This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: TzXHwKg+878sH8X2NWfxPeMB9+DFQ9W6oprDUelc1OA= Subject key identifier: E3:FF:FF:D7:72:56:3A:28:91:00:3D:EE:FE:4E:2E:6F:6C:EB:32:F6 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 46400837FB80DBE2C3CA746486F759EE00CB9A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02CC Signing time: Sat 24 Jan 2026 04:12:31 +0000 Manifest this update: Sat 24 Jan 2026 04:07:31 +0000 Manifest next update: Tue 27 Jan 2026 13:12:31 +0000 Files and hashes: 1: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: 0PbS2Oja47SYdiK1UtvOiIQTP+W5MEvfx8GermwtV8U=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 3: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:40:08:37:fb:80:db:e2:c3:ca:74:64:86:f7:59:ee:00:cb:9a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Jan 24 04:07:31 2026 GMT Not After : Jan 27 13:12:31 2026 GMT Subject: CN=E3FFFFD772563A2891003DEEFE4E2E6F6CEB32F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:92:40:bf:f0:9f:b7:42:9b:83:fa:88:49: a4:d8:da:46:e2:b5:3a:d6:33:82:c6:b1:6e:08:86: 5e:c6:29:90:ea:57:73:0e:80:38:4a:eb:7a:ef:37: 28:67:b9:37:8e:4c:64:40:2c:ab:a4:f2:d8:0b:f7: da:7c:44:c9:4c:22:25:4e:36:8e:b7:c7:39:81:f1: 82:d4:42:54:89:e5:22:88:98:a3:c7:ec:60:48:9b: a9:45:5f:ce:9b:60:cc:d9:85:1b:9e:88:9d:ec:1d: fd:25:ec:b2:bb:a7:63:3f:a0:0d:d4:89:e5:a3:3d: a5:4c:64:41:a3:d9:67:7d:0c:e1:5b:27:0c:57:a1: 3c:79:29:8d:58:b1:4a:58:f9:78:a4:72:f6:8d:9c: 69:b5:b0:a3:99:81:14:a3:a6:72:ee:89:77:fd:e3: cf:60:2b:cb:eb:fa:a7:91:d0:1e:36:de:bd:08:7c: 40:c6:7e:69:e7:f7:47:36:76:d4:98:ea:bd:17:c6: 4f:18:c6:10:25:9c:6d:de:7b:39:e0:66:5a:5c:3d: 62:e6:ea:43:fd:58:30:56:f3:08:b0:3e:25:3b:92: 27:a0:09:59:61:7d:35:da:cf:f7:85:42:27:91:b6: c7:f5:70:b8:78:35:e2:a2:17:01:91:d4:53:14:ce: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:FF:D7:72:56:3A:28:91:00:3D:EE:FE:4E:2E:6F:6C:EB:32:F6 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:a8:7f:f8:05:37:85:13:cb:a7:4e:12:4a:76:60:8e:c7: 92:5a:1b:1e:39:c6:61:e7:6d:7c:3c:9e:2e:59:14:37:a1:d4: dd:66:d1:36:15:c5:62:27:11:2a:79:b1:f8:81:50:86:78:7d: 27:d6:0a:e7:f3:e0:ec:27:14:2c:80:53:c7:03:b2:78:d7:c3: 56:59:ab:be:66:ab:7b:7f:3f:02:54:80:33:c9:78:14:07:e0: ca:98:7f:1b:2e:8a:1a:f2:36:5f:c5:9c:ae:20:98:33:04:d5: 69:fd:ef:dd:24:5e:62:a7:35:4f:c1:42:7b:a0:1a:5b:25:3a: cc:0e:4c:85:63:9a:d6:bd:fb:b1:d7:b5:6e:d1:11:41:3a:63: 17:ef:13:29:58:f1:06:37:9b:97:43:a3:03:4a:96:43:10:c8: 10:6e:96:a9:94:1c:c2:80:a0:b9:62:2f:a9:38:4b:87:c9:25: 3c:ba:16:07:73:b5:12:b6:75:df:e9:ed:ff:bb:20:5c:cb:40: 0f:fb:4e:1b:57:1c:97:0a:55:39:53:01:97:f0:7f:6f:68:e8: c0:d1:6a:c9:97:46:0e:68:66:0a:cf:68:6d:59:ec:19:80:9e: 60:ca:8e:25:84:61:d9:46:34:6a:fe:aa:0f:0a:a3:f2:b4:6d: 1d:f8:11:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkAIN/uA2+LDynRkhvdZ7gDLmoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNjAxMjQwNDA3MzFaFw0yNjAxMjcxMzEyMzFaMDMxMTAvBgNV BAMTKEUzRkZGRkQ3NzI1NjNBMjg5MTAwM0RFRUZFNEUyRTZGNkNFQjMyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPJJAv/Cft0Kbg/qISaTY2kbi tTrWM4LGsW4Ihl7GKZDqV3MOgDhK63rvNyhnuTeOTGRALKuk8tgL99p8RMlMIiVO No63xzmB8YLUQlSJ5SKImKPH7GBIm6lFX86bYMzZhRueiJ3sHf0l7LK7p2M/oA3U ieWjPaVMZEGj2Wd9DOFbJwxXoTx5KY1YsUpY+XikcvaNnGm1sKOZgRSjpnLuiXf9 489gK8vr+qeR0B423r0IfEDGfmnn90c2dtSY6r0Xxk8YxhAlnG3eezngZlpcPWLm 6kP9WDBW8wiwPiU7kiegCVlhfTXaz/eFQieRtsf1cLh4NeKiFwGR1FMUztTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4///13JWOiiRAD3u/k4ub2zrMvYwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtoqH/4BTeFE8unThJKdmCOx5JaGx45xmHn bXw8ni5ZFDeh1N1m0TYVxWInESp5sfiBUIZ4fSfWCufz4OwnFCyAU8cDsnjXw1ZZ q75mq3t/PwJUgDPJeBQH4MqYfxsuihryNl/FnK4gmDME1Wn9790kXmKnNU/BQnug GlslOswOTIVjmta9+7HXtW7REUE6YxfvEylY8QY3m5dDowNKlkMQyBBulqmUHMKA oLliL6k4S4fJJTy6FgdztRK2dd/p7f+7IFzLQA/7ThtXHJcKVTlTAZfwf29o6MDR asmXRg5oZgrPaG1Z7BmAnmDKjiWEYdlGNGr+qg8Ko/K0bR34EeA= -----END CERTIFICATE-----Generated at Sun Jan 25 23:22:16 2026 by rpki-client