This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: BfT5kgurWY0TI6CNfMh0/hK9boDMouirIDA2qc55M50= Subject key identifier: A4:E7:21:6E:D0:1A:2F:30:D1:C2:96:9B:56:ED:50:61:E6:8C:D6:38 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 16508DD5B9F4707392FD8EC8E97C4789A25BBA7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02C1 Signing time: Mon 19 Jan 2026 08:40:44 +0000 Manifest this update: Mon 19 Jan 2026 08:35:44 +0000 Manifest next update: Thu 22 Jan 2026 19:18:44 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: XPYB689gezeDvDu5AGp5vrvTOhThiTCreJocxAJ4hCU=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 19:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:50:8d:d5:b9:f4:70:73:92:fd:8e:c8:e9:7c:47:89:a2:5b:ba:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Jan 19 08:35:44 2026 GMT Not After : Jan 22 19:18:44 2026 GMT Subject: CN=A4E7216ED01A2F30D1C2969B56ED5061E68CD638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:73:70:15:73:e0:33:9c:ae:6b:1b:c1:27:55: 02:8d:19:ff:75:40:c9:32:6a:63:67:fc:43:ce:c8: ce:ed:a8:33:22:de:41:e4:0b:27:6c:ad:76:ec:92: 69:5f:da:54:97:d3:f5:0b:4b:1d:96:eb:5c:4c:2c: 45:3d:7e:22:18:b8:ad:e7:21:7a:e6:1c:3e:bc:03: 77:f6:87:69:07:af:d1:b3:41:2d:cb:8d:7d:5c:1f: 55:63:cd:7b:9c:74:bf:3d:fb:31:be:1e:51:15:e1: 65:70:a4:37:02:28:27:14:78:e8:a7:f8:a8:29:fc: 9f:35:1f:b6:fa:c4:07:eb:76:58:54:2c:06:21:9c: d8:28:f2:30:d0:10:04:76:15:13:27:d3:a1:54:b4: 30:ef:e0:d0:4b:2f:05:6e:e0:6a:e0:50:8e:2e:03: bd:c1:a4:80:65:a3:ba:b0:d5:94:40:43:fc:f4:c9: 27:96:03:c4:0c:c5:ca:61:54:0f:e3:2a:a2:4c:77: 07:0b:42:49:09:e3:cd:e5:84:db:ca:3a:53:4d:51: b6:02:d4:0e:6b:03:70:5c:d6:1d:12:76:02:95:17: 6f:81:5d:cd:9a:dc:ab:09:e9:c4:af:79:7c:f6:35: 12:42:29:c0:9b:7b:47:c4:42:b8:df:ee:e6:ad:44: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E7:21:6E:D0:1A:2F:30:D1:C2:96:9B:56:ED:50:61:E6:8C:D6:38 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:c4:87:24:c0:16:88:b8:83:00:fa:14:7d:b8:a1:46:cc: 08:e0:50:25:04:ab:13:b2:c7:b4:d5:04:06:ee:f9:16:8f:37: cd:d5:dc:f9:b4:43:06:21:cb:91:e4:93:e3:67:7a:24:97:59: 70:e2:b6:dc:c5:37:8a:cf:6c:64:53:86:12:23:87:03:ba:a7: 52:11:b3:c5:ad:44:89:5f:57:2f:f3:c0:20:78:88:80:ed:5f: 37:83:05:0f:46:f9:7f:0e:6e:7f:e6:3a:32:64:ca:2d:2a:0c: e3:e8:a0:3d:ad:f8:73:02:f0:9b:8d:36:67:9f:69:90:f6:88: 5a:ed:00:dd:f6:5a:e8:ac:64:e2:de:b7:f7:fd:4d:76:7b:95: 77:50:1b:16:09:e5:a6:14:83:98:44:df:d4:53:92:89:a6:9a: e2:51:1e:67:30:8f:bb:43:f6:20:5a:30:80:92:6d:49:6c:14: c4:b0:be:05:b3:ea:84:52:e5:1d:0a:43:43:b8:93:fd:a2:f9: c9:0f:2c:00:25:4c:8c:c4:ed:0d:e0:4c:96:41:3b:2f:b9:05: 9c:d1:94:f2:db:9b:2f:26:ca:eb:95:95:32:dd:05:c7:fb:67: d4:4f:48:b8:8e:ea:3b:f4:90:34:0d:9d:2e:7a:dc:a7:50:60: a5:5f:07:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlCN1bn0cHOS/Y7I6XxHiaJbun0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjAxMTkwODM1NDRaFw0yNjAxMjIxOTE4NDRaMDMxMTAvBgNV BAMTKEE0RTcyMTZFRDAxQTJGMzBEMUMyOTY5QjU2RUQ1MDYxRTY4Q0Q2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1c3AVc+AznK5rG8EnVQKNGf91 QMkyamNn/EPOyM7tqDMi3kHkCydsrXbskmlf2lSX0/ULSx2W61xMLEU9fiIYuK3n IXrmHD68A3f2h2kHr9GzQS3LjX1cH1VjzXucdL89+zG+HlEV4WVwpDcCKCcUeOin +Kgp/J81H7b6xAfrdlhULAYhnNgo8jDQEAR2FRMn06FUtDDv4NBLLwVu4GrgUI4u A73BpIBlo7qw1ZRAQ/z0ySeWA8QMxcphVA/jKqJMdwcLQkkJ483lhNvKOlNNUbYC 1A5rA3Bc1h0SdgKVF2+BXc2a3KsJ6cSveXz2NRJCKcCbe0fEQrjf7uatRIShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOchbtAaLzDRwpabVu1QYeaM1jgwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExVxIckwBaIuIMA+hR9uKFGzAjgUCUEqxOy x7TVBAbu+RaPN83V3Pm0QwYhy5Hkk+NneiSXWXDittzFN4rPbGRThhIjhwO6p1IR s8WtRIlfVy/zwCB4iIDtXzeDBQ9G+X8Obn/mOjJkyi0qDOPooD2t+HMC8JuNNmef aZD2iFrtAN32WuisZOLet/f9TXZ7lXdQGxYJ5aYUg5hE39RTkommmuJRHmcwj7tD 9iBaMICSbUlsFMSwvgWz6oRS5R0KQ0O4k/2i+ckPLAAlTIzE7Q3gTJZBOy+5BZzR lPLbmy8myuuVlTLdBcf7Z9RPSLiO6jv0kDQNnS563KdQYKVfB5A= -----END CERTIFICATE-----Generated at Wed Jan 21 14:46:12 2026 by rpki-client