This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: tngz/IMDxnFaJKBm9/0VcTqveUdWIt7GNUef/cwUPu8= Subject key identifier: 93:88:3B:40:D7:82:55:76:8C:1B:66:09:22:99:F0:8D:AE:86:17:73 Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 0BFBD5118BD4D9D12CC22E8460A0010738D25DA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 0235 Signing time: Sun 01 Feb 2026 16:11:21 +0000 Manifest this update: Sun 01 Feb 2026 16:06:21 +0000 Manifest next update: Wed 04 Feb 2026 18:19:21 +0000 Files and hashes: 1: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) 2: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 3: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) 4: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: kP21ShREQf6RQdbX8vdJYef0qbRTcKDpuNb4jzW9TEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 18:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fb:d5:11:8b:d4:d9:d1:2c:c2:2e:84:60:a0:01:07:38:d2:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Feb 1 16:06:21 2026 GMT Not After : Feb 4 18:19:21 2026 GMT Subject: CN=93883B40D78255768C1B66092299F08DAE861773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:65:e1:0d:e1:34:27:d1:74:71:2d:b3:7a: 4e:ac:c5:f7:57:34:b1:ca:94:19:d9:81:d4:2e:2f: eb:99:b3:21:d3:75:13:82:f7:e3:f3:ea:97:dc:9f: 83:aa:4b:27:ec:a4:54:db:52:cd:ad:d6:f1:9b:23: 15:32:1d:15:1d:9c:74:89:aa:bb:bb:af:bf:d3:2f: 5c:ee:7f:13:ca:17:4b:89:12:74:79:93:4f:e8:c2: a2:cb:73:38:01:6a:78:41:cb:ec:d6:79:55:81:e8: a7:45:cd:ac:3d:fb:2c:e9:26:6b:66:dd:73:0f:1e: 61:a8:06:b1:73:83:68:a8:ed:b2:17:10:f4:41:d8: 6a:5b:8c:2d:3f:98:0a:08:1c:b9:af:2e:07:3a:c8: e8:9d:74:65:71:0a:46:d8:05:26:ba:a1:0b:61:13: 69:e7:bd:32:85:aa:e2:8d:b9:32:2e:be:90:3c:31: a5:a2:bc:5e:4c:f0:19:7f:f3:4a:4b:3d:e1:a5:cd: 03:a1:35:45:4c:9d:44:cb:e7:20:c9:8e:48:67:47: 00:49:31:2d:45:a2:98:cc:db:68:f3:ff:8f:9b:6c: 6b:9c:7a:a0:db:52:81:ec:16:1f:62:3b:32:ff:05: 4c:80:78:ce:d2:49:71:fd:81:78:d2:86:bf:82:76: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:88:3B:40:D7:82:55:76:8C:1B:66:09:22:99:F0:8D:AE:86:17:73 X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:21:aa:bd:7b:20:3e:6c:e5:17:8a:ff:66:18:c7:8b:f3:3d: 43:e3:3b:e3:93:5e:38:54:ab:39:df:30:cc:29:0f:e7:7a:8b: e2:8e:38:1c:96:d5:ea:9e:f4:0d:b4:53:2c:81:00:2d:2c:02: 68:90:5e:b7:24:a9:3b:b9:7d:04:0d:10:ce:f5:95:87:90:e5: 0e:7d:97:19:38:97:cd:c3:e8:a3:55:37:60:a9:22:11:99:2d: 55:5a:0a:d2:24:71:b3:98:22:a8:b1:1e:27:c8:cf:30:f7:e3: d1:bc:9d:75:bf:25:18:92:76:dd:55:1b:3c:18:38:b3:ef:84: 7d:a4:77:f0:f4:39:57:22:c2:16:8a:fe:87:9e:a0:01:51:dd: aa:4e:8d:15:10:26:85:7c:61:48:28:34:41:38:2e:88:a6:98: 4d:24:d9:70:d1:93:9d:fb:b6:3c:9e:a7:c5:d7:b8:7f:e1:79: 78:0c:b0:09:a6:03:0c:be:15:eb:a2:78:3f:bd:b4:a9:de:37: 87:d1:63:5b:df:95:a1:35:76:7a:e9:d5:4e:b0:bc:11:10:e0: f8:30:4e:0d:ac:bc:24:d5:11:13:c0:1c:a2:de:56:be:dc:dd: e6:f2:57:97:d0:b1:28:a3:9a:f7:f3:ac:5d:31:e6:37:5a:0c: 1d:43:2b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/vVEYvU2dEswi6EYKABBzjSXaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNjAyMDExNjA2MjFaFw0yNjAyMDQxODE5MjFaMDMxMTAvBgNV BAMTKDkzODgzQjQwRDc4MjU1NzY4QzFCNjYwOTIyOTlGMDhEQUU4NjE3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgo2XhDeE0J9F0cS2zek6sxfdX NLHKlBnZgdQuL+uZsyHTdROC9+Pz6pfcn4OqSyfspFTbUs2t1vGbIxUyHRUdnHSJ qru7r7/TL1zufxPKF0uJEnR5k0/owqLLczgBanhBy+zWeVWB6KdFzaw9+yzpJmtm 3XMPHmGoBrFzg2io7bIXEPRB2GpbjC0/mAoIHLmvLgc6yOiddGVxCkbYBSa6oQth E2nnvTKFquKNuTIuvpA8MaWivF5M8Bl/80pLPeGlzQOhNUVMnUTL5yDJjkhnRwBJ MS1FopjM22jz/4+bbGuceqDbUoHsFh9iOzL/BUyAeM7SSXH9gXjShr+CdrdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4g7QNeCVXaMG2YJIpnwja6GF3MwHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIghqr17ID5s5ReK/2YYx4vzPUPjO+OTXjhU qznfMMwpD+d6i+KOOByW1eqe9A20UyyBAC0sAmiQXrckqTu5fQQNEM71lYeQ5Q59 lxk4l83D6KNVN2CpIhGZLVVaCtIkcbOYIqixHifIzzD349G8nXW/JRiSdt1VGzwY OLPvhH2kd/D0OVciwhaK/oeeoAFR3apOjRUQJoV8YUgoNEE4LoimmE0k2XDRk537 tjyep8XXuH/heXgMsAmmAwy+FeuieD+9tKneN4fRY1vflaE1dnrp1U6wvBEQ4Pgw Tg2svCTVERPAHKLeVr7c3ebyV5fQsSijmvfzrF0x5jdaDB1DK1M= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:23 2026 by rpki-client