This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: WIRnvqHNHJ9UZjgfEGueXO4/HCywpgQ1/A6W5stSi5I= Subject key identifier: 82:87:6D:AF:CE:54:9E:40:A8:EE:88:31:70:23:40:FF:89:13:0E:A6 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 561C8C234AAEB094446B16FF4D7D4CBE7C7D666E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0230 Signing time: Sat 31 Jan 2026 07:00:42 +0000 Manifest this update: Sat 31 Jan 2026 06:55:42 +0000 Manifest next update: Tue 03 Feb 2026 10:55:42 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: G1ZAtVFl8VG/gYfc4EYdl05ZPWzNHnTYzxrgL9LheQs=) 3: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 4: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: vO1U2+XOrFYgCo1b2wrMtvwsXQ+gJVFi6OROVrrn8Go=) 5: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 6: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 7: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: MVBRsOIN1IZt0jLk1q+iLxrhtC7Paa/XY5pFKcxb+gg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 10:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:8c:23:4a:ae:b0:94:44:6b:16:ff:4d:7d:4c:be:7c:7d:66:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Jan 31 06:55:42 2026 GMT Not After : Feb 3 10:55:42 2026 GMT Subject: CN=82876DAFCE549E40A8EE8831702340FF89130EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:4e:45:38:f2:5d:5a:c8:82:32:81:29:63: ca:b1:03:ba:5d:89:ff:31:e5:c6:7f:ce:85:f6:24: 8e:d2:c1:2d:25:b1:e9:05:9a:21:d9:ea:d3:f9:96: b8:95:57:54:6a:c4:99:6f:1d:e5:c3:08:ea:f0:ee: 82:c6:14:72:c4:c6:29:8e:94:b0:4f:ec:0e:8f:4d: 28:22:f1:e7:2a:65:f4:b7:38:1c:f1:c8:7b:e3:04: 10:be:96:14:02:5d:c3:f2:1a:f2:6c:89:2e:d5:01: a5:2d:b7:d7:18:f6:4b:51:fc:d4:5d:e9:97:5a:dc: 75:af:4b:78:12:2f:3c:1f:ef:58:4a:ce:cd:f1:7a: fb:a9:4e:dc:db:b5:c2:30:22:b0:80:83:53:34:0c: ed:e3:c8:ea:28:68:b4:95:26:e2:2c:3b:36:38:85: bc:7e:4b:92:08:d8:7a:2d:e6:3e:75:cc:fa:47:84: ff:41:e9:35:16:ec:98:bf:d1:9e:4a:e0:0b:f2:c6: af:5b:94:f0:b5:9d:c8:a9:0b:22:38:61:a9:60:a5: cd:90:62:74:92:c3:6b:3b:7f:d1:f3:c5:cb:32:8a: 6b:04:bd:95:ee:79:d5:a9:11:36:2f:2f:ed:c0:b5: 48:00:de:08:76:12:e1:19:4c:0f:1a:68:80:75:59: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:87:6D:AF:CE:54:9E:40:A8:EE:88:31:70:23:40:FF:89:13:0E:A6 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f7:d1:57:c1:c2:81:d2:81:91:bc:bd:f5:fa:99:0a:ff:6e: d4:e1:17:31:16:05:9d:c7:8f:b3:95:d1:8d:12:0f:56:f8:ca: f8:18:47:e9:4c:11:85:e0:5a:f2:3e:27:93:dd:43:06:1d:32: 9b:a1:d6:b1:1f:c6:fb:5f:26:13:c5:89:fd:05:ce:f8:19:05: 9c:bb:ed:27:61:27:eb:69:05:e8:41:92:98:34:52:d5:e9:26: 29:77:91:db:3f:28:a1:b3:fe:bc:3c:94:fe:c8:e8:7c:ee:41: d3:4e:22:57:5c:34:76:71:a5:c8:10:76:f8:8a:5b:4c:68:00: 39:96:56:a8:b9:80:bf:c6:39:6c:02:a6:7e:61:f6:b2:02:97: e0:c7:c2:ea:50:53:53:5e:bb:da:cc:d2:1d:4f:14:a3:12:0e: ea:ac:23:79:2f:c2:99:8a:a5:f4:58:0a:fb:61:54:60:3e:cd: ef:14:96:9a:12:71:37:1e:1d:84:a1:7b:9c:cd:02:9d:94:36: 9f:ed:61:15:fb:11:8e:aa:e4:f5:eb:b9:8a:28:62:fd:b0:24: 9b:09:50:a4:9d:2f:1d:24:25:de:b2:75:4d:f4:86:12:b8:76: 57:44:66:cd:a3:5b:23:80:7c:08:18:1c:f4:65:48:39:b0:a8: eb:4b:55:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhyMI0qusJREaxb/TX1Mvnx9Zm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNjAxMzEwNjU1NDJaFw0yNjAyMDMxMDU1NDJaMDMxMTAvBgNV BAMTKDgyODc2REFGQ0U1NDlFNDBBOEVFODgzMTcwMjM0MEZGODkxMzBFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhE5FOPJdWsiCMoEpY8qxA7pd if8x5cZ/zoX2JI7SwS0lsekFmiHZ6tP5lriVV1RqxJlvHeXDCOrw7oLGFHLEximO lLBP7A6PTSgi8ecqZfS3OBzxyHvjBBC+lhQCXcPyGvJsiS7VAaUtt9cY9ktR/NRd 6Zda3HWvS3gSLzwf71hKzs3xevupTtzbtcIwIrCAg1M0DO3jyOooaLSVJuIsOzY4 hbx+S5II2Hot5j51zPpHhP9B6TUW7Ji/0Z5K4Avyxq9blPC1ncipCyI4Yalgpc2Q YnSSw2s7f9HzxcsyimsEvZXuedWpETYvL+3AtUgA3gh2EuEZTA8aaIB1WUDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgodtr85UnkCo7ogxcCNA/4kTDqYwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL30VfBwoHSgZG8vfX6mQr/btThFzEWBZ3H j7OV0Y0SD1b4yvgYR+lMEYXgWvI+J5PdQwYdMpuh1rEfxvtfJhPFif0FzvgZBZy7 7SdhJ+tpBehBkpg0UtXpJil3kds/KKGz/rw8lP7I6HzuQdNOIldcNHZxpcgQdviK W0xoADmWVqi5gL/GOWwCpn5h9rICl+DHwupQU1Neu9rM0h1PFKMSDuqsI3kvwpmK pfRYCvthVGA+ze8UlpoScTceHYShe5zNAp2UNp/tYRX7EY6q5PXruYooYv2wJJsJ UKSdLx0kJd6ydU30hhK4dldEZs2jWyOAfAgYHPRlSDmwqOtLVXE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:11 2026 by rpki-client