This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft File: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft (raw, json) Hash identifier: SAItNprquezUsdQXkKenttBqptFj6YRFLmOvNET3sHQ= Subject key identifier: CA:BF:1D:61:E5:E3:41:5A:4E:4B:C4:A1:6C:2B:69:3C:37:71:29:AA Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 7F776566A4880C5B79CD905D4CEFD730A29B43E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft Manifest number: D3 Signing time: Sat 31 Jan 2026 16:31:43 +0000 Manifest this update: Sat 31 Jan 2026 16:26:43 +0000 Manifest next update: Tue 03 Feb 2026 18:24:43 +0000 Files and hashes: 1: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: lR/hW+eaZsPiXrhVudMo+pOinjFXG0anTiMBOASqmGk=) 2: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: HSGQJXythRbZW0WejIr3eu8cpvINsUXbBgpQ3Hdpzbo=) 3: 10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl (hash: 1t3tuT6mtVIz/NjXP8fCrnZnJFxFmHF5edKNtIi/F0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:77:65:66:a4:88:0c:5b:79:cd:90:5d:4c:ef:d7:30:a2:9b:43:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Jan 31 16:26:43 2026 GMT Not After : Feb 3 18:24:43 2026 GMT Subject: CN=CABF1D61E5E3415A4E4BC4A16C2B693C377129AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:d8:10:cb:99:e6:90:84:32:3b:07:31:bd: 10:c3:7d:c4:48:e3:fd:21:08:24:a6:0d:58:35:48: 3e:86:aa:90:ed:2f:35:4e:2f:f3:05:5d:29:28:5d: e2:1a:23:ce:6e:a8:21:1d:3f:24:3e:9f:65:bd:97: 70:1f:8e:98:b2:31:c6:03:25:04:7e:d1:7d:74:c2: 41:75:31:0b:c7:3b:54:88:84:2f:40:18:9b:f0:43: 88:08:3c:7b:a2:f0:7f:3e:d0:42:c5:a8:89:38:5f: 7c:41:23:47:da:f7:04:27:74:49:43:21:72:eb:05: 98:ba:0b:2f:45:ff:dc:87:fb:34:5c:e3:b3:bb:78: 80:30:08:55:6d:ef:56:67:48:96:5c:3a:78:f9:d2: 94:33:f3:a9:54:b1:8f:82:87:ab:d2:04:0c:89:58: d4:da:71:3a:02:e4:16:a5:a5:e6:ee:6b:a1:39:31: 06:77:96:4d:43:dd:57:aa:be:4a:7b:37:2a:5e:f3: 8d:4b:95:c8:29:f0:ba:19:e4:72:3e:6e:28:63:e8: 94:e2:37:70:0f:d1:e4:eb:67:4d:20:21:99:ab:e6: a4:42:16:a7:aa:81:45:05:fe:d1:0d:ec:1c:97:90: 5e:1d:ac:4d:d7:a2:c2:5a:f5:be:18:a5:4c:3a:e5: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:1D:61:E5:E3:41:5A:4E:4B:C4:A1:6C:2B:69:3C:37:71:29:AA X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d5:d1:e9:3d:45:62:f9:c8:43:8b:90:e1:92:fa:5d:9a:9d: 77:29:64:78:8b:0d:37:8b:82:c9:7d:fe:3d:56:0e:73:f4:30: a7:98:55:a5:12:6e:0f:de:c7:dc:34:05:4b:7a:7a:fb:6a:90: a2:5b:60:80:87:82:ee:e9:05:cf:59:0e:75:fa:4d:36:7b:28: 6b:b0:e7:12:67:03:65:d3:4a:af:07:69:c5:11:42:54:69:c9: d4:75:0f:e2:6a:32:4d:2c:65:fc:b7:b7:dd:28:90:7e:c1:19: 90:3e:df:6a:1d:54:3c:5c:9f:81:ef:6b:94:a0:93:f1:86:53: aa:e2:97:3f:66:da:51:33:b1:a1:5f:ff:f5:d6:87:17:77:47: 0e:35:ba:a3:3e:9a:7b:d1:28:3d:ce:be:ab:a5:d1:ad:32:73: b7:e7:91:ef:9e:e4:89:9f:18:26:fe:61:22:15:36:d0:3a:ac: 0a:7c:d7:dc:92:01:e6:38:88:b8:c2:3c:19:3f:c7:68:14:4f: 8b:7c:25:3f:68:b8:f9:a6:db:5a:b0:50:6d:4b:3a:e0:8e:62: b9:76:09:6d:46:46:e1:e0:83:4d:27:fc:4f:05:98:8b:46:1c: 23:97:d4:6f:00:b5:25:4c:8d:ca:8d:cc:08:66:17:ea:23:80: be:d8:37:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3dlZqSIDFt5zZBdTO/XMKKbQ+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNjAxMzExNjI2NDNaFw0yNjAyMDMxODI0NDNaMDMxMTAvBgNV BAMTKENBQkYxRDYxRTVFMzQxNUE0RTRCQzRBMTZDMkI2OTNDMzc3MTI5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P9gQy5nmkIQyOwcxvRDDfcRI 4/0hCCSmDVg1SD6GqpDtLzVOL/MFXSkoXeIaI85uqCEdPyQ+n2W9l3AfjpiyMcYD JQR+0X10wkF1MQvHO1SIhC9AGJvwQ4gIPHui8H8+0ELFqIk4X3xBI0fa9wQndElD IXLrBZi6Cy9F/9yH+zRc47O7eIAwCFVt71ZnSJZcOnj50pQz86lUsY+Ch6vSBAyJ WNTacToC5Balpebua6E5MQZ3lk1D3Veqvkp7Nype841Llcgp8LoZ5HI+bihj6JTi N3AP0eTrZ00gIZmr5qRCFqeqgUUF/tEN7ByXkF4drE3XosJa9b4YpUw65Qi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyr8dYeXjQVpOS8ShbCtpPDdxKaowHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IwMWM5NjctOTlkMC00YzIxLTk2 NDItODdhZGE2NzE1NWM4LzAvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMw MzE0Q0ZBMzE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3V0ek9RWL5yEOLkOGS+l2anXcpZHiLDTeL gsl9/j1WDnP0MKeYVaUSbg/ex9w0BUt6evtqkKJbYICHgu7pBc9ZDnX6TTZ7KGuw 5xJnA2XTSq8HacURQlRpydR1D+JqMk0sZfy3t90okH7BGZA+32odVDxcn4Hva5Sg k/GGU6rilz9m2lEzsaFf//XWhxd3Rw41uqM+mnvRKD3Ovqul0a0yc7fnke+e5Imf GCb+YSIVNtA6rAp819ySAeY4iLjCPBk/x2gUT4t8JT9ouPmm21qwUG1LOuCOYrl2 CW1GRuHgg00n/E8FmItGHCOX1G8AtSVMjcqNzAhmF+ojgL7YN7Y= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:49 2026 by rpki-client