This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: VOc2pTJqN09j83c2jw+2LSqKX6+9jhBSzxAM5b1A6FY= Subject key identifier: AA:2C:26:C5:82:A7:FF:6A:4C:C4:94:42:24:5A:8C:64:6D:F2:FF:CC Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 7C784CF1EAAFE2FFA7B34C55B2EEA50858E1603E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 0496 Signing time: Sat 31 Jan 2026 16:21:46 +0000 Manifest this update: Sat 31 Jan 2026 16:16:46 +0000 Manifest next update: Tue 03 Feb 2026 17:17:46 +0000 Files and hashes: 1: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) 3: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: D0EnbtkVVBw+h7ne46o/YErZR3Cmr3nh6qbIlNCBb8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:78:4c:f1:ea:af:e2:ff:a7:b3:4c:55:b2:ee:a5:08:58:e1:60:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Jan 31 16:16:46 2026 GMT Not After : Feb 3 17:17:46 2026 GMT Subject: CN=AA2C26C582A7FF6A4CC49442245A8C646DF2FFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:85:11:a4:88:d0:11:95:28:4a:68:02:0b: 25:80:3e:28:5e:86:37:01:52:16:9a:25:f0:74:a0: d4:fb:9c:df:13:b3:49:59:0f:21:45:dc:8f:c5:e5: 3c:55:c0:78:f5:94:83:f5:41:30:15:53:85:20:32: 08:76:94:e8:20:e9:0d:35:ab:f3:97:bf:51:c3:10: b0:70:ed:e0:c8:19:f3:da:29:c3:4f:21:3b:b1:0d: 65:51:61:83:5c:74:59:79:fb:2f:fa:df:13:f4:9d: e3:91:e3:9a:31:b6:e5:d4:40:8e:c2:fa:67:23:89: 6d:cb:81:fa:14:30:6e:92:09:91:56:b3:3e:52:18: 1d:df:f7:4c:6d:a3:96:e7:27:3d:1c:d2:3e:5d:42: d7:70:ec:63:67:2b:7f:96:29:21:be:f9:c9:b8:2d: 9e:57:c0:da:bf:bd:ef:6e:b2:0e:0c:fc:d6:ca:bd: 8e:4d:9b:e8:8f:80:d7:d9:50:e2:e3:b7:7f:28:e8: b1:ab:30:09:c9:23:69:01:98:50:d3:10:9d:77:ac: d9:2d:05:16:60:e6:40:ee:67:61:7a:ef:70:f6:3f: ad:dc:51:bf:c6:65:0a:5d:ac:03:8e:9e:11:dc:06: 89:54:fb:32:74:7a:e1:72:61:78:62:3b:82:10:7f: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2C:26:C5:82:A7:FF:6A:4C:C4:94:42:24:5A:8C:64:6D:F2:FF:CC X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5a:30:04:e1:db:ae:f0:f7:3b:2b:38:12:d2:88:0a:0b:b7: d2:bb:be:66:3b:65:a1:ff:2a:56:7a:32:93:ed:a4:16:9d:30: c9:a1:52:10:bc:47:37:02:bf:61:9f:60:95:ec:16:d8:7c:7c: 5e:d2:a2:16:46:0f:c3:e3:dd:00:77:3a:5e:c8:90:b4:f7:8a: 86:1f:3c:79:68:3c:fb:d9:96:05:69:d7:41:2d:fd:49:7a:59: 1f:bb:38:02:51:37:e8:e4:78:c2:36:f7:4b:46:b8:23:3b:60: 60:15:7c:8c:98:9d:93:7a:a6:e5:02:4e:f5:9e:09:de:5e:cc: 44:33:56:dd:c3:fb:5f:8a:36:69:cd:4d:10:44:84:bb:b0:00: 2f:4e:62:7c:ba:6e:54:0b:4a:c5:84:7c:b0:d4:d5:71:5a:f1: 8b:a5:70:fe:cf:a7:c9:6c:ac:d4:4b:7d:48:6f:45:09:fe:ed: 01:96:e6:f5:83:de:a0:e2:54:88:2f:00:d0:87:3b:76:5c:98: f5:7c:4a:87:95:e4:b9:c8:b1:70:c0:1d:1e:f8:e2:30:a7:df: 4d:5c:9a:09:20:23:be:9a:51:9e:44:44:cc:f9:18:b9:c5:9d: 46:67:91:5a:89:56:5f:dd:64:f0:9c:fc:2a:22:30:6b:11:73: 46:f0:e4:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHhM8eqv4v+ns0xVsu6lCFjhYD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNjAxMzExNjE2NDZaFw0yNjAyMDMxNzE3NDZaMDMxMTAvBgNV BAMTKEFBMkMyNkM1ODJBN0ZGNkE0Q0M0OTQ0MjI0NUE4QzY0NkRGMkZGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NYURpIjQEZUoSmgCCyWAPihe hjcBUhaaJfB0oNT7nN8Ts0lZDyFF3I/F5TxVwHj1lIP1QTAVU4UgMgh2lOgg6Q01 q/OXv1HDELBw7eDIGfPaKcNPITuxDWVRYYNcdFl5+y/63xP0neOR45oxtuXUQI7C +mcjiW3LgfoUMG6SCZFWsz5SGB3f90xto5bnJz0c0j5dQtdw7GNnK3+WKSG++cm4 LZ5XwNq/ve9usg4M/NbKvY5Nm+iPgNfZUOLjt38o6LGrMAnJI2kBmFDTEJ13rNkt BRZg5kDuZ2F673D2P63cUb/GZQpdrAOOnhHcBolU+zJ0euFyYXhiO4IQfxv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqiwmxYKn/2pMxJRCJFqMZG3y/8wwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBaMATh267w9zsrOBLSiAoLt9K7vmY7ZaH/ KlZ6MpPtpBadMMmhUhC8RzcCv2GfYJXsFth8fF7SohZGD8Pj3QB3Ol7IkLT3ioYf PHloPPvZlgVp10Et/Ul6WR+7OAJRN+jkeMI290tGuCM7YGAVfIyYnZN6puUCTvWe Cd5ezEQzVt3D+1+KNmnNTRBEhLuwAC9OYny6blQLSsWEfLDU1XFa8YulcP7Pp8ls rNRLfUhvRQn+7QGW5vWD3qDiVIgvANCHO3ZcmPV8SoeV5LnIsXDAHR744jCn301c mgkgI76aUZ5ERMz5GLnFnUZnkVqJVl/dZPCc/CoiMGsRc0bw5P4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:57:44 2026 by rpki-client