea:6b:1e:ec:93:89:0b:38:07: 33:1c:be:08:f7:de:df:3f:a8:47:66:dc:77:f5:25: 88:81:56:58:34:8e:d5:9c:b7:8b:07:0a:1a:0f:bf: 94:32:7d:08:fb:f7:e7:7b:ff:9d:3b:96:a3:1a:5a: 6f:14:f3:7e:fc:6a:c8:79:37:5c:83:96:68:f2:50: a4:5b:c5:24:91:23:04:ab:54:8a:8d:92:15:bd:79: 8c:99:e6:45:be:27:e0:c2:05:b9:98:5d:37:c9:3c: d1:e3:82:c7:57:6c:95:4d:4c:6f:b1:b9:34:bc:3f: 6b:22:e7:dc:94:72:b3:4a:1a:7a:cb:ee:2d:e9:77: d0:db:be:42:93:f0:03:30:2a:f6:bb:75:74:4e:4b: 8a:47:ad:dd:39:1f:76:62:9c:1e:1e:d9:73:6e:00: 7a:f2:41:a9:c0:f9:4a:f3:6e:23:19:f2:9b:f2:1e: 64:d2:f2:31:fc:38:8a:bf:e0:00:2c:20:55:17:d6: b8:8a:26:09:ee:c5:41:a6:8a:93:b3:56:f5:91:92: aa:d3:2b:7d:0f:5b:b7:3b:7e:f1:a1:2a:b5:ec:dd: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F8:6E:92:95:8F:BB:91:35:AA:1C:D5:EA:1B:5D:4C:05:C7:F6:78 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f4:25:dc:67:92:45:8a:45:18:f7:37:68:92:1c:02:0a:16: b5:77:82:04:9e:7e:d6:77:06:d2:2b:57:1e:3d:cd:46:15:19: 2c:60:81:77:07:a3:50:99:da:3d:f6:8a:f1:51:7c:59:f0:04: ab:d4:09:4c:13:1e:2e:33:28:d3:11:1b:88:ec:e2:7e:99:cd: 02:a1:25:4a:8e:fc:21:96:6e:3d:9d:28:77:8a:ec:2b:42:2d: 7a:34:86:47:bb:51:31:08:9d:08:1e:3d:b6:cb:a1:ed:ce:9a: 2d:c2:a3:01:3f:6d:53:b3:ea:fa:fc:c0:fd:08:ba:4e:c3:0b: 0a:ad:e1:8a:93:e0:a9:3a:dd:20:64:62:28:0c:1c:8a:ec:04: 64:45:31:96:9e:03:cd:5c:b1:f4:44:28:38:ac:68:aa:3b:2c: 6c:89:c3:33:cb:d6:18:04:8c:f0:e5:68:ab:7a:04:56:8d:ca: 6e:38:e1:c9:66:5d:36:6a:63:10:6d:aa:55:42:43:f6:63:53: 97:f8:17:76:cb:dd:27:ec:96:99:61:18:d1:9b:a4:d9:47:51: 04:7a:30:72:d8:e9:d4:9d:c1:4e:b0:04:e5:b3:fb:41:0b:cf: 42:2e:88:ab:07:5f:45:8d:68:58:6b:dd:c6:bc:d4:df:4c:02: ba:02:76:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9kEqgiBGAJk9yINtYZ+BIKye+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNjAxMzEwNzI3MDRaFw0yNjAyMDMxMjUyMDRaMDMxMTAvBgNV BAMTKDgwRjg2RTkyOTU4RkJCOTEzNUFBMUNENUVBMUI1RDRDMDVDN0Y2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPUrQeESnYebocS1FP4LQi5Nr MtkH7GxvfcFssn9IrNzMtuprHuyTiQs4BzMcvgj33t8/qEdm3Hf1JYiBVlg0jtWc t4sHChoPv5QyfQj79+d7/507lqMaWm8U8378ash5N1yDlmjyUKRbxSSRIwSrVIqN khW9eYyZ5kW+J+DCBbmYXTfJPNHjgsdXbJVNTG+xuTS8P2si59yUcrNKGnrL7i3p d9DbvkKT8AMwKva7dXROS4pHrd05H3ZinB4e2XNuAHryQanA+UrzbiMZ8pvyHmTS 8jH8OIq/4AAsIFUX1riKJgnuxUGmipOzVvWRkqrTK30PW7c7fvGhKrXs3ZArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPhukpWPu5E1qhzV6htdTAXH9ngwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKP0JdxnkkWKRRj3N2iSHAIKFrV3ggSeftZ3 BtIrVx49zUYVGSxggXcHo1CZ2j32ivFRfFnwBKvUCUwTHi4zKNMRG4js4n6ZzQKh JUqO/CGWbj2dKHeK7CtCLXo0hke7UTEInQgePbbLoe3Omi3CowE/bVOz6vr8wP0I uk7DCwqt4YqT4Kk63SBkYigMHIrsBGRFMZaeA81csfREKDisaKo7LGyJwzPL1hgE jPDlaKt6BFaNym444clmXTZqYxBtqlVCQ/ZjU5f4F3bL3SfslplhGNGbpNlHUQR6 MHLY6dSdwU6wBOWz+0ELz0IuiKsHX0WNaFhr3ca81N9MAroCdv0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:10 2026 by rpki-client