This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: Ti9eO3n0VqbyuDLPWM8OmDW1oyn1zadfOUdINzn26WU= Subject key identifier: 19:B8:40:AD:07:06:2C:5D:DE:85:F4:51:35:7B:DA:3C:9A:25:68:51 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 2AF14E085E477988CD18EE1859058E2718227773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 027D Signing time: Sun 01 Feb 2026 11:51:21 +0000 Manifest this update: Sun 01 Feb 2026 11:46:21 +0000 Manifest next update: Wed 04 Feb 2026 23:02:21 +0000 Files and hashes: 1: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: zXfVJROFu1wNZFYzuy/Zh83nRQ+F28KbSjfqHAGhRwc=) 2: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: AtVHs5kAJBkQyj2u1rc3FvQOLg6GUIRmBQO2EJLX0+Y=) 3: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: AA52rkzyrvi9rx6IuPvoxChCUlojIckMTzbSuJyQ2Ps=) 4: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: /Lar0zoBB4XPY+wQ2ITKPZI23ikh0KXVF/LsaIxKVs8=) 5: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: TPGP1WPLeZbCaltrlkU8mbWIgtWk0gBSa5ZHqBY62UE=) 6: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: qH4fRHR0W4MFKh1E1105QryHXU3lSEp8fpTQZ+gmPmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f1:4e:08:5e:47:79:88:cd:18:ee:18:59:05:8e:27:18:22:77:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Feb 1 11:46:21 2026 GMT Not After : Feb 4 23:02:21 2026 GMT Subject: CN=19B840AD07062C5DDE85F451357BDA3C9A256851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:3f:ef:92:bf:75:90:94:17:8f:5a:b9:3b: e0:91:d3:0c:f4:e2:9c:0b:42:3a:97:f4:80:23:08: 28:22:35:22:99:4f:ce:24:fa:26:c9:9e:d2:cc:75: 83:d6:30:58:b0:f6:07:1a:ee:9a:62:62:4e:b4:e8: 74:29:b3:3c:2a:c3:df:fe:13:6f:db:6c:bb:9a:e5: 6a:3c:a3:bd:8f:16:7e:98:65:76:f7:de:3f:2a:6d: aa:96:02:07:1e:cf:a1:6d:00:e6:f1:74:30:fe:82: 87:d2:ff:2e:8b:11:19:05:99:ec:5d:16:89:03:ae: 44:d3:c4:44:9c:9d:f7:99:98:d2:0b:ec:78:4e:37: 29:b8:d7:e1:54:7d:4c:ac:85:f2:e7:dc:fd:89:f0: b0:88:07:af:51:b0:e7:b4:df:60:cc:41:a8:bb:c3: f8:87:c9:24:1d:20:ac:1a:1d:b7:c2:c4:7d:c2:3f: 30:d6:b3:88:da:37:6a:31:b2:ed:92:db:b2:73:15: 31:73:24:04:2c:02:08:bf:66:d2:38:56:4d:f4:28: ae:6f:99:8e:b4:03:39:35:a7:c9:07:b5:44:ae:e7: f6:51:f8:a7:f2:d9:68:97:1b:1c:c3:1e:a8:fa:9a: 89:f5:22:d3:12:6f:47:fd:e2:4a:0a:c1:9b:b7:6f: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B8:40:AD:07:06:2C:5D:DE:85:F4:51:35:7B:DA:3C:9A:25:68:51 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0c:a7:5c:b3:35:4d:55:6c:36:03:ef:b8:a9:f5:23:c0:fa: c3:e8:d6:f8:1c:18:a7:e9:5a:7a:b0:33:79:b8:3d:72:aa:df: fe:76:ef:81:43:5d:0a:5b:0e:8c:29:56:c1:01:7e:31:a7:71: 05:b3:68:a7:25:7e:e2:bd:97:a0:f1:07:3c:77:32:8f:0c:4d: 5b:3e:98:93:cf:a2:6d:0f:6b:ba:88:d2:ea:b9:2f:ab:c7:95: 9e:cb:a9:25:37:cf:7f:b1:f6:dc:eb:8b:c6:79:b2:7c:f6:d1: 64:d5:4e:72:fc:b6:b8:e1:99:0c:30:6b:89:f5:37:2b:f6:08: ec:c8:3c:f9:cf:7a:f4:64:3e:9f:69:27:0d:96:3f:25:83:ae: f8:0e:65:9b:0d:d6:45:c6:b8:eb:15:7c:82:fb:35:53:06:bf: 1b:b4:9f:e4:ea:68:f4:23:30:d5:51:89:c9:15:7a:09:78:3d: 23:a4:6b:b8:45:fd:2a:06:16:e6:bd:8c:1d:62:8d:37:1a:64: fe:af:5f:bc:be:da:d7:60:88:c4:5d:ad:b3:f3:2f:8d:eb:6a: 47:27:06:34:3f:4e:fe:76:9c:81:d8:20:74:88:e0:f3:df:1a: dc:76:c0:c2:2b:b1:b9:04:6b:48:83:e8:d8:5a:d9:1b:b1:5e: 7f:f7:a8:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvFOCF5HeYjNGO4YWQWOJxgid3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNjAyMDExMTQ2MjFaFw0yNjAyMDQyMzAyMjFaMDMxMTAvBgNV BAMTKDE5Qjg0MEFEMDcwNjJDNURERTg1RjQ1MTM1N0JEQTNDOUEyNTY4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7D/vkr91kJQXj1q5O+CR0wz0 4pwLQjqX9IAjCCgiNSKZT84k+ibJntLMdYPWMFiw9gca7ppiYk606HQpszwqw9/+ E2/bbLua5Wo8o72PFn6YZXb33j8qbaqWAgcez6FtAObxdDD+gofS/y6LERkFmexd FokDrkTTxEScnfeZmNIL7HhONym41+FUfUyshfLn3P2J8LCIB69RsOe032DMQai7 w/iHySQdIKwaHbfCxH3CPzDWs4jaN2oxsu2S27JzFTFzJAQsAgi/ZtI4Vk30KK5v mY60Azk1p8kHtUSu5/ZR+Kfy2WiXGxzDHqj6mon1ItMSb0f94koKwZu3b9BdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGbhArQcGLF3ehfRRNXvaPJolaFEwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsMp1yzNU1VbDYD77ip9SPA+sPo1vgcGKfp WnqwM3m4PXKq3/5274FDXQpbDowpVsEBfjGncQWzaKclfuK9l6DxBzx3Mo8MTVs+ mJPPom0Pa7qI0uq5L6vHlZ7LqSU3z3+x9tzri8Z5snz20WTVTnL8trjhmQwwa4n1 Nyv2COzIPPnPevRkPp9pJw2WPyWDrvgOZZsN1kXGuOsVfIL7NVMGvxu0n+TqaPQj MNVRickVegl4PSOka7hF/SoGFua9jB1ijTcaZP6vX7y+2tdgiMRdrbPzL43rakcn BjQ/Tv52nIHYIHSI4PPfGtx2wMIrsbkEa0iD6Nha2RuxXn/3qJI= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:05 2026 by rpki-client