This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: sdtRH+H2l/12m+4GNTzl4S7RMDSK09pg3IQPaxEXiMY= Subject key identifier: A6:35:5C:F5:0E:95:BD:34:3A:59:52:EA:15:15:E1:A7:27:CD:A9:4D Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 12454753F935B57CC726B2F2FACBCDD095DE3519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02D0 Signing time: Mon 02 Feb 2026 06:12:28 +0000 Manifest this update: Mon 02 Feb 2026 06:07:28 +0000 Manifest next update: Thu 05 Feb 2026 11:45:28 +0000 Files and hashes: 1: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: eouYYMBZBlW1p6juiYQCPIzxCzbtKsvvTjFgsenLDt4=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=) 3: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:45:47:53:f9:35:b5:7c:c7:26:b2:f2:fa:cb:cd:d0:95:de:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Feb 2 06:07:28 2026 GMT Not After : Feb 5 11:45:28 2026 GMT Subject: CN=A6355CF50E95BD343A5952EA1515E1A727CDA94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:58:bb:f1:0d:c2:39:5d:40:fe:6e:c0:fd: 40:15:94:7c:6f:9f:58:d0:1c:0c:db:ab:cb:d6:77: 93:f4:98:63:86:54:f4:e2:74:08:db:ab:58:8e:6c: 45:f7:50:91:83:1f:07:15:27:1a:42:4c:dd:70:bc: 56:9c:e9:6a:4f:ab:17:4e:b3:1d:b3:ea:66:91:77: 75:f0:18:b0:2b:d6:2b:2a:07:56:f3:8c:d4:f8:b0: 1c:10:0f:c3:4b:61:b0:d6:6f:c0:fa:61:19:12:ba: d3:8b:23:f6:3c:62:18:86:39:55:81:0e:ea:2d:26: 3e:61:c0:b8:ff:00:2c:47:40:07:bd:0c:81:3a:37: 27:74:10:9e:b1:10:11:4d:df:1f:68:e2:44:45:be: ca:d8:af:02:9f:91:13:3d:38:7d:e6:7f:42:b7:9e: 85:e0:b2:69:54:8a:c4:0b:9e:11:17:1c:f9:4f:e2: c0:0d:12:71:7b:01:c9:59:a0:28:02:4a:ba:63:d4: 5a:2d:c8:d4:f8:0c:37:15:e4:8e:78:4f:31:97:08: fe:f5:2c:1e:8e:82:e3:0c:96:ad:db:c9:3e:30:45: c0:c0:7c:3d:2c:d9:3a:45:48:44:83:b6:e1:77:28: 28:3c:06:50:e7:5b:6d:a3:37:8f:7c:31:3a:31:7c: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:35:5C:F5:0E:95:BD:34:3A:59:52:EA:15:15:E1:A7:27:CD:A9:4D X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:3c:39:9f:a4:41:70:49:2e:ad:1c:12:f1:6a:b9:03:68: 75:31:15:29:48:81:c6:15:77:27:50:f0:bd:28:0d:2c:67:88: e1:47:f6:10:61:2f:15:3e:63:7c:48:29:c6:c0:5f:69:54:3d: 89:52:a8:01:69:db:de:87:f9:64:2b:38:88:85:6b:a5:77:85: 9b:7e:22:c1:fd:7a:f3:b0:27:3c:3a:a3:23:51:05:83:50:71: 96:b1:3a:bf:7a:b1:d8:86:e5:ae:19:cc:d0:8b:88:79:51:a5: a6:aa:b0:c1:b3:45:3a:b8:3a:f2:ec:7c:96:cc:89:e2:38:4f: 8a:e4:c4:c3:05:d2:4e:7d:1f:10:a0:00:71:06:3a:86:08:31: f4:ea:d6:b1:bf:f4:b3:8c:40:43:82:58:87:89:ea:bb:45:dd: 40:28:9e:b9:d7:db:80:5f:e8:ea:ca:cf:66:97:0d:f8:32:39: c8:83:66:00:40:78:88:68:87:63:51:83:86:90:dc:c2:a7:8b: a9:4b:82:75:47:07:80:d4:92:3d:ef:50:b8:63:5a:d5:f6:af: 2b:15:3f:19:2a:2f:b6:83:e6:bb:67:61:40:89:87:6e:df:05: 49:e7:c6:85:4c:7a:ad:23:60:f7:3c:ac:38:f3:3c:df:62:a6: c4:e4:f5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkVHU/k1tXzHJrLy+svN0JXeNRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNjAyMDIwNjA3MjhaFw0yNjAyMDUxMTQ1MjhaMDMxMTAvBgNV BAMTKEE2MzU1Q0Y1MEU5NUJEMzQzQTU5NTJFQTE1MTVFMUE3MjdDREE5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sFi78Q3COV1A/m7A/UAVlHxv n1jQHAzbq8vWd5P0mGOGVPTidAjbq1iObEX3UJGDHwcVJxpCTN1wvFac6WpPqxdO sx2z6maRd3XwGLAr1isqB1bzjNT4sBwQD8NLYbDWb8D6YRkSutOLI/Y8YhiGOVWB DuotJj5hwLj/ACxHQAe9DIE6Nyd0EJ6xEBFN3x9o4kRFvsrYrwKfkRM9OH3mf0K3 noXgsmlUisQLnhEXHPlP4sANEnF7AclZoCgCSrpj1FotyNT4DDcV5I54TzGXCP71 LB6OguMMlq3byT4wRcDAfD0s2TpFSESDtuF3KCg8BlDnW22jN498MToxfKArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjVc9Q6VvTQ6WVLqFRXhpyfNqU0wHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADY3PDmfpEFwSS6tHBLxarkDaHUxFSlIgcYV dydQ8L0oDSxniOFH9hBhLxU+Y3xIKcbAX2lUPYlSqAFp296H+WQrOIiFa6V3hZt+ IsH9evOwJzw6oyNRBYNQcZaxOr96sdiG5a4ZzNCLiHlRpaaqsMGzRTq4OvLsfJbM ieI4T4rkxMMF0k59HxCgAHEGOoYIMfTq1rG/9LOMQEOCWIeJ6rtF3UAonrnX24Bf 6OrKz2aXDfgyOciDZgBAeIhoh2NRg4aQ3MKni6lLgnVHB4DUkj3vULhjWtX2rysV PxkqL7aD5rtnYUCJh27fBUnnxoVMeq0jYPc8rDjzPN9ipsTk9fA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:56 2026 by rpki-client