This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json)
Hash identifier: 6rwPS4VnVIGjVEZg4aIxO2x0A7WOcL8KIiQf5L+YOEM=
Subject key identifier: F3:0E:1E:98:07:A2:29:B8:4D:E5:4C:13:5B:CA:8A:7A:F1:73:9C:EA
Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52
Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
Certificate serial: 662979756892E76FECD66C8AB342C8965D557ABB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
Manifest number: 02A0
Signing time: Sat 31 Jan 2026 08:01:02 +0000
Manifest this update: Sat 31 Jan 2026 07:56:02 +0000
Manifest next update: Tue 03 Feb 2026 15:47:02 +0000
Files and hashes: 1: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: InBK6l1dzQlOi+nbr8JnditBHR6m8cwzyORGpOkggCU=)
2: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: P54230MRe8jXsR9/tDE0mXAjQzfMJ7+VOpxd/HYoK8g=)
3: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl
rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 15:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:29:79:75:68:92:e7:6f:ec:d6:6c:8a:b3:42:c8:96:5d:55:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
Validity
Not Before: Jan 31 07:56:02 2026 GMT
Not After : Feb 3 15:47:02 2026 GMT
Subject: CN=F30E1E9807A229B84DE54C135BCA8A7AF1739CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:8c:80:43:e8:09:18:88:ce:14:ad:f0:64:
61:96:fa:84:95:f6:ee:a0:53:62:e5:7d:66:df:a5:
3c:dc:60:0f:02:05:dd:17:c2:55:ef:7c:ee:13:85:
52:87:ec:d3:5d:02:7f:f5:9b:42:bd:62:ec:59:df:
fd:10:cb:04:65:4e:53:f0:c6:bf:fc:b9:21:bc:ed:
83:37:f0:8f:45:3f:e5:35:0f:7c:6a:a2:ab:99:6a:
1c:47:ac:5f:ea:7c:03:e8:cb:a4:e8:f0:92:68:d7:
16:de:dd:7f:64:76:34:9e:4a:c7:68:61:43:aa:4b:
08:b9:c5:ce:8b:99:87:05:28:73:48:a0:c5:68:d5:
35:ba:98:33:ea:40:06:7e:2b:96:1b:f7:17:5e:93:
39:a7:89:e2:ee:0f:e1:08:a6:39:d2:48:07:3f:fb:
c2:15:1f:05:be:1a:16:05:9b:58:b1:76:ab:54:21:
51:22:63:8a:e1:58:7b:8b:ae:6a:6c:8f:49:d9:6d:
5f:e9:1f:3c:af:83:27:d6:a3:5d:88:71:ba:b9:7b:
ea:ef:a1:1f:f4:a6:38:d1:3d:91:42:ce:1b:0f:97:
cd:45:fa:e2:8b:14:1c:81:43:d1:7b:f5:32:d9:bd:
35:b0:63:e6:d9:86:75:05:f3:a3:bd:88:58:bb:89:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:1E:98:07:A2:29:B8:4D:E5:4C:13:5B:CA:8A:7A:F1:73:9C:EA
X509v3 Authority Key Identifier:
keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:54:2c:14:85:ea:be:fb:40:0d:a1:5d:f2:6d:f2:b9:ea:fd:
78:93:6e:9e:f7:70:89:d9:28:c9:ec:d8:dc:b1:6a:da:84:1e:
61:ed:b4:63:34:1f:4e:39:3e:e1:87:1f:74:83:81:dc:d2:7d:
80:65:b8:94:fe:47:c4:69:3d:08:7e:bf:65:9b:d0:44:03:84:
ab:11:69:5b:4e:bd:57:b9:ea:c5:b4:a3:60:fc:5d:5c:d1:90:
14:38:5d:9d:9a:e6:59:8f:8d:e8:49:8c:d1:40:23:0c:26:c5:
b9:c4:c7:37:bd:70:64:34:8e:f1:99:73:2f:6f:fd:7a:2f:7b:
e0:ca:39:76:4e:d4:21:d5:87:6f:d2:9d:51:97:d1:39:4e:50:
3c:56:2a:d8:1f:ea:13:b0:c3:7c:8a:84:93:ed:e1:e2:e3:19:
64:02:25:db:0a:91:15:15:ca:a6:1c:75:ef:a5:7a:2e:76:2b:
5a:9f:57:b0:b9:b7:83:83:44:44:d8:66:45:72:0a:52:94:5e:
d4:92:4b:3f:5a:ef:69:8c:b6:74:8e:a6:2e:3a:64:d5:66:a9:
df:3c:3f:10:0c:4d:8e:fc:5c:d3:64:de:35:5e:a8:b2:8a:c8:
e0:c4:0e:59:2b:9c:d5:bd:0d:77:ff:55:f7:84:44:f2:66:1b:
0f:6f:61:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZil5dWiS52/s1myKs0LIll1VerswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD
QjhBOEY1MjAeFw0yNjAxMzEwNzU2MDJaFw0yNjAyMDMxNTQ3MDJaMDMxMTAvBgNV
BAMTKEYzMEUxRTk4MDdBMjI5Qjg0REU1NEMxMzVCQ0E4QTdBRjE3MzlDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAYyAQ+gJGIjOFK3wZGGW+oSV
9u6gU2LlfWbfpTzcYA8CBd0XwlXvfO4ThVKH7NNdAn/1m0K9YuxZ3/0QywRlTlPw
xr/8uSG87YM38I9FP+U1D3xqoquZahxHrF/qfAPoy6To8JJo1xbe3X9kdjSeSsdo
YUOqSwi5xc6LmYcFKHNIoMVo1TW6mDPqQAZ+K5Yb9xdekzmnieLuD+EIpjnSSAc/
+8IVHwW+GhYFm1ixdqtUIVEiY4rhWHuLrmpsj0nZbV/pHzyvgyfWo12Icbq5e+rv
oR/0pjjRPZFCzhsPl81F+uKLFByBQ9F79TLZvTWwY+bZhnUF86O9iFi7iRhvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8w4emAeiKbhN5UwTW8qKevFznOowHwYDVR0j
BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF
NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB
OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm
ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5
N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABBULBSF6r77QA2hXfJt8rnq/XiTbp73cInZ
KMns2NyxatqEHmHttGM0H045PuGHH3SDgdzSfYBluJT+R8RpPQh+v2Wb0EQDhKsR
aVtOvVe56sW0o2D8XVzRkBQ4XZ2a5lmPjehJjNFAIwwmxbnExze9cGQ0jvGZcy9v
/Xove+DKOXZO1CHVh2/SnVGX0TlOUDxWKtgf6hOww3yKhJPt4eLjGWQCJdsKkRUV
yqYcde+lei52K1qfV7C5t4ODRETYZkVyClKUXtSSSz9a72mMtnSOpi46ZNVmqd88
PxAMTY78XNNk3jVeqLKKyODEDlkrnNW9DXf/VfeERPJmGw9vYfs=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:12 2026 by rpki-client