This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: yIc+2PZyoEdNwTFieGVr4To5gpkuF9xJ8cfX/TJeiVk= Subject key identifier: 29:A6:96:A4:77:F9:38:05:8B:5C:D1:1B:2A:E6:5A:69:D8:E8:10:92 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 343B47353FC3294923E9F6234A6D247FA99FF367 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 054A Signing time: Sun 01 Feb 2026 03:42:00 +0000 Manifest this update: Sun 01 Feb 2026 03:37:00 +0000 Manifest next update: Wed 04 Feb 2026 15:04:00 +0000 Files and hashes: 1: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 2: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: svVE1f3AUBX5WnpmCNlZ9AaHG2JM1Dp8tHyoH8KQWzs=) 3: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3b:47:35:3f:c3:29:49:23:e9:f6:23:4a:6d:24:7f:a9:9f:f3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Feb 1 03:37:00 2026 GMT Not After : Feb 4 15:04:00 2026 GMT Subject: CN=29A696A477F938058B5CD11B2AE65A69D8E81092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:65:7a:b3:06:73:89:8e:ca:25:97:a9:33: 05:91:d7:70:04:f0:1a:4b:1c:d1:bc:a8:04:40:ab: fb:94:71:94:92:6f:2a:0b:a3:34:ab:29:84:cb:30: e8:45:87:c3:0e:1f:ec:e0:6e:9c:bf:19:e9:fd:7b: db:31:e3:e9:c7:15:60:ca:fa:35:ae:be:6f:84:8a: 7d:ce:b3:06:4e:3c:ca:60:44:e9:f8:ce:4a:7f:e6: a8:d7:41:09:ad:5b:99:93:d8:0e:43:b0:47:11:3f: 0f:24:1f:54:94:87:2b:42:46:07:fa:4e:d7:8c:4a: e0:7b:a3:84:1b:68:0b:d0:cd:22:02:67:3f:22:0f: 02:ca:3f:95:b2:67:d0:52:c7:99:a1:b1:9f:1b:14: ce:13:be:27:67:b9:cf:ed:2c:8d:43:e5:f1:ab:f4: 99:4c:d7:33:ce:2d:2a:3e:c1:01:3f:69:ad:91:cf: b5:b5:40:61:c1:fd:fa:9e:16:5b:35:eb:34:8e:e5: ec:40:c8:27:27:db:ab:0e:8d:d0:19:b2:a0:07:5d: 7a:ff:15:2d:bb:cc:56:25:46:64:e3:c5:84:70:d3: 3b:a5:3a:f0:e4:f1:27:e3:83:fd:67:92:2d:de:98: be:f8:08:ee:d6:ca:df:c8:50:31:09:8b:e6:49:8c: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A6:96:A4:77:F9:38:05:8B:5C:D1:1B:2A:E6:5A:69:D8:E8:10:92 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:7e:26:8f:2e:a2:11:41:8e:05:ae:9f:18:3b:d2:3d:7b:74: 6a:a4:f3:5f:49:08:f2:c8:15:46:e5:6d:42:c9:40:e9:44:72: ed:08:96:ec:e1:22:7f:56:86:6d:9d:80:f5:7a:42:f9:3f:30: 5d:f2:b9:28:34:7f:64:53:8d:c5:41:98:ff:44:85:f4:3c:a6: 76:0a:03:09:db:5e:d5:66:88:68:19:94:86:9f:65:ec:bd:5c: ab:21:24:1f:a3:1f:34:a2:00:59:f1:db:2b:51:ef:a1:a6:1b: e9:08:16:c9:c8:48:28:ab:6f:5a:75:2d:4e:74:df:ca:9c:1b: 87:00:4a:f3:41:73:71:08:ac:51:6b:02:2d:03:06:cf:c6:2b: ec:ed:33:6e:e0:2b:d5:07:19:14:02:41:d5:48:74:7b:ca:95: d1:97:3b:15:9c:4c:7f:58:52:00:28:ad:0b:a6:b3:11:28:85: 9e:65:5a:3e:5f:9d:74:3c:4b:72:d2:d6:61:26:4f:d5:0a:53: d4:45:de:30:c4:02:73:30:93:fa:c3:ca:de:09:4a:23:53:6a: b7:2f:f1:1f:cf:3f:17:46:1b:46:a9:6a:c8:00:a9:d5:be:ae: 40:f1:32:ed:a5:d1:9d:8a:39:9d:99:be:b3:0d:78:b6:e3:9f: 98:85:84:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDtHNT/DKUkj6fYjSm0kf6mf82cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNjAyMDEwMzM3MDBaFw0yNjAyMDQxNTA0MDBaMDMxMTAvBgNV BAMTKDI5QTY5NkE0NzdGOTM4MDU4QjVDRDExQjJBRTY1QTY5RDhFODEwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdP2V6swZziY7KJZepMwWR13AE 8BpLHNG8qARAq/uUcZSSbyoLozSrKYTLMOhFh8MOH+zgbpy/Gen9e9sx4+nHFWDK +jWuvm+Ein3OswZOPMpgROn4zkp/5qjXQQmtW5mT2A5DsEcRPw8kH1SUhytCRgf6 TteMSuB7o4QbaAvQzSICZz8iDwLKP5WyZ9BSx5mhsZ8bFM4Tvidnuc/tLI1D5fGr 9JlM1zPOLSo+wQE/aa2Rz7W1QGHB/fqeFls16zSO5exAyCcn26sOjdAZsqAHXXr/ FS27zFYlRmTjxYRw0zulOvDk8Sfjg/1nki3emL74CO7Wyt/IUDEJi+ZJjFk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaaWpHf5OAWLXNEbKuZaadjoEJIwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ+Jo8uohFBjgWunxg70j17dGqk819JCPLI FUblbULJQOlEcu0IluzhIn9Whm2dgPV6Qvk/MF3yuSg0f2RTjcVBmP9EhfQ8pnYK AwnbXtVmiGgZlIafZey9XKshJB+jHzSiAFnx2ytR76GmG+kIFsnISCirb1p1LU50 38qcG4cASvNBc3EIrFFrAi0DBs/GK+ztM27gK9UHGRQCQdVIdHvKldGXOxWcTH9Y UgAorQumsxEohZ5lWj5fnXQ8S3LS1mEmT9UKU9RF3jDEAnMwk/rDyt4JSiNTarcv 8R/PPxdGG0apasgAqdW+rkDxMu2l0Z2KOZ2ZvrMNeLbjn5iFhOU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:05 2026 by rpki-client