This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: XOzs1tqGZupSlWAU3MZ1+ymieN4/K7cfbmu0eGh/5bw= Subject key identifier: 5B:2D:B5:68:61:49:8D:7F:0A:0A:3D:DB:D0:C8:B1:0C:F3:95:74:77 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 1C5ED8E70116BF24B1F945F3DC84733378E6FCF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 029D Signing time: Sat 24 Jan 2026 16:41:01 +0000 Manifest this update: Sat 24 Jan 2026 16:36:01 +0000 Manifest next update: Tue 27 Jan 2026 18:48:01 +0000 Files and hashes: 1: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: ZKsGiri+c+AFZgrdaFonF8B0bTPwkyXuz+W+4Z1rBrk=) 2: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: P54230MRe8jXsR9/tDE0mXAjQzfMJ7+VOpxd/HYoK8g=) 3: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5e:d8:e7:01:16:bf:24:b1:f9:45:f3:dc:84:73:33:78:e6:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Jan 24 16:36:01 2026 GMT Not After : Jan 27 18:48:01 2026 GMT Subject: CN=5B2DB56861498D7F0A0A3DDBD0C8B10CF3957477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:8a:72:07:0f:5f:5c:05:e5:aa:90:49:54: a0:1b:f1:73:fa:17:c6:3b:75:a0:ba:87:d8:cb:ed: fd:6b:d8:3a:50:c1:87:72:f6:6d:c7:79:5e:a4:3d: 6d:cb:50:24:6c:bf:1c:18:1d:d1:e7:16:1c:e0:88: ae:c5:00:53:9b:86:68:e4:81:3b:67:f3:30:45:26: 23:a5:c0:79:17:db:3a:a5:e7:19:54:63:04:9e:8d: b4:9a:f8:8c:a6:41:67:e1:36:6b:88:28:fc:47:55: 01:50:94:02:b1:b9:78:86:e8:81:9c:80:91:1f:3d: 02:2e:93:74:b0:3a:5c:1e:6a:83:29:f5:f4:59:e7: 41:f0:66:c4:9c:22:d4:0c:7b:22:a0:ee:e1:ae:b4: da:42:64:4d:2b:e5:26:6f:66:15:e7:17:b9:83:22: 26:cb:7f:1f:0d:56:87:dd:89:61:d3:85:38:fd:ff: d5:20:10:b3:db:f4:5e:4b:cc:99:50:90:11:67:d0: 46:e9:a5:8e:e3:80:ff:c8:52:95:82:95:ea:46:00: dd:4f:33:9b:f0:ec:ab:cc:f7:84:ab:08:7b:94:62: ed:02:8d:92:44:6b:e8:a9:14:e3:86:be:a6:2e:f5: 0a:7e:8d:61:e8:f3:3b:3f:ab:d8:ac:24:35:dc:25: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2D:B5:68:61:49:8D:7F:0A:0A:3D:DB:D0:C8:B1:0C:F3:95:74:77 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d5:89:4b:1f:c3:4c:0f:db:1a:9c:18:6e:a0:ac:29:ca:bb: ce:c0:aa:d5:fd:19:f9:21:3a:c6:25:b8:b8:7a:3c:cb:b5:c9: 1a:25:e3:dc:59:e6:58:57:31:27:ab:db:ed:2c:0e:aa:71:e4: d0:3f:51:33:50:5f:81:cc:fe:4e:59:00:3d:b6:8b:68:ec:8e: 81:28:21:b8:3f:7f:99:f4:a2:57:e1:01:e8:d0:43:d8:c1:40: ae:5a:18:51:e9:f8:45:ba:27:3b:1a:0d:35:bf:ce:f3:50:fa: 97:4c:ac:83:07:5b:23:fb:3b:c0:3b:97:42:60:ab:e8:f7:33: c0:4b:8a:4b:dd:82:d3:09:a3:1a:3c:ee:37:3b:28:7e:2e:28: 91:17:e8:ed:da:cd:d9:d1:05:74:3a:b9:3d:ef:2b:86:dd:da: ba:4a:59:ee:50:6d:1a:ed:e6:25:19:cd:ef:75:13:74:70:2e: e5:22:82:3d:70:bb:14:f6:83:7a:84:ce:94:e4:34:64:ce:6d: 6f:43:96:0f:07:7a:62:cf:cf:49:ac:44:bf:b1:51:18:38:e8: b3:5e:e9:d8:e8:15:32:07:dc:d6:2f:11:31:00:52:73:c0:ce: 90:ab:e7:ee:89:33:75:84:ae:7f:9e:4a:0a:bc:80:7e:07:45: 89:02:b0:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHF7Y5wEWvySx+UXz3IRzM3jm/PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNjAxMjQxNjM2MDFaFw0yNjAxMjcxODQ4MDFaMDMxMTAvBgNV BAMTKDVCMkRCNTY4NjE0OThEN0YwQTBBM0REQkQwQzhCMTBDRjM5NTc0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyd4pyBw9fXAXlqpBJVKAb8XP6 F8Y7daC6h9jL7f1r2DpQwYdy9m3HeV6kPW3LUCRsvxwYHdHnFhzgiK7FAFObhmjk gTtn8zBFJiOlwHkX2zql5xlUYwSejbSa+IymQWfhNmuIKPxHVQFQlAKxuXiG6IGc gJEfPQIuk3SwOlweaoMp9fRZ50HwZsScItQMeyKg7uGutNpCZE0r5SZvZhXnF7mD IibLfx8NVofdiWHThTj9/9UgELPb9F5LzJlQkBFn0EbppY7jgP/IUpWClepGAN1P M5vw7KvM94SrCHuUYu0CjZJEa+ipFOOGvqYu9Qp+jWHo8zs/q9isJDXcJd1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWy21aGFJjX8KCj3b0MixDPOVdHcwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILViUsfw0wP2xqcGG6grCnKu87AqtX9Gfkh OsYluLh6PMu1yRol49xZ5lhXMSer2+0sDqpx5NA/UTNQX4HM/k5ZAD22i2jsjoEo Ibg/f5n0olfhAejQQ9jBQK5aGFHp+EW6JzsaDTW/zvNQ+pdMrIMHWyP7O8A7l0Jg q+j3M8BLikvdgtMJoxo87jc7KH4uKJEX6O3azdnRBXQ6uT3vK4bd2rpKWe5QbRrt 5iUZze91E3RwLuUigj1wuxT2g3qEzpTkNGTObW9Dlg8HemLPz0msRL+xURg46LNe 6djoFTIH3NYvETEAUnPAzpCr5+6JM3WErn+eSgq8gH4HRYkCsEU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:42 2026 by rpki-client