This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: L6ZFY0TUIyEl1/XwruspAqph0iLii98qXXBQgTb8XlA= Subject key identifier: C0:79:29:75:AA:29:F1:AE:95:4B:5E:43:CD:D2:62:9F:0D:E2:78:E0 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 16158FD95954202E55A1B851E4E98C7EA0463ED4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: F3 Signing time: Fri 30 Jan 2026 22:22:08 +0000 Manifest this update: Fri 30 Jan 2026 22:17:08 +0000 Manifest next update: Tue 03 Feb 2026 08:48:08 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) 2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: 3VYLq41K3LAE8oTzql8QHqR/Z/JVup7t/q7HMMXoxvk=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:15:8f:d9:59:54:20:2e:55:a1:b8:51:e4:e9:8c:7e:a0:46:3e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Jan 30 22:17:08 2026 GMT Not After : Feb 3 08:48:08 2026 GMT Subject: CN=C0792975AA29F1AE954B5E43CDD2629F0DE278E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:29:e6:f3:e9:e2:41:dd:a3:22:25:e6:f1: 29:61:aa:9e:3b:03:da:6d:83:1b:c7:53:14:0c:54: d3:bc:28:19:c7:84:d4:ee:24:f7:23:97:3a:aa:43: cd:68:cf:3c:f3:84:dc:08:03:61:05:2d:e6:29:73: fc:94:bb:d2:e0:5b:c9:79:43:03:a5:18:fe:f9:5a: b9:18:df:58:db:e8:08:01:d5:21:c0:f0:1d:93:85: 4d:7e:98:c6:77:5f:2b:36:3a:1b:36:e4:fb:a2:85: 2a:52:24:54:af:41:08:ab:a2:e8:31:bb:72:ef:f4: 01:1f:c5:54:ad:d5:c2:1f:a8:fa:06:9e:5b:3a:e0: f5:f6:bb:47:ff:fa:7f:36:c3:ad:4f:e1:4e:99:f0: e8:7f:cb:1d:8a:61:38:81:63:42:16:42:62:d3:54: 86:8e:a2:11:78:8e:f5:be:16:c6:11:10:87:3d:1f: 28:d5:8d:af:56:43:76:00:8c:cd:84:42:e8:9b:51: 71:ed:b5:e1:eb:e7:25:89:97:b6:c6:14:72:f5:ad: 75:9b:46:4d:82:cb:61:a7:1f:69:fe:08:0e:e5:46: 2f:25:cb:ee:5e:a4:7f:f8:78:0c:e0:02:e9:4d:96: bc:99:72:e7:c6:8c:4a:1c:37:c1:79:40:7b:c0:4d: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:29:75:AA:29:F1:AE:95:4B:5E:43:CD:D2:62:9F:0D:E2:78:E0 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f6:2c:f5:96:8d:d1:31:54:16:e1:d8:fa:11:53:0b:6f:9f: 9f:ff:81:0b:82:13:7e:42:8d:87:68:05:91:75:ba:9d:bc:21: d7:50:1c:1f:6a:93:50:71:97:f7:28:a8:d4:0e:46:3f:a7:58: e8:8e:e7:46:24:ad:85:33:c4:e2:00:a5:5a:3c:de:b1:78:fe: 72:e9:ab:38:33:ab:d4:5c:4e:c1:db:9e:81:f4:20:20:93:77: 83:75:b2:70:d0:aa:ea:fe:c9:b4:74:01:c9:5f:65:ff:a9:51: 7f:65:03:1a:54:f8:b9:dc:5b:54:1a:b8:45:72:c3:03:5b:09: 2d:d5:66:89:46:ff:9d:ca:36:0d:18:22:ea:7a:47:1d:48:b0: 36:39:68:4b:fa:59:27:40:1b:75:46:6d:3e:2a:0d:f2:cd:70: 3e:24:7d:6f:e7:c6:1f:96:93:b7:1b:2b:c0:20:f3:a2:89:34: ca:c3:bb:99:db:c8:d8:a5:62:f8:bb:e9:d6:23:5e:c9:4c:f2: 8f:ed:be:da:fc:8a:4a:08:19:11:19:0b:4d:36:e1:4c:b1:b9: 9b:12:b4:44:2d:81:77:2d:f7:8e:8e:9d:8f:9f:0e:31:06:f1: c7:95:c3:ba:3f:79:66:43:e0:b5:5a:71:4f:a0:c9:30:04:ed: 16:e4:8d:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhWP2VlUIC5VobhR5OmMfqBGPtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNjAxMzAyMjE3MDhaFw0yNjAyMDMwODQ4MDhaMDMxMTAvBgNV BAMTKEMwNzkyOTc1QUEyOUYxQUU5NTRCNUU0M0NERDI2MjlGMERFMjc4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlsynm8+niQd2jIiXm8Slhqp47 A9ptgxvHUxQMVNO8KBnHhNTuJPcjlzqqQ81ozzzzhNwIA2EFLeYpc/yUu9LgW8l5 QwOlGP75WrkY31jb6AgB1SHA8B2ThU1+mMZ3Xys2Ohs25PuihSpSJFSvQQirougx u3Lv9AEfxVSt1cIfqPoGnls64PX2u0f/+n82w61P4U6Z8Oh/yx2KYTiBY0IWQmLT VIaOohF4jvW+FsYREIc9HyjVja9WQ3YAjM2EQuibUXHtteHr5yWJl7bGFHL1rXWb Rk2Cy2GnH2n+CA7lRi8ly+5epH/4eAzgAulNlryZcufGjEocN8F5QHvATQ+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHkpdaop8a6VS15DzdJinw3ieOAwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADf2LPWWjdExVBbh2PoRUwtvn5//gQuCE35C jYdoBZF1up28IddQHB9qk1Bxl/coqNQORj+nWOiO50YkrYUzxOIApVo83rF4/nLp qzgzq9RcTsHbnoH0ICCTd4N1snDQqur+ybR0AclfZf+pUX9lAxpU+LncW1QauEVy wwNbCS3VZolG/53KNg0YIup6Rx1IsDY5aEv6WSdAG3VGbT4qDfLNcD4kfW/nxh+W k7cbK8Ag86KJNMrDu5nbyNilYvi76dYjXslM8o/tvtr8ikoIGREZC0024UyxuZsS tEQtgXct946OnY+fDjEG8ceVw7o/eWZD4LVacU+gyTAE7RbkjT0= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:07 2026 by rpki-client