This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: jqvdZvlMOs3BiVA04DmQ5TJMSkfH5m7OD0fuE17q24I= Subject key identifier: B3:ED:E0:AD:E9:42:E2:AA:32:47:00:4D:E9:D7:FB:98:AF:1A:31:73 Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 52ED997E32895BE04328CD6BAA5544A9E960D563 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 0202 Signing time: Sun 01 Feb 2026 22:42:15 +0000 Manifest this update: Sun 01 Feb 2026 22:37:15 +0000 Manifest next update: Thu 05 Feb 2026 06:51:15 +0000 Files and hashes: 1: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: UIsEV+yUxnoy27zXekEfr9wJFUXejRjvqDfBen4AprU=) 2: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: kcEi7J2KzSD2C16sirfrvjjvmQ8zQakPG6+zInavgeM=) 3: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: Fht2Bk0bhc4nR/fq21zH7O1A1690PDaearluwXYorQc=) 4: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: 8hPKjOrrKRezfNVZLnLavcGoDjYQomlxrK85beUxD9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ed:99:7e:32:89:5b:e0:43:28:cd:6b:aa:55:44:a9:e9:60:d5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Feb 1 22:37:15 2026 GMT Not After : Feb 5 06:51:15 2026 GMT Subject: CN=B3EDE0ADE942E2AA3247004DE9D7FB98AF1A3173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:26:99:03:44:f1:e8:5d:de:e2:b1:42:7b: 24:c9:86:e2:75:58:48:99:7f:77:8c:a9:f0:3a:f5: da:85:eb:9c:d5:b2:74:93:99:cf:e4:5b:33:56:24: 1f:b9:d3:0e:6c:5c:dc:47:78:cc:ae:59:39:bb:4e: 0a:3c:66:03:6b:19:6f:15:51:f7:fe:dd:64:9d:43: 03:35:81:18:92:1c:d8:5e:f5:6a:48:a0:c1:1c:e8: 45:34:84:15:10:2f:3d:9c:7c:1e:85:bf:56:14:58: b2:c4:6b:dd:d3:2c:0e:6c:c8:16:03:e7:70:c7:a7: ed:f2:76:ab:10:c5:e5:7a:57:af:f1:a5:e9:1a:90: 53:db:4b:a9:15:82:aa:96:d8:38:a5:f1:7d:f1:47: a9:40:68:4e:aa:49:aa:e5:f2:23:27:85:f8:f8:3a: 7a:1c:2e:ec:09:fd:bd:e8:b3:70:fc:53:44:3a:1e: 1e:bd:90:fd:ef:11:b3:7f:72:c2:53:f4:4c:c7:c5: 98:ef:ea:b3:16:83:2f:75:8f:52:c0:20:cf:53:51: 51:23:30:81:97:85:db:3e:f7:9c:c3:51:4a:a2:08: c6:20:0d:3c:10:94:ee:00:0a:78:6f:f2:73:cf:1c: 57:33:81:53:c2:73:41:6a:47:58:cb:df:d9:e9:91: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:ED:E0:AD:E9:42:E2:AA:32:47:00:4D:E9:D7:FB:98:AF:1A:31:73 X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b8:96:89:07:d1:b4:7a:37:a7:ec:9e:38:b4:96:ab:f0:79: fc:4b:19:7a:2b:28:f0:27:4c:e5:5f:af:fd:83:92:8c:b1:85: 5f:74:7d:e5:35:1a:97:29:b7:77:7d:dc:e5:ec:9b:3a:ce:24: 0f:3d:4e:5d:da:f1:6d:98:28:72:af:7f:29:a1:9c:2d:db:29: 76:d6:7a:81:36:7c:dc:8a:0a:f2:b0:90:8f:e7:fb:7d:ae:66: bc:3e:b0:0b:bc:a8:22:3b:f8:0d:a7:cd:ae:1f:d0:75:76:79: 45:1c:72:fd:03:3b:59:15:3f:52:47:e8:af:ef:2a:ef:f9:a5: c8:f1:cd:87:e3:ba:6e:18:04:9c:4f:37:83:3a:a8:5e:14:25: 53:86:f5:6a:a5:54:80:a5:a1:c2:af:b1:6e:7d:fb:7d:ed:75: a2:34:61:77:34:4d:55:09:77:83:b5:8d:22:43:9d:1c:c4:08: 4c:dd:00:6e:3e:38:33:77:ca:5b:40:03:58:a7:cc:10:e3:57: 73:59:9b:75:6d:58:95:ed:5e:51:fb:29:45:9d:cb:36:c7:c5: 3e:9f:8a:a4:99:c5:38:79:62:a7:1a:92:83:64:de:95:cd:3f: 12:9b:22:cb:7b:f1:d7:14:c7:a0:10:3a:ab:17:b7:cb:1e:5f: cf:78:24:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUu2ZfjKJW+BDKM1rqlVEqelg1WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNjAyMDEyMjM3MTVaFw0yNjAyMDUwNjUxMTVaMDMxMTAvBgNV BAMTKEIzRURFMEFERTk0MkUyQUEzMjQ3MDA0REU5RDdGQjk4QUYxQTMxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLSaZA0Tx6F3e4rFCeyTJhuJ1 WEiZf3eMqfA69dqF65zVsnSTmc/kWzNWJB+50w5sXNxHeMyuWTm7Tgo8ZgNrGW8V Uff+3WSdQwM1gRiSHNhe9WpIoMEc6EU0hBUQLz2cfB6Fv1YUWLLEa93TLA5syBYD 53DHp+3ydqsQxeV6V6/xpekakFPbS6kVgqqW2Dil8X3xR6lAaE6qSarl8iMnhfj4 OnocLuwJ/b3os3D8U0Q6Hh69kP3vEbN/csJT9EzHxZjv6rMWgy91j1LAIM9TUVEj MIGXhds+95zDUUqiCMYgDTwQlO4ACnhv8nPPHFczgVPCc0FqR1jL39npkbRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+3grelC4qoyRwBN6df7mK8aMXMwHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi4lokH0bR6N6fsnji0lqvwefxLGXorKPAn TOVfr/2DkoyxhV90feU1Gpcpt3d93OXsmzrOJA89Tl3a8W2YKHKvfymhnC3bKXbW eoE2fNyKCvKwkI/n+32uZrw+sAu8qCI7+A2nza4f0HV2eUUccv0DO1kVP1JH6K/v Ku/5pcjxzYfjum4YBJxPN4M6qF4UJVOG9WqlVIClocKvsW59+33tdaI0YXc0TVUJ d4O1jSJDnRzECEzdAG4+ODN3yltAA1inzBDjV3NZm3VtWJXtXlH7KUWdyzbHxT6f iqSZxTh5YqcakoNk3pXNPxKbIst78dcUx6AQOqsXt8seX894JD0= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:39 2026 by rpki-client