This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: M9xjJ3szsndJ6GrjZV4x/gWci0gqWpcICaS1Q84Is3o= Subject key identifier: 6B:69:93:CC:71:B0:2D:06:8B:9F:70:93:DA:24:82:B7:AA:D4:AB:64 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 075F2193BA25169D872D7CA0822D5BA871B82F00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 03BD Signing time: Sun 01 Feb 2026 01:42:05 +0000 Manifest this update: Sun 01 Feb 2026 01:37:05 +0000 Manifest next update: Wed 04 Feb 2026 09:29:05 +0000 Files and hashes: 1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: KIG2BsBPGoeBlnjQjoTyDyVEK0jLwjGF6bMysm6Y4YQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 09:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5f:21:93:ba:25:16:9d:87:2d:7c:a0:82:2d:5b:a8:71:b8:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Feb 1 01:37:05 2026 GMT Not After : Feb 4 09:29:05 2026 GMT Subject: CN=6B6993CC71B02D068B9F7093DA2482B7AAD4AB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:79:6e:6a:74:fb:dd:fa:bb:21:f6:11:77: 98:43:06:56:a0:c0:d2:06:44:ab:79:37:9c:08:a2: a0:81:b3:70:38:c1:4c:b0:6c:48:85:b1:43:19:a6: 4b:ec:7e:f9:c7:85:51:cf:2e:68:72:d4:85:01:43: 65:01:12:da:93:2c:da:cf:59:c1:0d:0f:90:5a:9c: aa:14:4b:41:97:2b:45:27:e0:5d:3d:63:b3:b5:e4: 3e:fb:53:67:d7:6d:8d:52:16:00:13:aa:5a:5d:49: 49:48:9c:69:84:21:1c:67:20:db:8a:f4:46:97:47: 76:10:08:96:fe:f7:c9:a9:bb:ac:ec:9b:ac:9b:6d: 39:df:06:e3:ef:75:fb:e3:0b:91:df:fe:5a:e9:ff: e0:5f:9d:c5:49:45:9e:e0:6c:98:a9:b7:9e:ac:c4: 95:e6:5f:b2:87:02:97:bb:07:b5:96:16:bd:a8:6d: f5:37:1b:86:b7:b9:4b:f7:d7:b7:87:ad:22:7f:0a: 26:53:7e:f5:5d:be:9f:53:a1:19:6c:5b:ff:a0:4c: a6:8f:6a:7c:d7:f5:51:3c:4b:41:b3:b7:da:be:69: 01:f4:27:e5:b7:1b:f5:23:ad:94:a8:11:0c:f0:d1: 1c:4b:c5:71:a8:47:78:76:e9:3d:f6:8c:b8:45:cb: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:69:93:CC:71:B0:2D:06:8B:9F:70:93:DA:24:82:B7:AA:D4:AB:64 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:74:82:cf:58:0e:e8:0d:ae:7c:87:8c:f6:9f:fb:a8:e6:c1: bf:fc:fe:29:da:66:bf:76:f6:b6:97:ba:fa:c2:99:27:dd:7d: f7:cd:b9:e2:dc:ec:cd:83:8f:fd:29:3e:d5:2b:96:f0:15:56: c8:66:fd:48:f2:ab:97:9c:e1:3f:13:1a:b8:0c:fb:e1:cd:dc: 8c:aa:a4:57:67:7e:4f:28:12:59:d0:4d:03:6d:ef:f2:5c:35: fd:e4:c4:e2:60:ed:05:4f:c1:7c:95:19:41:bd:d6:6c:12:92: dd:c9:76:bd:23:c8:1b:8e:65:7e:bb:d9:37:ec:93:75:ae:1b: 11:6a:85:9d:e1:8d:47:56:34:92:22:65:0a:42:07:7b:72:7a: ac:a3:72:c9:99:b7:0c:c1:69:92:af:19:40:da:80:10:bf:f7: ca:f6:18:77:33:77:e3:da:52:24:3c:4d:dc:1b:2d:83:d5:70: 95:4e:de:5c:f5:a3:fb:9d:e6:2f:df:e5:64:53:b8:c3:4c:ee: 65:0f:e3:90:34:1d:c8:9b:36:91:3e:7b:20:a4:a2:66:24:ca: 8d:b7:54:09:42:27:9a:b8:b7:19:47:b5:53:57:21:bd:ef:db: 3c:f0:bd:15:d2:57:37:04:2a:b5:b9:ec:ff:34:79:be:82:ed: c5:02:03:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB18hk7olFp2HLXyggi1bqHG4LwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNjAyMDEwMTM3MDVaFw0yNjAyMDQwOTI5MDVaMDMxMTAvBgNV BAMTKDZCNjk5M0NDNzFCMDJEMDY4QjlGNzA5M0RBMjQ4MkI3QUFENEFCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZXluanT73fq7IfYRd5hDBlag wNIGRKt5N5wIoqCBs3A4wUywbEiFsUMZpkvsfvnHhVHPLmhy1IUBQ2UBEtqTLNrP WcEND5BanKoUS0GXK0Un4F09Y7O15D77U2fXbY1SFgATqlpdSUlInGmEIRxnINuK 9EaXR3YQCJb+98mpu6zsm6ybbTnfBuPvdfvjC5Hf/lrp/+BfncVJRZ7gbJipt56s xJXmX7KHApe7B7WWFr2obfU3G4a3uUv317eHrSJ/CiZTfvVdvp9ToRlsW/+gTKaP anzX9VE8S0Gzt9q+aQH0J+W3G/UjrZSoEQzw0RxLxXGoR3h26T32jLhFyxVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa2mTzHGwLQaLn3CT2iSCt6rUq2QwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN0gs9YDugNrnyHjPaf+6jmwb/8/inaZr92 9raXuvrCmSfdfffNueLc7M2Dj/0pPtUrlvAVVshm/Ujyq5ec4T8TGrgM++HN3Iyq pFdnfk8oElnQTQNt7/JcNf3kxOJg7QVPwXyVGUG91mwSkt3Jdr0jyBuOZX672Tfs k3WuGxFqhZ3hjUdWNJIiZQpCB3tyeqyjcsmZtwzBaZKvGUDagBC/98r2GHczd+Pa UiQ8TdwbLYPVcJVO3lz1o/ud5i/f5WRTuMNM7mUP45A0HcibNpE+eyCkomYkyo23 VAlCJ5q4txlHtVNXIb3v2zzwvRXSVzcEKrW57P80eb6C7cUCA5g= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:34 2026 by rpki-client