This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: juFUJHoTRXfxAtE9LP5jAjM3f4oQf3tqhPQlXkYVd64= Subject key identifier: 12:49:A7:8E:E4:77:46:FD:41:D0:17:35:64:B1:A9:D7:9B:09:57:B7 Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 3E4F99C6E9707DCBAF412A823D4D643A73A367EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 0235 Signing time: Sat 31 Jan 2026 12:42:02 +0000 Manifest this update: Sat 31 Jan 2026 12:37:02 +0000 Manifest next update: Tue 03 Feb 2026 13:24:02 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: eU4CsIBkCNHWwkLGYk1dQXK+PlYTeSPnN5JLGBDdwoE=) 2: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: CJzhC/gYLGr33PeAz4adxbk5QQQygmCsD3Yme+TSopM=) 3: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: wMwayzIPwqMBIP88IOsXTpqmzpX3PVf3WfVEJ/JlX8M=) 4: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: GYOdgB5E6zAfN6csGwKvCQu8t1dBnuZsHYI8ZcYsOXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4f:99:c6:e9:70:7d:cb:af:41:2a:82:3d:4d:64:3a:73:a3:67:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Jan 31 12:37:02 2026 GMT Not After : Feb 3 13:24:02 2026 GMT Subject: CN=1249A78EE47746FD41D0173564B1A9D79B0957B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:54:c6:dc:31:4b:34:28:a5:2a:c8:7f:20: 63:0b:0a:39:aa:00:9b:63:e8:32:43:59:e0:1b:31: ad:94:ef:fc:21:4a:8f:9d:9c:b4:15:ae:5a:14:d7: 55:e2:8c:6d:7f:92:f2:0c:a7:54:46:45:2a:39:0f: 87:a2:ba:11:1e:5b:6d:d9:51:e9:c5:0b:a9:8e:a6: cb:6d:3c:03:6e:53:41:3b:4b:91:0b:98:3b:c1:c5: f2:3c:01:b5:71:ea:b2:56:d9:88:c6:8a:2c:b8:37: 27:c4:4e:7f:fd:93:cd:6e:ed:d2:74:b0:c4:8c:18: 35:ad:6d:cd:68:55:9e:d0:4f:3b:9c:e0:71:04:6f: c0:66:85:11:30:3b:2f:58:2a:9e:1a:bf:e1:cf:a0: c5:a0:13:28:d2:db:43:74:99:0e:79:4c:3f:73:af: ef:7f:2a:da:43:9e:ae:05:47:ee:a3:e5:bd:b2:d1: df:ee:af:a1:1f:eb:43:e7:3e:1b:11:18:ea:ec:89: d4:d1:de:3c:09:48:be:59:3d:3f:65:fa:54:45:81: 4f:99:74:19:bc:57:bf:3a:6f:ed:e7:f3:8e:e4:9c: 38:7e:48:b0:e0:d5:32:f1:f5:01:a9:40:f7:4d:83: 2f:b2:eb:44:4a:8c:b9:82:ee:c8:9c:85:b4:f7:5f: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:49:A7:8E:E4:77:46:FD:41:D0:17:35:64:B1:A9:D7:9B:09:57:B7 X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:71:ba:27:1f:d3:55:d6:ac:35:01:30:87:37:ee:d2:75:e4: 61:20:11:42:5c:05:06:32:02:a8:98:fa:ce:ee:23:4b:4c:a6: 26:5a:b1:32:ed:27:1b:8c:70:77:40:fd:0f:48:0e:ad:87:b8: bb:50:f8:46:e0:4d:0d:ef:40:5c:ad:07:92:1d:c5:f9:8f:c1: 74:ad:d0:74:b6:e1:ad:23:71:b5:84:38:c0:f9:eb:74:dd:77: 92:68:13:1b:50:8e:e8:0a:6b:12:6a:9d:ec:b1:c3:71:a7:14: 99:b0:eb:8b:7b:b7:d3:42:d3:f2:91:00:5e:d0:09:da:8e:55: fa:4c:d1:18:7c:ea:89:62:c4:4d:10:8d:21:ea:91:f0:33:bb: 23:26:a6:b9:b2:46:cb:d9:ed:7f:62:5b:9f:0f:4a:59:d7:af: 46:14:71:70:06:7c:46:ea:5f:32:16:37:c4:29:67:17:92:8a: 29:32:16:12:0f:0e:53:fb:a1:d6:e3:03:7a:83:a2:ca:80:5d: 8d:b4:e3:a4:36:c9:cf:5d:98:87:1c:24:00:81:5d:33:0f:0e: 65:e1:4c:1c:3f:1e:ba:77:5f:22:40:43:e2:fe:08:08:c2:ac: 28:64:ed:d2:b7:3e:b8:6b:33:e9:de:ff:f6:54:32:bd:88:31: 8c:28:be:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPk+ZxulwfcuvQSqCPU1kOnOjZ+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNjAxMzExMjM3MDJaFw0yNjAyMDMxMzI0MDJaMDMxMTAvBgNV BAMTKDEyNDlBNzhFRTQ3NzQ2RkQ0MUQwMTczNTY0QjFBOUQ3OUIwOTU3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC541TG3DFLNCilKsh/IGMLCjmq AJtj6DJDWeAbMa2U7/whSo+dnLQVrloU11XijG1/kvIMp1RGRSo5D4eiuhEeW23Z UenFC6mOpsttPANuU0E7S5ELmDvBxfI8AbVx6rJW2YjGiiy4NyfETn/9k81u7dJ0 sMSMGDWtbc1oVZ7QTzuc4HEEb8BmhREwOy9YKp4av+HPoMWgEyjS20N0mQ55TD9z r+9/KtpDnq4FR+6j5b2y0d/ur6Ef60PnPhsRGOrsidTR3jwJSL5ZPT9l+lRFgU+Z dBm8V786b+3n847knDh+SLDg1TLx9QGpQPdNgy+y60RKjLmC7sichbT3X/EdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEkmnjuR3Rv1B0Bc1ZLGp15sJV7cwHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhxuicf01XWrDUBMIc37tJ15GEgEUJcBQYy AqiY+s7uI0tMpiZasTLtJxuMcHdA/Q9IDq2HuLtQ+EbgTQ3vQFytB5IdxfmPwXSt 0HS24a0jcbWEOMD563Tdd5JoExtQjugKaxJqneyxw3GnFJmw64t7t9NC0/KRAF7Q CdqOVfpM0Rh86olixE0QjSHqkfAzuyMmprmyRsvZ7X9iW58PSlnXr0YUcXAGfEbq XzIWN8QpZxeSiikyFhIPDlP7odbjA3qDosqAXY2046Q2yc9dmIccJACBXTMPDmXh TBw/Hrp3XyJAQ+L+CAjCrChk7dK3PrhrM+ne//ZUMr2IMYwovvU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:21 2026 by rpki-client