This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: K9gq6a893o3LLg3rUPILWiL7EnY5tTpjUInZvnK3z2A= Subject key identifier: 0F:F2:D0:F8:90:01:08:1B:78:1D:46:F4:C7:DE:2B:1A:30:4B:64:F9 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 668D928F9A0261752BA731882C5BD18B600AB051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 028B Signing time: Sat 24 Jan 2026 02:33:20 +0000 Manifest this update: Sat 24 Jan 2026 02:28:20 +0000 Manifest next update: Tue 27 Jan 2026 13:33:20 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: moWMbd0omWBlP5wIkWGzPNUEUOBT+Njn/6Yls0Q6FeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8d:92:8f:9a:02:61:75:2b:a7:31:88:2c:5b:d1:8b:60:0a:b0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Jan 24 02:28:20 2026 GMT Not After : Jan 27 13:33:20 2026 GMT Subject: CN=0FF2D0F89001081B781D46F4C7DE2B1A304B64F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:01:6f:99:8d:d8:fa:81:71:0a:ad:1b:5e: c0:ca:73:d1:08:87:70:14:71:e0:61:a0:19:6b:7a: 58:a4:de:14:fc:9a:01:7f:f3:f9:bc:e5:27:7a:7a: 3e:ad:5e:bb:98:ce:e4:f3:c9:71:dd:b9:b5:9a:34: b1:38:8f:0d:46:83:cd:9d:ac:62:50:59:68:e8:a7: cd:74:69:c9:fe:dc:c8:bc:c4:c7:89:fc:7c:36:54: 5b:75:ab:18:14:b8:79:eb:e2:0b:04:0e:67:75:8c: 83:eb:36:26:8d:36:69:69:63:52:cc:8d:7c:e0:3b: 50:6f:3e:fb:d8:ad:31:b7:16:04:d6:51:a5:07:6f: 48:ce:bc:86:5a:7f:6b:b0:50:8b:ce:f5:c4:a3:b8: 24:66:01:45:66:46:f8:ac:33:2d:45:bd:01:4f:8c: 7f:32:56:84:4d:94:1b:c3:5d:fc:23:88:d1:ea:30: a4:17:52:c4:9e:ba:05:12:30:7a:40:f9:5c:31:67: ed:c1:ef:78:7d:80:43:87:ee:2f:c1:29:46:b4:63: c5:fa:bf:8b:9c:2b:4c:49:8f:8b:87:c8:90:f4:fd: 8f:59:1e:b4:03:45:81:c0:85:43:79:8e:84:b2:69: e6:f9:d5:23:21:b0:52:66:8c:ec:29:06:e9:dc:d1: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F2:D0:F8:90:01:08:1B:78:1D:46:F4:C7:DE:2B:1A:30:4B:64:F9 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:55:a3:ab:78:37:1e:a5:e3:20:a0:a3:a8:6e:e7:cf:33:dc: d2:1e:77:df:e9:3f:8e:39:00:ef:6f:b2:d3:53:f9:71:ac:11: 3d:f8:60:91:6e:39:34:60:37:91:e0:13:a2:6a:fa:e4:fd:9e: 50:ef:e4:93:00:2e:92:f6:e7:d1:d8:1b:1b:b8:1c:30:f4:45: 11:57:01:a8:44:da:2f:6d:06:00:60:fa:51:74:a6:e4:be:86: d7:c1:92:34:29:dd:06:dc:55:a3:ba:95:32:24:8e:62:ce:14: 87:98:c5:95:c0:8b:33:b3:d7:0a:8d:9c:bc:fe:54:f6:4e:05: 62:0d:c3:1b:0f:18:1d:ef:08:68:af:ac:0c:09:c3:1c:df:87: 2a:80:1b:93:5e:12:43:05:77:9b:fa:a6:a6:a9:70:39:98:6b: 71:7b:6f:16:98:4b:d3:8c:79:be:ed:36:4c:b6:5c:a4:8e:5d: 32:53:72:33:ef:62:b6:58:e9:de:26:31:9e:56:84:16:35:fd: ec:7e:d5:ec:c5:aa:c5:33:ea:8f:27:dc:b3:a8:a6:49:cf:59: 3a:42:50:8a:7d:82:c4:53:a2:4a:6b:9d:8e:e0:db:64:4f:8a: 2e:b5:a0:d0:60:49:17:86:0c:e8:32:84:76:5a:1b:7f:21:37: 0a:ca:a5:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZo2Sj5oCYXUrpzGILFvRi2AKsFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNjAxMjQwMjI4MjBaFw0yNjAxMjcxMzMzMjBaMDMxMTAvBgNV BAMTKDBGRjJEMEY4OTAwMTA4MUI3ODFENDZGNEM3REUyQjFBMzA0QjY0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksQFvmY3Y+oFxCq0bXsDKc9EI h3AUceBhoBlrelik3hT8mgF/8/m85Sd6ej6tXruYzuTzyXHdubWaNLE4jw1Gg82d rGJQWWjop810acn+3Mi8xMeJ/Hw2VFt1qxgUuHnr4gsEDmd1jIPrNiaNNmlpY1LM jXzgO1BvPvvYrTG3FgTWUaUHb0jOvIZaf2uwUIvO9cSjuCRmAUVmRvisMy1FvQFP jH8yVoRNlBvDXfwjiNHqMKQXUsSeugUSMHpA+VwxZ+3B73h9gEOH7i/BKUa0Y8X6 v4ucK0xJj4uHyJD0/Y9ZHrQDRYHAhUN5joSyaeb51SMhsFJmjOwpBunc0Qn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/LQ+JABCBt4HUb0x94rGjBLZPkwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1Vo6t4Nx6l4yCgo6hu588z3NIed9/pP445 AO9vstNT+XGsET34YJFuOTRgN5HgE6Jq+uT9nlDv5JMALpL259HYGxu4HDD0RRFX AahE2i9tBgBg+lF0puS+htfBkjQp3QbcVaO6lTIkjmLOFIeYxZXAizOz1wqNnLz+ VPZOBWINwxsPGB3vCGivrAwJwxzfhyqAG5NeEkMFd5v6pqapcDmYa3F7bxaYS9OM eb7tNky2XKSOXTJTcjPvYrZY6d4mMZ5WhBY1/ex+1ezFqsUz6o8n3LOopknPWTpC UIp9gsRTokprnY7g22RPii61oNBgSReGDOgyhHZaG38hNwrKpao= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:05 2026 by rpki-client