This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: 01EiUsBvWR2J5rm3zZCkfApACSfy33Qa4sywcSPF+8E= Subject key identifier: B0:21:2A:E8:0D:1E:02:40:BC:EB:81:7A:F9:5A:1F:A7:E7:7B:37:F1 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 45261C98CA2253CAA6C13E449F92B8264080FA1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 0142 Signing time: Mon 02 Feb 2026 09:01:57 +0000 Manifest this update: Mon 02 Feb 2026 08:56:57 +0000 Manifest next update: Thu 05 Feb 2026 13:41:57 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: fxONR0UgQfuA8uLufmdVhYcok48YZDVOTWo+bGUHEd4=) 2: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: GCsQ/doYvtKedc1SH/YhKj811ehkroOqTsancOtufMM=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: LIKQPsYZc3Ppn7WisMJwKDJcMycKgUXVjUfKrwWNNZU=) 4: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:26:1c:98:ca:22:53:ca:a6:c1:3e:44:9f:92:b8:26:40:80:fa:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Feb 2 08:56:57 2026 GMT Not After : Feb 5 13:41:57 2026 GMT Subject: CN=B0212AE80D1E0240BCEB817AF95A1FA7E77B37F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:a0:3a:83:55:51:09:f9:de:3b:ee:47:12: b0:f8:ff:6a:d4:3c:2f:50:0e:12:ca:45:25:ba:28: 30:a7:27:3f:1f:c0:92:4e:db:f0:f4:15:b5:1d:21: 48:20:1c:cc:56:09:ec:ea:1c:e2:da:a3:60:96:40: 00:96:29:55:91:c8:e5:18:99:1e:0a:db:11:6f:16: 56:fd:75:cb:f4:61:55:65:82:54:aa:7c:54:5a:a1: e3:35:0d:aa:f5:64:d7:fd:84:57:10:33:67:d7:63: fe:95:55:74:1a:10:47:af:ae:88:3c:23:4e:d2:a1: 3f:1a:64:0a:52:7a:f2:f6:bf:ea:fb:67:f2:c8:5c: c2:91:4c:9a:88:f5:34:e6:7c:ec:f8:74:5e:aa:61: 5b:47:5f:28:97:74:6b:f4:fe:c2:df:80:87:b3:0c: fa:2d:c7:d3:03:05:87:59:30:59:69:2e:1b:04:5d: 11:ed:14:fc:bd:31:4e:f9:18:07:9e:28:5d:68:47: 6e:7f:d1:28:4a:9c:c9:d2:73:99:7d:35:1b:d2:f1: 96:0a:8d:1e:cf:60:29:2d:cc:9d:17:6b:35:8b:ea: d5:fb:78:68:51:3b:dc:e2:3f:a2:d2:2f:62:67:ad: 9e:09:be:82:55:e2:ed:13:e0:6b:5e:e6:49:a6:38: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:21:2A:E8:0D:1E:02:40:BC:EB:81:7A:F9:5A:1F:A7:E7:7B:37:F1 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ea:b4:54:74:8e:d0:ac:6e:b2:07:ca:2d:e9:d6:41:28:c4: 2a:20:ac:1a:9c:2f:6e:bb:3d:3c:5b:22:09:12:b8:1b:6a:63: f1:17:03:84:8f:a6:5a:1f:50:9f:20:69:b7:a6:d3:59:c6:e7: 4d:4e:03:26:33:d9:5f:e5:d5:34:b2:c5:d4:e3:16:1f:c3:9d: 43:ec:df:08:50:49:06:21:fa:b1:3f:95:a1:eb:48:07:1e:e8: c6:fb:f0:14:ae:e0:d4:54:f5:23:31:dc:91:59:63:29:27:4a: ae:97:35:7b:06:e0:a6:73:cc:7d:54:52:64:d1:9f:5c:b8:c4: 1f:1d:58:50:1d:f1:94:a6:cb:d1:38:62:2b:57:e7:b2:0a:69: a4:2f:13:24:a4:86:fa:0e:7f:ef:9f:a7:30:bd:32:a3:f2:23: 23:a5:05:24:4f:05:1c:ce:05:95:1a:cb:a1:41:c5:f5:60:16: ae:b9:bd:b6:24:80:e2:ca:6a:5a:75:ed:89:47:70:ba:72:8f: 7f:48:2f:d0:cc:98:df:30:b4:84:6f:c1:88:28:c0:a5:e5:22: 89:17:12:b4:b4:7e:8b:17:3e:95:d8:b1:05:e5:22:ec:42:fe: ec:ef:fd:5b:c6:24:54:85:78:b9:e9:b0:66:0c:b7:fb:ea:71: 06:d9:48:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSYcmMoiU8qmwT5En5K4JkCA+howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNjAyMDIwODU2NTdaFw0yNjAyMDUxMzQxNTdaMDMxMTAvBgNV BAMTKEIwMjEyQUU4MEQxRTAyNDBCQ0VCODE3QUY5NUExRkE3RTc3QjM3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsqA6g1VRCfneO+5HErD4/2rU PC9QDhLKRSW6KDCnJz8fwJJO2/D0FbUdIUggHMxWCezqHOLao2CWQACWKVWRyOUY mR4K2xFvFlb9dcv0YVVlglSqfFRaoeM1Dar1ZNf9hFcQM2fXY/6VVXQaEEevrog8 I07SoT8aZApSevL2v+r7Z/LIXMKRTJqI9TTmfOz4dF6qYVtHXyiXdGv0/sLfgIez DPotx9MDBYdZMFlpLhsEXRHtFPy9MU75GAeeKF1oR25/0ShKnMnSc5l9NRvS8ZYK jR7PYCktzJ0XazWL6tX7eGhRO9ziP6LSL2JnrZ4JvoJV4u0T4Gte5kmmOGtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCEq6A0eAkC864F6+Vofp+d7N/EwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7qtFR0jtCsbrIHyi3p1kEoxCogrBqcL267 PTxbIgkSuBtqY/EXA4SPplofUJ8gabem01nG501OAyYz2V/l1TSyxdTjFh/DnUPs 3whQSQYh+rE/laHrSAce6Mb78BSu4NRU9SMx3JFZYyknSq6XNXsG4KZzzH1UUmTR n1y4xB8dWFAd8ZSmy9E4YitX57IKaaQvEySkhvoOf++fpzC9MqPyIyOlBSRPBRzO BZUay6FBxfVgFq65vbYkgOLKalp17YlHcLpyj39IL9DMmN8wtIRvwYgowKXlIokX ErS0fosXPpXYsQXlIuxC/uzv/VvGJFSFeLnpsGYMt/vqcQbZSF4= -----END CERTIFICATE-----Generated at Mon Feb 2 15:58:56 2026 by rpki-client