This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: DuIoxG/BujjLNH6aBm19CUxsa6kf8Ifw7N3VSDA9cSU= Subject key identifier: 79:B3:CB:CC:DA:14:AC:E2:3E:A6:5D:3E:5A:DA:CF:C4:FA:DF:F6:64 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 46CE6DCC6AB38B77562F49EA8163871245766452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 022D Signing time: Sat 31 Jan 2026 20:51:05 +0000 Manifest this update: Sat 31 Jan 2026 20:46:05 +0000 Manifest next update: Wed 04 Feb 2026 05:15:05 +0000 Files and hashes: 1: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 2: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 3: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 4: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: fgasUqmc44kGDR5ly9KwKpJB/y6PRM6PXHcXIJxgsUk=) 5: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 05:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ce:6d:cc:6a:b3:8b:77:56:2f:49:ea:81:63:87:12:45:76:64:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Jan 31 20:46:05 2026 GMT Not After : Feb 4 05:15:05 2026 GMT Subject: CN=79B3CBCCDA14ACE23EA65D3E5ADACFC4FADFF664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:a7:65:e6:4e:17:b0:40:0c:df:b1:ba:81: 31:e8:8f:fa:ce:a8:55:0b:ee:dc:5c:04:15:e9:b5: cb:b5:d2:d2:6b:dd:b3:af:da:d8:76:9e:e6:bb:64: f3:00:42:16:46:5c:2b:b7:7c:4a:29:1d:0c:f8:cd: 43:2d:42:e2:74:5d:a5:c0:ca:e6:cc:70:a0:ae:b4: 20:e5:5d:e4:b7:38:75:60:eb:ea:ea:90:70:ae:39: 09:53:11:f5:d1:50:ae:dd:2b:f2:7e:6f:81:a2:18: f7:55:85:d6:5a:a5:88:70:f4:09:18:2b:27:cb:fa: e2:f8:6b:12:26:7a:7b:c7:48:b7:c0:7a:c0:ad:ad: 5a:81:75:95:6b:77:00:3e:43:ba:db:0f:6c:f3:db: 8e:a6:c3:6b:78:6e:f7:92:22:b9:a5:fd:a0:7a:74: 37:4c:c9:81:50:9d:c8:f3:a7:44:40:1a:60:a7:28: ad:92:2d:99:e6:3c:a1:7e:53:7e:a2:7f:ba:f2:eb: 58:85:39:33:b2:e9:6c:02:e8:56:f7:6d:f6:55:8b: d5:92:a0:8d:5f:ca:53:9a:41:68:4e:f3:cf:30:8a: e9:3b:e4:43:b4:c0:c8:25:9d:1c:39:f9:f6:2b:23: ca:a9:5f:8c:ed:24:c2:0d:65:ed:91:45:ff:d5:ac: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B3:CB:CC:DA:14:AC:E2:3E:A6:5D:3E:5A:DA:CF:C4:FA:DF:F6:64 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8e:a7:07:e7:e6:83:b8:fa:9b:28:af:85:e0:dd:fe:bc:80: 24:db:08:96:b5:df:91:c6:fb:bc:5d:71:ce:cd:98:60:9d:f2: b8:1b:8f:f6:b0:3b:15:e5:4f:65:99:2b:af:7e:42:ea:2c:75: cb:f1:be:13:b2:f2:86:0e:60:cc:b3:20:60:63:71:49:b3:44: da:3d:0d:9b:67:16:a1:5a:2f:d5:6f:b8:02:c1:66:84:c3:d0: cc:46:ab:a0:9e:7d:bf:43:ba:f2:fd:a2:3f:09:f2:f7:0c:fe: 65:d0:65:48:55:68:dd:64:ee:1b:30:60:a8:cc:e1:a3:2d:8d: c2:02:60:73:10:a0:b0:48:5d:ca:d1:c3:a5:36:26:60:cf:7b: fc:6c:e4:8d:41:a0:06:87:fc:cd:bd:ab:1e:ed:04:af:42:94: d1:e8:69:f6:3b:b2:2d:ed:11:8d:c2:87:1f:8b:bb:16:8b:81: bc:56:a6:9a:2f:cf:0d:c6:7c:24:a2:15:e5:29:c6:b5:85:11: 9a:81:5a:7e:69:a3:8e:7b:f8:24:2b:b0:a9:f4:36:b4:e5:e1: ec:f4:79:a1:2a:89:2f:1b:f5:be:18:1b:c1:fe:11:1b:41:23: 48:e8:14:46:95:79:eb:f5:e1:58:a3:ea:34:01:e8:a5:f8:e5: fb:8a:6f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURs5tzGqzi3dWL0nqgWOHEkV2ZFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNjAxMzEyMDQ2MDVaFw0yNjAyMDQwNTE1MDVaMDMxMTAvBgNV BAMTKDc5QjNDQkNDREExNEFDRTIzRUE2NUQzRTVBREFDRkM0RkFERkY2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yqdl5k4XsEAM37G6gTHoj/rO qFUL7txcBBXptcu10tJr3bOv2th2nua7ZPMAQhZGXCu3fEopHQz4zUMtQuJ0XaXA yubMcKCutCDlXeS3OHVg6+rqkHCuOQlTEfXRUK7dK/J+b4GiGPdVhdZapYhw9AkY KyfL+uL4axImenvHSLfAesCtrVqBdZVrdwA+Q7rbD2zz246mw2t4bveSIrml/aB6 dDdMyYFQncjzp0RAGmCnKK2SLZnmPKF+U36if7ry61iFOTOy6WwC6Fb3bfZVi9WS oI1fylOaQWhO888wiuk75EO0wMglnRw5+fYrI8qpX4ztJMINZe2RRf/VrKqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebPLzNoUrOI+pl0+WtrPxPrf9mQwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCOpwfn5oO4+psor4Xg3f68gCTbCJa135HG +7xdcc7NmGCd8rgbj/awOxXlT2WZK69+QuosdcvxvhOy8oYOYMyzIGBjcUmzRNo9 DZtnFqFaL9VvuALBZoTD0MxGq6Cefb9DuvL9oj8J8vcM/mXQZUhVaN1k7hswYKjM 4aMtjcICYHMQoLBIXcrRw6U2JmDPe/xs5I1BoAaH/M29qx7tBK9ClNHoafY7si3t EY3Chx+LuxaLgbxWppovzw3GfCSiFeUpxrWFEZqBWn5po457+CQrsKn0NrTl4ez0 eaEqiS8b9b4YG8H+ERtBI0joFEaVeev14Vij6jQB6KX45fuKb74= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:44 2026 by rpki-client