This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: EMS6HpXPV7PdcWzYU+PHu8LrCNTQesivrHzt404cK1M= Subject key identifier: 85:0F:5A:FE:E9:0F:E6:1A:24:CD:74:DE:0E:FB:50:EC:1D:3C:A2:90 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 21767D7EC40A134C913B874ACD7EE48B0BAF9D47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 039B Signing time: Sat 31 Jan 2026 17:31:07 +0000 Manifest this update: Sat 31 Jan 2026 17:26:07 +0000 Manifest next update: Tue 03 Feb 2026 17:45:07 +0000 Files and hashes: 1: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: LU6KVH5tPNXOU2iVEmpp8S0HDFuvucf9YYf/NncO/Yg=) 2: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 3: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 4: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:76:7d:7e:c4:0a:13:4c:91:3b:87:4a:cd:7e:e4:8b:0b:af:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Jan 31 17:26:07 2026 GMT Not After : Feb 3 17:45:07 2026 GMT Subject: CN=850F5AFEE90FE61A24CD74DE0EFB50EC1D3CA290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:4e:0c:4d:f3:8c:d9:9a:9d:41:c7:c8:95: 04:69:72:60:5b:72:00:6a:7a:7f:2c:ed:5e:ef:c0: 89:c3:51:68:05:40:d1:cd:fa:55:85:8a:65:31:b6: ac:b9:f4:4b:87:b5:12:86:d1:9d:99:c0:1f:18:d4: d9:52:03:1f:0f:ce:1a:25:06:19:30:a1:be:c8:e4: 7e:b4:35:1a:f4:51:d4:6e:6a:1a:f9:f0:4c:d1:da: 13:e2:9b:07:4a:43:71:be:0b:c1:6c:c9:9d:ba:3f: 3f:55:00:75:63:bb:13:c3:ff:85:4b:e9:12:62:73: a3:62:5a:fa:30:b7:20:6c:33:0e:6b:bd:63:06:ab: 24:bb:dd:11:17:d2:3b:57:d4:3e:c3:a7:14:8b:b2: 8f:8d:e0:a8:46:67:bd:bd:f9:a6:8c:ea:24:d0:e2: 70:1c:b2:86:b0:b1:6d:d0:12:33:77:9a:5e:af:3b: 41:94:7a:c5:13:83:fb:4e:a0:34:93:b4:2c:71:fd: a9:21:77:dc:ef:60:d2:fd:22:8a:53:38:be:8a:44: 26:6b:9b:40:82:60:53:76:16:b4:5a:39:9d:05:f7: c7:57:cd:47:42:71:f6:ae:ad:6d:17:7b:9e:ec:55: 60:21:e6:85:83:6f:fe:07:a7:b6:97:c3:e2:c5:58: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:5A:FE:E9:0F:E6:1A:24:CD:74:DE:0E:FB:50:EC:1D:3C:A2:90 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d5:1a:d8:2f:84:ae:1c:2d:49:10:9a:14:62:b5:df:6c:95: 03:0b:2f:c8:55:b0:bb:ba:0f:fc:1b:4a:39:1b:f1:3d:10:de: 14:8d:f1:97:6f:ba:57:eb:3a:5c:df:9a:b7:c6:a7:85:51:46: 97:64:97:5d:41:86:11:1e:2c:f5:00:39:62:22:2e:ec:fc:7a: 8a:03:4d:f9:17:da:9f:9a:33:51:ff:75:73:e3:9d:a0:b2:72: e7:fa:1e:e4:26:11:e8:70:69:e3:df:21:88:91:8d:92:9d:b4: 85:ce:fc:12:89:f9:41:16:b8:d3:9b:e0:f3:8b:b3:26:5b:24: c4:1d:21:e4:b2:bd:4a:af:03:1b:44:89:4d:e7:c2:34:63:f7: 06:a8:bb:78:df:4b:62:67:43:ad:75:fe:31:6f:86:9c:15:77: d4:ca:f0:0a:d9:c8:98:f9:53:08:c6:a7:8a:77:12:9d:60:83: e9:12:8c:49:6c:4e:e8:60:fc:5b:9f:a3:82:9d:2f:98:ef:81: 29:1a:ec:b9:fb:19:d0:a1:28:69:8a:bd:9d:42:b5:15:cb:e2: 12:22:35:66:3f:5e:e8:36:4e:65:85:c3:0e:bd:7e:e7:95:02: d1:2d:7b:b7:eb:73:cc:13:59:9c:39:9a:49:43:bd:31:4a:14: ec:9b:30:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXZ9fsQKE0yRO4dKzX7kiwuvnUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNjAxMzExNzI2MDdaFw0yNjAyMDMxNzQ1MDdaMDMxMTAvBgNV BAMTKDg1MEY1QUZFRTkwRkU2MUEyNENENzRERTBFRkI1MEVDMUQzQ0EyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKE4MTfOM2ZqdQcfIlQRpcmBb cgBqen8s7V7vwInDUWgFQNHN+lWFimUxtqy59EuHtRKG0Z2ZwB8Y1NlSAx8Pzhol Bhkwob7I5H60NRr0UdRuahr58EzR2hPimwdKQ3G+C8FsyZ26Pz9VAHVjuxPD/4VL 6RJic6NiWvowtyBsMw5rvWMGqyS73REX0jtX1D7DpxSLso+N4KhGZ729+aaM6iTQ 4nAcsoawsW3QEjN3ml6vO0GUesUTg/tOoDSTtCxx/akhd9zvYNL9IopTOL6KRCZr m0CCYFN2FrRaOZ0F98dXzUdCcfaurW0Xe57sVWAh5oWDb/4Hp7aXw+LFWFihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQ9a/ukP5hokzXTeDvtQ7B08opAwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfVGtgvhK4cLUkQmhRitd9slQMLL8hVsLu6 D/wbSjkb8T0Q3hSN8ZdvulfrOlzfmrfGp4VRRpdkl11BhhEeLPUAOWIiLuz8eooD TfkX2p+aM1H/dXPjnaCycuf6HuQmEehwaePfIYiRjZKdtIXO/BKJ+UEWuNOb4POL syZbJMQdIeSyvUqvAxtEiU3nwjRj9waou3jfS2JnQ611/jFvhpwVd9TK8ArZyJj5 UwjGp4p3Ep1gg+kSjElsTuhg/Fufo4KdL5jvgSka7Ln7GdChKGmKvZ1CtRXL4hIi NWY/Xug2TmWFww69fueVAtEte7frc8wTWZw5mklDvTFKFOybMCw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:25 2026 by rpki-client