This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: DoB+8n7MhhCKvnLJ1AdNXQm6JGGvpYU9eP6+fvZq9aQ= Subject key identifier: 14:A9:E3:D5:BB:3D:EC:22:96:C4:DB:A4:D4:91:AA:7C:07:30:87:05 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 255DA2CE30B40FDF3D060269C6536E2C36992E62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04E3 Signing time: Sat 31 Jan 2026 20:32:01 +0000 Manifest this update: Sat 31 Jan 2026 20:27:01 +0000 Manifest next update: Wed 04 Feb 2026 07:22:01 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: dQmQKvGLUa2/Jo34M8X9QZWMtNBkrjcNHgHtneBrSX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 07:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5d:a2:ce:30:b4:0f:df:3d:06:02:69:c6:53:6e:2c:36:99:2e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Jan 31 20:27:01 2026 GMT Not After : Feb 4 07:22:01 2026 GMT Subject: CN=14A9E3D5BB3DEC2296C4DBA4D491AA7C07308705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:56:10:c3:6d:b3:f2:cc:2d:49:60:f8:da: 2b:65:e3:36:ba:9d:84:b1:a4:5f:5d:e6:d7:e1:b4: 45:0d:37:cb:4e:69:4f:d3:18:5e:4d:2c:11:66:0c: de:87:35:7e:1f:8a:62:22:94:9b:df:37:b2:21:a0: 5b:24:f9:7c:5f:9a:bd:db:84:7a:ba:91:40:ce:98: 75:5f:d8:55:96:a5:83:d5:64:e5:76:20:f4:fc:3a: 76:b1:69:69:74:b0:01:5d:63:89:33:6d:4f:61:19: b2:5e:c1:1a:d6:69:de:07:6a:a8:be:12:bb:d5:c8: f5:f7:1c:f2:56:69:b9:95:04:f4:1a:88:3e:7f:12: e2:25:4d:50:7c:ed:92:53:1d:0b:df:d5:b3:5f:ee: 70:88:1f:5d:5e:40:d5:de:1d:ac:4e:36:30:47:f8: bb:75:2c:00:96:83:6f:72:22:e2:7c:38:d6:7a:1b: a8:7e:7a:c1:b7:56:f8:9c:fa:70:76:ba:1b:83:13: aa:a2:24:80:a0:28:e1:ba:70:20:af:da:de:ce:aa: 49:41:69:5f:3a:cc:87:e9:d9:58:cf:59:28:85:71: d5:24:96:86:a4:40:cd:2e:6e:61:93:81:0b:59:b6: ad:30:ee:39:e9:f2:62:b0:de:83:be:da:f8:f8:7d: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A9:E3:D5:BB:3D:EC:22:96:C4:DB:A4:D4:91:AA:7C:07:30:87:05 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:40:8a:6e:4e:09:6e:7b:cf:a0:12:5e:99:f7:ec:c9:5e:25: 38:86:0c:34:27:ab:68:6f:7a:10:ad:27:03:c4:d0:a6:11:49: af:79:78:57:f1:ee:d1:fe:40:88:1c:f0:2e:13:35:79:c7:7f: 1e:37:e9:ab:cd:dc:bf:23:74:f7:02:c5:a2:1a:dc:d5:b2:59: 5b:dd:11:58:f5:79:42:f4:46:86:90:c8:ea:6b:09:ae:2f:b9: b9:50:41:e7:53:2c:00:35:c7:60:6a:3c:4f:0c:ca:a2:bc:77: 03:f6:4c:ba:0c:8f:50:04:db:f3:f4:96:d4:ff:e9:4c:9b:b1: d1:a0:09:76:31:c9:df:c4:3c:c3:47:49:0a:14:55:fc:d1:ba: da:ea:24:18:4a:0c:fc:ec:f6:f7:1b:0e:fa:6f:b7:f9:4a:f0: c6:3b:13:8b:78:bc:84:e0:de:2f:00:d9:bd:bb:f9:96:44:0c: fa:23:c2:5a:c9:82:d3:58:82:0d:56:30:14:b1:72:eb:d0:b6: 48:e2:ff:04:9f:23:b0:d1:ba:fa:0a:ce:7c:e6:7d:b3:5b:99: 09:fb:cb:ec:8d:4a:7c:89:f5:ff:28:99:28:78:65:43:3c:89: 3a:4d:3a:44:7e:42:67:36:96:be:24:6a:3b:a2:69:94:1e:29: c9:ad:93:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJV2izjC0D989BgJpxlNuLDaZLmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNjAxMzEyMDI3MDFaFw0yNjAyMDQwNzIyMDFaMDMxMTAvBgNV BAMTKDE0QTlFM0Q1QkIzREVDMjI5NkM0REJBNEQ0OTFBQTdDMDczMDg3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VFYQw22z8swtSWD42itl4za6 nYSxpF9d5tfhtEUNN8tOaU/TGF5NLBFmDN6HNX4fimIilJvfN7IhoFsk+Xxfmr3b hHq6kUDOmHVf2FWWpYPVZOV2IPT8OnaxaWl0sAFdY4kzbU9hGbJewRrWad4Haqi+ ErvVyPX3HPJWabmVBPQaiD5/EuIlTVB87ZJTHQvf1bNf7nCIH11eQNXeHaxONjBH +Lt1LACWg29yIuJ8ONZ6G6h+esG3Vvic+nB2uhuDE6qiJICgKOG6cCCv2t7OqklB aV86zIfp2VjPWSiFcdUkloakQM0ubmGTgQtZtq0w7jnp8mKw3oO+2vj4fVVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFKnj1bs97CKWxNuk1JGqfAcwhwUwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlAim5OCW57z6ASXpn37MleJTiGDDQnq2hv ehCtJwPE0KYRSa95eFfx7tH+QIgc8C4TNXnHfx436avN3L8jdPcCxaIa3NWyWVvd EVj1eUL0RoaQyOprCa4vublQQedTLAA1x2BqPE8MyqK8dwP2TLoMj1AE2/P0ltT/ 6UybsdGgCXYxyd/EPMNHSQoUVfzRutrqJBhKDPzs9vcbDvpvt/lK8MY7E4t4vITg 3i8A2b27+ZZEDPojwlrJgtNYgg1WMBSxcuvQtkji/wSfI7DRuvoKznzmfbNbmQn7 y+yNSnyJ9f8omSh4ZUM8iTpNOkR+Qmc2lr4kajuiaZQeKcmtkwc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:57:10 2026 by rpki-client