This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: xOGMKtsXTkkDXP33rjtsryoed/4ecCDWf23y2Y6dKSE= Subject key identifier: A2:4B:A7:CB:A9:79:18:AC:34:C7:6E:6E:8F:85:AC:86:23:BE:24:4F Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 216F5212052CB85BF7A33DB67B93FFC373D1FAEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 03C2 Signing time: Sat 31 Jan 2026 04:41:38 +0000 Manifest this update: Sat 31 Jan 2026 04:36:38 +0000 Manifest next update: Tue 03 Feb 2026 13:31:38 +0000 Files and hashes: 1: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: HVgnGfzsdoLpW45W/tWdisQr+zJsKeHsVrmTwnVKaZU=) 2: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) 3: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) 4: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:52:12:05:2c:b8:5b:f7:a3:3d:b6:7b:93:ff:c3:73:d1:fa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Jan 31 04:36:38 2026 GMT Not After : Feb 3 13:31:38 2026 GMT Subject: CN=A24BA7CBA97918AC34C76E6E8F85AC8623BE244F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:5c:d4:bd:20:64:cc:56:0d:1c:35:5e:4a: 81:68:8a:e0:52:01:fd:1d:7f:6c:21:3a:da:a5:58: 99:29:fb:43:87:9b:15:6a:05:67:c9:c6:b8:65:4b: 68:bf:2f:e6:29:fd:c7:62:11:8b:5a:a5:61:81:23: a4:4f:ee:76:61:43:e9:db:43:79:78:9c:ff:61:86: 0b:e3:c6:d6:4b:b9:3b:f6:d9:60:57:31:4a:86:16: 31:4c:e6:f2:85:2f:b1:23:3d:f8:3e:ae:e7:52:7d: d6:88:e1:f3:5f:cb:86:2a:24:36:0a:3a:c6:73:b8: 5e:b3:28:d0:08:69:a6:28:a1:09:40:bd:0f:35:81: 44:02:e0:28:3d:4e:b9:3f:29:54:a0:3e:b7:8c:d3: 52:d0:af:fd:3b:93:3f:a3:cb:12:bf:30:00:d1:04: 03:03:87:57:1b:5c:dc:82:b8:f0:30:ed:2d:b9:b5: 63:ac:80:09:18:7c:fa:c0:d2:50:69:65:8e:4a:62: 19:3f:0f:a5:25:ea:01:55:fe:f7:df:0d:d9:5c:20: 35:b7:c9:aa:fe:32:f6:34:04:31:de:ca:0e:5a:d8: 64:6b:e4:6e:c2:87:08:71:4f:e6:c2:89:41:98:ef: 92:a7:e9:29:f6:6f:38:8c:90:bd:fa:e7:1b:f6:a5: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:A7:CB:A9:79:18:AC:34:C7:6E:6E:8F:85:AC:86:23:BE:24:4F X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2e:73:70:2a:86:d8:bd:cf:49:19:12:33:b1:a9:d2:49:e9: dd:f7:fd:88:9f:58:77:c3:f7:7b:57:ba:f2:b2:91:aa:21:de: ec:b1:dc:00:ac:d5:ef:7e:a0:ec:99:07:03:fd:83:5d:bd:fb: 1a:9c:6e:43:36:4f:52:80:a9:46:e5:00:70:eb:f6:ae:a5:d7: 0f:8d:bb:a5:e1:35:79:a0:cd:72:12:2c:b0:c2:2a:62:5c:06: db:56:c6:23:c5:a8:8a:69:7e:b9:88:37:f1:df:7b:ee:f2:13: 78:c3:ab:48:02:c1:8f:48:18:a9:b3:78:3d:99:1b:3b:08:2d: 9c:b3:d2:7c:53:bb:35:7a:2a:38:ca:cd:35:1f:61:b5:09:cc: f5:1f:24:95:ba:b2:da:06:16:ff:cf:ab:90:55:5d:d2:06:cb: f6:62:f9:74:17:0b:48:5c:6f:f2:db:70:3e:2f:07:1f:ac:82: 9f:ca:95:e3:6d:86:4b:0b:b4:78:38:06:e8:b0:d9:79:b7:e6: cb:1f:c0:7f:f0:f8:08:6e:8b:8b:69:c2:19:1f:c1:7a:0d:58: 0c:bc:f2:cc:2e:cb:51:e8:1e:70:6d:98:dc:30:76:14:9a:4a: a9:b7:6c:51:9a:5e:53:e3:8c:3d:0c:c2:21:29:e0:a1:5c:72: 6f:8c:8a:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIW9SEgUsuFv3oz22e5P/w3PR+uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNjAxMzEwNDM2MzhaFw0yNjAyMDMxMzMxMzhaMDMxMTAvBgNV BAMTKEEyNEJBN0NCQTk3OTE4QUMzNEM3NkU2RThGODVBQzg2MjNCRTI0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgP1zUvSBkzFYNHDVeSoFoiuBS Af0df2whOtqlWJkp+0OHmxVqBWfJxrhlS2i/L+Yp/cdiEYtapWGBI6RP7nZhQ+nb Q3l4nP9hhgvjxtZLuTv22WBXMUqGFjFM5vKFL7EjPfg+rudSfdaI4fNfy4YqJDYK OsZzuF6zKNAIaaYooQlAvQ81gUQC4Cg9Trk/KVSgPreM01LQr/07kz+jyxK/MADR BAMDh1cbXNyCuPAw7S25tWOsgAkYfPrA0lBpZY5KYhk/D6Ul6gFV/vffDdlcIDW3 yar+MvY0BDHeyg5a2GRr5G7ChwhxT+bCiUGY75Kn6Sn2bziMkL365xv2pX0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokuny6l5GKw0x25uj4WshiO+JE8wHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8uc3Aqhti9z0kZEjOxqdJJ6d33/YifWHfD 93tXuvKykaoh3uyx3ACs1e9+oOyZBwP9g129+xqcbkM2T1KAqUblAHDr9q6l1w+N u6XhNXmgzXISLLDCKmJcBttWxiPFqIppfrmIN/Hfe+7yE3jDq0gCwY9IGKmzeD2Z GzsILZyz0nxTuzV6KjjKzTUfYbUJzPUfJJW6stoGFv/Pq5BVXdIGy/Zi+XQXC0hc b/LbcD4vBx+sgp/KleNthksLtHg4Buiw2Xm35ssfwH/w+Ahui4tpwhkfwXoNWAy8 8swuy1HoHnBtmNwwdhSaSqm3bFGaXlPjjD0MwiEp4KFccm+Misw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:47 2026 by rpki-client