This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: fvCWkRMOMgVFsM5+I4f5/i3HSCuSvN0tZlooFk3UkfQ= Subject key identifier: C9:78:48:00:CF:47:81:59:A6:39:DC:38:04:74:7D:CA:86:DE:5F:A8 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 6EFCA3FB15E26C1D42D82986B89C3C9C6AF9A539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 022C Signing time: Sat 31 Jan 2026 16:42:02 +0000 Manifest this update: Sat 31 Jan 2026 16:37:02 +0000 Manifest next update: Wed 04 Feb 2026 00:24:02 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) 2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=) 3: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: 6ArsGau2j0umgcH6pp1P7bMDz1ET/zj71E6oLWTlTww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 00:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fc:a3:fb:15:e2:6c:1d:42:d8:29:86:b8:9c:3c:9c:6a:f9:a5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Jan 31 16:37:02 2026 GMT Not After : Feb 4 00:24:02 2026 GMT Subject: CN=C9784800CF478159A639DC3804747DCA86DE5FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:77:5f:4a:c5:6f:12:61:fa:60:0e:95:49: dc:fd:79:d7:f8:20:ae:29:b7:46:6b:2c:75:74:22: 5b:3e:1b:d9:2a:cb:a3:37:da:8f:c4:5b:13:b2:4c: 23:b7:04:d7:0b:32:ab:28:dc:4c:aa:39:d9:47:58: d9:2d:2b:35:b9:6b:80:e5:56:be:dc:8a:1d:2f:ff: 5f:44:1a:81:cc:eb:ac:b7:d7:59:e3:0e:8d:e4:c5: 85:93:81:26:d4:96:41:b9:80:d9:c2:be:3e:34:d8: 54:06:a3:c1:ea:ce:d4:d3:71:a2:0d:63:c0:78:6d: 64:d8:71:5f:18:35:0b:35:aa:02:4c:50:57:f1:4b: 86:07:ad:98:6f:8f:a9:4d:76:c1:55:6f:d8:53:c7: bc:a3:51:c1:86:d3:66:2c:a5:55:0d:96:c9:57:ab: dc:47:81:ad:8f:80:50:4d:b7:9e:34:e7:5d:18:8f: dc:b1:17:ce:62:e5:e0:44:61:3d:66:77:d7:1d:41: 6b:48:ca:02:b6:11:0d:09:5f:34:f9:75:cd:e9:ad: cd:1e:73:b3:45:24:10:52:88:40:63:c5:b8:6a:f6: 48:dd:eb:50:66:85:13:d7:31:24:00:16:2f:af:44: 72:47:69:d3:b7:98:64:fb:97:d0:50:b3:3f:7c:7f: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:48:00:CF:47:81:59:A6:39:DC:38:04:74:7D:CA:86:DE:5F:A8 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7f:e2:a4:15:89:5d:fe:64:69:c0:dd:90:b4:24:28:c7:74: c5:79:01:10:a8:db:12:da:70:57:64:b8:d7:b4:93:94:1b:34: 67:cd:b4:3a:0f:9e:3d:a0:7f:2c:30:3b:a0:1b:95:6b:34:c3: 99:90:9d:5a:6c:46:5e:94:cb:aa:d9:5d:2d:df:4c:9d:e6:aa: 52:d7:75:0c:e5:68:7c:f0:6a:c7:37:32:97:90:b8:dd:cd:ea: fd:fe:42:81:b1:f3:cc:8b:4d:7c:ef:bd:8e:03:86:64:16:70: 67:5d:2b:46:95:34:64:1b:a2:45:4b:32:55:31:c1:4b:7f:73: fa:8c:c6:26:c5:ea:95:44:d8:b5:47:2e:cc:f3:af:ba:21:18: de:b1:37:bc:a3:68:7e:60:99:43:08:6d:b7:31:89:1b:40:5f: 80:94:66:19:ba:15:a4:17:fb:59:61:a1:ec:52:66:d9:8f:0a: c6:14:05:a1:2a:ce:82:19:80:8a:9b:00:7f:2a:4e:ce:69:7d: ca:80:99:c3:2f:8b:a2:b4:fc:0e:81:b4:ed:19:00:33:ab:76: 87:54:08:3f:fb:a3:22:ce:3b:34:87:43:45:ed:9e:35:ec:fb: 17:b4:3d:86:7e:4a:a0:d6:1d:8b:e9:51:31:de:bb:1f:f5:8a: da:24:62:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvyj+xXibB1C2CmGuJw8nGr5pTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNjAxMzExNjM3MDJaFw0yNjAyMDQwMDI0MDJaMDMxMTAvBgNV BAMTKEM5Nzg0ODAwQ0Y0NzgxNTlBNjM5REMzODA0NzQ3RENBODZERTVGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUHdfSsVvEmH6YA6VSdz9edf4 IK4pt0ZrLHV0Ils+G9kqy6M32o/EWxOyTCO3BNcLMqso3EyqOdlHWNktKzW5a4Dl Vr7cih0v/19EGoHM66y311njDo3kxYWTgSbUlkG5gNnCvj402FQGo8HqztTTcaIN Y8B4bWTYcV8YNQs1qgJMUFfxS4YHrZhvj6lNdsFVb9hTx7yjUcGG02YspVUNlslX q9xHga2PgFBNt540510Yj9yxF85i5eBEYT1md9cdQWtIygK2EQ0JXzT5dc3prc0e c7NFJBBSiEBjxbhq9kjd61BmhRPXMSQAFi+vRHJHadO3mGT7l9BQsz98f07VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXhIAM9HgVmmOdw4BHR9yobeX6gwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZ/4qQViV3+ZGnA3ZC0JCjHdMV5ARCo2xLa cFdkuNe0k5QbNGfNtDoPnj2gfywwO6AblWs0w5mQnVpsRl6Uy6rZXS3fTJ3mqlLX dQzlaHzwasc3MpeQuN3N6v3+QoGx88yLTXzvvY4DhmQWcGddK0aVNGQbokVLMlUx wUt/c/qMxibF6pVE2LVHLszzr7ohGN6xN7yjaH5gmUMIbbcxiRtAX4CUZhm6FaQX +1lhoexSZtmPCsYUBaEqzoIZgIqbAH8qTs5pfcqAmcMvi6K0/A6BtO0ZADOrdodU CD/7oyLOOzSHQ0XtnjXs+xe0PYZ+SqDWHYvpUTHeux/1itokYvM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:15 2026 by rpki-client