This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: S1swavUuLFKJ/MGGtfjhMIY4ICey/JekiehOyGgJNKA= Subject key identifier: 40:B6:AB:91:A0:DC:A8:44:71:15:B6:44:59:4D:55:0C:A4:27:BE:56 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 3D10142C73F38573C4799A914F60CDF9A5641F75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: B7 Signing time: Sun 01 Feb 2026 05:12:34 +0000 Manifest this update: Sun 01 Feb 2026 05:07:34 +0000 Manifest next update: Wed 04 Feb 2026 12:40:34 +0000 Files and hashes: 1: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) 3: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: s9G53WqJIk+IQj1K+DZ/f1f54yKHmRKe+8kqpR4eowM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 12:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:10:14:2c:73:f3:85:73:c4:79:9a:91:4f:60:cd:f9:a5:64:1f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Feb 1 05:07:34 2026 GMT Not After : Feb 4 12:40:34 2026 GMT Subject: CN=40B6AB91A0DCA8447115B644594D550CA427BE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:1e:7b:87:e7:a9:69:12:0a:38:dc:3f:b5: 0e:20:30:84:36:4c:e8:9e:4c:f6:8f:b8:1c:86:d2: cd:d1:27:9f:f8:b3:f9:86:a0:b8:9a:84:c8:7a:cd: fd:9e:a7:ca:73:17:fe:48:4a:d0:03:1e:e6:d6:f3: 7d:ca:4e:5b:c6:16:07:fd:0d:86:fd:d0:c3:41:58: dc:ff:a9:5a:07:f9:52:e6:28:84:ee:7c:3c:97:42: 4f:5b:e5:ea:8f:b4:c9:25:29:21:69:56:6d:3f:57: 63:e8:cf:93:84:fa:95:0a:53:85:61:b0:ac:02:a5: 83:cc:61:71:36:34:8f:ad:dc:0e:31:51:62:cf:3a: ee:87:dc:1e:4c:01:84:bb:77:10:36:30:05:6f:97: eb:72:01:03:2b:f2:4c:9b:f6:72:9e:ae:81:50:23: f7:93:79:e3:9d:f4:ab:0c:13:b3:7b:d9:aa:dd:a9: b7:2d:b3:1f:ed:69:31:e5:a7:c7:bd:f3:ed:13:bc: bf:e6:06:8f:c8:ad:95:f6:28:c1:84:a0:ad:df:e5: ec:6d:19:f6:b5:b1:90:1f:a5:8e:8b:78:4c:48:81: 93:5b:da:2f:2d:e7:6e:63:13:80:b1:85:37:a9:45: e7:ff:a3:d4:c5:e1:2e:7f:62:5b:f8:e7:c9:15:aa: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B6:AB:91:A0:DC:A8:44:71:15:B6:44:59:4D:55:0C:A4:27:BE:56 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cd:74:32:76:9e:34:10:eb:c0:3c:ab:4d:89:3e:77:e1:20: 3c:89:3b:5b:ac:3b:02:48:1b:b6:28:1c:4b:4d:41:b9:e2:a0: 92:34:12:da:30:ab:80:cc:0f:57:1e:2f:c3:ca:9d:33:d1:ad: cc:87:36:f9:74:35:de:f3:62:28:ef:78:a9:90:32:8a:44:73: 98:98:a6:ef:96:19:d4:7e:46:99:ee:03:07:da:c4:55:54:50: 41:ce:6b:7c:47:e3:22:62:c2:c7:5f:6e:9f:8a:f8:04:53:19: 68:52:4c:a4:eb:76:1c:20:1a:3f:1f:d2:5b:79:8e:65:9d:50: 2d:0b:b2:92:34:c4:d4:d6:04:df:74:82:e0:fc:1b:f0:02:9c: 76:6c:a3:4d:e6:4a:7e:4b:ea:31:97:ce:ba:c8:54:38:a3:17: 4f:7d:71:b7:0d:b1:86:57:3f:c2:08:13:7a:5e:10:72:1c:23: 8e:03:0d:e6:9e:db:b6:84:ae:3e:3d:d7:d5:03:9e:95:f8:ae: 28:d3:4f:a1:b6:e3:6b:2e:34:12:55:4a:a8:4a:4f:8a:e5:f7: 20:e4:32:8f:6f:4b:78:e2:df:d2:ee:8e:81:4e:44:c0:39:ce: fe:99:2e:d7:ad:6d:ed:5c:4f:c4:fb:61:e8:2c:8c:f6:9d:f2: 59:09:15:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRAULHPzhXPEeZqRT2DN+aVkH3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNjAyMDEwNTA3MzRaFw0yNjAyMDQxMjQwMzRaMDMxMTAvBgNV BAMTKDQwQjZBQjkxQTBEQ0E4NDQ3MTE1QjY0NDU5NEQ1NTBDQTQyN0JFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxB57h+epaRIKONw/tQ4gMIQ2 TOieTPaPuByG0s3RJ5/4s/mGoLiahMh6zf2ep8pzF/5IStADHubW833KTlvGFgf9 DYb90MNBWNz/qVoH+VLmKITufDyXQk9b5eqPtMklKSFpVm0/V2Poz5OE+pUKU4Vh sKwCpYPMYXE2NI+t3A4xUWLPOu6H3B5MAYS7dxA2MAVvl+tyAQMr8kyb9nKeroFQ I/eTeeOd9KsME7N72ardqbctsx/taTHlp8e98+0TvL/mBo/IrZX2KMGEoK3f5ext Gfa1sZAfpY6LeExIgZNb2i8t525jE4CxhTepRef/o9TF4S5/Ylv458kVqtF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLarkaDcqERxFbZEWU1VDKQnvlYwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXNdDJ2njQQ68A8q02JPnfhIDyJO1usOwJI G7YoHEtNQbnioJI0Etowq4DMD1ceL8PKnTPRrcyHNvl0Nd7zYijveKmQMopEc5iY pu+WGdR+RpnuAwfaxFVUUEHOa3xH4yJiwsdfbp+K+ARTGWhSTKTrdhwgGj8f0lt5 jmWdUC0LspI0xNTWBN90guD8G/ACnHZso03mSn5L6jGXzrrIVDijF099cbcNsYZX P8IIE3peEHIcI44DDeae27aErj4919UDnpX4rijTT6G242suNBJVSqhKT4rl9yDk Mo9vS3ji39LujoFORMA5zv6ZLtetbe1cT8T7YegsjPad8lkJFQ0= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:49 2026 by rpki-client