This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: oB1ryI8ReVNyJunc9lRWUB574hE78lbQnihtcIPQAQ8= Subject key identifier: 47:CC:2B:8A:56:69:B7:D2:4D:FC:00:5B:42:3E:7E:EC:D5:9D:B6:11 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 062B6DDF7714BDCCBA460309C0F18C94ABC066AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 0517 Signing time: Sat 24 Jan 2026 13:12:08 +0000 Manifest this update: Sat 24 Jan 2026 13:07:08 +0000 Manifest next update: Tue 27 Jan 2026 19:54:08 +0000 Files and hashes: 1: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: pAsXLpsnvtFY9CiLQfO4MgBTQXdXjfq9fjmjjZL7V7Y=) 2: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: KRbdEJvKURW+VgG7P6m8/xbRP6/xVRqHAh+GE/ZxmJg=) 3: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: 3p6KpA6/uKsXu1iiVTHxP1H1aKBvRxURT7LJ3HzRuNw=) 4: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: 1MuWl4R2LfAc9czxG6/QjtCE9g5QKK5BETiXC4FMLHs=) 5: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: LrRa5/YbMQIirnwavEqQmjlSXIv4GPDAL8XSH/RPz2k=) 6: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: Cf4F1dHsLMAEwRXj/sLvggNAyN9aUktmarNyz8vl8uk=) 7: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: dU0EtgmGLlvsEk5uUNMllXCgsc6M7rwAD/ioUheMSHI=) 8: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: D6GCo3ceVvJhAX1b+afxEUHTBD9rmTcpfSp7SCURViA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:6d:df:77:14:bd:cc:ba:46:03:09:c0:f1:8c:94:ab:c0:66:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Jan 24 13:07:08 2026 GMT Not After : Jan 27 19:54:08 2026 GMT Subject: CN=47CC2B8A5669B7D24DFC005B423E7EECD59DB611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:a7:d2:44:66:f6:dd:00:e4:66:ff:2e:d2: e1:f5:05:6d:00:e9:69:27:24:00:c4:75:32:59:f2: 91:97:03:f4:90:f6:f2:4f:de:bc:6e:8b:4f:66:89: 30:da:46:38:17:85:0f:b8:f7:3e:11:7e:cb:a3:ef: 73:96:e7:90:1c:25:d5:d8:77:f8:c7:c5:96:fb:5d: 84:a4:0b:a4:af:5d:b4:f1:46:06:22:4a:12:ce:1e: 31:fa:36:76:c8:83:c0:2c:ec:2d:dc:61:4d:ac:c8: cd:f0:35:e2:25:aa:9c:58:9b:57:4e:9a:4a:e5:e5: 27:5e:ca:79:d3:3c:48:af:ea:25:45:cb:a2:50:59: 90:92:e9:34:80:94:ac:8b:fa:10:ed:26:9b:12:d1: 31:60:63:73:9c:e8:98:aa:a1:78:b4:f7:69:4f:68: 15:49:52:35:62:a2:dd:d5:7e:ed:00:23:8c:58:fe: eb:a8:6c:9d:0c:70:14:74:a9:70:0d:77:c2:86:4a: 9f:51:6a:88:8a:76:65:89:3e:41:03:94:76:85:33: 57:19:16:4b:c9:ef:12:fe:78:30:01:09:6d:16:20: c6:ae:24:db:88:50:3d:26:4a:2d:5d:4d:15:41:6f: 8d:2d:51:04:95:80:21:11:41:ca:40:be:56:8a:8d: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CC:2B:8A:56:69:B7:D2:4D:FC:00:5B:42:3E:7E:EC:D5:9D:B6:11 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:d1:fc:a1:f6:05:3e:bf:67:55:38:72:65:ae:da:6f:e0: 26:a4:c5:59:12:bb:3f:9f:87:6e:50:8b:8f:76:62:b2:ae:9d: 93:ef:0e:80:6e:58:16:84:fd:c2:1b:bb:4c:b9:9e:50:88:34: 18:d9:e8:bc:e7:17:ea:ad:c5:73:87:08:2d:06:28:7f:30:72: ac:3c:01:f0:10:7c:e5:7d:2e:64:77:d0:e2:cb:db:ed:5c:59: 4a:2f:87:3b:8b:26:7d:0e:48:5e:15:6b:db:7e:ec:96:3f:81: 83:e1:ae:50:0a:47:41:0d:51:4f:ad:85:1d:ca:98:67:fe:df: ea:c7:db:25:85:af:2c:e8:6d:87:e2:c6:b6:88:97:3e:d4:59: a2:e4:31:f6:c6:6a:59:40:3d:f8:9e:86:1a:ac:0f:cc:87:12: 2c:82:ba:b3:81:c9:ef:a5:cf:f8:57:4c:6c:38:cc:3c:fb:4e: fc:9e:c5:49:96:cf:b5:10:bd:67:28:15:1a:5e:f1:3f:bc:40: 09:ff:58:fd:be:39:3a:2f:44:37:79:b7:eb:8f:ad:c0:c4:3c: 82:53:41:0b:70:31:cb:78:c6:3e:59:bb:84:c2:06:90:2b:a3: c4:0f:27:88:32:58:2d:e4:80:2c:17:14:88:49:e9:57:f5:a7: a4:e2:d1:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBitt33cUvcy6RgMJwPGMlKvAZq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNjAxMjQxMzA3MDhaFw0yNjAxMjcxOTU0MDhaMDMxMTAvBgNV BAMTKDQ3Q0MyQjhBNTY2OUI3RDI0REZDMDA1QjQyM0U3RUVDRDU5REI2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSP6fSRGb23QDkZv8u0uH1BW0A 6WknJADEdTJZ8pGXA/SQ9vJP3rxui09miTDaRjgXhQ+49z4Rfsuj73OW55AcJdXY d/jHxZb7XYSkC6SvXbTxRgYiShLOHjH6NnbIg8As7C3cYU2syM3wNeIlqpxYm1dO mkrl5SdeynnTPEiv6iVFy6JQWZCS6TSAlKyL+hDtJpsS0TFgY3Oc6JiqoXi092lP aBVJUjViot3Vfu0AI4xY/uuobJ0McBR0qXANd8KGSp9RaoiKdmWJPkEDlHaFM1cZ FkvJ7xL+eDABCW0WIMauJNuIUD0mSi1dTRVBb40tUQSVgCERQcpAvlaKjVMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8wrilZpt9JN/ABbQj5+7NWdthEwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcO0fyh9gU+v2dVOHJlrtpv4CakxVkSuz+f h25Qi492YrKunZPvDoBuWBaE/cIbu0y5nlCINBjZ6LznF+qtxXOHCC0GKH8wcqw8 AfAQfOV9LmR30OLL2+1cWUovhzuLJn0OSF4Va9t+7JY/gYPhrlAKR0ENUU+thR3K mGf+3+rH2yWFryzobYfixraIlz7UWaLkMfbGallAPfiehhqsD8yHEiyCurOBye+l z/hXTGw4zDz7TvyexUmWz7UQvWcoFRpe8T+8QAn/WP2+OTovRDd5t+uPrcDEPIJT QQtwMct4xj5Zu4TCBpAro8QPJ4gyWC3kgCwXFIhJ6Vf1p6Ti0bY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:03 2026 by rpki-client