This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: JDCqLVcyicWEDCDP23PLPFjE18tiSNeVxE+oL+OltuE= Subject key identifier: 38:04:6B:71:A9:C3:84:31:51:3B:0E:EA:D2:C3:E2:42:9E:4C:B2:F0 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 1C9312F76AE3E7E4840B415B94E5C7FDAD89D3F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: D6 Signing time: Sun 01 Feb 2026 02:11:29 +0000 Manifest this update: Sun 01 Feb 2026 02:06:29 +0000 Manifest next update: Wed 04 Feb 2026 08:20:29 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) 2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: QVaW3p3OZrnEOqg+ApJ3FkpTvQ70raa78Ug4OltaXTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:93:12:f7:6a:e3:e7:e4:84:0b:41:5b:94:e5:c7:fd:ad:89:d3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Feb 1 02:06:29 2026 GMT Not After : Feb 4 08:20:29 2026 GMT Subject: CN=38046B71A9C38431513B0EEAD2C3E2429E4CB2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:4f:8a:79:c7:18:04:55:22:82:2b:ae:57: 4b:75:6e:05:55:bd:6f:d9:08:b7:60:fe:2e:f6:71: 14:43:1e:8f:57:2d:7b:e9:34:02:63:78:35:9c:0d: 65:99:8c:74:29:d6:8c:16:8e:aa:54:ed:20:f7:e3: 41:17:03:05:24:5c:08:94:9e:43:5c:6e:06:2d:d1: ad:0a:9c:c4:5b:f6:5a:90:27:2b:dc:db:09:47:1a: 23:e9:99:d8:e0:44:7e:52:9f:c7:eb:82:ba:31:43: ac:dc:f1:51:bd:4e:20:e6:f1:e1:98:58:ac:40:1c: 8e:b2:89:a8:f6:3a:b8:8e:81:3b:c2:f5:0e:b0:e9: e7:21:40:03:e3:c9:03:03:22:ec:b2:89:84:85:54: 8b:58:f4:1e:53:80:bb:8b:57:09:f9:1c:56:67:c4: 77:06:28:ee:5f:59:0f:0d:1b:7d:f8:80:d6:59:60: 8a:0a:4d:82:8d:cf:f3:2b:8b:93:11:48:b9:26:7c: 5c:73:30:d5:ab:f6:17:4a:8c:89:bb:bb:44:40:02: e1:ae:6c:99:d1:4e:e9:b4:0f:fc:68:6e:fb:7b:b8: 5d:5b:45:12:41:67:28:aa:4f:1c:f8:f5:c5:f5:a5: 3b:6c:a6:94:09:b6:f1:fc:9a:17:f2:44:13:19:a8: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:6B:71:A9:C3:84:31:51:3B:0E:EA:D2:C3:E2:42:9E:4C:B2:F0 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:23:de:33:72:44:0f:69:d1:8f:78:5f:a4:1f:5f:d0:3b:e3: 13:6d:37:06:0c:89:74:54:14:0d:03:88:03:da:77:39:74:50: 51:34:df:02:8d:79:54:87:f6:f3:c8:a4:1d:11:b5:01:bf:b4: 6b:5b:32:80:d9:97:3f:bc:f9:15:59:cb:2f:fe:83:d3:79:5c: 05:ac:93:7c:ec:67:22:15:f7:1f:77:7b:28:b6:48:ca:63:cb: 1a:5b:f6:f5:e3:f7:2d:56:ff:0e:6d:bc:00:43:90:7a:7f:ec: ca:45:88:c4:9a:0f:8d:2f:32:80:7a:c9:b0:7c:fb:8b:28:e6: 52:84:e8:67:45:5d:d2:75:55:e9:20:dd:2e:49:45:9a:b5:3e: 80:7e:b8:e9:ce:5f:a7:8a:f6:fe:fb:77:cc:e1:6a:9d:2f:1a: 94:89:3f:0f:9b:a5:b7:5e:72:59:52:f2:1c:48:69:dd:9b:fa: e7:1f:14:ab:8b:6f:51:e5:ee:3d:ad:38:bf:40:e9:37:b1:63: 1a:f4:04:d7:ea:c1:11:84:63:b0:2c:ff:08:27:35:90:0e:76: 14:88:dc:11:78:d2:a2:df:a4:c0:39:3b:45:94:2c:d4:12:44: a8:9b:8e:4e:c2:02:1d:1d:bb:ad:79:3e:7f:f5:64:47:2b:32: ab:14:11:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJMS92rj5+SEC0FblOXH/a2J0/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNjAyMDEwMjA2MjlaFw0yNjAyMDQwODIwMjlaMDMxMTAvBgNV BAMTKDM4MDQ2QjcxQTlDMzg0MzE1MTNCMEVFQUQyQzNFMjQyOUU0Q0IyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepk+KeccYBFUigiuuV0t1bgVV vW/ZCLdg/i72cRRDHo9XLXvpNAJjeDWcDWWZjHQp1owWjqpU7SD340EXAwUkXAiU nkNcbgYt0a0KnMRb9lqQJyvc2wlHGiPpmdjgRH5Sn8frgroxQ6zc8VG9TiDm8eGY WKxAHI6yiaj2OriOgTvC9Q6w6echQAPjyQMDIuyyiYSFVItY9B5TgLuLVwn5HFZn xHcGKO5fWQ8NG334gNZZYIoKTYKNz/Mri5MRSLkmfFxzMNWr9hdKjIm7u0RAAuGu bJnRTum0D/xobvt7uF1bRRJBZyiqTxz49cX1pTtsppQJtvH8mhfyRBMZqA1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOARrcanDhDFROw7q0sPiQp5MsvAwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoj3jNyRA9p0Y94X6QfX9A74xNtNwYMiXRU FA0DiAPadzl0UFE03wKNeVSH9vPIpB0RtQG/tGtbMoDZlz+8+RVZyy/+g9N5XAWs k3zsZyIV9x93eyi2SMpjyxpb9vXj9y1W/w5tvABDkHp/7MpFiMSaD40vMoB6ybB8 +4so5lKE6GdFXdJ1Vekg3S5JRZq1PoB+uOnOX6eK9v77d8zhap0vGpSJPw+bpbde cllS8hxIad2b+ucfFKuLb1Hl7j2tOL9A6TexYxr0BNfqwRGEY7As/wgnNZAOdhSI 3BF40qLfpMA5O0WULNQSRKibjk7CAh0du615Pn/1ZEcrMqsUEU4= -----END CERTIFICATE-----Generated at Mon Feb 2 20:56:44 2026 by rpki-client