This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: Z+4P514XDCJpPPT3lzynO4uiiuv7ezX/09eCryC/fHY= Subject key identifier: 91:27:E9:00:27:2D:82:63:63:9B:C1:2A:65:9B:AC:8B:55:D9:AF:6C Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 7169640838CF403CF89F37C08CC099F80D5524B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 036F Signing time: Sun 01 Feb 2026 07:01:57 +0000 Manifest this update: Sun 01 Feb 2026 06:56:57 +0000 Manifest next update: Wed 04 Feb 2026 18:21:57 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI=) 2: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 3: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: O1grARw50c9jkazBIcXkIUh0NfsvPUXdnuM15OosauY=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: vTpKFtEuSQzd7i6WWufB9z0/u+k/lMjz3IOnInep2vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 18:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:69:64:08:38:cf:40:3c:f8:9f:37:c0:8c:c0:99:f8:0d:55:24:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Feb 1 06:56:57 2026 GMT Not After : Feb 4 18:21:57 2026 GMT Subject: CN=9127E900272D8263639BC12A659BAC8B55D9AF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:af:d9:bc:f8:e9:0f:8b:4b:e9:02:1b:bc: 4e:3f:73:22:bb:45:9d:9a:cf:04:b0:2f:eb:11:11: 3a:f1:13:dc:65:bb:b7:50:b9:08:05:2c:80:d6:8f: 74:86:1f:6e:32:b6:fe:29:de:90:4b:89:10:e6:d9: b2:a5:e6:21:17:a4:57:4e:3d:37:27:20:f9:62:ea: 13:48:1d:47:fd:e5:b3:b2:e8:54:f1:23:61:86:1a: 66:26:c3:8a:70:52:2c:6f:b1:8b:30:b4:2a:bb:42: c1:55:e9:4a:11:b0:37:5e:2c:28:63:23:65:79:b9: 19:f1:ef:61:49:27:cf:6a:65:12:d2:f9:7e:49:6f: 70:fd:53:3d:10:97:c5:4e:16:b5:6f:d2:0f:53:d1: 60:33:4f:50:ee:a5:72:69:4e:cd:4e:6a:47:be:a2: 28:7e:b7:6c:69:99:b7:a3:0a:6b:a8:59:fc:d6:bf: bf:fc:67:3b:d2:b5:94:26:09:c1:67:15:38:cf:60: 4b:17:72:46:d2:1d:d6:1a:7e:54:fc:ff:fb:c5:1a: 21:b8:90:34:f2:7a:c6:a4:bf:54:5c:b9:b6:a8:bc: 3e:51:88:2f:5e:30:16:77:3a:d3:5c:96:d2:50:ee: cc:90:2c:8c:81:48:3f:97:36:97:d3:a1:00:f1:26: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:27:E9:00:27:2D:82:63:63:9B:C1:2A:65:9B:AC:8B:55:D9:AF:6C X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b1:4d:d7:46:af:cb:9d:4f:ca:77:78:63:a4:d6:54:91:60: ad:c5:bf:75:b3:c4:1b:2d:c9:b8:04:1d:2d:b2:ab:c9:d9:5a: 00:4b:45:3c:7e:b6:4b:61:2e:b0:2a:e9:2f:1f:15:86:21:d4: 0c:2f:11:b3:92:40:17:7f:7f:ee:1b:80:c4:0d:9d:8f:da:de: 69:5d:6f:48:da:29:2f:0c:6c:b6:5d:47:a6:8c:19:80:d0:03: a9:e8:9f:91:42:20:93:b6:2a:bb:07:9e:8e:b6:11:4b:a8:52: bf:10:6d:52:bc:ce:26:77:2e:5e:74:c1:41:23:da:3e:14:60: 2e:cd:26:cc:60:0b:15:9f:d1:ff:a9:f5:58:6e:65:34:6c:05: 38:10:a4:4c:87:f4:f2:54:cc:6d:bb:6b:5c:15:db:92:5f:20: 9a:f7:2e:85:9c:b8:e3:6f:52:d4:f5:05:41:2c:5a:a9:0d:ea: 23:48:38:d9:9f:a9:fb:71:5c:6b:dd:03:96:c6:b5:9a:ae:9b: e6:39:cb:1e:1e:9d:a7:40:44:9c:d3:a1:d7:a4:ef:af:b4:73: ef:73:f6:8a:7b:43:5b:b5:c3:fd:64:31:c5:b8:86:ab:65:1e: fb:e4:f4:c8:24:aa:bb:54:ce:3b:6b:c9:f5:bf:e4:d7:94:ef: a0:37:de:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWlkCDjPQDz4nzfAjMCZ+A1VJLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNjAyMDEwNjU2NTdaFw0yNjAyMDQxODIxNTdaMDMxMTAvBgNV BAMTKDkxMjdFOTAwMjcyRDgyNjM2MzlCQzEyQTY1OUJBQzhCNTVEOUFGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHK/ZvPjpD4tL6QIbvE4/cyK7 RZ2azwSwL+sRETrxE9xlu7dQuQgFLIDWj3SGH24ytv4p3pBLiRDm2bKl5iEXpFdO PTcnIPli6hNIHUf95bOy6FTxI2GGGmYmw4pwUixvsYswtCq7QsFV6UoRsDdeLChj I2V5uRnx72FJJ89qZRLS+X5Jb3D9Uz0Ql8VOFrVv0g9T0WAzT1DupXJpTs1Oake+ oih+t2xpmbejCmuoWfzWv7/8ZzvStZQmCcFnFTjPYEsXckbSHdYaflT8//vFGiG4 kDTyesakv1RcubaovD5RiC9eMBZ3OtNcltJQ7syQLIyBSD+XNpfToQDxJtQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkSfpACctgmNjm8EqZZusi1XZr2wwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGxTddGr8udT8p3eGOk1lSRYK3Fv3WzxBst ybgEHS2yq8nZWgBLRTx+tkthLrAq6S8fFYYh1AwvEbOSQBd/f+4bgMQNnY/a3mld b0jaKS8MbLZdR6aMGYDQA6non5FCIJO2KrsHno62EUuoUr8QbVK8ziZ3Ll50wUEj 2j4UYC7NJsxgCxWf0f+p9VhuZTRsBTgQpEyH9PJUzG27a1wV25JfIJr3LoWcuONv UtT1BUEsWqkN6iNIONmfqftxXGvdA5bGtZqum+Y5yx4enadARJzTodek76+0c+9z 9op7Q1u1w/1kMcW4hqtlHvvk9MgkqrtUzjtryfW/5NeU76A33nQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:33 2026 by rpki-client