This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: DYCx7i9qyOyutOcZw8fVPXWhTHNh9Se2iAPVG3LC2fM= Subject key identifier: 5E:AB:E4:97:A2:36:37:3C:26:57:B1:BB:BA:7D:A0:3F:08:8A:17:42 Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 441B71AEB4D95E7E9042CCDEFE38DE37245DB368 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: 0140 Signing time: Sun 01 Feb 2026 22:42:17 +0000 Manifest this update: Sun 01 Feb 2026 22:37:17 +0000 Manifest next update: Thu 05 Feb 2026 01:19:17 +0000 Files and hashes: 1: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: EWhTaEy0kSyTN6Oh9f79SCw3rvXkaSbLCftfTIrzMKE=) 2: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: bRjv94Ig8HSPBgmnSJ3tWL9AsYnw0XPWxX8zcMqLG6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 01:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1b:71:ae:b4:d9:5e:7e:90:42:cc:de:fe:38:de:37:24:5d:b3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Feb 1 22:37:17 2026 GMT Not After : Feb 5 01:19:17 2026 GMT Subject: CN=5EABE497A236373C2657B1BBBA7DA03F088A1742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:b2:6e:93:f9:91:10:b8:f5:a5:14:29:88: 6e:79:74:5d:e3:4e:63:dd:aa:b4:d1:69:da:d1:5a: 3d:71:7a:f4:0d:7e:c0:a3:3c:44:88:45:44:7f:68: 54:35:ea:dc:b4:64:8e:e2:ec:96:e6:9e:7a:bc:2b: ec:47:d5:ed:b5:de:97:48:a9:6f:77:8f:8b:28:34: 6f:aa:0f:88:d0:33:1c:a4:ff:0a:69:ab:df:f1:ea: 86:59:63:e5:fd:4f:ef:d2:a2:4a:aa:ad:81:0e:c0: 62:b5:94:d0:f3:06:5c:33:f6:ea:d8:64:b8:18:c9: f4:80:74:1b:93:30:11:14:db:23:d7:b1:e6:a2:74: 0a:35:76:1f:3c:9c:3e:c4:53:5e:7b:6b:af:ce:2a: d2:04:e6:1e:a6:a2:88:3e:7c:2b:55:42:c3:aa:4c: c1:43:5a:b9:d8:bc:6f:23:05:78:fc:a6:24:27:d8: 37:bd:b8:63:7e:a1:10:8d:d9:22:45:1d:24:c5:57: f2:67:9d:0d:fd:0d:0d:ef:f3:f8:dd:50:d6:5b:44: ba:5d:56:54:14:0e:cb:7c:7e:b4:37:17:26:11:32: 25:74:0c:39:a5:50:e3:d6:dd:de:1a:9c:8b:24:b6: a3:4d:2d:a8:c5:2a:08:ac:e7:0a:a2:e8:8a:12:49: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AB:E4:97:A2:36:37:3C:26:57:B1:BB:BA:7D:A0:3F:08:8A:17:42 X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:88:30:d6:70:7e:bd:5d:85:ab:18:a8:e9:34:1f:2b:1e:49: f3:5e:e9:29:61:15:28:c6:25:f3:04:f8:f7:4c:39:a7:44:63: 49:51:5c:4b:68:43:b4:2e:c5:0c:20:4d:c6:a4:7b:a4:39:c4: 31:7e:2b:4a:65:f2:b4:74:0f:b9:b7:0b:3b:79:b0:fa:42:26: 86:a7:89:c8:2f:35:f5:a7:f5:a6:ea:a8:c9:4b:36:ec:f8:41: 25:da:51:65:79:b2:96:a5:cf:57:1f:a4:bb:cd:3c:f4:16:b4: 47:62:86:0b:67:86:48:80:3f:c5:97:8e:b0:17:ca:96:67:5a: 54:d8:8d:c3:dd:74:f1:d6:ba:e6:b7:a2:ba:25:04:77:54:e7: a0:cb:6f:d0:f4:48:ad:27:58:7a:3b:83:d1:8b:00:18:e5:c3: 66:c6:bd:87:58:88:19:13:cd:3c:e7:38:52:27:67:75:58:e9: 67:a9:6d:9d:f0:13:fc:ab:07:dc:1f:52:d3:c3:d4:9f:fe:1b: f4:cf:de:64:f1:00:d4:99:05:8a:5c:b3:7d:68:d5:98:d0:29: 7e:88:e9:1b:6b:bd:c1:df:a3:ed:de:4a:ee:79:85:c1:26:7e: 65:8f:c1:99:df:84:67:ab:53:53:c4:91:9c:41:0a:ae:18:33: a4:7a:55:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBtxrrTZXn6QQsze/jjeNyRds2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNjAyMDEyMjM3MTdaFw0yNjAyMDUwMTE5MTdaMDMxMTAvBgNV BAMTKDVFQUJFNDk3QTIzNjM3M0MyNjU3QjFCQkJBN0RBMDNGMDg4QTE3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvbJuk/mRELj1pRQpiG55dF3j TmPdqrTRadrRWj1xevQNfsCjPESIRUR/aFQ16ty0ZI7i7Jbmnnq8K+xH1e213pdI qW93j4soNG+qD4jQMxyk/wppq9/x6oZZY+X9T+/SokqqrYEOwGK1lNDzBlwz9urY ZLgYyfSAdBuTMBEU2yPXseaidAo1dh88nD7EU157a6/OKtIE5h6moog+fCtVQsOq TMFDWrnYvG8jBXj8piQn2De9uGN+oRCN2SJFHSTFV/JnnQ39DQ3v8/jdUNZbRLpd VlQUDst8frQ3FyYRMiV0DDmlUOPW3d4anIsktqNNLajFKgis5wqi6IoSSeW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqvkl6I2NzwmV7G7un2gPwiKF0IwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+IMNZwfr1dhasYqOk0HyseSfNe6SlhFSjG JfME+PdMOadEY0lRXEtoQ7QuxQwgTcake6Q5xDF+K0pl8rR0D7m3Czt5sPpCJoan icgvNfWn9abqqMlLNuz4QSXaUWV5spalz1cfpLvNPPQWtEdihgtnhkiAP8WXjrAX ypZnWlTYjcPddPHWuua3orolBHdU56DLb9D0SK0nWHo7g9GLABjlw2bGvYdYiBkT zTznOFInZ3VY6WepbZ3wE/yrB9wfUtPD1J/+G/TP3mTxANSZBYpcs31o1ZjQKX6I 6RtrvcHfo+3eSu55hcEmfmWPwZnfhGerU1PEkZxBCq4YM6R6Vdk= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:48 2026 by rpki-client