This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: W+8I+7fxfZVwWcUSUp3L4trqOYyg+Lqwn7Q13P4lZ3k= Subject key identifier: 5F:B2:BD:0E:E4:C6:8E:88:B9:62:24:66:C7:F6:79:B9:7A:8A:1F:2F Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 2DDD23D08DCE352BC65B5A0C5169FB42D391B7EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 0304 Signing time: Sat 31 Jan 2026 11:20:51 +0000 Manifest this update: Sat 31 Jan 2026 11:15:51 +0000 Manifest next update: Tue 03 Feb 2026 18:20:51 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: 2z2bW9G0hyL0txrOpq4TxEKfVFIWaJpYNEZ4FLQFx2Y=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dd:23:d0:8d:ce:35:2b:c6:5b:5a:0c:51:69:fb:42:d3:91:b7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Jan 31 11:15:51 2026 GMT Not After : Feb 3 18:20:51 2026 GMT Subject: CN=5FB2BD0EE4C68E88B9622466C7F679B97A8A1F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:8f:25:f2:79:bb:24:3d:5b:7a:40:39:42: 49:37:68:30:9e:44:66:61:ca:e9:6e:4a:ce:c6:cb: 73:87:ff:d0:38:70:e5:45:78:fd:e6:b8:9f:01:0b: 27:28:61:c2:a2:8d:7b:32:ff:be:29:ec:9e:6e:50: 67:e2:18:5a:cf:e5:e5:f5:93:3b:76:41:03:a1:f2: 05:ae:16:63:dd:c4:04:40:c1:19:90:06:ae:55:fe: 32:28:4e:0d:7c:04:dd:ed:a0:e2:06:f6:e2:1f:e5: 27:a4:e8:d0:45:9a:f2:e0:11:5b:41:51:ea:40:33: 0c:ef:ea:a7:da:f5:70:2b:1c:29:8d:5c:a5:ec:5b: 2a:cf:0c:4c:a9:80:29:cf:aa:92:46:5f:9a:33:ff: 66:cb:b7:08:c7:f2:e8:bb:33:11:77:1a:5a:70:85: ff:b1:e2:56:19:99:05:9f:d2:ef:73:79:45:ad:5d: 93:d4:a6:49:22:94:c5:f2:65:1e:db:17:85:67:0d: fb:41:3d:c7:2a:22:a6:89:86:ec:be:89:dd:5f:40: 56:60:9a:17:d4:b9:f3:0b:a0:93:96:2e:4b:6d:f9: 0d:17:13:eb:c6:57:9e:82:bd:65:43:e8:c9:2f:c2: 6a:f4:88:2b:e8:0d:71:49:44:65:33:19:66:8f:cb: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B2:BD:0E:E4:C6:8E:88:B9:62:24:66:C7:F6:79:B9:7A:8A:1F:2F X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:45:ed:ea:d0:14:c2:1d:63:0c:b5:e1:af:54:5b:3a:77:5c: 22:ac:ac:3b:34:8f:3a:76:f2:4e:d3:92:0e:f2:69:dc:00:2f: 67:01:ae:8d:56:11:b7:7d:b8:93:ea:aa:e7:35:4b:22:78:39: f4:13:7c:86:1f:62:a4:89:cc:7a:43:87:49:00:b5:f8:2b:1f: 9f:ef:7d:45:67:01:11:65:d1:67:33:7c:42:1d:54:19:92:8d: 9f:ee:ef:5f:c6:4d:a4:6d:71:6a:28:df:d3:f2:4b:19:59:93: f1:cb:32:6e:fa:de:e1:77:89:3b:02:fe:6f:dc:02:f3:00:b8: ce:2a:00:5a:94:68:2a:5d:70:78:07:a8:33:cb:82:d3:15:9f: b3:17:f1:61:a2:a6:22:41:87:ee:f4:2e:e1:47:ee:1d:6b:0e: 2a:4e:b7:f2:11:2d:1f:e2:68:83:53:bb:f1:12:c9:ff:d2:d8: c8:d8:5b:4a:9b:a2:80:aa:88:39:d4:c9:7b:65:9f:7b:35:86: 79:e0:49:31:19:e0:14:4b:5d:e0:4f:c8:79:f9:fb:cb:05:23: 21:08:94:4a:08:38:bd:c0:87:0b:1a:78:53:48:30:86:c0:7b: ca:21:af:91:f8:ab:ca:4d:5b:5a:56:18:37:e3:f5:ad:70:06: cc:d9:4f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULd0j0I3ONSvGW1oMUWn7QtORt+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNjAxMzExMTE1NTFaFw0yNjAyMDMxODIwNTFaMDMxMTAvBgNV BAMTKDVGQjJCRDBFRTRDNjhFODhCOTYyMjQ2NkM3RjY3OUI5N0E4QTFGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsq48l8nm7JD1bekA5Qkk3aDCe RGZhyuluSs7Gy3OH/9A4cOVFeP3muJ8BCycoYcKijXsy/74p7J5uUGfiGFrP5eX1 kzt2QQOh8gWuFmPdxARAwRmQBq5V/jIoTg18BN3toOIG9uIf5Sek6NBFmvLgEVtB UepAMwzv6qfa9XArHCmNXKXsWyrPDEypgCnPqpJGX5oz/2bLtwjH8ui7MxF3Glpw hf+x4lYZmQWf0u9zeUWtXZPUpkkilMXyZR7bF4VnDftBPccqIqaJhuy+id1fQFZg mhfUufMLoJOWLktt+Q0XE+vGV56CvWVD6Mkvwmr0iCvoDXFJRGUzGWaPy+2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX7K9DuTGjoi5YiRmx/Z5uXqKHy8wHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5F7erQFMIdYwy14a9UWzp3XCKsrDs0jzp2 8k7Tkg7yadwAL2cBro1WEbd9uJPqquc1SyJ4OfQTfIYfYqSJzHpDh0kAtfgrH5/v fUVnARFl0WczfEIdVBmSjZ/u71/GTaRtcWoo39PySxlZk/HLMm763uF3iTsC/m/c AvMAuM4qAFqUaCpdcHgHqDPLgtMVn7MX8WGipiJBh+70LuFH7h1rDipOt/IRLR/i aINTu/ESyf/S2MjYW0qbooCqiDnUyXtln3s1hnngSTEZ4BRLXeBPyHn5+8sFIyEI lEoIOL3AhwsaeFNIMIbAe8ohr5H4q8pNW1pWGDfj9a1wBszZTxM= -----END CERTIFICATE-----Generated at Mon Feb 2 16:00:39 2026 by rpki-client