This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: h6G+QrqdWa4Ft42/e1zzGS54q3/b9xcnyKpJZ3zxRhI= Subject key identifier: 4C:EE:36:55:64:BE:C5:22:57:B9:99:73:BB:DC:61:E5:E1:7F:FC:FC Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 1F31582E8F8F64BAD005B37622BB07EF76D812D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 0267 Signing time: Sat 31 Jan 2026 06:22:16 +0000 Manifest this update: Sat 31 Jan 2026 06:17:16 +0000 Manifest next update: Tue 03 Feb 2026 16:40:16 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: qVOs5fg6/pJ4qMK43Sua93AGLLp0Y1L5pAbuR4z7+e8=) 2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: Pg2iO6bQNogm2CNZTMQHaR8j/iayRorOo/9bDyh9hZU=) 3: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: uKt5E1f7cIijYhQmwO4Ata7QGtBsR9KELvvE8q2ffoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:31:58:2e:8f:8f:64:ba:d0:05:b3:76:22:bb:07:ef:76:d8:12:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Jan 31 06:17:16 2026 GMT Not After : Feb 3 16:40:16 2026 GMT Subject: CN=4CEE365564BEC52257B99973BBDC61E5E17FFCFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:28:1b:d0:7f:22:fd:bc:46:a1:c3:2c:00: dc:e4:ef:1a:6d:8d:75:8f:5b:04:c6:0d:51:7b:c0: ab:3f:0f:b8:5c:3b:ac:b3:b6:f7:22:d2:24:cc:83: 63:55:cc:be:d2:96:1b:a4:6d:22:61:0a:b0:73:9a: aa:fc:85:a9:f1:2d:d3:1a:f4:16:2d:6b:55:00:a5: 4f:f3:e7:bb:51:cc:6d:b2:a1:ee:a9:7b:9a:e8:65: a6:2a:d2:89:c0:08:63:7c:84:14:07:07:f3:c5:29: 71:5c:05:37:b7:10:a8:fd:b3:50:d8:c2:84:9b:a4: fc:83:f1:66:2c:56:cc:a7:6c:c8:e0:96:a1:c6:c3: 59:ee:43:e6:1d:f7:08:49:2c:b2:58:ec:6b:e4:a6: 43:34:5f:e1:ea:89:75:dc:c0:8d:f9:29:9f:dd:5d: 6b:ee:e5:38:33:2f:96:b7:47:ef:ce:a3:53:73:aa: 93:28:c9:77:08:0c:3d:9b:76:87:37:de:32:30:38: 5d:8a:99:45:1b:60:27:f1:2a:ac:42:e9:7b:0e:03: 87:29:c7:e5:5d:76:c8:40:54:82:26:56:b3:00:e8: d7:a0:2b:f9:b2:6c:d2:69:56:ad:50:58:82:15:48: 64:53:5a:7d:37:51:3a:0e:75:e1:2c:98:3a:fb:bf: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EE:36:55:64:BE:C5:22:57:B9:99:73:BB:DC:61:E5:E1:7F:FC:FC X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:80:e9:11:a8:31:f9:b5:6c:4e:15:92:99:d9:23:95:92:95: bb:20:a3:9c:d8:5c:d1:93:b1:4c:2a:e0:26:88:0c:ac:9a:89: 09:68:8e:af:83:a6:88:c6:6a:8c:8d:65:64:03:36:30:33:35: c8:4d:4d:24:d3:ec:9b:58:12:3a:73:f9:bd:97:eb:21:b4:3f: ab:f7:4c:f9:3c:fc:28:1b:c0:c0:e7:65:08:b6:4f:d7:cb:71: c2:45:d9:75:54:6d:bc:e0:d3:6d:23:8e:83:62:6e:d7:37:9e: b0:7d:3e:6e:28:1c:db:bb:dd:89:b5:ff:84:9a:a3:5b:e5:2f: b0:43:8e:4a:18:8f:8c:41:b9:37:25:f7:14:0f:da:6a:0a:96: f4:53:6d:64:4f:e4:06:d0:c9:ca:96:f3:2b:81:6e:39:33:6b: 5f:41:25:cd:cd:36:b6:a1:f4:d3:72:1e:87:93:11:15:1c:61: 5b:cc:18:68:cd:4a:f3:b6:97:08:fb:8b:f0:4a:20:98:5e:fb: ce:98:3b:50:d1:ef:b7:cf:c3:37:d9:ca:ca:4b:99:6e:b6:0d: 8e:6b:e2:eb:76:3f:af:68:dd:1a:53:e7:8e:20:0c:08:43:1f: 72:11:98:96:c1:fb:50:72:11:c5:af:5b:b9:4c:70:05:60:20: f0:c3:91:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzFYLo+PZLrQBbN2IrsH73bYEtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNjAxMzEwNjE3MTZaFw0yNjAyMDMxNjQwMTZaMDMxMTAvBgNV BAMTKDRDRUUzNjU1NjRCRUM1MjI1N0I5OTk3M0JCREM2MUU1RTE3RkZDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjSgb0H8i/bxGocMsANzk7xpt jXWPWwTGDVF7wKs/D7hcO6yztvci0iTMg2NVzL7SlhukbSJhCrBzmqr8hanxLdMa 9BYta1UApU/z57tRzG2yoe6pe5roZaYq0onACGN8hBQHB/PFKXFcBTe3EKj9s1DY woSbpPyD8WYsVsynbMjglqHGw1nuQ+Yd9whJLLJY7GvkpkM0X+HqiXXcwI35KZ/d XWvu5TgzL5a3R+/Oo1NzqpMoyXcIDD2bdoc33jIwOF2KmUUbYCfxKqxC6XsOA4cp x+VddshAVIImVrMA6NegK/mybNJpVq1QWIIVSGRTWn03UToOdeEsmDr7v4cvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTO42VWS+xSJXuZlzu9xh5eF//PwwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+A6RGoMfm1bE4VkpnZI5WSlbsgo5zYXNGT sUwq4CaIDKyaiQlojq+DpojGaoyNZWQDNjAzNchNTSTT7JtYEjpz+b2X6yG0P6v3 TPk8/CgbwMDnZQi2T9fLccJF2XVUbbzg020jjoNibtc3nrB9Pm4oHNu73Ym1/4Sa o1vlL7BDjkoYj4xBuTcl9xQP2moKlvRTbWRP5AbQycqW8yuBbjkza19BJc3NNrah 9NNyHoeTERUcYVvMGGjNSvO2lwj7i/BKIJhe+86YO1DR77fPwzfZyspLmW62DY5r 4ut2P69o3RpT544gDAhDH3IRmJbB+1ByEcWvW7lMcAVgIPDDkX4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:04 2026 by rpki-client