This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft File: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json) Hash identifier: cWnln9gKOFNDS3vDW548dVmdNrld2SkSNzwp06/ddCo= Subject key identifier: 0F:71:42:65:68:88:34:F6:B1:C8:B3:6F:51:9C:04:53:71:23:AC:60 Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 160E0D3E9168B800AD96FC9E573BBFFEB89FF6B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft Manifest number: 023C Signing time: Sat 31 Jan 2026 07:02:12 +0000 Manifest this update: Sat 31 Jan 2026 06:57:12 +0000 Manifest next update: Tue 03 Feb 2026 12:41:12 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: Ecgrbu6B3OibUjb6EMgW5BudmheK1y9j1Ehe3erMDBM=) 2: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: jokIBMvTnzkYHW/XHAeX7hxaG3x1GkvBjnS33CW0bpg=) 3: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: UJ4dgRv/Z7D+QOEZaiaCjTNHR6tppX1D3WuBALQGQSc=) 4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: Sj/j171l33JI7ePr4g2BFw5WUoQjNjQFEAH4ivYj0QM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0e:0d:3e:91:68:b8:00:ad:96:fc:9e:57:3b:bf:fe:b8:9f:f6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: Jan 31 06:57:12 2026 GMT Not After : Feb 3 12:41:12 2026 GMT Subject: CN=0F714265688834F6B1C8B36F519C04537123AC60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:eb:96:c0:5d:87:0e:8d:c6:9f:25:ad:e9: 0a:68:3b:0b:36:d8:0c:ed:26:80:37:db:a3:81:db: 44:c2:0f:a4:b3:ae:da:94:08:3f:6f:b7:4a:78:94: 1f:b1:e1:78:9a:ba:b0:7a:fd:c8:83:ed:cc:d1:05: 92:56:02:8f:a9:14:d9:c4:20:5a:08:31:bb:64:d6: 70:03:ac:f8:f2:3b:3d:17:f4:17:e3:5d:54:b1:cf: 42:2f:4f:42:b5:e3:9e:fe:3e:0f:3c:75:f0:7c:e3: ff:4b:4a:2d:5b:cf:f2:05:d1:fd:b2:16:5c:49:d1: b4:b6:ef:24:42:35:ac:5a:a3:3c:62:8e:59:ff:98: d0:1f:6d:b4:76:82:ef:73:88:e9:5c:97:a9:b6:4b: b7:2f:db:f9:cb:f3:44:22:e2:02:35:c2:fd:de:3f: 12:4e:9f:e1:9d:38:53:32:00:20:b8:23:b4:e8:cb: 79:3e:23:c7:49:d8:5d:d1:4c:63:a0:09:9b:90:af: d4:18:4e:bc:69:31:b3:fd:ed:5c:97:f4:cd:41:51: cb:3e:f8:73:08:41:4f:e3:e4:a7:50:f6:42:d5:6c: 29:0c:bf:6b:36:9f:bb:f7:42:65:38:c1:35:d9:98: 09:0f:42:98:62:9d:45:07:c1:05:14:6a:6c:68:aa: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:71:42:65:68:88:34:F6:B1:C8:B3:6F:51:9C:04:53:71:23:AC:60 X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4f:82:65:31:68:9d:cb:75:ad:2a:3b:e9:53:ec:f3:d7:b6: 5a:1c:73:91:64:70:c2:2b:26:bd:fe:bb:11:c5:49:fa:c0:bf: 8c:b3:56:29:7d:ac:8f:b0:55:90:14:9f:b9:38:5a:83:3d:08: a6:58:ab:53:00:9f:50:04:88:50:86:e0:64:5b:ae:ff:66:c6: 6c:6c:aa:36:9b:70:26:a4:50:dd:dd:da:6a:28:e5:11:2f:19: a0:bd:68:52:69:bc:f7:e1:8b:d5:78:43:87:8a:5f:46:0b:f9: 65:3b:1e:b7:b2:bb:57:a5:9b:0d:a3:bc:ae:3c:00:36:73:2a: c2:9d:59:bd:15:57:99:03:2e:be:cc:ff:cb:47:9e:14:71:35: 28:5c:30:f2:06:22:0f:52:d4:78:75:be:89:d5:16:5b:54:5c: d2:8c:55:59:b2:7d:ac:a3:77:2e:09:c7:d4:a0:ba:23:64:1b: 98:bb:28:54:6c:a4:00:c4:78:78:e8:2b:89:a8:ae:ef:33:f3: 14:8f:ee:c1:e3:7d:fe:af:c5:51:a8:be:4e:31:25:fa:22:90: d0:c0:b9:ba:69:f8:48:46:7b:37:79:50:e2:23:9c:f8:42:b4: da:b0:9e:8e:f7:a3:98:1c:43:4c:ec:f1:77:15:44:4d:f3:ce: 4f:c7:cd:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFg4NPpFouACtlvyeVzu//rif9rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNjAxMzEwNjU3MTJaFw0yNjAyMDMxMjQxMTJaMDMxMTAvBgNV BAMTKDBGNzE0MjY1Njg4ODM0RjZCMUM4QjM2RjUxOUMwNDUzNzEyM0FDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzv+uWwF2HDo3GnyWt6QpoOws2 2AztJoA326OB20TCD6SzrtqUCD9vt0p4lB+x4XiaurB6/ciD7czRBZJWAo+pFNnE IFoIMbtk1nADrPjyOz0X9BfjXVSxz0IvT0K1457+Pg88dfB84/9LSi1bz/IF0f2y FlxJ0bS27yRCNaxaozxijln/mNAfbbR2gu9ziOlcl6m2S7cv2/nL80Qi4gI1wv3e PxJOn+GdOFMyACC4I7Toy3k+I8dJ2F3RTGOgCZuQr9QYTrxpMbP97VyX9M1BUcs+ +HMIQU/j5KdQ9kLVbCkMv2s2n7v3QmU4wTXZmAkPQphinUUHwQUUamxoqrEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3FCZWiINPaxyLNvUZwEU3EjrGAwHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4 MEE5ODI1NERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5PgmUxaJ3Lda0qO+lT7PPXtlocc5FkcMIr Jr3+uxHFSfrAv4yzVil9rI+wVZAUn7k4WoM9CKZYq1MAn1AEiFCG4GRbrv9mxmxs qjabcCakUN3d2moo5REvGaC9aFJpvPfhi9V4Q4eKX0YL+WU7Hreyu1elmw2jvK48 ADZzKsKdWb0VV5kDLr7M/8tHnhRxNShcMPIGIg9S1Hh1vonVFltUXNKMVVmyfayj dy4Jx9SguiNkG5i7KFRspADEeHjoK4moru8z8xSP7sHjff6vxVGovk4xJfoikNDA ubpp+EhGezd5UOIjnPhCtNqwno73o5gcQ0zs8XcVRE3zzk/Hzbg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:41 2026 by rpki-client