This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: IXAQkrK/VowVoTlxIy2rGJelOb9xGeMrTWDhiNlabR8= Subject key identifier: 5C:7E:6C:9A:73:FC:52:9C:AF:5B:F7:76:68:52:68:12:2B:0E:CF:57 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 53C57975659F2CA6E3D5ED62BC4FC218AD0877A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 01D5 Signing time: Sat 31 Jan 2026 11:51:46 +0000 Manifest this update: Sat 31 Jan 2026 11:46:46 +0000 Manifest next update: Tue 03 Feb 2026 12:18:46 +0000 Files and hashes: 1: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: JwBkepnpQbBJB71OebvFB7o8bqpYUdblIRtS8UsRdpI=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 2hd2Kw7s5AZpDbq89PNUJ3gEV2BNvCaqP2MGIQVe7Kc=) 3: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: Wtyw13V4XM7A01ucWtMSCQ1BsH0SCZKrW6jVbe62dwc=) 4: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: Oumury3urRnWmCOWYXk8CSsBpxb6IJtRTsy6AU+SrGs=) 5: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 8vz8EiP54cEwQfLbkw39aE70XAXWioBBsBb0DcsdEz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c5:79:75:65:9f:2c:a6:e3:d5:ed:62:bc:4f:c2:18:ad:08:77:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Jan 31 11:46:46 2026 GMT Not After : Feb 3 12:18:46 2026 GMT Subject: CN=5C7E6C9A73FC529CAF5BF776685268122B0ECF57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:85:1d:8f:ed:39:1a:ed:f3:6e:09:d9:91: a5:af:84:20:6a:d9:06:2d:60:25:77:ad:e7:f3:87: 7e:7b:ff:1a:ab:8a:eb:e3:9a:87:86:28:84:61:38: 21:7f:e6:5a:22:bb:8e:7c:47:69:46:c7:9d:fd:d0: 0a:02:f5:91:e9:55:eb:1e:fb:7b:68:45:f4:a0:25: 4e:7b:cc:7a:33:0b:fe:bb:e6:36:a2:14:1a:71:e9: 14:f6:91:00:a3:9d:7f:27:62:84:5d:54:b5:98:d8: df:dd:8a:09:24:8b:6d:08:45:83:09:81:d1:0b:3b: 2e:04:e1:a5:40:5c:ac:c7:d6:b4:8e:64:14:c0:f2: 8c:2c:8e:e4:24:0b:33:15:07:8a:63:e4:32:e2:c1: c5:4f:63:7b:df:31:cf:47:2e:76:98:59:74:99:e4: fe:ba:a6:6c:e0:d4:1a:d0:09:e9:74:f0:54:01:6a: 71:76:5c:7a:55:5f:14:41:ce:3e:8f:ea:9f:58:4e: fb:b1:56:35:ed:3a:db:1a:d4:44:97:b5:6b:25:e2: 39:bc:e8:0f:05:e9:77:e0:24:99:f7:04:53:56:09: d4:3f:84:45:a3:c0:96:e6:99:98:3b:6f:41:d6:ec: e1:56:ed:06:62:34:e9:a6:b1:fd:28:98:cf:3c:4e: e9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:6C:9A:73:FC:52:9C:AF:5B:F7:76:68:52:68:12:2B:0E:CF:57 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e3:79:14:48:b3:9a:46:4b:bd:b9:99:fa:96:4b:35:83:16: 12:0e:c4:12:90:9d:38:a1:e1:42:67:b9:93:62:29:3f:bd:44: 74:33:f3:d9:5c:b9:22:53:a8:fb:4c:d0:ae:4d:e1:99:b1:b4: 32:6b:df:2e:8d:03:9c:8f:6f:38:fe:11:44:7d:b6:72:dd:39: 43:4f:5b:53:e7:eb:16:5d:46:75:16:50:b6:f2:9f:e8:15:bd: 82:d1:15:06:45:67:9f:d8:7e:86:8d:a5:43:23:f5:1d:73:bf: a9:f3:70:a6:26:e3:2a:c5:07:c0:81:3c:ce:64:24:25:4e:f0: 9e:7b:5c:6d:ee:95:41:55:9d:d1:70:df:d0:55:83:f0:3e:c0: 89:0f:9d:b5:25:11:58:f8:41:f5:c0:82:8c:5e:10:34:86:5f: 2c:ad:aa:d5:68:6a:f0:bc:e9:e9:c4:ca:f4:ea:57:ce:5f:f6: 46:98:ec:6d:57:28:64:1b:51:04:6c:35:99:9f:c9:3e:92:fd: eb:e4:90:15:26:00:36:b0:21:0a:48:3d:40:9d:bd:7a:72:76: f9:5a:35:54:d3:07:71:1b:ee:cd:6d:10:a4:9f:8c:3a:f9:b8: 00:8b:f2:d9:6c:5c:fc:f3:fa:e4:3f:6b:e3:a8:d9:9e:7b:d7: 12:55:64:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8V5dWWfLKbj1e1ivE/CGK0Id6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNjAxMzExMTQ2NDZaFw0yNjAyMDMxMjE4NDZaMDMxMTAvBgNV BAMTKDVDN0U2QzlBNzNGQzUyOUNBRjVCRjc3NjY4NTI2ODEyMkIwRUNGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGIUdj+05Gu3zbgnZkaWvhCBq 2QYtYCV3refzh357/xqriuvjmoeGKIRhOCF/5loiu458R2lGx5390AoC9ZHpVese +3toRfSgJU57zHozC/675jaiFBpx6RT2kQCjnX8nYoRdVLWY2N/digkki20IRYMJ gdELOy4E4aVAXKzH1rSOZBTA8owsjuQkCzMVB4pj5DLiwcVPY3vfMc9HLnaYWXSZ 5P66pmzg1BrQCel08FQBanF2XHpVXxRBzj6P6p9YTvuxVjXtOtsa1ESXtWsl4jm8 6A8F6XfgJJn3BFNWCdQ/hEWjwJbmmZg7b0HW7OFW7QZiNOmmsf0omM88TunZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXH5smnP8UpyvW/d2aFJoEisOz1cwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbjeRRIs5pGS725mfqWSzWDFhIOxBKQnTih 4UJnuZNiKT+9RHQz89lcuSJTqPtM0K5N4ZmxtDJr3y6NA5yPbzj+EUR9tnLdOUNP W1Pn6xZdRnUWULbyn+gVvYLRFQZFZ5/YfoaNpUMj9R1zv6nzcKYm4yrFB8CBPM5k JCVO8J57XG3ulUFVndFw39BVg/A+wIkPnbUlEVj4QfXAgoxeEDSGXyytqtVoavC8 6enEyvTqV85f9kaY7G1XKGQbUQRsNZmfyT6S/evkkBUmADawIQpIPUCdvXpydvla NVTTB3Eb7s1tEKSfjDr5uACL8tlsXPzz+uQ/a+Oo2Z571xJVZH0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:20 2026 by rpki-client