This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft File: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft (raw, json) Hash identifier: wKWfw22ecW/u61B6IJbGCy24hPnFfXN1HPe0c7buP0Y= Subject key identifier: 38:8E:92:7E:22:7D:E1:99:75:76:92:22:07:53:3A:52:E7:15:ED:3B Authority key identifier: B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E Certificate issuer: /CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Certificate serial: 140F9D6D76F0CD45FEDCF97DB4E3D544BA037A17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft Manifest number: 1A Signing time: Sat 31 Jan 2026 09:41:25 +0000 Manifest this update: Sat 31 Jan 2026 09:36:25 +0000 Manifest next update: Tue 03 Feb 2026 19:43:25 +0000 Files and hashes: 1: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl (hash: oKWf0fbQi03Qwot4zOrigXTabBsWEQFFuK0krRBQPhc=) 2: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: dIQVr4EU9vhVUlOy70LmMe/aV/AkNcRz6oJAaRY0RBk=) 3: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: KoQeDklma/MmavV82lm83EnfussemBPyB+je36QbhV4=) 4: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: Kyu9bQtpDSvLwwsNNqwUqQbMYywTTXQyJkLm6NWbIzI=) 5: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: aUiV56swPp0i277EKeACkxB8KCq996e6HKIfY3dUZVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0f:9d:6d:76:f0:cd:45:fe:dc:f9:7d:b4:e3:d5:44:ba:03:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Validity Not Before: Jan 31 09:36:25 2026 GMT Not After : Feb 3 19:43:25 2026 GMT Subject: CN=388E927E227DE1997576922207533A52E715ED3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:2b:d9:60:af:24:7b:99:1b:ff:80:2a:0a: 1a:c7:a3:d9:32:e8:24:52:73:8c:bd:e7:a6:c6:c5: f6:96:9b:06:c4:db:5b:d9:ce:1c:ab:df:d4:c5:34: 91:cd:db:8a:5e:b1:39:4f:5a:05:9c:89:96:34:da: d6:1a:42:19:6d:de:72:cf:7b:0b:85:b1:8d:86:54: a9:31:dc:0f:ae:df:94:90:2c:75:4e:42:c1:9d:5e: 03:c9:7a:ec:b8:86:c7:22:ff:63:eb:5e:ba:e7:95: 00:e8:14:a9:11:d0:48:4a:77:a8:ec:3b:e3:25:b8: 3e:66:dd:fe:fe:7d:f9:ae:2b:46:56:bd:71:2b:36: 35:aa:74:b8:e4:b4:3f:a8:6a:a9:dd:47:e2:9d:1d: 82:bb:12:a1:72:cc:0e:3a:6e:ab:b3:59:3a:21:44: f0:87:b7:c5:2c:51:9a:f6:ab:ab:a5:a9:00:4b:82: 2b:6e:75:03:90:ee:b8:49:66:16:65:f2:4e:b8:d3: 91:79:3c:9a:93:21:73:d6:71:6c:af:c8:a5:c8:e4: 9a:f2:f6:5b:53:b3:94:04:58:08:0f:a1:0b:45:f2: c5:b0:8c:d7:2b:cc:c6:8e:d8:a9:a9:52:d8:9b:1f: e3:be:41:49:d5:e5:3a:88:0c:16:2f:e2:ba:39:f6: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8E:92:7E:22:7D:E1:99:75:76:92:22:07:53:3A:52:E7:15:ED:3B