This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: ZOcAwZqtjSJ5jhQuyUBbHccsNnq7RwvWSpOhQhdGVeI= Subject key identifier: 1F:97:2B:8B:64:53:B0:8A:96:2C:66:A6:05:54:00:E6:E1:B8:4F:B8 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 42B1CBA9D2F1360E1FABC88409DE13C8ACEBF2D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 028F Signing time: Sun 01 Feb 2026 23:22:00 +0000 Manifest this update: Sun 01 Feb 2026 23:17:00 +0000 Manifest next update: Thu 05 Feb 2026 07:55:00 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 2: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: b4dWJnF0VNLl7Lcb8irIDu4zlmBVALrCR1mBZHQ3uRk=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b1:cb:a9:d2:f1:36:0e:1f:ab:c8:84:09:de:13:c8:ac:eb:f2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Feb 1 23:17:00 2026 GMT Not After : Feb 5 07:55:00 2026 GMT Subject: CN=1F972B8B6453B08A962C66A6055400E6E1B84FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:62:ba:4c:84:c9:83:10:ad:2f:15:2b:9f: 1a:2b:68:58:9a:7d:46:28:d2:79:c4:75:8b:9b:d5: ef:4a:9a:1b:0a:de:f5:47:85:8b:b6:13:9a:66:7d: 96:ea:19:df:ea:43:98:49:7d:cd:fa:30:2c:f7:1e: f6:67:c6:cc:2e:ff:3e:ef:e5:38:fc:54:bd:ed:a5: 84:11:77:9f:42:34:e0:dc:12:c0:f5:b3:47:de:e5: bd:a9:a9:f6:fd:ce:e7:aa:d0:79:e6:66:d2:99:9c: a9:29:e5:fb:74:a1:a4:44:53:12:ae:bd:92:1c:8f: b3:d9:c1:03:b0:47:5d:2e:b1:36:db:9b:99:66:9d: 92:e6:73:ac:21:c7:2b:5e:8b:51:c7:b0:43:3a:e5: 40:91:ff:75:10:8d:6b:1f:2b:7c:c0:8f:4f:dc:3b: 82:0b:6d:6f:8e:7e:46:11:b5:69:99:00:eb:cb:0e: 0f:d5:d0:8e:c4:f8:fa:c8:9a:bd:7e:8e:1a:ce:d7: 92:56:77:3d:2f:19:74:29:15:0d:45:56:fe:a6:a7: d1:98:4a:5d:cd:78:e0:c1:e1:d6:3a:54:1c:e9:27: 08:d1:69:2e:87:e5:73:08:c1:4d:2a:4e:04:22:d8: c7:77:69:80:86:ca:c0:2d:62:3e:6b:63:59:48:0b: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:2B:8B:64:53:B0:8A:96:2C:66:A6:05:54:00:E6:E1:B8:4F:B8 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a8:c8:dc:74:d6:49:88:00:34:50:d5:2e:93:2c:81:de:63: 3b:3d:d7:cd:f5:cf:e2:46:2e:a2:0f:98:2a:21:f8:ef:af:67: 9c:49:e5:c1:04:c5:db:1c:9d:0f:02:c2:d0:cb:1f:6e:08:3f: ab:c6:d0:68:85:9d:03:3b:52:04:3a:9c:96:2a:97:47:6e:70: 7b:8b:8b:d9:9e:5a:6e:7e:0b:78:2c:24:81:45:f5:38:0f:22: 38:50:13:2c:8d:1d:ca:a9:9d:4b:96:e7:b3:91:01:8a:a7:84: 2b:45:03:6b:b2:ee:20:3c:33:17:97:0c:26:ed:57:56:a3:f7: d7:a5:71:a6:11:a7:8d:ec:bc:98:f1:d2:59:fe:35:97:45:e6: b0:a7:44:2f:50:70:63:0d:f4:87:a8:24:a9:d9:7b:c4:b5:2a: c5:b5:69:b2:14:12:fe:21:30:7d:51:f6:19:7f:14:d7:c6:fd: 19:cf:3b:37:b5:84:63:a1:f7:76:66:80:92:f7:d5:64:d7:cf: 88:bd:c5:71:48:7b:bf:45:f4:49:d9:c1:a3:13:fd:a7:53:3e: b2:23:58:d7:78:7b:14:3e:e1:6a:a4:97:e8:47:73:ea:4d:5b: 11:7a:3a:fc:8c:82:19:11:83:05:d8:d3:71:79:e8:3f:49:09: a2:27:c7:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrHLqdLxNg4fq8iECd4TyKzr8tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNjAyMDEyMzE3MDBaFw0yNjAyMDUwNzU1MDBaMDMxMTAvBgNV BAMTKDFGOTcyQjhCNjQ1M0IwOEE5NjJDNjZBNjA1NTQwMEU2RTFCODRGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukWK6TITJgxCtLxUrnxoraFia fUYo0nnEdYub1e9KmhsK3vVHhYu2E5pmfZbqGd/qQ5hJfc36MCz3HvZnxswu/z7v 5Tj8VL3tpYQRd59CNODcEsD1s0fe5b2pqfb9zueq0HnmZtKZnKkp5ft0oaREUxKu vZIcj7PZwQOwR10usTbbm5lmnZLmc6whxytei1HHsEM65UCR/3UQjWsfK3zAj0/c O4ILbW+OfkYRtWmZAOvLDg/V0I7E+PrImr1+jhrO15JWdz0vGXQpFQ1FVv6mp9GY Sl3NeODB4dY6VBzpJwjRaS6H5XMIwU0qTgQi2Md3aYCGysAtYj5rY1lIC01/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5cri2RTsIqWLGamBVQA5uG4T7gwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGoyNx01kmIADRQ1S6TLIHeYzs91831z+JG LqIPmCoh+O+vZ5xJ5cEExdscnQ8CwtDLH24IP6vG0GiFnQM7UgQ6nJYql0ducHuL i9meWm5+C3gsJIFF9TgPIjhQEyyNHcqpnUuW57ORAYqnhCtFA2uy7iA8MxeXDCbt V1aj99elcaYRp43svJjx0ln+NZdF5rCnRC9QcGMN9IeoJKnZe8S1KsW1abIUEv4h MH1R9hl/FNfG/RnPOze1hGOh93ZmgJL31WTXz4i9xXFIe79F9EnZwaMT/adTPrIj WNd4exQ+4Wqkl+hHc+pNWxF6OvyMghkRgwXY03F56D9JCaInx+g= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:14 2026 by rpki-client