This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: 28vUimvNcrDacKf7HOgAI/zZsLhuXwaUWw/xamOU1L0= Subject key identifier: 1B:DF:B1:62:B8:55:D2:D2:4C:40:50:7D:44:2A:AC:A0:2C:CF:10:35 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 12EA6C9C480F7CD18E71A2BA390FC7A982F3123B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 0168 Signing time: Sun 01 Feb 2026 06:31:10 +0000 Manifest this update: Sun 01 Feb 2026 06:26:10 +0000 Manifest next update: Wed 04 Feb 2026 13:26:10 +0000 Files and hashes: 1: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: jur3GwCCR/cxdnMD6W4cwMvOKZw4VghZsOtg/kxwW48=) 2: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: fg/QZptFLqxRoiOqaYt9GVklul/Zo57x2b9Yx8hCCKw=) 3: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: 3idb0OHkiPNDV0wFb50Z8Y9de8VNOqKauvNP6Pog78Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ea:6c:9c:48:0f:7c:d1:8e:71:a2:ba:39:0f:c7:a9:82:f3:12:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Feb 1 06:26:10 2026 GMT Not After : Feb 4 13:26:10 2026 GMT Subject: CN=1BDFB162B855D2D24C40507D442AACA02CCF1035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:2d:35:54:72:cd:97:32:0f:a7:ee:ae:a9: cc:f2:98:bf:14:30:3f:ed:05:58:cc:1f:50:66:83: 4a:e6:68:48:ec:be:8b:aa:75:3c:ad:c1:e5:47:32: 9c:db:83:a3:d4:01:53:dc:70:2a:8c:d8:10:75:4a: 62:64:4b:6d:4f:0d:94:78:77:ce:ba:4c:4d:8d:cf: dc:c8:5b:05:af:54:e3:7c:4f:01:f6:1b:3a:71:40: 80:11:f0:ec:60:72:3a:ba:5d:f7:b7:55:52:51:91: 63:58:10:fe:3f:d2:9a:6f:40:ee:d4:8b:91:2d:b0: 1e:cd:bc:d0:7b:03:54:88:34:4b:e7:aa:6c:5a:35: 26:9f:1e:5b:38:32:d9:87:a3:72:bc:f3:c4:21:38: 96:53:03:90:b6:55:0c:7c:f9:40:3c:f1:f2:23:4b: 36:bc:5f:9d:56:d7:b7:26:61:6c:5b:45:9d:1a:0c: 71:a1:80:18:22:6e:f3:54:27:6a:49:58:66:4b:bb: 0c:d0:78:49:c5:5c:6b:45:70:a3:8e:3b:c5:66:3e: 30:92:e2:eb:43:57:18:d8:17:41:42:22:4d:cc:de: dc:74:2e:a6:d0:ff:f8:d9:43:87:cb:7e:2b:93:9c: 3e:67:6a:00:29:c5:64:55:0e:19:3a:32:69:5c:2b: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DF:B1:62:B8:55:D2:D2:4C:40:50:7D:44:2A:AC:A0:2C:CF:10:35 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:68:97:ef:d6:ff:3b:70:45:f5:ee:35:89:3e:ff:7b:89:cc: 78:86:00:05:9c:89:62:d6:a2:7d:0c:60:d4:b0:1e:4f:72:6b: b2:5e:17:71:b1:69:f3:a7:38:93:69:70:3a:91:c5:40:89:b2: 67:8f:a1:f1:4e:36:03:fb:7d:9e:3f:28:75:ef:4c:7d:3b:8e: 1d:9e:85:59:e9:a7:fc:0c:d6:87:f5:ff:f3:cb:9e:cc:a3:c0: 08:f9:36:5f:ca:d3:e2:83:f7:70:88:99:fa:fc:78:6d:81:0c: ff:76:b1:2a:23:a2:e0:0c:83:a3:02:dd:95:5c:72:af:7e:62: c5:37:55:c7:8a:20:6d:ed:0b:9d:9b:d0:32:7d:fa:ee:7a:61: 25:45:17:7e:83:6e:85:2a:4f:e3:f5:29:37:b7:c4:48:14:97: 4e:4a:d9:0a:23:b9:aa:c7:38:3d:42:f7:68:b1:9e:b8:04:78: d8:fe:a7:be:f1:2d:b9:ca:c5:7e:ca:4c:bc:9d:c0:69:19:8c: 51:a7:a9:35:13:5f:47:2c:cb:31:00:8c:c0:81:15:b2:48:73: 27:f8:3a:ed:a6:4f:9b:d5:2d:40:5c:f1:40:04:78:99:3d:16: cd:f1:ae:76:91:80:4e:78:74:49:01:ea:70:95:45:92:96:90: 07:fc:1b:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEupsnEgPfNGOcaK6OQ/HqYLzEjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNjAyMDEwNjI2MTBaFw0yNjAyMDQxMzI2MTBaMDMxMTAvBgNV BAMTKDFCREZCMTYyQjg1NUQyRDI0QzQwNTA3RDQ0MkFBQ0EwMkNDRjEwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XC01VHLNlzIPp+6uqczymL8U MD/tBVjMH1Bmg0rmaEjsvouqdTytweVHMpzbg6PUAVPccCqM2BB1SmJkS21PDZR4 d866TE2Nz9zIWwWvVON8TwH2GzpxQIAR8Oxgcjq6Xfe3VVJRkWNYEP4/0ppvQO7U i5EtsB7NvNB7A1SINEvnqmxaNSafHls4MtmHo3K888QhOJZTA5C2VQx8+UA88fIj Sza8X51W17cmYWxbRZ0aDHGhgBgibvNUJ2pJWGZLuwzQeEnFXGtFcKOOO8VmPjCS 4utDVxjYF0FCIk3M3tx0LqbQ//jZQ4fLfiuTnD5nagApxWRVDhk6MmlcK+5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9+xYrhV0tJMQFB9RCqsoCzPEDUwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVol+/W/ztwRfXuNYk+/3uJzHiGAAWciWLW on0MYNSwHk9ya7JeF3GxafOnOJNpcDqRxUCJsmePofFONgP7fZ4/KHXvTH07jh2e hVnpp/wM1of1//PLnsyjwAj5Nl/K0+KD93CImfr8eG2BDP92sSojouAMg6MC3ZVc cq9+YsU3VceKIG3tC52b0DJ9+u56YSVFF36DboUqT+P1KTe3xEgUl05K2QojuarH OD1C92ixnrgEeNj+p77xLbnKxX7KTLydwGkZjFGnqTUTX0csyzEAjMCBFbJIcyf4 Ou2mT5vVLUBc8UAEeJk9Fs3xrnaRgE54dEkB6nCVRZKWkAf8G8o= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:43 2026 by rpki-client