This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: K1OO1Ow8BZ3MMr76fJQwxzvwJfm1gPDH0MVtz0GlXgk= Subject key identifier: C3:1A:FF:EB:43:FA:2A:E1:8C:55:25:12:2C:0A:0F:D4:55:63:06:C4 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 583AE548E02746DAC2865B54A7929802720B50B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0250 Signing time: Sat 31 Jan 2026 16:20:42 +0000 Manifest this update: Sat 31 Jan 2026 16:15:42 +0000 Manifest next update: Tue 03 Feb 2026 21:25:42 +0000 Files and hashes: 1: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 2: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: k6LluYosx9Cwcy3QfGuV79wCsCWnd6Bz/IwnF0obUgE=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 4: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 21:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3a:e5:48:e0:27:46:da:c2:86:5b:54:a7:92:98:02:72:0b:50:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Jan 31 16:15:42 2026 GMT Not After : Feb 3 21:25:42 2026 GMT Subject: CN=C31AFFEB43FA2AE18C5525122C0A0FD4556306C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:b8:28:b6:1e:a3:9e:65:c4:54:6b:d9:ee: fd:4d:d6:3d:e2:2c:32:fd:db:e2:a1:19:39:bc:08: d4:23:bb:0e:f2:20:09:d3:b1:af:37:50:bb:b6:b5: 45:07:f8:54:fe:a2:49:77:db:43:bc:95:6e:c4:ab: 99:09:a9:97:84:9f:c7:45:09:3b:08:d2:0f:38:7e: d2:20:f7:89:8d:e1:fd:fd:aa:5e:65:8d:08:85:74: ef:9a:95:f8:55:b4:3f:81:ac:c8:fd:92:47:f9:94: b7:21:ae:a8:3d:8b:bb:cb:71:a4:4f:73:2f:d9:cd: 1c:10:b1:39:24:c6:8f:3d:2c:2a:7d:1d:5f:56:a8: 35:5b:08:7f:3f:e2:58:9c:f3:48:3b:f8:ce:ef:76: 42:b9:54:58:e6:46:09:ee:c4:5b:4a:b9:ee:33:69: 6e:81:fc:ab:64:de:2d:4c:e2:db:bb:1c:65:74:a2: 2b:51:e2:05:84:88:09:d7:df:ff:cc:6e:a4:03:b5: 27:81:0a:47:54:d0:71:6a:82:9c:0f:52:78:e7:68: 45:9e:01:2a:55:c5:ca:1d:42:c0:d2:d2:e6:eb:76: 2c:94:8e:95:75:cb:ae:09:d4:76:b0:9c:22:14:7d: 90:1b:24:e4:22:b6:ab:7c:7b:6a:ce:4a:e7:06:03: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1A:FF:EB:43:FA:2A:E1:8C:55:25:12:2C:0A:0F:D4:55:63:06:C4 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d2:b2:02:59:05:3a:fb:4f:ce:31:2d:25:6a:f7:1a:04:47: 43:7b:15:73:13:c6:e7:d2:56:19:0b:71:4c:5d:2a:4f:40:ec: ca:6b:26:a8:87:5f:d4:37:c8:d0:84:a0:95:a8:81:62:d8:7b: 30:6a:53:2a:28:52:4a:72:1f:d0:38:26:c0:e9:c9:43:32:da: ed:34:62:32:ad:e8:dc:b5:a4:df:ed:32:91:11:99:d5:53:22: fd:45:ee:b0:d8:2f:b1:21:f0:07:13:4b:b1:7e:2a:b4:03:b3: 67:f8:e5:6d:f3:9d:a7:48:a2:df:89:9c:5d:74:c7:0b:7b:9f: 02:07:fc:65:a9:d3:4f:39:14:f5:34:0e:05:12:35:56:2b:91: af:2a:6d:fe:e9:58:b0:a4:06:f2:f4:3f:58:85:d3:62:32:6f: d2:2e:9d:51:b3:9d:fa:ed:57:61:07:60:a0:2b:5d:eb:f3:1d: ee:e3:5f:4f:ea:91:8b:cd:c7:3f:e2:48:1e:48:b9:72:15:e2: 6f:10:8f:e6:0a:52:c3:a6:e3:28:39:cc:5d:27:78:cf:73:46: d1:fc:09:f0:ba:80:ad:0b:ea:13:ce:7c:e1:e7:1c:11:a9:54: 54:26:db:ae:1b:7b:22:a8:1b:d5:2c:b2:c5:d4:e1:7b:a0:5d: d3:8d:33:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDrlSOAnRtrChltUp5KYAnILULMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNjAxMzExNjE1NDJaFw0yNjAyMDMyMTI1NDJaMDMxMTAvBgNV BAMTKEMzMUFGRkVCNDNGQTJBRTE4QzU1MjUxMjJDMEEwRkQ0NTU2MzA2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjLgoth6jnmXEVGvZ7v1N1j3i LDL92+KhGTm8CNQjuw7yIAnTsa83ULu2tUUH+FT+okl320O8lW7Eq5kJqZeEn8dF CTsI0g84ftIg94mN4f39ql5ljQiFdO+alfhVtD+BrMj9kkf5lLchrqg9i7vLcaRP cy/ZzRwQsTkkxo89LCp9HV9WqDVbCH8/4lic80g7+M7vdkK5VFjmRgnuxFtKue4z aW6B/Ktk3i1M4tu7HGV0oitR4gWEiAnX3//MbqQDtSeBCkdU0HFqgpwPUnjnaEWe ASpVxcodQsDS0ubrdiyUjpV1y64J1HawnCIUfZAbJOQitqt8e2rOSucGAzX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxr/60P6KuGMVSUSLAoP1FVjBsQwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALSsgJZBTr7T84xLSVq9xoER0N7FXMTxufS VhkLcUxdKk9A7MprJqiHX9Q3yNCEoJWogWLYezBqUyooUkpyH9A4JsDpyUMy2u00 YjKt6Ny1pN/tMpERmdVTIv1F7rDYL7Eh8AcTS7F+KrQDs2f45W3znadIot+JnF10 xwt7nwIH/GWp0085FPU0DgUSNVYrka8qbf7pWLCkBvL0P1iF02Iyb9IunVGznfrt V2EHYKArXevzHe7jX0/qkYvNxz/iSB5IuXIV4m8Qj+YKUsOm4yg5zF0neM9zRtH8 CfC6gK0L6hPOfOHnHBGpVFQm264beyKoG9UsssXU4XugXdONM6E= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:21 2026 by rpki-client