This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json) Hash identifier: PqRJ2eAEyq1lCELQ2pczJNaOJxqMPbwDGcSax1mRVEw= Subject key identifier: 56:A7:D4:B4:A7:0A:BB:31:42:15:79:7D:23:15:51:56:AA:38:11:5F Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 482185E44C62E1F5882783BACB871E875AA80B54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft Manifest number: D5 Signing time: Sun 01 Feb 2026 22:32:04 +0000 Manifest this update: Sun 01 Feb 2026 22:27:04 +0000 Manifest next update: Thu 05 Feb 2026 01:31:04 +0000 Files and hashes: 1: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: pL3DC6IRvdxgcTNXOWS2DEiZ3clbpbiMZva8RGpfrM4=) 2: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=) 3: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=) 4: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=) 5: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=) 6: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=) 7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=) 8: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 01:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:21:85:e4:4c:62:e1:f5:88:27:83:ba:cb:87:1e:87:5a:a8:0b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Feb 1 22:27:04 2026 GMT Not After : Feb 5 01:31:04 2026 GMT Subject: CN=56A7D4B4A70ABB314215797D23155156AA38115F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:a5:9e:51:49:ff:d6:a7:82:c9:10:95:4c: 1a:d3:c1:88:bd:bc:5f:22:fa:29:43:6e:7b:24:09: 51:3d:72:22:17:3e:92:9e:72:20:c2:6a:db:41:df: 2f:e9:a3:bf:58:d8:71:8d:42:a1:10:96:40:50:4c: 45:d3:82:6d:44:38:a5:2b:26:ee:c1:bf:9c:b2:4e: b9:b2:b9:95:09:4d:0f:b7:c8:32:41:0d:6a:ae:77: 4a:58:a4:33:88:08:b9:96:39:88:55:e0:b9:46:a0: 09:6d:7b:f5:71:05:42:37:84:55:18:0d:33:1a:5f: 9a:0c:fe:6c:da:13:b7:41:ce:c5:17:a7:64:73:e3: 50:ac:80:55:07:d8:5b:5c:af:bc:fd:9b:ea:7c:94: 49:7d:1c:2a:96:ae:d7:71:10:9d:40:0f:c1:c2:4e: 8f:4a:1b:2f:ee:47:a4:db:c2:c3:9b:82:57:b3:01: 89:de:ea:d7:0f:e6:50:bb:4d:6a:fa:81:a6:ed:20: 96:20:53:55:c7:e9:04:5b:5b:25:dc:30:17:5f:a8: 17:b1:0d:e6:01:d1:c1:e5:1e:27:01:11:0a:b5:fb: 09:d4:c5:bf:00:9e:7d:ec:25:60:e6:d7:94:68:9d: 31:64:86:75:ed:28:a5:d3:89:0a:83:05:1d:46:d9: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A7:D4:B4:A7:0A:BB:31:42:15:79:7D:23:15:51:56:AA:38:11:5F X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f4:05:3a:da:50:91:d3:e7:9b:0f:4b:42:f0:98:97:17:ac: 24:b7:24:ad:57:91:79:aa:e2:c3:f4:fd:d8:f7:51:e4:2f:8a: c7:8a:72:77:2b:19:be:db:17:cb:10:79:7f:82:71:9c:50:7d: 47:64:39:58:eb:e6:79:65:93:10:d4:06:3c:68:be:35:d1:d0: c8:6b:ce:82:f0:23:e3:65:f8:bf:80:cc:ab:17:67:93:22:78: 18:31:65:d4:df:37:f8:9e:e6:09:31:76:48:64:f8:44:35:4c: d2:d9:5b:f4:02:6b:72:62:53:17:40:78:9c:9b:86:a3:6a:71: 57:19:17:ef:2b:57:94:de:8c:19:ab:fa:55:45:2f:09:07:e5: a5:9a:fb:e6:de:6d:40:a7:0e:83:66:4d:c6:f0:7f:50:1b:f3: ce:33:73:8c:2d:7d:fb:06:a4:51:a5:28:9f:e1:e9:dc:65:77: 97:3e:6c:ef:12:88:f5:03:18:2a:4e:17:43:4c:ba:a3:4b:a4: d8:7a:a7:0e:b4:43:f0:3a:69:b8:b6:85:22:6b:b5:1b:62:82: 78:48:94:a1:82:af:a7:f2:52:f6:d2:07:5f:8b:08:f9:3c:da: 1b:2b:fa:31:9d:a5:41:e4:47:77:82:d3:15:4e:f4:00:27:f7: 2a:a8:ca:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCGF5Exi4fWIJ4O6y4ceh1qoC1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNjAyMDEyMjI3MDRaFw0yNjAyMDUwMTMxMDRaMDMxMTAvBgNV BAMTKDU2QTdENEI0QTcwQUJCMzE0MjE1Nzk3RDIzMTU1MTU2QUEzODExNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaqWeUUn/1qeCyRCVTBrTwYi9 vF8i+ilDbnskCVE9ciIXPpKeciDCattB3y/po79Y2HGNQqEQlkBQTEXTgm1EOKUr Ju7Bv5yyTrmyuZUJTQ+3yDJBDWqud0pYpDOICLmWOYhV4LlGoAlte/VxBUI3hFUY DTMaX5oM/mzaE7dBzsUXp2Rz41CsgFUH2Ftcr7z9m+p8lEl9HCqWrtdxEJ1AD8HC To9KGy/uR6TbwsObglezAYne6tcP5lC7TWr6gabtIJYgU1XH6QRbWyXcMBdfqBex DeYB0cHlHicBEQq1+wnUxb8Ann3sJWDm15RonTFkhnXtKKXTiQqDBR1G2ecZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVqfUtKcKuzFCFXl9IxVRVqo4EV8wHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkZDYxMzUtNTQ4Yy00ODgxLWFm NzgtOTNhZjlmMmEyNTE2LzAvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2 NDEyRjQ0RjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT0BTraUJHT55sPS0LwmJcXrCS3JK1XkXmq 4sP0/dj3UeQviseKcncrGb7bF8sQeX+CcZxQfUdkOVjr5nllkxDUBjxovjXR0Mhr zoLwI+Nl+L+AzKsXZ5MieBgxZdTfN/ie5gkxdkhk+EQ1TNLZW/QCa3JiUxdAeJyb hqNqcVcZF+8rV5TejBmr+lVFLwkH5aWa++bebUCnDoNmTcbwf1Ab884zc4wtffsG pFGlKJ/h6dxld5c+bO8SiPUDGCpOF0NMuqNLpNh6pw60Q/A6abi2hSJrtRtignhI lKGCr6fyUvbSB1+LCPk82hsr+jGdpUHkR3eC0xVO9AAn9yqoyu0= -----END CERTIFICATE-----Generated at Mon Feb 2 12:53:40 2026 by rpki-client