This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: Z1RGAIJf7eIcq3yRp+uA4Q8PVvuNWaE27uW93cyV9aw= Subject key identifier: 7C:DD:E1:A2:B4:63:31:AC:CC:03:1C:B7:79:90:0C:E8:16:C4:E1:01 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 3F3C46561470D7C8E3D5C8F6CF4654B8A7191D59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0169 Signing time: Sun 01 Feb 2026 08:50:47 +0000 Manifest this update: Sun 01 Feb 2026 08:45:47 +0000 Manifest next update: Wed 04 Feb 2026 14:56:47 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) 2: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) 3: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: 8JCOzWy6kLqeQIeYtAIwtGnWzXRI0w1ztHsP4VtDwiM=) 4: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3c:46:56:14:70:d7:c8:e3:d5:c8:f6:cf:46:54:b8:a7:19:1d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Feb 1 08:45:47 2026 GMT Not After : Feb 4 14:56:47 2026 GMT Subject: CN=7CDDE1A2B46331ACCC031CB779900CE816C4E101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:ca:cc:a5:6b:18:d7:a5:d5:be:6e:a0:8f: cc:e8:84:bc:95:47:46:55:43:ad:87:c1:24:ec:67: e4:e5:ae:54:e4:8d:68:cb:9c:1e:7a:b5:d1:12:78: fa:86:9f:c4:b1:a0:59:f6:64:fb:3d:ce:59:18:f4: 0f:3e:82:aa:64:40:d4:13:ca:c9:e1:8a:b1:f9:59: cb:bc:dd:4e:e4:22:89:f3:45:74:8c:dc:03:65:f0: a5:04:f5:85:55:3c:be:8f:1c:64:74:15:e4:2b:63: f1:a0:35:a3:6c:78:99:65:50:38:df:cd:e0:bf:82: 08:05:7c:91:62:dc:6d:45:21:e3:7d:9a:f4:91:a8: 2b:7c:3c:34:46:b8:2c:39:c7:f1:a7:64:97:00:4d: d1:70:18:8c:21:bf:99:4a:92:3b:b7:80:ed:62:68: 96:0e:06:9a:a4:81:3d:c9:1d:54:3a:b5:15:65:4e: 16:cf:f5:f5:6e:05:af:41:4d:68:89:39:39:db:ef: b2:ef:52:6a:d8:a4:76:70:e2:46:dc:ba:90:a0:fa: 86:f4:21:33:39:39:b8:1b:70:ee:cf:b1:9f:3a:15: 2f:13:48:0f:e9:1e:b7:bd:41:be:ba:f1:0e:59:1d: d3:43:48:85:2f:29:4b:cd:f7:52:0d:31:1f:ef:c2: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:E1:A2:B4:63:31:AC:CC:03:1C:B7:79:90:0C:E8:16:C4:E1:01 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e9:47:9b:c8:38:9f:d1:33:05:e6:26:56:9c:94:db:b8:f7: 9d:df:07:4b:f1:46:59:33:c8:f0:12:1e:86:ae:65:f8:ad:58: d0:85:33:0c:ef:58:60:59:a7:62:3f:26:cf:a3:bd:05:1d:af: fd:c8:ef:04:8c:4a:2d:a7:8a:85:c8:f6:f3:b6:97:fd:64:75: f4:1d:e9:0a:e2:5d:02:aa:22:e2:34:88:29:a2:8b:d5:f4:59: 72:46:4d:d2:a5:de:5a:11:13:e1:4b:0d:47:2c:46:94:2e:43: f4:a7:90:17:a2:71:e1:e8:f3:6f:97:52:db:7a:da:04:d3:46: 12:55:19:95:13:e8:a7:73:6e:14:e5:c0:db:06:05:c1:13:40: f9:0c:b5:c1:bf:55:16:aa:5c:87:c6:0a:f5:1d:1c:f6:5b:1f: 13:92:e0:d3:52:79:dc:7f:80:34:8e:cb:63:49:00:87:4c:2e: 21:4d:68:62:64:09:54:67:2f:2c:65:cb:6f:ad:9f:ae:20:80: d5:06:c1:06:3f:b7:6e:16:1e:cd:90:6d:91:d7:85:72:e5:46: 77:23:3a:b3:d2:b1:6e:79:b3:06:3b:46:f6:6f:0a:02:4f:8e: 46:c3:0d:d0:e8:b4:81:01:ab:45:2d:b5:9d:50:31:fa:67:a0: 5b:e7:d0:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzxGVhRw18jj1cj2z0ZUuKcZHVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNjAyMDEwODQ1NDdaFw0yNjAyMDQxNDU2NDdaMDMxMTAvBgNV BAMTKDdDRERFMUEyQjQ2MzMxQUNDQzAzMUNCNzc5OTAwQ0U4MTZDNEUxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY8rMpWsY16XVvm6gj8zohLyV R0ZVQ62HwSTsZ+TlrlTkjWjLnB56tdESePqGn8SxoFn2ZPs9zlkY9A8+gqpkQNQT ysnhirH5Wcu83U7kIonzRXSM3ANl8KUE9YVVPL6PHGR0FeQrY/GgNaNseJllUDjf zeC/gggFfJFi3G1FIeN9mvSRqCt8PDRGuCw5x/GnZJcATdFwGIwhv5lKkju3gO1i aJYOBpqkgT3JHVQ6tRVlThbP9fVuBa9BTWiJOTnb77LvUmrYpHZw4kbcupCg+ob0 ITM5ObgbcO7PsZ86FS8TSA/pHre9Qb668Q5ZHdNDSIUvKUvN91INMR/vwvpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfN3horRjMazMAxy3eZAM6BbE4QEwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjpR5vIOJ/RMwXmJlaclNu4953fB0vxRlkz yPASHoauZfitWNCFMwzvWGBZp2I/Js+jvQUdr/3I7wSMSi2nioXI9vO2l/1kdfQd 6QriXQKqIuI0iCmii9X0WXJGTdKl3loRE+FLDUcsRpQuQ/SnkBeiceHo82+XUtt6 2gTTRhJVGZUT6KdzbhTlwNsGBcETQPkMtcG/VRaqXIfGCvUdHPZbHxOS4NNSedx/ gDSOy2NJAIdMLiFNaGJkCVRnLyxly2+tn64ggNUGwQY/t24WHs2QbZHXhXLlRncj OrPSsW55swY7RvZvCgJPjkbDDdDotIEBq0UttZ1QMfpnoFvn0F0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:40 2026 by rpki-client