This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: 3uTJv6J6MJrkS0C1yu+D4GiG4HZ2SHGMBZMAVznL9+4= Subject key identifier: 2A:B3:6E:B0:A5:CA:65:66:7B:9E:D5:A4:D5:EB:AF:27:D9:A9:F4:E0 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 5BE0EE8826464B91F493DBA3AC72563DFD69E385 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 98 Signing time: Sat 31 Jan 2026 11:50:58 +0000 Manifest this update: Sat 31 Jan 2026 11:45:58 +0000 Manifest next update: Tue 03 Feb 2026 18:01:58 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: jt34nM3YfxW9/TeZWqXpvYOenkNKIUcWXEfir1a1Ffw=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e0:ee:88:26:46:4b:91:f4:93:db:a3:ac:72:56:3d:fd:69:e3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Jan 31 11:45:58 2026 GMT Not After : Feb 3 18:01:58 2026 GMT Subject: CN=2AB36EB0A5CA65667B9ED5A4D5EBAF27D9A9F4E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d4:f0:f1:a0:58:34:67:5f:b8:b5:36:b3:e3: 4e:77:9e:60:91:2b:52:ca:09:88:3c:67:ab:36:bf: 8e:b1:ac:63:94:23:04:11:8e:96:23:af:e8:2b:2f: 5d:03:f9:7b:54:45:6a:ef:27:b2:45:a9:3c:b3:72: 33:4f:89:2a:63:c3:99:d6:50:3a:fc:03:95:62:73: 37:df:86:69:e3:06:e4:6f:c8:eb:89:1d:b1:11:3c: c1:1e:95:2c:41:c9:4b:d2:06:53:03:eb:af:e0:0c: 06:96:8d:5a:ca:10:8f:d9:07:c5:f3:0b:67:eb:8a: f4:2d:d7:bf:f9:5e:99:9a:3e:d6:a2:f3:86:ee:3c: 24:0d:e7:25:0a:31:9f:fc:0e:2f:96:77:9e:04:e8: dd:f0:1d:ab:48:27:fd:0d:02:5a:84:8c:1e:1b:11: c7:35:27:0a:4d:54:1a:dc:0b:a9:e6:20:4b:b3:a8: ec:66:9d:e9:08:8b:98:bf:0f:7f:35:b8:26:7b:c4: 28:b3:03:4c:e7:46:de:62:52:da:7a:a5:98:ee:a0: eb:43:cf:c1:1c:09:80:b0:f5:1c:d0:fc:c8:16:20: ab:af:d7:b1:f2:e2:e4:46:94:e8:2c:c2:36:ca:bf: 15:16:7e:2e:fc:d8:2d:fa:7f:e0:25:cb:df:92:8b: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B3:6E:B0:A5:CA:65:66:7B:9E:D5:A4:D5:EB:AF:27:D9:A9:F4:E0 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:ed:fb:f7:00:3c:74:ff:58:5b:5a:77:81:46:04:df:74: 7c:7d:5a:29:dc:84:a8:4a:e1:b1:ac:f0:fb:a0:66:57:10:a5: 80:3f:39:74:e2:75:43:f0:c5:ce:6a:24:91:eb:3e:fd:74:a1: 45:66:a6:de:e1:42:db:a7:0b:44:15:ff:5f:b0:e7:dc:21:77: f0:9c:7f:98:f1:8e:30:90:f7:22:09:55:66:4f:44:41:5c:bd: a0:08:d6:b1:15:56:c6:fc:9a:72:32:3b:ad:b0:ad:7d:62:52: fd:25:1c:1e:ce:1b:b0:a0:1f:cc:de:9b:ca:46:1c:e1:a0:8c: c7:e0:aa:44:2c:c0:fb:ed:d3:4f:c1:bc:85:4f:b3:62:5c:ce: be:f4:94:e9:8e:e0:bb:db:05:80:b7:3e:75:80:fa:23:39:13: 02:41:51:93:b2:e1:59:2c:cf:94:c5:b8:51:20:4b:e8:03:13: ab:31:ec:ff:80:e7:2a:09:10:83:88:81:07:81:dd:db:9c:ee: 73:32:a9:70:58:f6:7b:ac:5b:c9:e3:3c:7e:15:67:d7:14:c4: 5a:92:dc:79:c5:29:e5:1f:e5:b2:04:70:fe:65:b0:c0:15:d4: 4d:e7:84:ff:65:e4:0c:15:b5:6e:05:79:94:b0:0a:d1:90:e2: 2f:12:64:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+DuiCZGS5H0k9ujrHJWPf1p44UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNjAxMzExMTQ1NThaFw0yNjAyMDMxODAxNThaMDMxMTAvBgNV BAMTKDJBQjM2RUIwQTVDQTY1NjY3QjlFRDVBNEQ1RUJBRjI3RDlBOUY0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD41PDxoFg0Z1+4tTaz4053nmCR K1LKCYg8Z6s2v46xrGOUIwQRjpYjr+grL10D+XtURWrvJ7JFqTyzcjNPiSpjw5nW UDr8A5ViczffhmnjBuRvyOuJHbERPMEelSxByUvSBlMD66/gDAaWjVrKEI/ZB8Xz C2frivQt17/5XpmaPtai84buPCQN5yUKMZ/8Di+Wd54E6N3wHatIJ/0NAlqEjB4b Ecc1JwpNVBrcC6nmIEuzqOxmnekIi5i/D381uCZ7xCizA0znRt5iUtp6pZjuoOtD z8EcCYCw9RzQ/MgWIKuv17Hy4uRGlOgswjbKvxUWfi782C36f+Aly9+SiwIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrNusKXKZWZ7ntWk1euvJ9mp9OAwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlm7fv3ADx0/1hbWneBRgTfdHx9WinchKhK 4bGs8PugZlcQpYA/OXTidUPwxc5qJJHrPv10oUVmpt7hQtunC0QV/1+w59whd/Cc f5jxjjCQ9yIJVWZPREFcvaAI1rEVVsb8mnIyO62wrX1iUv0lHB7OG7CgH8zem8pG HOGgjMfgqkQswPvt00/BvIVPs2Jczr70lOmO4LvbBYC3PnWA+iM5EwJBUZOy4Vks z5TFuFEgS+gDE6sx7P+A5yoJEIOIgQeB3duc7nMyqXBY9nusW8njPH4VZ9cUxFqS 3HnFKeUf5bIEcP5lsMAV1E3nhP9l5AwVtW4FeZSwCtGQ4i8SZO8= -----END CERTIFICATE-----Generated at Mon Feb 2 12:47:01 2026 by rpki-client