This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft File: C42304B7D0E216E2F73305D25EBA185E1A321586.mft (raw, json) Hash identifier: oKnz9p4VPJf4egsMZs2ksYHsbOb6dxjJcfOXA9RyC+c= Subject key identifier: CA:00:26:13:33:C6:80:56:3D:BA:7C:EA:86:B5:D7:96:C1:74:0F:D1 Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 Certificate issuer: /CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Certificate serial: 750EBB6ED81E360891EF7F5A0A492872CA5F1E0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft Manifest number: 09 Signing time: Sun 01 Feb 2026 04:02:22 +0000 Manifest this update: Sun 01 Feb 2026 03:57:22 +0000 Manifest next update: Wed 04 Feb 2026 12:23:22 +0000 Files and hashes: 1: C42304B7D0E216E2F73305D25EBA185E1A321586.crl (hash: hBJjwjgvAuOobFoHM1WHdZcEV+6eNdS+rC0+5QQTtXQ=) 2: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: huqt9zp4ZaM/ehHcf/q79Imf4OzuK2ijijHg2TgEeMU=) 3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: XWuaYLYmlK9hExFjkzInUKqGyFC8YbxMTIf12TewHWo=) 4: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: /XfV+lJcb9X56N7rlaHL4tfgC5CfK4dQVit65blaNYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 12:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:bb:6e:d8:1e:36:08:91:ef:7f:5a:0a:49:28:72:ca:5f:1e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Validity Not Before: Feb 1 03:57:22 2026 GMT Not After : Feb 4 12:23:22 2026 GMT Subject: CN=CA00261333C680563DBA7CEA86B5D796C1740FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:75:68:44:8b:bc:7a:3f:fb:68:3a:61:f4: 4d:40:c3:07:eb:42:7c:8d:ee:d7:64:2b:99:57:00: 0b:89:b2:22:92:3b:e2:63:8d:53:a1:78:b9:e5:b5: ad:f7:af:cc:d6:53:53:e9:a0:c7:dc:93:91:77:48: 02:ce:19:1a:a7:a0:7e:d4:4a:33:d3:fe:b5:f8:a4: 8f:fd:be:35:7c:68:b6:22:da:49:89:99:62:8c:fb: cf:88:1a:c7:e7:1c:0b:f6:3d:9a:66:52:08:e8:4c: 23:26:b1:d6:94:51:c0:cf:78:71:1f:cf:da:9e:d9: ef:b1:7e:df:6a:e7:03:6b:7a:32:5a:78:28:02:69: ac:3a:45:bc:4b:bd:31:39:68:ff:c7:0a:a4:e3:5a: c0:8a:15:98:35:4d:68:22:51:9a:c0:23:7b:6a:19: 90:55:58:d7:61:f5:b7:41:64:54:dd:bb:b1:1d:8d: 11:86:b1:d9:5c:46:06:9e:6c:a9:26:2b:54:c7:3b: 12:0c:9c:12:7d:eb:4a:44:30:4b:6e:2f:f8:21:b6: 60:10:4f:fb:e1:6e:2b:40:85:76:96:ee:11:a5:ce: ce:3d:01:88:ff:3a:c1:28:f7:c3:82:f9:61:c3:3e: 5b:ff:2b:64:cb:e4:e0:06:27:3e:e9:d8:0f:64:b9: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:26:13:33:C6:80:56:3D:BA:7C:EA:86:B5:D7:96:C1:74:0F:D1 X509v3 Authority Key Identifier: keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:48:00:d0:9c:de:73:53:54:c0:ae:61:5b:0f:d6:4c:ae:1d: 00:98:00:3b:ae:2f:6c:13:64:73:73:d9:01:03:2f:f7:34:32: ac:2a:7b:b5:62:49:54:b5:c3:a7:ce:99:81:29:84:eb:b6:1e: e7:f2:2f:e3:f8:0a:98:e5:65:10:99:3a:8d:47:71:b5:6a:39: 14:d3:7e:2c:87:af:e1:82:8e:1c:57:75:88:f1:da:ac:3b:24: 37:43:bc:ab:b3:83:f0:a1:f8:62:8b:f9:3a:dc:e2:b0:4f:aa: 14:45:03:6a:a4:14:1b:8a:61:fa:92:aa:6e:af:3f:55:fb:eb: e3:32:30:c1:12:f4:90:50:21:aa:6e:af:2a:74:08:ff:be:df: a6:31:80:60:7b:1c:ae:ab:44:40:7d:b8:f7:91:8d:f4:7e:fe: c7:a4:87:8c:95:e2:fc:ff:a4:5a:08:17:27:62:f6:c4:51:c9: 52:bf:66:d7:aa:7e:e6:cb:b4:ac:35:be:61:91:23:69:0b:24: 57:a5:6a:5e:8a:51:10:cd:9e:e3:6b:7e:76:05:99:8b:1d:bc: 02:6a:5e:13:02:bf:97:49:18:19:fb:3b:c1:ce:45:07:bb:c7: cc:9c:ee:fb:b3:00:5d:01:80:a9:69:36:e5:25:3f:c9:2f:1a: 0a:67:59:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQ67btgeNgiR739aCkkocspfHgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4NUUx QTMyMTU4NjAeFw0yNjAyMDEwMzU3MjJaFw0yNjAyMDQxMjIzMjJaMDMxMTAvBgNV BAMTKENBMDAyNjEzMzNDNjgwNTYzREJBN0NFQTg2QjVENzk2QzE3NDBGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiXVoRIu8ej/7aDph9E1Awwfr QnyN7tdkK5lXAAuJsiKSO+JjjVOheLnlta33r8zWU1PpoMfck5F3SALOGRqnoH7U SjPT/rX4pI/9vjV8aLYi2kmJmWKM+8+IGsfnHAv2PZpmUgjoTCMmsdaUUcDPeHEf z9qe2e+xft9q5wNrejJaeCgCaaw6RbxLvTE5aP/HCqTjWsCKFZg1TWgiUZrAI3tq GZBVWNdh9bdBZFTdu7EdjRGGsdlcRgaebKkmK1THOxIMnBJ960pEMEtuL/ghtmAQ T/vhbitAhXaW7hGlzs49AYj/OsEo98OC+WHDPlv/K2TL5OAGJz7p2A9kuXZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygAmEzPGgFY9unzqhrXXlsF0D9EwHwYDVR0j BBgwFoAUxCMEt9DiFuL3MwXSXroYXhoyFYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWE5NmI4MS1kMTI4LTQ5NjUtYTE3Ny1mYWNmMzQxZTdmODkvMC9DNDIzMDRCN0Qw RTIxNkUyRjczMzA1RDI1RUJBMTg1RTFBMzIxNTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4NUUxQTMy MTU4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4 NUUxQTMyMTU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVIANCc3nNTVMCuYVsP1kyuHQCYADuuL2wT ZHNz2QEDL/c0Mqwqe7ViSVS1w6fOmYEphOu2HufyL+P4CpjlZRCZOo1HcbVqORTT fiyHr+GCjhxXdYjx2qw7JDdDvKuzg/Ch+GKL+Trc4rBPqhRFA2qkFBuKYfqSqm6v P1X76+MyMMES9JBQIapuryp0CP++36YxgGB7HK6rREB9uPeRjfR+/sekh4yV4vz/ pFoIFydi9sRRyVK/ZteqfubLtKw1vmGRI2kLJFelal6KURDNnuNrfnYFmYsdvAJq XhMCv5dJGBn7O8HORQe7x8yc7vuzAF0BgKlpNuUlP8kvGgpnWRw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:26 2026 by rpki-client