This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: /mGZmNWTdYOmMHmEAxiECWe7OlD4ZQI1wxCJXjMQ/8Q= Subject key identifier: 81:3A:A4:78:E7:45:2E:AB:18:87:C0:81:4B:6F:C1:3D:40:83:93:48 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 7288071CAD3F054AB576EEDFB0E0D2BD17394173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 0210 Signing time: Sun 01 Feb 2026 20:31:52 +0000 Manifest this update: Sun 01 Feb 2026 20:26:52 +0000 Manifest next update: Thu 05 Feb 2026 04:18:52 +0000 Files and hashes: 1: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: S1tt06GPP2hhaY10zvPNHtV4OxpwYgvVyctnNmWJq6Y=) 2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZSgY5OMesKAVjFXk2K7xGan10euYjEFEbhi4eeTqUI4=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: GQbGwj8/3pFXSYNr52t6SKb3/O8bij4qIjKoYgJR2e8=) 4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: ZDbKc+ruTVuJcD/7oHmgIVR/dNEAa6RIgBC5ZgynInI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:88:07:1c:ad:3f:05:4a:b5:76:ee:df:b0:e0:d2:bd:17:39:41:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Feb 1 20:26:52 2026 GMT Not After : Feb 5 04:18:52 2026 GMT Subject: CN=813AA478E7452EAB1887C0814B6FC13D40839348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:c4:bf:95:fe:08:07:96:d9:f0:7d:d6:9d: 94:e8:1a:b1:f9:0e:8a:09:3a:6b:69:4c:37:6b:44: 23:12:43:0b:fa:1f:16:0c:06:b3:a3:9c:76:0f:26: c3:a2:5b:47:48:08:40:bd:f1:61:57:90:89:cc:47: 65:55:96:85:38:f4:b3:d5:f7:bc:97:f8:37:79:84: ae:10:e0:c8:39:1b:0f:c7:c6:8b:cf:23:94:cd:6b: df:d6:63:7e:d0:b3:2a:4a:28:de:93:3e:49:6d:0c: ea:a4:97:b9:1b:9a:37:8c:45:0a:04:c4:1b:08:c1: d4:66:95:f3:76:56:c0:5b:cb:0e:c9:e4:09:4d:c0: 2f:1b:5d:a7:3d:21:83:e3:23:23:47:df:ae:42:ad: 78:78:87:10:49:ea:6d:98:dc:7c:9c:d9:6d:1b:79: 5c:0c:d1:7b:8a:38:35:de:f2:90:f3:6d:d2:87:fe: 1c:73:96:e9:d8:31:bf:96:33:a9:6b:1b:b0:2e:19: d1:c5:31:2f:86:cf:49:11:bb:ca:b4:5b:1d:7a:ea: 55:99:3c:93:f2:bb:0b:46:1e:a8:1e:f7:6b:34:99: 97:01:13:bc:a6:02:04:f0:ce:93:ff:bd:dc:75:65: c4:9a:c0:36:7b:44:ad:93:06:88:18:a4:4a:36:52: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3A:A4:78:E7:45:2E:AB:18:87:C0:81:4B:6F:C1:3D:40:83:93:48 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d1:ce:b5:bb:1a:81:73:4b:f6:0b:26:1d:13:0f:fa:88:a8: ed:5c:00:ef:8f:eb:62:fb:fa:ee:d3:0e:3d:94:b8:15:9b:37: 5f:7b:9e:6e:13:b1:fd:6a:16:f1:4e:8f:35:78:b3:7f:f4:74: d0:af:52:15:ba:78:90:59:e2:ca:33:63:1a:35:ed:95:88:ed: 9d:bf:7c:a4:94:45:fe:20:25:6a:e2:6e:38:a0:e0:68:41:d6: 3c:87:c1:b8:e3:56:1f:30:ea:d2:34:7a:24:8b:f4:53:f6:04: 79:03:c8:16:47:3c:c4:77:30:32:ad:5b:5b:8e:1b:cf:d4:a4: a3:b1:93:b5:4f:72:51:d0:4b:a3:0d:08:aa:c4:9d:82:01:92: f6:6c:00:e0:74:da:42:a8:d9:1f:de:b9:eb:a3:7d:dd:34:ff: bb:18:9a:d0:e9:08:38:ad:e4:40:93:00:d2:8e:7e:8b:ea:41: 49:29:6b:4c:8b:63:e7:8f:92:58:83:9d:87:09:a1:48:6e:d0: 33:71:eb:d2:e7:61:ca:aa:fb:fe:6b:14:61:3a:d9:02:7f:28: 00:84:e7:66:c6:b3:c7:50:7e:a1:48:b2:4b:51:39:c4:ed:60: 1a:85:ac:e1:a2:6d:ef:2c:d8:9f:a0:06:08:70:3f:9c:72:f8: ea:f0:64:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcogHHK0/BUq1du7fsODSvRc5QXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNjAyMDEyMDI2NTJaFw0yNjAyMDUwNDE4NTJaMDMxMTAvBgNV BAMTKDgxM0FBNDc4RTc0NTJFQUIxODg3QzA4MTRCNkZDMTNENDA4MzkzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPe8S/lf4IB5bZ8H3WnZToGrH5 DooJOmtpTDdrRCMSQwv6HxYMBrOjnHYPJsOiW0dICEC98WFXkInMR2VVloU49LPV 97yX+Dd5hK4Q4Mg5Gw/HxovPI5TNa9/WY37QsypKKN6TPkltDOqkl7kbmjeMRQoE xBsIwdRmlfN2VsBbyw7J5AlNwC8bXac9IYPjIyNH365CrXh4hxBJ6m2Y3Hyc2W0b eVwM0XuKODXe8pDzbdKH/hxzlunYMb+WM6lrG7AuGdHFMS+Gz0kRu8q0Wx166lWZ PJPyuwtGHqge92s0mZcBE7ymAgTwzpP/vdx1ZcSawDZ7RK2TBogYpEo2UngtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTqkeOdFLqsYh8CBS2/BPUCDk0gwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7RzrW7GoFzS/YLJh0TD/qIqO1cAO+P62L7 +u7TDj2UuBWbN197nm4Tsf1qFvFOjzV4s3/0dNCvUhW6eJBZ4sozYxo17ZWI7Z2/ fKSURf4gJWribjig4GhB1jyHwbjjVh8w6tI0eiSL9FP2BHkDyBZHPMR3MDKtW1uO G8/UpKOxk7VPclHQS6MNCKrEnYIBkvZsAOB02kKo2R/eueujfd00/7sYmtDpCDit 5ECTANKOfovqQUkpa0yLY+ePkliDnYcJoUhu0DNx69LnYcqq+/5rFGE62QJ/KACE 52bGs8dQfqFIsktROcTtYBqFrOGibe8s2J+gBghwP5xy+OrwZN4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:17 2026 by rpki-client