This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: X87wqR0wBzEEmaGnszM2KCj1IfPFP4+DOuQLKItEKjU= Subject key identifier: 17:C3:A8:5F:A0:B9:15:8F:AA:94:F2:09:FD:6E:59:33:65:2B:7A:B2 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 333EFA40E77965A25E80BA20295A938529D79A5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 021F Signing time: Sat 31 Jan 2026 06:50:58 +0000 Manifest this update: Sat 31 Jan 2026 06:45:58 +0000 Manifest next update: Tue 03 Feb 2026 16:21:58 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) 3: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: fFlFQXvkV29rhdCoIKE0OkdQ932wJSG1eWId8MQ8x9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3e:fa:40:e7:79:65:a2:5e:80:ba:20:29:5a:93:85:29:d7:9a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Jan 31 06:45:58 2026 GMT Not After : Feb 3 16:21:58 2026 GMT Subject: CN=17C3A85FA0B9158FAA94F209FD6E5933652B7AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:21:d5:c1:6d:ef:87:bb:51:54:bf:d8:e9:c8: 6d:e1:32:01:47:c0:b9:69:41:bc:31:9f:1b:bd:54: 40:78:01:7a:48:f1:ec:ba:9f:0a:18:71:a3:31:a0: cb:4f:a0:db:06:03:c1:4d:7d:61:5f:29:f5:95:c6: c9:95:fe:1a:ad:10:8e:b2:83:7e:50:a4:e0:29:21: d2:e4:e9:48:cd:32:16:28:34:ed:f7:17:db:e0:ad: 2b:8b:ee:3b:bc:7b:63:2e:b7:fb:a7:9e:18:0f:31: bc:fc:07:82:34:25:10:4c:b3:b0:e7:94:d2:dc:1b: cb:e0:3f:6b:4e:50:84:1d:2a:29:70:b2:ff:11:84: 7b:6b:f4:c2:12:e7:54:60:6b:1c:14:d9:e8:76:0e: 64:97:5e:39:90:4d:c7:de:bb:a6:c1:36:11:16:ef: 91:ab:8c:e3:a1:1e:e1:64:6b:52:20:00:1f:e4:16: 5a:e6:f5:63:8d:9c:6f:0c:ba:f4:29:40:4f:2f:93: 4a:5d:53:85:23:26:f2:43:25:f4:68:f1:4c:a1:66: 7b:77:a3:ea:a1:04:b5:a2:6f:37:0a:bd:5b:3c:2d: db:4d:53:ef:1a:63:95:57:f9:6f:de:72:f8:e6:21: 1f:15:56:55:1e:30:88:65:ad:b0:98:e8:b2:6e:f3: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C3:A8:5F:A0:B9:15:8F:AA:94:F2:09:FD:6E:59:33:65:2B:7A:B2 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8d:2b:1e:02:28:1e:42:f6:eb:26:6f:2d:c9:72:57:08:77: 5d:b6:d8:b6:56:a5:99:16:0d:02:db:b1:0e:8d:f4:70:da:a6: 16:c9:85:c6:d8:0b:5b:4a:b5:4f:78:07:e7:ad:38:d3:cd:b7: be:02:27:7f:5d:3d:60:d4:af:2b:d9:4a:46:a0:b2:ab:5c:98: 25:bf:16:6f:fc:11:b8:3c:b7:0a:d3:38:7f:3e:01:1f:3d:dd: c8:5a:5d:f0:32:ab:14:41:df:79:b8:5e:30:5f:27:c0:ae:db: 3c:58:9e:43:6c:0a:2c:c0:d5:17:0c:5f:7b:de:56:8e:41:69: ee:99:1d:ac:ce:d0:c0:db:18:39:5f:d6:25:99:db:f0:cd:bd: e2:43:30:f7:7c:fa:2b:29:8b:13:3d:61:fd:b3:3f:a2:12:55: dd:7f:e0:93:e4:91:54:04:1e:52:d4:29:f7:82:cb:80:67:2d: 3a:8d:b9:9e:ed:a0:9c:b0:88:6b:5a:b0:7b:7d:1c:2a:1f:28: 50:12:7c:fb:7a:42:a8:e0:8c:63:99:ae:a7:cf:1a:53:a1:eb: 97:72:48:45:13:05:ce:a7:d2:4a:a7:76:d4:85:74:35:27:7b: 16:57:02:68:17:60:a1:b4:23:d0:ae:c5:f2:d9:a4:69:91:17: 56:84:6d:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMz76QOd5ZaJegLogKVqThSnXml4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNjAxMzEwNjQ1NThaFw0yNjAyMDMxNjIxNThaMDMxMTAvBgNV BAMTKDE3QzNBODVGQTBCOTE1OEZBQTk0RjIwOUZENkU1OTMzNjUyQjdBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtIdXBbe+Hu1FUv9jpyG3hMgFH wLlpQbwxnxu9VEB4AXpI8ey6nwoYcaMxoMtPoNsGA8FNfWFfKfWVxsmV/hqtEI6y g35QpOApIdLk6UjNMhYoNO33F9vgrSuL7ju8e2Mut/unnhgPMbz8B4I0JRBMs7Dn lNLcG8vgP2tOUIQdKilwsv8RhHtr9MIS51RgaxwU2eh2DmSXXjmQTcfeu6bBNhEW 75GrjOOhHuFka1IgAB/kFlrm9WONnG8MuvQpQE8vk0pdU4UjJvJDJfRo8UyhZnt3 o+qhBLWibzcKvVs8LdtNU+8aY5VX+W/ecvjmIR8VVlUeMIhlrbCY6LJu8zSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8OoX6C5FY+qlPIJ/W5ZM2UrerIwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeNKx4CKB5C9usmby3JclcId1222LZWpZkW DQLbsQ6N9HDaphbJhcbYC1tKtU94B+etONPNt74CJ39dPWDUryvZSkagsqtcmCW/ Fm/8Ebg8twrTOH8+AR893chaXfAyqxRB33m4XjBfJ8Cu2zxYnkNsCizA1RcMX3ve Vo5Bae6ZHazO0MDbGDlf1iWZ2/DNveJDMPd8+ispixM9Yf2zP6ISVd1/4JPkkVQE HlLUKfeCy4BnLTqNuZ7toJywiGtasHt9HCofKFASfPt6QqjgjGOZrqfPGlOh65dy SEUTBc6n0kqndtSFdDUnexZXAmgXYKG0I9CuxfLZpGmRF1aEbfk= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:05 2026 by rpki-client