This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: 1mNf4SApPYX0ZO85PHydoFAfzDun4T9shF9i7Iw22IU= Subject key identifier: 38:E3:09:6E:DC:3B:A6:C6:06:61:E2:84:4F:2A:0D:43:67:AC:84:D2 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 41D2478FF750A683DE63B135ED1A93D1B4271836 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 014D Signing time: Sat 31 Jan 2026 20:21:42 +0000 Manifest this update: Sat 31 Jan 2026 20:16:42 +0000 Manifest next update: Wed 04 Feb 2026 07:49:42 +0000 Files and hashes: 1: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: JKPKSxtNr4roaOU1GUo5PklwixfLAP/k426kY4JyNts=) 2: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: GA6rUIyaqIB58eM6Y3Tv2tAamvlNcofAYPow7jpjhqA=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: hjP0N7FVqxd5mdZscYDmp6xMH5tmWzueXb7HkGf6Xog=) 4: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: QUjv/5jaqaJ6ZfWrdsdFU2t4AHDNK37xcwVetPlcC14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 07:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:47:8f:f7:50:a6:83:de:63:b1:35:ed:1a:93:d1:b4:27:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Jan 31 20:16:42 2026 GMT Not After : Feb 4 07:49:42 2026 GMT Subject: CN=38E3096EDC3BA6C60661E2844F2A0D4367AC84D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:c6:76:ef:54:d2:6d:d8:d4:a6:17:3c:0f: d2:d5:83:f9:ea:1a:2a:06:d6:33:58:e0:fd:fd:56: 9b:92:c8:61:31:63:01:c9:98:f1:da:bd:2b:d1:cb: e3:af:88:fe:25:4b:f1:c0:1e:18:2f:1b:67:51:73: 0c:29:bb:92:30:72:b3:43:23:6f:a8:b0:74:cd:95: 78:19:87:da:7d:15:03:b2:f6:4d:15:2b:f9:b0:0a: cf:19:fd:0d:e9:65:f0:61:ff:c5:eb:74:57:a5:70: 38:9d:42:5b:9a:4b:9c:0a:c7:b4:db:18:d5:32:a2: 48:db:e2:fa:63:d8:5d:c0:70:3d:8f:d9:3c:27:c9: 5f:e3:92:4a:dc:60:7a:53:3a:da:fe:45:40:c8:41: 10:8f:cc:1d:bd:d0:6a:d5:5b:6a:14:0b:be:88:23: 4f:d1:2a:44:67:e8:3f:b5:4a:dc:6c:b0:67:09:92: d5:d3:bd:e8:cb:3f:83:7b:dc:69:8e:87:f4:a3:6f: 57:3a:08:ae:ed:46:8d:58:f8:9c:ae:a7:25:08:df: 8d:df:4f:88:96:08:2c:42:eb:08:18:b2:a5:5e:8c: 63:1e:39:5f:c4:06:54:2b:18:28:ef:ec:f5:7d:39: d6:7a:b8:bc:45:40:08:6b:45:5e:c2:8d:c9:32:71: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:09:6E:DC:3B:A6:C6:06:61:E2:84:4F:2A:0D:43:67:AC:84:D2 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ca:cc:21:40:3a:33:07:1e:98:dc:04:b8:5c:46:5d:57:36: c9:63:7d:c0:4b:27:18:e8:0b:8e:21:02:b4:61:f5:da:0c:27: b0:ec:62:bb:25:20:9f:ea:e8:48:3a:82:fc:82:57:a8:16:82: 2a:f2:38:db:2f:22:d9:dd:e4:65:59:20:05:fe:17:55:c6:f3: 98:78:30:4c:66:4d:b7:87:c3:55:ce:7d:18:72:ab:07:79:04: 39:51:e7:cb:09:af:f2:28:fc:9e:69:b9:57:b1:e7:e7:a6:30: f2:cc:88:4e:d5:02:31:7c:c3:eb:a9:46:b8:f5:26:c7:71:07: e0:2a:00:20:ce:6b:7b:57:fc:56:e8:cf:98:52:2c:2a:c6:21: 94:8d:6a:9c:b4:10:72:23:85:c0:3b:47:32:bd:9c:43:42:99: 5a:61:b5:a9:f1:03:e0:8b:1a:7d:41:15:ab:0b:1d:f6:dd:95: 23:ec:1f:1b:cc:14:b3:7a:da:03:ce:2e:77:76:f8:7f:90:f0: 88:12:0a:6c:cc:f7:ed:ef:63:a2:0a:c4:72:f5:b8:1e:c0:7d: 3b:fd:df:04:8d:b4:5b:71:af:ed:92:75:37:89:4b:b7:60:40: a2:a8:79:c3:84:22:f5:9d:2d:67:21:dd:1d:c1:d4:c5:c2:cd: e0:6c:e6:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdJHj/dQpoPeY7E17RqT0bQnGDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNjAxMzEyMDE2NDJaFw0yNjAyMDQwNzQ5NDJaMDMxMTAvBgNV BAMTKDM4RTMwOTZFREMzQkE2QzYwNjYxRTI4NDRGMkEwRDQzNjdBQzg0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx68Z271TSbdjUphc8D9LVg/nq GioG1jNY4P39VpuSyGExYwHJmPHavSvRy+OviP4lS/HAHhgvG2dRcwwpu5IwcrND I2+osHTNlXgZh9p9FQOy9k0VK/mwCs8Z/Q3pZfBh/8XrdFelcDidQluaS5wKx7Tb GNUyokjb4vpj2F3AcD2P2TwnyV/jkkrcYHpTOtr+RUDIQRCPzB290GrVW2oUC76I I0/RKkRn6D+1StxssGcJktXTvejLP4N73GmOh/Sjb1c6CK7tRo1Y+JyupyUI343f T4iWCCxC6wgYsqVejGMeOV/EBlQrGCjv7PV9OdZ6uLxFQAhrRV7Cjckyca/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOMJbtw7psYGYeKETyoNQ2eshNIwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXKzCFAOjMHHpjcBLhcRl1XNsljfcBLJxjo C44hArRh9doMJ7DsYrslIJ/q6Eg6gvyCV6gWgiryONsvItnd5GVZIAX+F1XG85h4 MExmTbeHw1XOfRhyqwd5BDlR58sJr/Io/J5puVex5+emMPLMiE7VAjF8w+upRrj1 JsdxB+AqACDOa3tX/Fboz5hSLCrGIZSNapy0EHIjhcA7RzK9nENCmVphtanxA+CL Gn1BFasLHfbdlSPsHxvMFLN62gPOLnd2+H+Q8IgSCmzM9+3vY6IKxHL1uB7AfTv9 3wSNtFtxr+2SdTeJS7dgQKKoecOEIvWdLWch3R3B1MXCzeBs5gA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:37 2026 by rpki-client