This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: SXwnoMBqdDh7lNr/zN5V1u+pH1pp/Cew89M51QCXrOc= Subject key identifier: C4:D5:AD:A3:52:02:4E:29:A6:A5:3C:F0:27:F8:26:50:13:8E:DD:99 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 1161AB32276A48D45A9BBCBA799474F3E9051633 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 0230 Signing time: Sat 31 Jan 2026 07:50:55 +0000 Manifest this update: Sat 31 Jan 2026 07:45:55 +0000 Manifest next update: Tue 03 Feb 2026 09:07:55 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 3: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 4: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: oJuoACYkLaTmZfaIRddHZTk+PktQk8WIrBKNIPNb7jM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 09:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:61:ab:32:27:6a:48:d4:5a:9b:bc:ba:79:94:74:f3:e9:05:16:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Jan 31 07:45:55 2026 GMT Not After : Feb 3 09:07:55 2026 GMT Subject: CN=C4D5ADA352024E29A6A53CF027F82650138EDD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:74:86:a5:a2:9f:35:d2:f5:4c:eb:2a:14: b2:40:ff:3e:36:15:7c:49:9f:86:8e:8a:f1:b5:c7: 1c:c9:f0:86:0e:8a:2c:57:01:15:bc:fd:98:20:0a: 81:df:21:e4:47:01:48:3d:b8:ae:43:86:94:19:68: 6e:2a:cc:b1:b6:cf:93:44:1d:ca:f7:37:7f:78:ff: 96:52:12:59:d9:0c:64:09:82:67:10:82:78:9d:a9: f0:e7:8b:9b:56:5c:01:1b:40:6b:0a:1c:15:dc:e3: dd:02:d9:33:17:13:02:b9:75:d1:39:37:65:80:74: fe:7d:93:03:cb:7e:5c:94:61:44:c6:7e:e5:c1:90: 0c:c1:fe:50:eb:50:c1:8b:31:3b:b3:a9:90:49:40: bd:dc:43:37:61:fc:c0:a5:00:d2:28:ee:ca:5d:fd: 79:d6:51:e2:e8:1f:e2:a5:82:58:30:bf:fa:9b:f8: 1b:16:ea:74:92:16:21:76:98:81:20:1f:90:21:6f: 33:76:23:37:98:f0:aa:13:04:5a:8d:f3:3c:7b:c9: 1a:c7:0d:3e:32:59:f0:5e:28:50:6f:d9:56:82:61: ac:91:ed:c1:75:bd:40:e2:1e:ec:76:91:6e:2e:7d: 68:1a:0a:58:4c:52:9f:83:84:e9:6e:12:c2:5a:7e: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D5:AD:A3:52:02:4E:29:A6:A5:3C:F0:27:F8:26:50:13:8E:DD:99 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:b2:71:f0:40:ed:1c:e0:01:12:39:2d:97:b2:ef:72:71:48: 52:a1:16:a4:91:a7:53:76:00:a1:07:26:68:35:ea:ac:d1:84: 48:a9:4b:39:4e:c2:1c:57:22:53:89:bb:e5:28:43:0b:b5:80: 89:b7:a7:a7:cc:50:43:4a:e1:58:2e:10:a6:e6:73:cb:e5:72: 33:b7:ce:23:bd:4e:7e:10:97:4e:02:ab:e9:9e:be:e9:ba:49: 62:5e:28:05:6d:8a:85:af:24:17:3a:eb:30:9a:78:5d:07:96: 36:03:8c:55:8e:f4:10:bb:ed:42:6c:e3:c0:0c:86:d7:c0:6c: fa:84:65:c8:0e:98:03:33:23:1b:c8:15:d0:9d:db:f8:9f:69: bf:bf:34:3e:52:24:5a:e5:db:85:7a:3d:b4:41:2d:05:3b:e0: e7:95:b0:13:e4:28:c1:0f:fd:3d:c1:0d:06:11:a3:3c:a5:ae: e4:d3:39:9e:a0:43:bd:02:e1:af:dd:c7:34:d6:17:23:02:e8: e3:9e:18:8e:7c:4c:47:f1:ac:01:2d:f8:5e:4e:87:cb:5e:93: a2:b5:4f:88:48:ef:6a:f6:8d:76:50:67:0a:a0:69:c2:3b:c2: f9:b7:0d:a8:3a:c5:b9:2f:5e:cc:13:ed:f6:ca:b3:f4:85:e9: ae:38:ad:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWGrMidqSNRam7y6eZR08+kFFjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNjAxMzEwNzQ1NTVaFw0yNjAyMDMwOTA3NTVaMDMxMTAvBgNV BAMTKEM0RDVBREEzNTIwMjRFMjlBNkE1M0NGMDI3RjgyNjUwMTM4RUREOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YXSGpaKfNdL1TOsqFLJA/z42 FXxJn4aOivG1xxzJ8IYOiixXARW8/ZggCoHfIeRHAUg9uK5DhpQZaG4qzLG2z5NE Hcr3N394/5ZSElnZDGQJgmcQgnidqfDni5tWXAEbQGsKHBXc490C2TMXEwK5ddE5 N2WAdP59kwPLflyUYUTGfuXBkAzB/lDrUMGLMTuzqZBJQL3cQzdh/MClANIo7spd /XnWUeLoH+Klglgwv/qb+BsW6nSSFiF2mIEgH5AhbzN2IzeY8KoTBFqN8zx7yRrH DT4yWfBeKFBv2VaCYayR7cF1vUDiHux2kW4ufWgaClhMUp+DhOluEsJafnVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxNWto1ICTimmpTzwJ/gmUBOO3ZkwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOWycfBA7RzgARI5LZey73JxSFKhFqSRp1N2 AKEHJmg16qzRhEipSzlOwhxXIlOJu+UoQwu1gIm3p6fMUENK4VguEKbmc8vlcjO3 ziO9Tn4Ql04Cq+mevum6SWJeKAVtioWvJBc66zCaeF0HljYDjFWO9BC77UJs48AM htfAbPqEZcgOmAMzIxvIFdCd2/ifab+/ND5SJFrl24V6PbRBLQU74OeVsBPkKMEP /T3BDQYRozylruTTOZ6gQ70C4a/dxzTWFyMC6OOeGI58TEfxrAEt+F5Oh8tek6K1 T4hI72r2jXZQZwqgacI7wvm3Dag6xbkvXswT7fbKs/SF6a44rZE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:13 2026 by rpki-client