This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: /2UM0rKdqjKFtHENfmiaO4HCufOWBYZ+oL7Eh71dolo= Subject key identifier: C3:83:01:A7:75:71:40:27:87:E4:6A:C3:C9:00:34:61:28:B9:FF:2C Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 7C40A475B796C55D9386A0D0A8652C867833089B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0161 Signing time: Sun 25 Jan 2026 08:01:40 +0000 Manifest this update: Sun 25 Jan 2026 07:56:40 +0000 Manifest next update: Wed 28 Jan 2026 14:51:40 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: rfHNKVzj9LTrENRvPJi1LJxvCoI9/9kix2G/axXEpKw=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:40:a4:75:b7:96:c5:5d:93:86:a0:d0:a8:65:2c:86:78:33:08:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Jan 25 07:56:40 2026 GMT Not After : Jan 28 14:51:40 2026 GMT Subject: CN=C38301A77571402787E46AC3C900346128B9FF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cb:d4:19:e4:a1:1b:17:12:61:96:bc:b1:82: 39:36:69:d0:3f:cc:ff:3c:92:68:4f:b4:7d:fb:54: 69:fc:25:5d:f7:6e:63:dc:f5:f3:7d:64:eb:c0:9f: ff:54:26:f8:3f:76:36:e2:b5:5c:5c:89:4c:8f:98: 1b:e8:54:1f:a5:b7:5d:40:d4:55:17:3f:6e:ce:7a: d3:ba:ba:d5:ab:86:2c:9e:7f:9f:2e:89:52:fd:c7: 57:bc:6c:aa:5a:bb:ad:0c:53:78:dc:65:bc:1e:01: af:f2:ef:4f:af:09:2d:fc:17:93:e9:cc:0b:dc:f0: 84:a2:09:d6:2f:99:96:b7:11:f3:b0:76:47:a6:cb: 3c:0c:f3:2a:7d:01:1b:e4:5f:bf:d2:6b:89:d2:de: 31:d1:45:78:67:8e:cd:da:c2:7f:3c:1e:68:ab:a6: 4e:b1:46:48:cc:81:a3:af:1b:a8:52:65:50:f1:80: fe:be:d3:e3:c4:f3:1a:a2:07:18:07:c9:73:1f:86: 27:a6:b3:65:4d:b7:71:ff:9b:47:38:6f:f7:56:d5: 95:3b:0c:60:61:5f:03:4f:72:90:d9:d2:75:84:b6: 56:08:9f:ac:c0:09:ce:56:d2:ba:88:49:30:53:ed: a3:cb:15:62:34:f8:06:07:85:b0:7a:c0:b8:b0:81: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:01:A7:75:71:40:27:87:E4:6A:C3:C9:00:34:61:28:B9:FF:2C X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:93:3b:0f:a2:db:5a:5b:91:39:b0:5c:52:2d:d1:0b:2a:b7: c3:43:a8:9c:9b:35:09:98:0c:9f:7e:c1:39:42:9b:66:45:5f: 70:d1:0c:7f:f5:d9:ca:40:05:e2:f6:f3:92:cf:2a:f4:6e:89: 6d:45:b4:7f:74:93:88:0c:bf:52:56:04:99:02:3f:2d:f5:27: 18:38:49:f5:e6:57:30:1b:be:ec:5a:46:0e:95:b7:29:d8:93: 06:01:ad:e6:15:e1:e3:02:12:b8:7b:73:fd:7d:14:83:07:a6: 1f:91:b3:7c:ec:22:34:98:c2:98:6b:4d:bf:2c:d9:37:3f:77: e6:85:26:f5:39:47:61:c7:a0:99:11:e8:4a:8d:f5:9f:df:1f: 60:29:62:78:68:68:e7:9e:d4:32:11:89:95:f7:de:96:5b:58: 4b:5c:cb:5e:43:1c:d7:36:94:0e:4a:1a:99:e7:21:55:06:2c: 64:00:06:64:7a:6e:60:a8:8c:46:a1:33:bb:d0:f5:09:fa:64: 8e:93:28:06:13:e4:ab:2b:41:88:e0:6c:d2:e8:2f:d5:e8:5e: 1f:29:51:14:96:11:5f:d6:b9:3e:66:36:05:84:af:7f:f5:c9: 31:21:5c:2a:7e:83:86:32:5b:5b:05:65:eb:c9:08:8f:53:00: c1:ca:57:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfECkdbeWxV2ThqDQqGUshngzCJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNjAxMjUwNzU2NDBaFw0yNjAxMjgxNDUxNDBaMDMxMTAvBgNV BAMTKEMzODMwMUE3NzU3MTQwMjc4N0U0NkFDM0M5MDAzNDYxMjhCOUZGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyy9QZ5KEbFxJhlryxgjk2adA/ zP88kmhPtH37VGn8JV33bmPc9fN9ZOvAn/9UJvg/djbitVxciUyPmBvoVB+lt11A 1FUXP27OetO6utWrhiyef58uiVL9x1e8bKpau60MU3jcZbweAa/y70+vCS38F5Pp zAvc8ISiCdYvmZa3EfOwdkemyzwM8yp9ARvkX7/Sa4nS3jHRRXhnjs3awn88Hmir pk6xRkjMgaOvG6hSZVDxgP6+0+PE8xqiBxgHyXMfhiems2VNt3H/m0c4b/dW1ZU7 DGBhXwNPcpDZ0nWEtlYIn6zACc5W0rqISTBT7aPLFWI0+AYHhbB6wLiwgd73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4MBp3VxQCeH5GrDyQA0YSi5/ywwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGTOw+i21pbkTmwXFIt0Qsqt8NDqJybNQmY DJ9+wTlCm2ZFX3DRDH/12cpABeL285LPKvRuiW1FtH90k4gMv1JWBJkCPy31Jxg4 SfXmVzAbvuxaRg6VtynYkwYBreYV4eMCErh7c/19FIMHph+Rs3zsIjSYwphrTb8s 2Tc/d+aFJvU5R2HHoJkR6EqN9Z/fH2ApYnhoaOee1DIRiZX33pZbWEtcy15DHNc2 lA5KGpnnIVUGLGQABmR6bmCojEahM7vQ9Qn6ZI6TKAYT5KsrQYjgbNLoL9XoXh8p URSWEV/WuT5mNgWEr3/1yTEhXCp+g4YyW1sFZevJCI9TAMHKV34= -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:10 2026 by rpki-client