X509v3 Authority Key Identifier: keyid:B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:49:6b:db:c4:03:aa:e3:a1:ff:d4:61:12:e9:85:82:25:37: e3:f6:f7:e7:ef:c1:45:7d:9a:2a:9f:29:de:73:db:c2:82:c1: 37:27:03:51:9a:c7:b6:02:db:ed:db:e4:b2:b6:18:1d:53:cb: e3:90:43:5f:e2:a4:f6:07:30:e9:06:29:a0:cb:e5:50:7c:e1: bb:3b:34:61:df:21:5b:75:1f:a9:41:4e:4b:ec:59:cb:df:00: 8f:44:c9:16:d7:92:fb:b6:9b:76:7b:ef:b9:0c:82:9a:b6:88: d2:b6:8b:0f:69:7a:af:b5:8d:1d:54:a1:62:00:83:b4:e2:fb: e9:00:6a:48:5d:91:15:85:d1:c2:95:42:8c:e8:0b:c6:bd:93: a2:a7:cc:03:95:f6:1a:3b:a0:91:b4:4f:43:ed:e2:c1:ed:ef: 1a:08:1b:41:9a:14:f1:47:97:2f:7c:93:60:dd:f4:ec:11:50: 57:a1:c8:8f:d3:36:45:64:65:d3:78:3c:b3:5e:37:fd:b1:0c: 94:97:24:95:1f:41:0b:6a:49:46:a3:23:a0:63:8a:13:94:b6: 0e:1c:fd:58:17:59:21:e9:e7:88:ec:11:05:ac:1f:e7:83:90: 8a:e7:7d:1f:4c:1a:8c:46:16:c0:cc:e8:ea:b1:99:cd:0c:42: 8a:fb:f3:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFA+dbXbwzUX+3Pl9tOPVRLoDehcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5 OThDRkM1RTAeFw0yNjAxMzEwOTM2MjVaFw0yNjAyMDMxOTQzMjVaMDMxMTAvBgNV BAMTKDM4OEU5MjdFMjI3REUxOTk3NTc2OTIyMjA3NTMzQTUyRTcxNUVEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ISvZYK8ke5kb/4AqChrHo9ky 6CRSc4y956bGxfaWmwbE21vZzhyr39TFNJHN24pesTlPWgWciZY02tYaQhlt3nLP ewuFsY2GVKkx3A+u35SQLHVOQsGdXgPJeuy4hsci/2PrXrrnlQDoFKkR0EhKd6js O+MluD5m3f7+ffmuK0ZWvXErNjWqdLjktD+oaqndR+KdHYK7EqFyzA46bquzWToh RPCHt8UsUZr2q6ulqQBLgitudQOQ7rhJZhZl8k6405F5PJqTIXPWcWyvyKXI5Jry 9ltTs5QEWAgPoQtF8sWwjNcrzMaO2KmpUtibH+O+QUnV5TqIDBYv4ro59gcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOI6SfiJ94Zl1dpIiB1M6UucV7TswHwYDVR0j BBgwFoAUuePc5/6F5INH1srjbIPeNZmM/F4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDg4NjgwNS0zYjg1LTRjNWItOWI2YS1kNjJhZDU2YTY2YWMvMC9COUUzRENFN0ZF ODVFNDgzNDdENkNBRTM2QzgzREUzNTk5OENGQzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5OThD RkM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RF MzU5OThDRkM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9Ja9vEA6rjof/UYRLphYIlN+P29+fvwUV9 miqfKd5z28KCwTcnA1Gax7YC2+3b5LK2GB1Ty+OQQ1/ipPYHMOkGKaDL5VB84bs7 NGHfIVt1H6lBTkvsWcvfAI9EyRbXkvu2m3Z777kMgpq2iNK2iw9peq+1jR1UoWIA g7Ti++kAakhdkRWF0cKVQozoC8a9k6KnzAOV9ho7oJG0T0Pt4sHt7xoIG0GaFPFH ly98k2Dd9OwRUFehyI/TNkVkZdN4PLNeN/2xDJSXJJUfQQtqSUajI6BjihOUtg4c /VgXWSHp54jsEQWsH+eDkIrnfR9MGoxGFsDM6Oqxmc0MQor786Q= -----END CERTIFICATE-----Generated at Mon Feb 2 09:41:23 2026 by rpki-client