This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: 4sPh7U4IoZG+xjeCiWe6Uzl4C+8BJVP8YYo/v7GWKbk= Subject key identifier: 8C:E8:C8:ED:94:41:C1:D3:33:2A:F0:30:62:D7:39:0D:4A:B4:8A:DC Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 7F30A3ECE5793F169A3749E93825F352D60114F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 041E Signing time: Sat 31 Jan 2026 13:22:12 +0000 Manifest this update: Sat 31 Jan 2026 13:17:12 +0000 Manifest next update: Tue 03 Feb 2026 21:40:12 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: YYshjWJChQ7GjjLm5x5OoEwBOuUfUWvc0tdshb8NzOU=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: sJEjTEha1+ZO12gb6EZDXQCVUTii9nwC9tTVsJ0UdzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 21:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:30:a3:ec:e5:79:3f:16:9a:37:49:e9:38:25:f3:52:d6:01:14:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Jan 31 13:17:12 2026 GMT Not After : Feb 3 21:40:12 2026 GMT Subject: CN=8CE8C8ED9441C1D3332AF03062D7390D4AB48ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:12:4f:3d:e6:77:1d:09:e2:ee:d1:1c:33: df:54:39:9b:56:d8:8f:90:05:55:55:5a:54:aa:4d: 1b:c3:47:4d:56:b1:b8:0a:f1:04:4c:3c:e5:5c:4e: 67:23:45:1f:b3:f5:30:97:c8:1e:2f:54:54:77:e0: 70:72:30:43:f0:73:bb:63:6d:89:99:22:be:41:78: 2f:0f:7d:c0:58:77:62:d4:0b:00:ce:49:14:9e:27: 64:11:4d:2a:b9:04:0a:d5:c0:45:35:97:e5:f9:4c: be:df:9c:71:c3:e8:f9:43:8f:1d:fa:cd:2e:50:3a: 5e:61:7c:54:78:c1:d7:65:79:5b:a0:bd:e4:19:87: de:8d:83:20:0d:12:2b:e1:41:60:eb:59:93:2c:71: e0:a7:e0:0c:9e:f7:3f:1b:cc:ba:2a:53:11:9b:c5: 2a:80:03:c5:15:39:3c:76:a0:83:eb:08:8f:5d:ac: f6:4e:f3:73:3c:a7:25:55:02:14:08:28:74:03:30: f9:dc:65:d7:69:d6:a4:3c:d9:eb:6e:6c:10:a7:80: 99:50:50:1b:3c:6a:46:c2:78:4a:cb:52:cb:a3:2a: 20:bc:28:e5:e9:fa:20:c1:df:f8:41:d4:4d:34:64: bb:da:78:83:dc:fe:1b:d4:6c:c1:21:49:35:0f:48: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:C8:ED:94:41:C1:D3:33:2A:F0:30:62:D7:39:0D:4A:B4:8A:DC X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c1:11:55:55:7d:57:0e:d1:0b:50:3e:15:de:66:c3:fe:d6: 02:80:49:be:40:f4:1d:e0:38:0e:e7:42:62:12:9c:f4:92:d8: ed:46:71:5a:62:de:ae:5a:d5:d1:ba:8d:56:1d:ac:d1:0f:84: 66:1e:55:51:71:65:d6:f4:9e:1b:cf:29:13:cc:cb:ca:70:fe: 77:94:29:df:23:d8:00:f3:1d:6f:7e:15:38:3d:ce:b0:1f:25: d0:dc:20:87:93:55:42:89:fe:41:8d:d9:78:a2:f9:d5:dc:52: 67:93:4d:b9:89:12:b6:54:6c:c4:dc:05:69:0d:b9:0d:da:77: 43:a9:35:a0:0e:31:b9:7c:69:20:09:24:23:19:d3:b2:11:b8: 91:1c:4f:91:7a:19:e9:b1:51:43:09:7c:fd:6b:e6:49:97:95: 09:70:85:97:17:9d:c1:ae:39:d2:75:cf:af:a7:10:c9:3a:05: 09:69:d1:3d:83:05:1d:63:54:70:79:21:03:f1:87:5f:3b:bd: 33:38:e1:de:2b:02:b8:c7:9a:10:ee:5b:7c:cc:a8:f7:d8:f8: d2:b5:f9:33:a3:b7:30:33:d1:f6:8d:04:09:c9:86:5d:99:f0: 77:26:02:90:e1:7e:c5:69:26:07:29:a5:52:f6:97:80:68:d2: c2:ba:b2:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzCj7OV5PxaaN0npOCXzUtYBFPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNjAxMzExMzE3MTJaFw0yNjAyMDMyMTQwMTJaMDMxMTAvBgNV BAMTKDhDRThDOEVEOTQ0MUMxRDMzMzJBRjAzMDYyRDczOTBENEFCNDhBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsBJPPeZ3HQni7tEcM99UOZtW 2I+QBVVVWlSqTRvDR01WsbgK8QRMPOVcTmcjRR+z9TCXyB4vVFR34HByMEPwc7tj bYmZIr5BeC8PfcBYd2LUCwDOSRSeJ2QRTSq5BArVwEU1l+X5TL7fnHHD6PlDjx36 zS5QOl5hfFR4wddleVugveQZh96NgyANEivhQWDrWZMsceCn4Aye9z8bzLoqUxGb xSqAA8UVOTx2oIPrCI9drPZO83M8pyVVAhQIKHQDMPncZddp1qQ82etubBCngJlQ UBs8akbCeErLUsujKiC8KOXp+iDB3/hB1E00ZLvaeIPc/hvUbMEhSTUPSK7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOjI7ZRBwdMzKvAwYtc5DUq0itwwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDBEVVVfVcO0QtQPhXeZsP+1gKASb5A9B3g OA7nQmISnPSS2O1GcVpi3q5a1dG6jVYdrNEPhGYeVVFxZdb0nhvPKRPMy8pw/neU Kd8j2ADzHW9+FTg9zrAfJdDcIIeTVUKJ/kGN2Xii+dXcUmeTTbmJErZUbMTcBWkN uQ3ad0OpNaAOMbl8aSAJJCMZ07IRuJEcT5F6GemxUUMJfP1r5kmXlQlwhZcXncGu OdJ1z6+nEMk6BQlp0T2DBR1jVHB5IQPxh187vTM44d4rArjHmhDuW3zMqPfY+NK1 +TOjtzAz0faNBAnJhl2Z8HcmApDhfsVpJgcppVL2l4Bo0sK6sks= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:47 2026 by rpki-client