This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: 43B11Y3vBvyof+8q++gAk47tblqPda/88zWE0EaF210= Subject key identifier: D0:9E:19:08:F8:08:3C:76:31:3D:4D:40:60:15:CF:B5:8D:4B:C6:90 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 6C1924B458779237D1E047BF1C99EB5ED3EDCA29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02F8 Signing time: Sun 01 Feb 2026 20:32:16 +0000 Manifest this update: Sun 01 Feb 2026 20:27:16 +0000 Manifest next update: Thu 05 Feb 2026 05:07:16 +0000 Files and hashes: 1: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) 3: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 4: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: Ai7fubsidbaDBgqIcDRr8pPl1XYqR70Ez0UwdXImIPI=) 5: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:19:24:b4:58:77:92:37:d1:e0:47:bf:1c:99:eb:5e:d3:ed:ca:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Feb 1 20:27:16 2026 GMT Not After : Feb 5 05:07:16 2026 GMT Subject: CN=D09E1908F8083C76313D4D406015CFB58D4BC690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:85:62:59:c5:ec:ff:38:05:72:a7:83:43: e1:ae:cf:25:89:8f:e3:c5:db:32:00:25:a6:3a:80: 55:82:19:1f:66:e1:0f:7d:58:c6:96:14:73:9d:00: bd:95:ad:bc:07:16:32:fe:2d:aa:d7:33:57:5b:6c: d8:e1:66:f9:1e:1b:15:45:a9:cf:71:9b:3e:ea:a2: 90:21:06:5b:f5:f0:0c:59:75:14:c8:8d:d1:01:68: ec:2b:fd:14:c0:ec:03:c2:23:cb:cd:35:3a:d6:24: e4:e8:93:82:5a:57:a4:a8:0a:5d:0a:48:f3:09:35: d7:9d:cf:94:be:c2:ed:60:fd:1f:10:8b:71:67:94: 5a:ac:a9:63:d6:cf:26:75:1b:ec:44:ca:d3:8b:64: b8:93:c4:9a:61:d2:54:e8:5c:01:cb:f9:7a:93:ed: cb:f3:ce:ba:17:0e:af:d1:72:6c:a7:5a:b8:ea:85: e9:fd:94:97:c0:bb:b1:5d:24:af:1e:62:aa:6c:63: 1e:d8:14:ff:0f:7f:d8:36:92:7b:cb:ad:13:3f:4b: 90:ef:90:b5:2a:a3:48:68:ef:a7:b6:87:d4:0c:95: fa:8e:3b:ec:35:0b:22:3c:8f:19:cc:e8:0c:4a:b7: 2e:e3:7e:40:7b:58:e7:b0:83:ce:cc:a1:c2:09:23: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9E:19:08:F8:08:3C:76:31:3D:4D:40:60:15:CF:B5:8D:4B:C6:90 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d7:b6:cc:38:35:ba:80:83:90:87:08:40:1d:8d:1a:46:0f: 3b:0f:12:2b:eb:56:e9:7a:30:ea:41:9b:92:14:1f:43:4b:09: 34:d8:2a:dd:6c:d3:d2:e9:2f:ec:1c:d3:76:6d:64:38:f2:b3: 95:c3:fa:71:34:b9:96:d6:84:c9:56:83:b9:e1:f0:52:64:4e: de:09:09:06:a0:fb:24:a7:2a:ae:6e:ca:f3:34:4e:5c:4f:2d: 62:3a:98:ab:5a:3f:db:13:a5:6b:2f:02:5d:63:c5:88:40:fe: 04:6f:50:3c:5a:7e:cc:18:af:14:54:dd:81:3c:25:18:3f:dc: 2c:dc:7a:43:60:18:51:d4:fc:53:25:11:a0:5a:da:e1:4f:ec: 47:ff:eb:2d:7c:e3:f6:2f:df:39:eb:68:9a:42:63:d8:2a:af: 1b:fd:ad:45:fa:eb:78:c4:3e:d5:75:ef:28:f5:26:b4:e7:ea: 88:9e:5f:a1:18:f9:ab:31:fa:17:37:f0:f0:f9:ec:0d:0f:14: e2:b3:d0:65:ec:a1:e4:35:d1:c3:5f:02:c2:48:91:f5:fe:6e: f5:9d:79:c8:a3:f7:c4:81:18:94:97:22:1c:12:94:cb:c2:fb: b9:b2:27:65:80:87:6d:c7:e4:29:3d:60:b3:1d:6b:ff:35:53: f9:7f:23:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBkktFh3kjfR4Ee/HJnrXtPtyikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNjAyMDEyMDI3MTZaFw0yNjAyMDUwNTA3MTZaMDMxMTAvBgNV BAMTKEQwOUUxOTA4RjgwODNDNzYzMTNENEQ0MDYwMTVDRkI1OEQ0QkM2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzM4ViWcXs/zgFcqeDQ+GuzyWJ j+PF2zIAJaY6gFWCGR9m4Q99WMaWFHOdAL2VrbwHFjL+LarXM1dbbNjhZvkeGxVF qc9xmz7qopAhBlv18AxZdRTIjdEBaOwr/RTA7APCI8vNNTrWJOTok4JaV6SoCl0K SPMJNdedz5S+wu1g/R8Qi3FnlFqsqWPWzyZ1G+xEytOLZLiTxJph0lToXAHL+XqT 7cvzzroXDq/RcmynWrjqhen9lJfAu7FdJK8eYqpsYx7YFP8Pf9g2knvLrRM/S5Dv kLUqo0ho76e2h9QMlfqOO+w1CyI8jxnM6AxKty7jfkB7WOewg87MocIJI935AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0J4ZCPgIPHYxPU1AYBXPtY1LxpAwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjXtsw4NbqAg5CHCEAdjRpGDzsPEivrVul6 MOpBm5IUH0NLCTTYKt1s09LpL+wc03ZtZDjys5XD+nE0uZbWhMlWg7nh8FJkTt4J CQag+ySnKq5uyvM0TlxPLWI6mKtaP9sTpWsvAl1jxYhA/gRvUDxafswYrxRU3YE8 JRg/3CzcekNgGFHU/FMlEaBa2uFP7Ef/6y184/Yv3znraJpCY9gqrxv9rUX663jE PtV17yj1JrTn6oieX6EY+asx+hc38PD57A0PFOKz0GXsoeQ10cNfAsJIkfX+bvWd ecij98SBGJSXIhwSlMvC+7myJ2WAh23H5Ck9YLMda/81U/l/Izw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:58:37 2026 by rpki-client