This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: Ixlg7aDU7VzoMCdfqM5P37wBm6NzTnZtQMYs9L7U60Y= Subject key identifier: 86:02:6E:26:14:98:BA:44:1E:27:D4:C8:D3:F7:CD:1A:38:FF:0F:7B Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 59C88F21674E7E8EE364DA079561241507BD6138 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 03AB Signing time: Sun 01 Feb 2026 19:31:30 +0000 Manifest this update: Sun 01 Feb 2026 19:26:30 +0000 Manifest next update: Thu 05 Feb 2026 05:58:30 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 5: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: Gxltz6NgoV3Kx0/PMRHTGFktJZHXPKbQ81Ews+O261U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c8:8f:21:67:4e:7e:8e:e3:64:da:07:95:61:24:15:07:bd:61:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Feb 1 19:26:30 2026 GMT Not After : Feb 5 05:58:30 2026 GMT Subject: CN=86026E261498BA441E27D4C8D3F7CD1A38FF0F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:5c:c6:54:38:eb:2b:6e:ef:66:0a:f2:4a: 6a:75:0a:ba:6f:de:7f:e2:c0:03:e1:ca:71:c2:36: 1e:24:d9:99:25:95:61:05:5b:97:03:d6:20:e3:8f: a1:cd:d2:61:a7:f0:46:fb:7d:82:9e:cd:e9:96:38: 42:65:81:65:b7:35:d3:69:8b:82:a7:dc:9f:91:9b: 75:81:5e:0c:0a:15:a7:1d:13:eb:73:6c:01:a7:de: f2:81:49:de:f6:bb:9c:46:ff:19:64:40:d6:df:25: fe:51:87:ff:2d:cc:e1:1d:f7:66:27:97:25:17:e7: 21:2c:10:7a:cd:44:ec:5a:b2:b3:99:bb:a6:35:4f: 34:cf:aa:ad:79:6c:c4:49:02:b4:dc:7b:27:8c:27: a0:b2:c9:a6:63:e3:58:7e:8a:41:7f:e9:d1:27:65: de:c2:24:64:b1:71:31:6b:3c:98:4c:78:af:14:da: 2b:e5:83:5e:63:73:ce:3a:e6:32:6c:07:0c:e8:79: d5:65:1d:7c:64:6e:57:56:90:a3:e8:09:cb:64:fd: e2:60:ba:5e:d2:fd:4c:53:ce:7e:94:b4:c8:2d:98: fc:d6:4f:d8:15:c0:30:f3:5c:5f:d2:84:d6:29:f3: 0b:9e:fa:4a:b2:79:11:08:f9:e8:0b:3c:06:e7:0b: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:02:6E:26:14:98:BA:44:1E:27:D4:C8:D3:F7:CD:1A:38:FF:0F:7B X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:40:02:36:f4:04:12:5d:1e:8e:8e:9e:4b:df:64:20:22: 78:0b:e0:bf:d1:9d:2a:1f:66:aa:fa:40:c3:77:1b:98:95:de: 4b:bf:f1:ce:c7:1e:5a:db:e0:09:7a:2f:df:e7:c3:c2:c9:c5: 0d:97:37:58:42:37:b4:ef:c3:9e:60:2e:34:cf:1f:d1:6a:c6: 4a:d9:e3:f9:a0:2b:24:ec:80:c7:1c:90:2b:19:da:ac:52:40: 77:d1:4b:c5:1c:59:35:c4:e9:20:20:91:21:c4:52:9c:6b:f3: df:03:0f:44:bf:ea:89:d8:ef:d7:3b:0b:e1:ca:c6:e8:16:4c: bd:ac:2e:01:67:cd:6a:91:b1:ee:d9:bf:30:42:0a:44:af:63: f5:55:27:a1:0b:ac:4a:19:98:8b:ea:a9:c2:86:38:46:9a:ea: 3f:61:d6:23:0a:26:ad:17:ad:b0:f8:59:39:16:51:21:c7:71: a7:56:02:88:dd:71:3e:a5:ff:64:13:38:8b:a2:c5:55:91:8c: 26:22:f0:c5:6a:1f:0f:31:f6:00:81:ca:2d:8a:3b:d7:d0:f6: ff:79:08:de:6d:1a:a8:86:3c:22:8c:e1:e9:22:4f:f4:31:74: d5:1a:e6:7b:43:25:55:23:7b:2f:60:b8:39:71:79:59:2f:ca: c7:53:58:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWciPIWdOfo7jZNoHlWEkFQe9YTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNjAyMDExOTI2MzBaFw0yNjAyMDUwNTU4MzBaMDMxMTAvBgNV BAMTKDg2MDI2RTI2MTQ5OEJBNDQxRTI3RDRDOEQzRjdDRDFBMzhGRjBGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVFVzGVDjrK27vZgrySmp1Crpv 3n/iwAPhynHCNh4k2ZkllWEFW5cD1iDjj6HN0mGn8Eb7fYKezemWOEJlgWW3NdNp i4Kn3J+Rm3WBXgwKFacdE+tzbAGn3vKBSd72u5xG/xlkQNbfJf5Rh/8tzOEd92Yn lyUX5yEsEHrNROxasrOZu6Y1TzTPqq15bMRJArTceyeMJ6CyyaZj41h+ikF/6dEn Zd7CJGSxcTFrPJhMeK8U2ivlg15jc8465jJsBwzoedVlHXxkbldWkKPoCctk/eJg ul7S/UxTzn6UtMgtmPzWT9gVwDDzXF/ShNYp8wue+kqyeREI+egLPAbnC0E5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgJuJhSYukQeJ9TI0/fNGjj/D3swHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ0QAI29AQSXR6Ojp5L32QgIngL4L/RnSof Zqr6QMN3G5iV3ku/8c7HHlrb4Al6L9/nw8LJxQ2XN1hCN7Tvw55gLjTPH9FqxkrZ 4/mgKyTsgMcckCsZ2qxSQHfRS8UcWTXE6SAgkSHEUpxr898DD0S/6onY79c7C+HK xugWTL2sLgFnzWqRse7ZvzBCCkSvY/VVJ6ELrEoZmIvqqcKGOEaa6j9h1iMKJq0X rbD4WTkWUSHHcadWAojdcT6l/2QTOIuixVWRjCYi8MVqHw8x9gCByi2KO9fQ9v95 CN5tGqiGPCKM4ekiT/QxdNUa5ntDJVUjey9guDlxeVkvysdTWAA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:58:37 2026 by rpki-client