This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: n/26LWag5dx4DoBHOG16oOwktxudzUvMfo3WT51rn6k= Subject key identifier: B3:6E:4F:02:8B:F0:06:6A:64:95:E8:8A:01:99:32:36:E3:F5:A4:9B Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 3D505273D2CC639AA904E93A1C24EDE4F297C876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01EB Signing time: Sun 01 Feb 2026 17:31:23 +0000 Manifest this update: Sun 01 Feb 2026 17:26:23 +0000 Manifest next update: Thu 05 Feb 2026 04:12:23 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: 6rTcd+jyKZUKcknNHNTV6IMkFOB10KauF8n8/1ig0+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:50:52:73:d2:cc:63:9a:a9:04:e9:3a:1c:24:ed:e4:f2:97:c8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Feb 1 17:26:23 2026 GMT Not After : Feb 5 04:12:23 2026 GMT Subject: CN=B36E4F028BF0066A6495E88A01993236E3F5A49B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:1f:da:aa:52:10:a4:8a:67:bd:33:f3:4e: 53:c3:23:f8:aa:83:b4:28:0b:d4:04:81:bc:a5:1d: 2e:a5:88:b3:78:51:d3:ed:03:97:dc:8e:ae:44:5c: 98:f8:fa:cf:09:4a:95:c9:5b:54:fd:39:a3:1a:02: 92:43:45:c7:cf:35:4c:b6:89:33:91:f1:28:88:31: ad:d1:0c:70:0d:fd:8f:f0:99:9a:71:87:5d:87:27: d7:27:36:48:d3:ff:5c:83:16:94:52:ec:1b:14:23: 4f:ea:ca:77:b0:c0:6d:6f:da:1c:f6:1d:00:46:b9: 50:26:03:d8:c9:16:8e:1a:c7:a6:4e:a3:55:8e:e3: 35:e2:f7:26:1d:4e:43:fb:43:b2:8f:2f:bc:38:92: 86:2e:1e:af:07:5f:02:44:d7:b2:8d:95:d7:71:f7: 84:bc:ca:d4:f4:0d:fb:1a:92:db:dd:c2:34:50:ed: 74:ec:3e:08:44:0d:d0:d5:d5:c2:05:dc:c4:f0:00: bc:16:c9:3d:4c:f0:de:79:48:d5:28:7e:f7:ed:ef: da:65:82:05:49:14:34:aa:74:30:3e:b8:d5:e7:84: de:3f:ea:83:85:d0:6e:6d:08:3e:8c:cc:6d:5e:6a: ea:6d:2b:65:71:2f:5a:ad:b1:e2:6b:4e:c3:91:5b: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:4F:02:8B:F0:06:6A:64:95:E8:8A:01:99:32:36:E3:F5:A4:9B X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:71:59:fe:28:78:0a:5b:31:a9:94:70:79:92:a7:10:8e:db: 74:6d:9a:a1:88:d2:84:66:6b:01:4a:e6:e3:c3:6f:d3:f6:43: 1a:da:c3:d1:e4:dd:6d:11:7d:11:30:db:05:55:cb:8e:17:7a: 79:35:2a:8e:4e:1b:7f:b6:84:7e:94:c3:9f:71:f1:8f:f0:84: 97:ff:3c:5a:fe:bc:51:a0:c8:2f:38:bf:be:1c:9f:3b:c3:96: 00:93:af:22:ab:07:2c:04:ea:46:20:c3:20:dd:48:71:0a:51: 70:7a:30:26:8c:76:16:e9:1c:df:1f:fe:10:7e:99:96:3f:73: df:e2:c1:90:98:08:6c:86:99:99:85:9d:ab:43:88:d1:45:8b: 61:e7:39:f2:29:02:f1:8c:8b:63:af:56:7a:46:16:05:bf:45: f4:b3:1f:e9:78:2e:48:a8:2b:b5:98:6e:04:45:c2:9e:8e:6e: 00:f6:5e:bd:49:00:7b:ce:d7:e1:92:1b:e5:26:2f:63:71:31: 10:e3:77:36:2d:4a:c4:bd:70:58:21:e6:01:e2:5a:12:67:21: 88:63:92:a3:c0:8c:f5:ff:0d:74:ab:7a:d7:35:65:70:f1:21: e8:a1:0d:dd:a1:0e:a0:49:f2:82:64:5b:91:7b:d3:56:d4:d7: 9f:7a:f1:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVBSc9LMY5qpBOk6HCTt5PKXyHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNjAyMDExNzI2MjNaFw0yNjAyMDUwNDEyMjNaMDMxMTAvBgNV BAMTKEIzNkU0RjAyOEJGMDA2NkE2NDk1RTg4QTAxOTkzMjM2RTNGNUE0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dh/aqlIQpIpnvTPzTlPDI/iq g7QoC9QEgbylHS6liLN4UdPtA5fcjq5EXJj4+s8JSpXJW1T9OaMaApJDRcfPNUy2 iTOR8SiIMa3RDHAN/Y/wmZpxh12HJ9cnNkjT/1yDFpRS7BsUI0/qynewwG1v2hz2 HQBGuVAmA9jJFo4ax6ZOo1WO4zXi9yYdTkP7Q7KPL7w4koYuHq8HXwJE17KNlddx 94S8ytT0DfsaktvdwjRQ7XTsPghEDdDV1cIF3MTwALwWyT1M8N55SNUofvft79pl ggVJFDSqdDA+uNXnhN4/6oOF0G5tCD6MzG1eauptK2VxL1qtseJrTsORWyP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs25PAovwBmpkleiKAZkyNuP1pJswHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFxWf4oeApbMamUcHmSpxCO23RtmqGI0oRm awFK5uPDb9P2Qxraw9Hk3W0RfREw2wVVy44Xenk1Ko5OG3+2hH6Uw59x8Y/whJf/ PFr+vFGgyC84v74cnzvDlgCTryKrBywE6kYgwyDdSHEKUXB6MCaMdhbpHN8f/hB+ mZY/c9/iwZCYCGyGmZmFnatDiNFFi2HnOfIpAvGMi2OvVnpGFgW/RfSzH+l4Lkio K7WYbgRFwp6ObgD2Xr1JAHvO1+GSG+UmL2NxMRDjdzYtSsS9cFgh5gHiWhJnIYhj kqPAjPX/DXSretc1ZXDxIeihDd2hDqBJ8oJkW5F701bU15968co= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:33 2026 by rpki-client