This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: CXtX5uEQjpounfqlleuMrkmin64Fp4COj6CKoJFeZC0= Subject key identifier: B9:83:A2:5A:B9:63:36:48:5C:DD:D3:AA:03:1E:CD:13:9D:62:CB:A0 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 3877098D488F9E33B66C664D53133211FF092830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 022C Signing time: Sat 31 Jan 2026 09:51:48 +0000 Manifest this update: Sat 31 Jan 2026 09:46:48 +0000 Manifest next update: Tue 03 Feb 2026 15:14:48 +0000 Files and hashes: 1: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=) 2: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: +4WXQ0v6DRrHaWJnfmv0onG29TUGk9Q6wLaaLiyLO5U=) 3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=) 4: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=) 5: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:77:09:8d:48:8f:9e:33:b6:6c:66:4d:53:13:32:11:ff:09:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Jan 31 09:46:48 2026 GMT Not After : Feb 3 15:14:48 2026 GMT Subject: CN=B983A25AB96336485CDDD3AA031ECD139D62CBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:71:72:6b:bb:09:28:06:3b:b0:dc:a4:da: 82:52:91:26:e8:23:97:d2:c0:92:16:3c:cb:6b:ee: 54:7f:8f:56:5c:a8:d8:5a:72:29:e0:d4:8c:c7:b8: 0d:b8:c9:ac:3c:a6:d6:39:13:32:48:03:70:63:11: 30:0d:b1:ac:6d:ac:e6:5d:03:05:69:1b:8e:e7:e3: c9:fd:ec:ed:f2:5f:01:0e:bf:4e:81:3a:5c:7d:36: c7:8c:de:04:28:d7:4f:d8:c3:6f:65:e1:52:37:9c: 45:a5:89:ee:7b:b1:f9:31:2b:c8:c6:96:d0:08:4f: 99:1b:36:5f:92:9b:8d:56:5a:71:6a:7f:db:14:e1: 54:c6:a2:ff:1a:f9:ad:49:ad:7f:d5:d5:8f:74:30: 51:75:71:d3:bc:2a:9c:ee:dd:49:a4:41:1b:9e:19: 4a:db:20:02:30:06:01:17:ac:80:1e:ef:ba:47:17: 9f:9c:0b:1c:ef:0b:43:1c:0b:de:a2:fe:95:2a:0e: ea:15:fb:a9:b4:45:19:1a:4c:e1:d6:27:80:95:b9: 90:67:18:e4:1e:d3:69:2e:d8:a8:0e:a3:44:e3:77: d2:83:ff:5a:3d:47:ce:6f:7a:ae:fd:ad:1b:12:ba: f7:c1:d2:4e:e5:4d:a9:fb:21:35:7c:a8:d4:56:68: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:A2:5A:B9:63:36:48:5C:DD:D3:AA:03:1E:CD:13:9D:62:CB:A0 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1f:1c:86:c9:e5:c7:8f:c3:cf:ee:fd:23:7b:a7:33:90:91: 14:3e:45:5e:ab:48:1e:d1:c7:fb:bc:85:b8:c5:80:cb:16:c4: 90:14:76:5b:36:8e:cd:b3:ac:17:f2:b7:95:5f:b0:4b:fd:b2: 1f:1e:ba:0e:5e:e1:3d:c1:e1:40:36:3f:15:d5:24:da:3c:fc: 6b:c1:96:d8:67:f8:50:05:9a:23:97:6b:f1:88:47:63:21:34: 9f:f2:09:2a:01:ae:00:34:7d:1e:4a:ec:41:7b:77:4c:23:3e: 44:eb:4d:02:eb:70:ae:ff:09:97:5d:6e:87:fd:e3:10:b6:55: d6:d2:99:8b:b4:80:96:46:d9:d1:7d:78:de:aa:a7:81:07:b0: 38:04:af:aa:ee:da:df:3a:d3:f3:b6:f7:f1:68:3a:33:78:00: 0c:c6:b0:9e:d9:53:bd:30:63:3e:9d:5c:c7:32:2f:b4:2d:c3: ac:f3:3f:5e:18:ea:4a:06:ce:bf:59:4e:f2:b9:b0:9e:f7:cb: 73:c4:00:da:8f:10:64:ca:5a:7b:f5:a3:0a:b3:29:33:9d:95: 7c:37:4a:41:d2:c5:86:ec:e0:5e:ae:ad:e4:ab:cf:1d:dd:77: 18:cc:0b:c9:73:aa:a3:19:34:5a:a8:ae:ed:57:11:6f:65:ba: af:d3:f4:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHcJjUiPnjO2bGZNUxMyEf8JKDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNjAxMzEwOTQ2NDhaFw0yNjAyMDMxNTE0NDhaMDMxMTAvBgNV BAMTKEI5ODNBMjVBQjk2MzM2NDg1Q0RERDNBQTAzMUVDRDEzOUQ2MkNCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7nFya7sJKAY7sNyk2oJSkSbo I5fSwJIWPMtr7lR/j1ZcqNhacing1IzHuA24yaw8ptY5EzJIA3BjETANsaxtrOZd AwVpG47n48n97O3yXwEOv06BOlx9NseM3gQo10/Yw29l4VI3nEWlie57sfkxK8jG ltAIT5kbNl+Sm41WWnFqf9sU4VTGov8a+a1JrX/V1Y90MFF1cdO8Kpzu3UmkQRue GUrbIAIwBgEXrIAe77pHF5+cCxzvC0McC96i/pUqDuoV+6m0RRkaTOHWJ4CVuZBn GOQe02ku2KgOo0Tjd9KD/1o9R85veq79rRsSuvfB0k7lTan7ITV8qNRWaLL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYOiWrljNkhc3dOqAx7NE51iy6AwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8fHIbJ5cePw8/u/SN7pzOQkRQ+RV6rSB7R x/u8hbjFgMsWxJAUdls2js2zrBfyt5VfsEv9sh8eug5e4T3B4UA2PxXVJNo8/GvB lthn+FAFmiOXa/GIR2MhNJ/yCSoBrgA0fR5K7EF7d0wjPkTrTQLrcK7/CZddbof9 4xC2VdbSmYu0gJZG2dF9eN6qp4EHsDgEr6ru2t860/O29/FoOjN4AAzGsJ7ZU70w Yz6dXMcyL7Qtw6zzP14Y6koGzr9ZTvK5sJ73y3PEANqPEGTKWnv1owqzKTOdlXw3 SkHSxYbs4F6ureSrzx3ddxjMC8lzqqMZNFqoru1XEW9luq/T9AQ= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:12 2026 by rpki-client