This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: KRK2xTmv+YaH53vexEUoYI4U+INh6X6mG2FTXMSfv98= Subject key identifier: DE:08:27:F6:AB:5D:15:FE:F4:B6:08:08:28:0B:1B:BE:86:4C:8B:D5 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 1A235F0FB1BEAD9B5CD43C6EE1EB145E07D7DA24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 034C Signing time: Sun 01 Feb 2026 19:11:03 +0000 Manifest this update: Sun 01 Feb 2026 19:06:03 +0000 Manifest next update: Thu 05 Feb 2026 02:39:03 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: s9FORdaEQ+UqMnJoJQ7Tujo0650mRfHoIgeeYqaoif8=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:23:5f:0f:b1:be:ad:9b:5c:d4:3c:6e:e1:eb:14:5e:07:d7:da:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Feb 1 19:06:03 2026 GMT Not After : Feb 5 02:39:03 2026 GMT Subject: CN=DE0827F6AB5D15FEF4B60808280B1BBE864C8BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:7a:b4:3b:fe:7e:dd:7d:1f:c6:37:4a:64: fc:40:94:93:dc:68:26:90:0b:df:8f:83:18:94:ab: c8:4a:55:f0:65:ca:de:13:a0:31:ea:a8:d0:81:bb: 14:e3:af:33:05:71:d5:ae:d3:67:db:57:e4:86:56: 16:ab:84:b5:c4:9e:0c:d4:bd:42:73:e5:bc:0a:29: 3a:af:ae:04:6e:20:fd:14:ac:54:c5:f1:52:88:37: b0:2b:63:71:ba:f2:9f:75:a4:22:c4:da:d7:b0:b3: 4e:84:d3:ba:81:3a:f5:3d:96:c6:7c:7e:3f:7b:f2: 6a:65:51:d5:31:a9:47:b8:76:34:cd:1f:e7:89:b7: 06:90:2d:5d:f6:31:06:41:85:c6:68:ef:fa:93:86: 7e:8d:13:77:e8:ce:64:30:54:9f:b6:25:d9:c9:dc: 70:07:6f:4b:d2:96:4a:d2:cb:c7:a1:08:4c:df:84: 3d:4b:07:47:d4:7c:da:40:ee:e0:ad:4a:22:dc:73: c7:f0:84:c3:55:79:f9:f5:8a:a2:9c:70:5a:0b:67: cc:41:c7:03:72:ef:4f:00:ee:87:ee:1f:82:1b:44: e9:71:c1:6e:fa:05:f9:ec:9b:b9:b4:b4:f0:48:f3: 39:2a:5a:db:f3:42:91:56:4f:8a:db:de:77:1b:62: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:08:27:F6:AB:5D:15:FE:F4:B6:08:08:28:0B:1B:BE:86:4C:8B:D5 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7f:23:a2:3f:b3:a0:9b:10:70:6e:f1:04:00:34:be:6a:60: e1:34:e9:11:bb:58:dc:b3:78:ab:21:1c:5a:40:26:3d:1c:7a: b2:3f:34:50:26:e4:f7:e7:49:c0:b9:65:9c:f0:73:7e:69:b1: 45:36:7b:f2:07:03:55:e1:62:6f:03:83:ce:bf:90:e5:f4:79: 64:b3:39:ce:98:f6:7a:c7:d7:28:ac:8a:a9:b8:c8:99:99:4d: 4c:86:35:00:81:77:85:72:c0:13:de:d5:84:81:23:e2:2f:cf: df:f0:09:46:c3:c3:8c:5f:b3:b5:a6:96:ce:20:f7:27:26:df: a9:76:7c:f8:41:56:21:0b:8f:b8:2a:47:e4:06:a6:80:15:fa: 66:c9:b5:62:4e:ea:92:a4:9d:04:fd:32:27:13:4f:cf:11:28: 0e:54:a2:6c:c2:cb:7d:52:f4:fb:86:4d:60:1a:16:59:dc:14: b6:7d:ff:3c:a6:9f:9f:6a:45:a9:ff:26:95:0f:f4:20:dc:a5: 7c:56:44:c4:5e:f9:d4:75:4a:34:4f:d2:4b:60:39:5e:72:de: d2:63:18:ba:e6:3e:95:df:cb:ff:03:fd:af:82:95:3c:1c:f5: 28:6c:45:3e:d5:6a:26:fd:e9:5d:e1:76:1d:39:8e:73:a1:24: 09:53:ba:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiNfD7G+rZtc1Dxu4esUXgfX2iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNjAyMDExOTA2MDNaFw0yNjAyMDUwMjM5MDNaMDMxMTAvBgNV BAMTKERFMDgyN0Y2QUI1RDE1RkVGNEI2MDgwODI4MEIxQkJFODY0QzhCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMnq0O/5+3X0fxjdKZPxAlJPc aCaQC9+PgxiUq8hKVfBlyt4ToDHqqNCBuxTjrzMFcdWu02fbV+SGVharhLXEngzU vUJz5bwKKTqvrgRuIP0UrFTF8VKIN7ArY3G68p91pCLE2tews06E07qBOvU9lsZ8 fj978mplUdUxqUe4djTNH+eJtwaQLV32MQZBhcZo7/qThn6NE3fozmQwVJ+2JdnJ 3HAHb0vSlkrSy8ehCEzfhD1LB0fUfNpA7uCtSiLcc8fwhMNVefn1iqKccFoLZ8xB xwNy708A7ofuH4IbROlxwW76Bfnsm7m0tPBI8zkqWtvzQpFWT4rb3ncbYtkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ggn9qtdFf70tggIKAsbvoZMi9UwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1/I6I/s6CbEHBu8QQANL5qYOE06RG7WNyz eKshHFpAJj0cerI/NFAm5PfnScC5ZZzwc35psUU2e/IHA1XhYm8Dg86/kOX0eWSz Oc6Y9nrH1yisiqm4yJmZTUyGNQCBd4VywBPe1YSBI+Ivz9/wCUbDw4xfs7Wmls4g 9ycm36l2fPhBViELj7gqR+QGpoAV+mbJtWJO6pKknQT9MicTT88RKA5UomzCy31S 9PuGTWAaFlncFLZ9/zymn59qRan/JpUP9CDcpXxWRMRe+dR1SjRP0ktgOV5y3tJj GLrmPpXfy/8D/a+ClTwc9ShsRT7Vaib96V3hdh05jnOhJAlTujE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:48 2026 by rpki-client