This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: DkRLsrHSE8NYXye+TNgJaWqp6xROWv83vSvLf8SP1Mo= Subject key identifier: 7A:D6:B7:01:CD:8E:1B:BC:02:9B:A3:2B:3A:E4:6D:87:C0:C2:8F:A1 Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 5B2FF91F8D3B1F1E91523A7A8E491D1D379C331D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 0235 Signing time: Mon 02 Feb 2026 00:00:43 +0000 Manifest this update: Sun 01 Feb 2026 23:55:43 +0000 Manifest next update: Thu 05 Feb 2026 03:45:43 +0000 Files and hashes: 1: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) 2: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) 3: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) 4: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) 5: 2985976A4B3081770748882703E16497964D05A6.crl (hash: ps1eH/TJQUKi+mA1Z+SbgHNQ0AHuSLAvAp9mZMfCzZM=) 6: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2f:f9:1f:8d:3b:1f:1e:91:52:3a:7a:8e:49:1d:1d:37:9c:33:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Feb 1 23:55:43 2026 GMT Not After : Feb 5 03:45:43 2026 GMT Subject: CN=7AD6B701CD8E1BBC029BA32B3AE46D87C0C28FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:8d:60:e7:37:d0:bd:70:bb:c8:e1:7d:17: 37:de:56:2b:b1:06:8d:ae:c4:8f:3e:93:5a:04:8d: 47:55:18:90:61:10:89:1a:3f:36:0e:9c:2a:a3:e3: 05:5a:9b:65:75:2b:24:dc:ff:87:1e:04:0b:c6:99: 72:fc:d2:85:a2:4f:5a:9c:c6:6d:a7:22:67:6a:bd: 3b:f0:c1:7f:31:54:8b:31:6d:3b:29:cd:d3:fd:51: eb:a4:9b:12:ac:25:ad:ad:0b:14:1e:4f:88:b8:45: d3:28:d5:06:c3:d0:ea:30:90:83:71:16:3c:a6:87: 96:fe:01:92:0c:10:9d:90:4c:bc:7b:2d:bc:52:a9: a5:cc:b3:1b:4b:1d:cd:e8:72:29:2d:74:d5:b9:88: 2e:f2:88:f5:3e:f3:1f:82:7e:d8:f1:ce:0d:77:69: c6:6f:06:8b:de:d2:f8:42:1b:ea:fe:b4:65:b3:92: ba:a8:7b:61:ed:b7:ea:30:bd:9c:b6:49:76:a1:13: b1:fc:ca:59:14:89:2b:19:b0:bc:d0:fa:93:a1:99: a2:76:c5:7f:69:3e:3d:18:4a:ac:86:b2:cb:8e:89: be:69:e9:46:94:ee:9b:8d:b9:64:03:66:46:9e:ae: 28:9f:d1:87:79:89:5e:9c:fb:d1:e2:fe:36:d5:17: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D6:B7:01:CD:8E:1B:BC:02:9B:A3:2B:3A:E4:6D:87:C0:C2:8F:A1 X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d3:36:bd:a4:52:74:f6:e6:6f:20:b1:ba:17:3f:2a:a2:06: 4f:a0:8e:14:a4:a4:5c:be:47:93:2f:90:0a:cd:f3:46:45:f7: dc:ef:ca:55:08:89:d1:12:dd:01:b8:f0:3a:f9:a3:e7:7c:ca: 7a:69:55:44:8a:8e:da:85:7b:1e:06:cf:2b:61:df:98:fe:11: 46:d8:1f:9f:5e:fe:02:1f:79:a9:69:33:6c:5a:84:b7:1b:33: f1:81:56:2c:79:d3:a4:a9:9b:ab:a4:4e:e1:ae:cf:9e:8b:cc: df:2f:b1:d0:34:a5:e1:4a:12:74:fc:2a:f9:8d:37:0c:04:02: 34:5d:6f:22:36:5f:51:84:5c:c4:46:93:c0:69:85:a9:ce:bf: 0d:86:21:b5:7a:db:b6:82:93:b0:43:01:86:f5:20:1f:ed:fc: 6a:82:ce:73:14:ad:65:5c:06:98:69:01:cf:47:aa:9e:d7:ce: 2f:9d:98:75:c3:17:68:a9:a7:ad:d2:b8:9b:cc:b5:20:ef:84: 5e:4d:ff:22:e8:85:12:63:f0:ab:3a:27:2c:24:17:77:df:d0: 17:16:7d:ac:c8:39:ff:10:8a:7f:f1:1d:e8:92:76:5c:da:fe: 4c:99:72:c8:f5:00:dc:57:9f:4a:82:0c:2f:5f:c6:29:fa:3b: 73:70:91:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWy/5H407Hx6RUjp6jkkdHTecMx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNjAyMDEyMzU1NDNaFw0yNjAyMDUwMzQ1NDNaMDMxMTAvBgNV BAMTKDdBRDZCNzAxQ0Q4RTFCQkMwMjlCQTMyQjNBRTQ2RDg3QzBDMjhGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1I1g5zfQvXC7yOF9FzfeViux Bo2uxI8+k1oEjUdVGJBhEIkaPzYOnCqj4wVam2V1KyTc/4ceBAvGmXL80oWiT1qc xm2nImdqvTvwwX8xVIsxbTspzdP9UeukmxKsJa2tCxQeT4i4RdMo1QbD0OowkINx Fjymh5b+AZIMEJ2QTLx7LbxSqaXMsxtLHc3ociktdNW5iC7yiPU+8x+Cftjxzg13 acZvBove0vhCG+r+tGWzkrqoe2Htt+owvZy2SXahE7H8ylkUiSsZsLzQ+pOhmaJ2 xX9pPj0YSqyGssuOib5p6UaU7puNuWQDZkaeriif0Yd5iV6c+9Hi/jbVF7ZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeta3Ac2OG7wCm6MrOuRth8DCj6EwHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnTNr2kUnT25m8gsboXPyqiBk+gjhSkpFy+ R5MvkArN80ZF99zvylUIidES3QG48Dr5o+d8ynppVUSKjtqFex4Gzyth35j+EUbY H59e/gIfealpM2xahLcbM/GBVix506Spm6ukTuGuz56LzN8vsdA0peFKEnT8KvmN NwwEAjRdbyI2X1GEXMRGk8BphanOvw2GIbV627aCk7BDAYb1IB/t/GqCznMUrWVc BphpAc9Hqp7Xzi+dmHXDF2ipp63SuJvMtSDvhF5N/yLohRJj8Ks6JywkF3ff0BcW fazIOf8Qin/xHeiSdlza/kyZcsj1ANxXn0qCDC9fxin6O3NwkQg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:11 2026 by rpki-client