This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: WlNjc7T8fpeh3cvvv75FtFTQr1+46Mdns9KR/W8IgAY= Subject key identifier: 7F:CE:F6:57:3B:04:1F:C2:26:70:BD:63:0A:73:32:C1:BB:0F:8F:BE Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 60DBE9F44B0768FFEBBD25DA9E4A230E422AA5A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 024E Signing time: Sun 01 Feb 2026 04:51:50 +0000 Manifest this update: Sun 01 Feb 2026 04:46:50 +0000 Manifest next update: Wed 04 Feb 2026 16:16:50 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: D+X34/jO79I+KiMIRdQEaocggPz1do7Waj3gEbNdKo4=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 16:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:e9:f4:4b:07:68:ff:eb:bd:25:da:9e:4a:23:0e:42:2a:a5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Feb 1 04:46:50 2026 GMT Not After : Feb 4 16:16:50 2026 GMT Subject: CN=7FCEF6573B041FC22670BD630A7332C1BB0F8FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:e7:a3:44:07:f2:6f:07:55:90:d6:97:05: 42:c3:0c:e2:fb:b0:79:e8:33:00:4a:99:73:80:c2: 0f:3c:ee:68:27:49:74:d8:22:85:d6:a4:e7:18:13: 47:fb:f3:bf:ac:26:61:c2:d0:f5:17:3b:41:ad:66: c1:82:d4:fa:cc:03:46:88:6d:7d:7e:f1:dd:c8:9d: 11:6e:49:6a:89:ae:7c:d7:8c:1e:c6:06:c9:3a:af: 97:ad:fb:5b:41:8f:aa:11:ae:24:2b:6b:23:39:46: 61:82:04:68:84:f0:4b:57:68:0d:16:9b:5e:74:d9: cf:b3:8a:a6:42:32:f5:6d:cf:c8:24:01:1f:1f:4f: 76:b6:4d:49:2c:ba:ee:cc:1e:84:e5:7a:bd:d2:7a: cd:b3:5d:a2:7c:70:f9:7b:56:c2:a2:a0:29:cc:ca: e6:c0:46:f4:12:a4:23:be:fd:7d:31:00:80:c7:7f: 3a:e1:ae:ea:7d:3c:d9:4c:00:0e:64:46:a1:0a:5b: 58:6f:0c:d5:09:22:42:3f:43:16:11:88:74:fc:74: 65:6f:79:d7:1d:88:0f:ab:67:9c:02:44:6b:3d:fa: 4e:57:35:03:18:e5:27:56:d9:e7:d3:d2:01:a0:74: 24:ef:fd:3c:d0:14:2c:7f:1c:0b:0c:72:a8:f8:39: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:F6:57:3B:04:1F:C2:26:70:BD:63:0A:73:32:C1:BB:0F:8F:BE X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2f:27:ff:69:14:94:e0:9d:c6:9f:46:7c:72:1a:70:41:fc: d4:a6:bf:e8:3e:63:ce:64:39:f6:41:16:06:58:84:8f:19:65: 53:3d:6d:e5:3e:bd:97:65:62:05:52:88:43:9b:fd:c1:3c:c2: c3:5d:f6:13:a7:3b:3b:d9:e3:9c:e0:f9:42:40:b5:5c:31:92: c2:9c:29:3b:f4:36:89:0e:74:6e:67:52:7a:08:fd:94:7f:11: b6:c6:a0:3d:12:40:90:6d:c7:1b:d0:f9:26:b8:ca:ac:06:c2: 94:69:cf:b6:f4:da:0e:92:99:ae:c4:e1:e2:a8:ac:7f:85:f4: 4f:50:ef:8d:34:a1:46:cb:cb:42:2f:aa:dc:6c:00:c4:e5:7a: e9:5d:c6:64:f3:e1:94:83:3b:dd:ee:40:59:26:9f:7e:84:55: 48:97:0e:9a:76:1b:64:8a:5a:09:17:ec:de:71:5b:a5:30:57: 3a:5f:1a:2a:cd:9c:82:c9:99:74:ce:df:9c:b6:c0:cf:09:6b: 9e:ec:f1:72:2a:8d:70:a7:5d:7a:54:ee:67:74:fc:79:27:d1: 75:4c:42:4d:f0:24:11:df:8b:16:9c:04:54:6b:99:5b:0c:17: 5d:3e:46:fb:fb:62:62:7e:a5:f3:fa:af:e0:74:f3:fd:d0:d4: b2:e4:0c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNvp9EsHaP/rvSXankojDkIqpaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNjAyMDEwNDQ2NTBaFw0yNjAyMDQxNjE2NTBaMDMxMTAvBgNV BAMTKDdGQ0VGNjU3M0IwNDFGQzIyNjcwQkQ2MzBBNzMzMkMxQkIwRjhGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd+ejRAfybwdVkNaXBULDDOL7 sHnoMwBKmXOAwg887mgnSXTYIoXWpOcYE0f787+sJmHC0PUXO0GtZsGC1PrMA0aI bX1+8d3InRFuSWqJrnzXjB7GBsk6r5et+1tBj6oRriQrayM5RmGCBGiE8EtXaA0W m1502c+ziqZCMvVtz8gkAR8fT3a2TUksuu7MHoTler3Ses2zXaJ8cPl7VsKioCnM yubARvQSpCO+/X0xAIDHfzrhrup9PNlMAA5kRqEKW1hvDNUJIkI/QxYRiHT8dGVv edcdiA+rZ5wCRGs9+k5XNQMY5SdW2efT0gGgdCTv/TzQFCx/HAsMcqj4OV1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf872VzsEH8ImcL1jCnMywbsPj74wHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8vJ/9pFJTgncafRnxyGnBB/NSmv+g+Y85k OfZBFgZYhI8ZZVM9beU+vZdlYgVSiEOb/cE8wsNd9hOnOzvZ45zg+UJAtVwxksKc KTv0NokOdG5nUnoI/ZR/EbbGoD0SQJBtxxvQ+Sa4yqwGwpRpz7b02g6Sma7E4eKo rH+F9E9Q7400oUbLy0IvqtxsAMTleuldxmTz4ZSDO93uQFkmn36EVUiXDpp2G2SK WgkX7N5xW6UwVzpfGirNnILJmXTO35y2wM8Ja57s8XIqjXCnXXpU7md0/Hkn0XVM Qk3wJBHfixacBFRrmVsMF10+Rvv7YmJ+pfP6r+B08/3Q1LLkDKY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:07 2026 by rpki-client