This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: Cn0FEMr8GE+tlxCGukGkT5c8jnBl304cBPSx9zISops= Subject key identifier: 0A:50:98:22:AC:52:C5:0B:E1:4A:DC:F9:1D:06:E1:D4:B7:BE:68:01 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 4DA0CBB92CE745056E7252310897A921F5B5D2FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 01AA Signing time: Mon 02 Feb 2026 05:41:11 +0000 Manifest this update: Mon 02 Feb 2026 05:36:11 +0000 Manifest next update: Thu 05 Feb 2026 17:23:11 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) 3: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: SARoFAKqP6mkQhpDreoZuH95Ag2FzBOX74hLh+3I2Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:cb:b9:2c:e7:45:05:6e:72:52:31:08:97:a9:21:f5:b5:d2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Feb 2 05:36:11 2026 GMT Not After : Feb 5 17:23:11 2026 GMT Subject: CN=0A509822AC52C50BE14ADCF91D06E1D4B7BE6801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:05:37:b7:d1:33:f1:2f:b9:04:cc:60:6e: a8:52:c5:b0:7c:92:d9:1e:78:34:51:76:08:4c:23: 7f:d1:64:31:01:4d:58:66:e1:c1:d2:5a:97:51:3e: 4c:e1:c8:08:ae:0a:3f:79:31:ac:34:a0:8d:ee:f0: cd:75:f8:7a:eb:a4:9b:07:79:d9:f6:17:52:ce:ab: 81:cd:51:0a:4f:b2:29:9e:3d:87:71:d2:34:01:92: fc:c5:ad:4c:28:a7:18:6d:eb:7c:28:c8:8e:ad:75: 5e:a9:bd:c2:38:7d:4b:88:0c:78:15:08:2a:cc:dc: 1c:5a:91:6c:2c:de:5e:ad:d1:4c:e8:46:94:e0:14: 34:9f:7c:5c:1f:04:a3:af:c7:02:9e:ce:a4:e4:f8: a6:e4:0c:cf:3f:67:cc:18:36:06:50:1d:64:81:df: f7:22:ea:b8:92:c3:fa:33:49:b0:98:1e:a5:d0:12: f3:20:aa:ca:78:11:54:a7:96:df:a7:de:a6:55:bb: da:f7:62:c5:19:64:ef:c9:e5:8f:5c:ff:e4:65:37: c6:74:84:68:5f:dc:ed:65:5b:b2:e5:3e:96:d6:3c: 63:d3:55:fd:97:25:d5:0e:36:cd:39:f8:14:15:a1: 00:c7:cb:85:64:b3:12:97:63:38:74:31:69:e5:9a: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:98:22:AC:52:C5:0B:E1:4A:DC:F9:1D:06:E1:D4:B7:BE:68:01 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:9a:9f:9e:54:f7:ae:1c:27:11:f1:e2:f0:3b:b5:df:bc:7b: fb:7d:a5:a0:7d:8a:37:b0:27:bc:e4:e9:4e:a1:a4:5f:c6:0e: 43:9a:32:21:9d:ad:b4:16:1d:6d:fd:43:fb:47:28:19:58:c6: bb:fe:86:51:d7:d6:c9:1d:f9:ae:26:9d:70:87:f3:b5:6c:27: e5:3e:c8:8b:26:15:a4:94:e0:dd:7f:1c:fe:92:e0:cf:31:3f: 53:89:6e:28:5f:af:1f:df:4d:77:5e:f1:b5:81:8e:17:1d:f8: b6:5d:da:59:43:82:4a:77:7b:83:1b:d9:e1:cf:62:2c:01:9b: e9:0d:fa:55:af:85:33:d4:4a:2a:0e:c3:2b:a6:9d:3d:ce:34: e8:ae:38:88:d4:e8:d1:7e:bd:18:18:99:27:92:04:42:69:84: 6b:71:f1:aa:14:2f:f0:1c:c6:2a:f7:a4:22:fb:7d:73:da:a5: 27:24:51:f3:c9:71:6a:16:20:e0:9e:ef:0f:96:42:74:6c:52: 76:c1:c8:4a:bf:ef:28:4b:93:39:e0:ea:6f:7c:9b:f3:fb:dd: 52:f4:db:1c:2c:d6:0c:89:c9:5b:b0:fd:e7:ad:80:93:fd:52: fd:56:a0:6c:45:39:7d:e8:5b:b0:5e:ee:c0:b3:85:23:c8:66: fd:5a:4c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaDLuSznRQVuclIxCJepIfW10vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNjAyMDIwNTM2MTFaFw0yNjAyMDUxNzIzMTFaMDMxMTAvBgNV BAMTKDBBNTA5ODIyQUM1MkM1MEJFMTRBRENGOTFEMDZFMUQ0QjdCRTY4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuAU3t9Ez8S+5BMxgbqhSxbB8 ktkeeDRRdghMI3/RZDEBTVhm4cHSWpdRPkzhyAiuCj95Maw0oI3u8M11+HrrpJsH edn2F1LOq4HNUQpPsimePYdx0jQBkvzFrUwopxht63woyI6tdV6pvcI4fUuIDHgV CCrM3BxakWws3l6t0UzoRpTgFDSffFwfBKOvxwKezqTk+KbkDM8/Z8wYNgZQHWSB 3/ci6riSw/ozSbCYHqXQEvMgqsp4EVSnlt+n3qZVu9r3YsUZZO/J5Y9c/+RlN8Z0 hGhf3O1lW7LlPpbWPGPTVf2XJdUONs05+BQVoQDHy4VksxKXYzh0MWnlmtmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClCYIqxSxQvhStz5HQbh1Le+aAEwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGan55U964cJxHx4vA7td+8e/t9paB9ijew J7zk6U6hpF/GDkOaMiGdrbQWHW39Q/tHKBlYxrv+hlHX1skd+a4mnXCH87VsJ+U+ yIsmFaSU4N1/HP6S4M8xP1OJbihfrx/fTXde8bWBjhcd+LZd2llDgkp3e4Mb2eHP YiwBm+kN+lWvhTPUSioOwyumnT3ONOiuOIjU6NF+vRgYmSeSBEJphGtx8aoUL/Ac xir3pCL7fXPapSckUfPJcWoWIOCe7w+WQnRsUnbByEq/7yhLkzng6m98m/P73VL0 2xws1gyJyVuw/eetgJP9Uv1WoGxFOX3oW7Be7sCzhSPIZv1aTCc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:49:52 2026 by rpki-client