This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: D7OxSMvc8FAncETA8k9hZsAZo5r6+9CFCv/yY0EKOlc= Subject key identifier: 7B:19:87:DB:C6:FA:3F:62:43:77:D1:B9:DD:B8:17:B8:4E:7F:D6:45 Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 4DD2AFDBB7A6AA0BBCBF7458BF186A75A9109B1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 0220 Signing time: Sun 01 Feb 2026 10:41:59 +0000 Manifest this update: Sun 01 Feb 2026 10:36:59 +0000 Manifest next update: Wed 04 Feb 2026 15:03:59 +0000 Files and hashes: 1: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 2: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: O5iNG9TIt4OrZWJw0tGYaGSnR2izpL0LWiD6eFoX9q0=) 3: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) 4: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d2:af:db:b7:a6:aa:0b:bc:bf:74:58:bf:18:6a:75:a9:10:9b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Feb 1 10:36:59 2026 GMT Not After : Feb 4 15:03:59 2026 GMT Subject: CN=7B1987DBC6FA3F624377D1B9DDB817B84E7FD645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:61:d2:b4:55:da:c8:ec:3b:a1:2e:e4:42: 39:1e:3d:e9:b0:8d:e8:a6:a9:48:3a:50:4f:18:64: 15:14:2c:78:6a:49:b1:86:f1:bf:64:8c:54:fe:56: 14:7c:e7:d2:50:69:69:99:74:e0:96:e0:21:23:cf: 63:ce:76:91:a9:a2:a4:5d:8d:09:48:69:1e:83:8f: 17:29:19:7c:1c:56:ff:e7:cf:21:38:4e:cf:6c:76: e7:de:4e:c2:1c:e0:46:81:b7:24:8f:b5:25:59:06: 7b:12:a0:cf:e0:a9:17:00:4c:9b:6e:2f:d3:6a:4c: 4c:00:97:95:f2:6d:ae:90:8a:60:19:c1:22:9e:a0: 01:dc:03:1d:77:4b:4c:17:37:f4:5c:da:8c:af:5d: 63:20:12:09:7c:ca:ae:ea:3b:1e:07:7e:c9:63:60: dd:73:72:91:8c:45:20:1a:0e:4f:c1:69:21:44:ba: d0:c6:35:f2:43:23:8d:33:60:3f:c3:86:67:e5:da: 9b:56:2c:c8:14:eb:22:3e:70:96:04:5e:fe:b4:1b: d2:c0:e6:5b:9a:92:b7:47:11:5d:04:e3:b6:39:14: ab:90:4f:e3:12:f0:fd:40:0e:08:b4:4a:11:d0:0a: 71:44:2f:47:a4:63:6d:38:84:73:ee:25:fe:36:38: 6a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:19:87:DB:C6:FA:3F:62:43:77:D1:B9:DD:B8:17:B8:4E:7F:D6:45 X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:18:db:b3:9b:41:5f:f5:df:bf:17:7c:d4:70:92:45:9a:c9: cc:8f:0f:d3:5a:12:06:2c:cf:b8:a4:50:92:11:ec:94:a5:f3: a6:a5:cf:7a:08:01:ac:72:0a:39:57:4d:f9:00:b0:cf:0e:6b: 5e:47:35:cc:5e:de:d7:64:cf:77:89:68:38:a4:c1:a1:94:f8: 36:d4:7d:2d:ec:ee:78:cd:46:48:df:ce:dc:dc:28:fa:dc:e6: 5a:55:3d:7b:99:cd:a8:a3:ac:37:92:96:77:46:d0:70:83:98: 2c:71:e2:6e:64:8e:af:11:9f:ad:8a:d5:1a:44:35:a7:a6:07: 48:46:f4:a3:27:38:5d:79:da:b5:56:d2:ab:96:b5:88:fb:35: ff:8a:68:4a:88:37:2e:bc:73:4c:db:38:4f:5e:bc:c1:b1:6c: 78:0c:2d:24:3f:7c:1c:0d:90:2f:48:89:34:6f:3a:38:7d:75: 9c:ad:aa:03:8c:c8:11:e0:e6:39:8a:27:c8:52:98:da:b1:6a: 2b:21:0d:29:27:7b:14:a4:4e:cf:0c:da:14:46:7f:0a:3b:b8: 4a:e7:56:bb:06:a4:97:1f:15:6b:52:0d:6b:8b:06:2a:ea:79: 80:5a:19:31:8e:90:56:99:6e:ff:4f:e1:d4:68:00:ed:f2:3e: 61:93:04:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdKv27emqgu8v3RYvxhqdakQmxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNjAyMDExMDM2NTlaFw0yNjAyMDQxNTAzNTlaMDMxMTAvBgNV BAMTKDdCMTk4N0RCQzZGQTNGNjI0Mzc3RDFCOUREQjgxN0I4NEU3RkQ2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcGHStFXayOw7oS7kQjkePemw jeimqUg6UE8YZBUULHhqSbGG8b9kjFT+VhR859JQaWmZdOCW4CEjz2POdpGpoqRd jQlIaR6DjxcpGXwcVv/nzyE4Ts9sdufeTsIc4EaBtySPtSVZBnsSoM/gqRcATJtu L9NqTEwAl5Xyba6QimAZwSKeoAHcAx13S0wXN/Rc2oyvXWMgEgl8yq7qOx4Hfslj YN1zcpGMRSAaDk/BaSFEutDGNfJDI40zYD/Dhmfl2ptWLMgU6yI+cJYEXv60G9LA 5luakrdHEV0E47Y5FKuQT+MS8P1ADgi0ShHQCnFEL0ekY204hHPuJf42OGq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUexmH28b6P2JDd9G53bgXuE5/1kUwHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYY27ObQV/1378XfNRwkkWaycyPD9NaEgYs z7ikUJIR7JSl86alz3oIAaxyCjlXTfkAsM8Oa15HNcxe3tdkz3eJaDikwaGU+DbU fS3s7njNRkjfztzcKPrc5lpVPXuZzaijrDeSlndG0HCDmCxx4m5kjq8Rn62K1RpE NaemB0hG9KMnOF152rVW0quWtYj7Nf+KaEqINy68c0zbOE9evMGxbHgMLSQ/fBwN kC9IiTRvOjh9dZytqgOMyBHg5jmKJ8hSmNqxaishDSknexSkTs8M2hRGfwo7uErn VrsGpJcfFWtSDWuLBirqeYBaGTGOkFaZbv9P4dRoAO3yPmGTBOg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:05 2026 by rpki-client