This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: 4zhQTEk7FqgEfPGnGIaWAs8H2naK1yfFlJ9VH9szW+0= Subject key identifier: CE:AA:58:A0:7F:A0:93:A9:B9:6A:F4:41:55:96:4F:7C:94:E9:31:AA Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 0A964F0FCFEA3C47F617AE67816A5DE14AAAD123 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0169 Signing time: Sat 31 Jan 2026 11:00:57 +0000 Manifest this update: Sat 31 Jan 2026 10:55:57 +0000 Manifest next update: Tue 03 Feb 2026 20:49:57 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: 6xlug0XUa7+3muEc0qZobCHKsLZsnvqmD4DOKyPgW3E=) 2: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: uYMqFo8G32pHHZoFBRFqrNWJSIuzn016qjXlTJ+ec0U=) 3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: lvsTtW252Ri8zLP6LeQkBWwPzY993cpPilJUNYfFwDQ=) 4: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: dSVS127lwWi8iK2HhNgRMx5903WtJScz9453drHDtJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:96:4f:0f:cf:ea:3c:47:f6:17:ae:67:81:6a:5d:e1:4a:aa:d1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Jan 31 10:55:57 2026 GMT Not After : Feb 3 20:49:57 2026 GMT Subject: CN=CEAA58A07FA093A9B96AF44155964F7C94E931AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b9:57:95:16:bc:48:33:4e:27:72:ec:13:4f: c7:41:c2:f8:58:c6:b9:06:07:17:fe:fe:96:6d:58: 69:3d:b5:4f:13:e4:fa:47:32:b3:61:36:96:d3:d4: 31:af:7c:39:8d:dc:79:19:31:99:f4:8c:36:c1:f2: 4c:ab:56:2e:7c:ce:29:3c:29:b2:51:91:15:98:b5: d1:94:92:c2:7b:df:d0:2a:14:b3:76:9d:53:1f:47: 07:9e:33:e0:23:8f:66:91:52:27:26:a4:c3:a3:ac: 98:75:b1:46:24:ae:35:44:95:d0:13:58:85:ea:e7: 5b:9e:65:ff:c9:41:51:54:8e:49:6c:4c:3a:86:04: 6c:ce:61:ee:23:86:71:e1:9d:ef:65:58:b5:55:52: f8:18:4f:95:d9:f5:a1:b8:a3:9b:67:a7:92:5f:f5: f6:0c:44:67:5b:d9:fa:57:09:98:bf:de:6f:47:bb: f4:b3:6b:63:a9:0d:db:05:2d:3d:9e:ce:cc:8f:1a: 4e:1e:0f:45:80:87:f4:94:cb:f3:3e:b0:73:c8:cc: 46:c3:11:80:cf:a4:3d:68:2d:dc:2e:66:19:82:dd: cb:9b:19:35:fa:86:6e:49:27:6f:ad:59:fd:25:69: c4:7a:3d:93:97:b7:ae:6c:1a:20:b1:40:37:c5:0b: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:58:A0:7F:A0:93:A9:B9:6A:F4:41:55:96:4F:7C:94:E9:31:AA X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1b:22:08:73:a4:ed:e2:92:0e:ac:05:b2:6d:42:2c:a6:75: 02:ff:ab:2b:dc:10:f3:e1:ae:db:2e:c1:4b:e0:f6:3a:8a:b2: 26:71:ec:0a:9d:d9:1b:a2:a9:6f:47:1f:53:05:2f:c0:1c:99: 43:51:e8:72:60:12:a0:c4:70:1f:d5:22:02:7b:cc:ea:e5:85: 7a:20:f9:68:66:90:49:4c:ce:ec:c2:e4:e1:52:ca:7d:9f:00: 49:28:fb:68:63:a7:07:53:3c:66:9d:bd:99:b2:8a:e4:d5:89: d8:c8:b0:a7:59:8f:39:0a:ba:58:36:38:59:62:cf:2d:c2:ed: e0:60:06:1d:e2:21:eb:16:f7:6c:3b:03:33:ce:cc:62:6b:d5: 4e:e6:c7:b9:b6:b6:94:a1:db:17:80:c5:96:9e:d2:f0:fa:b4: 18:59:39:89:c5:b6:55:64:2e:b4:eb:41:73:23:e1:b7:d2:e7: d7:2d:78:86:9e:c7:28:b9:2d:3f:4c:32:b3:db:27:14:a0:ba: 2a:1f:7d:b9:bf:fa:27:10:b8:91:47:1c:36:b1:08:2c:29:06: db:78:31:97:a3:38:95:18:e3:b2:06:8c:b0:8c:91:e1:35:52: b7:34:cc:06:8d:01:ed:ce:01:18:5e:d9:d5:00:0e:da:34:83: 4e:1e:64:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpZPD8/qPEf2F65ngWpd4Uqq0SMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNjAxMzExMDU1NTdaFw0yNjAyMDMyMDQ5NTdaMDMxMTAvBgNV BAMTKENFQUE1OEEwN0ZBMDkzQTlCOTZBRjQ0MTU1OTY0RjdDOTRFOTMxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpuVeVFrxIM04ncuwTT8dBwvhY xrkGBxf+/pZtWGk9tU8T5PpHMrNhNpbT1DGvfDmN3HkZMZn0jDbB8kyrVi58zik8 KbJRkRWYtdGUksJ739AqFLN2nVMfRweeM+Ajj2aRUicmpMOjrJh1sUYkrjVEldAT WIXq51ueZf/JQVFUjklsTDqGBGzOYe4jhnHhne9lWLVVUvgYT5XZ9aG4o5tnp5Jf 9fYMRGdb2fpXCZi/3m9Hu/Sza2OpDdsFLT2ezsyPGk4eD0WAh/SUy/M+sHPIzEbD EYDPpD1oLdwuZhmC3cubGTX6hm5JJ2+tWf0lacR6PZOXt65sGiCxQDfFC04fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqpYoH+gk6m5avRBVZZPfJTpMaowHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMbIghzpO3ikg6sBbJtQiymdQL/qyvcEPPh rtsuwUvg9jqKsiZx7Aqd2RuiqW9HH1MFL8AcmUNR6HJgEqDEcB/VIgJ7zOrlhXog +WhmkElMzuzC5OFSyn2fAEko+2hjpwdTPGadvZmyiuTVidjIsKdZjzkKulg2OFli zy3C7eBgBh3iIesW92w7AzPOzGJr1U7mx7m2tpSh2xeAxZae0vD6tBhZOYnFtlVk LrTrQXMj4bfS59cteIaexyi5LT9MMrPbJxSguioffbm/+icQuJFHHDaxCCwpBtt4 MZejOJUY47IGjLCMkeE1Urc0zAaNAe3OARhe2dUADto0g04eZCQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:12 2026 by rpki-client