This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: 7uU9QUhsucDvpzWrL8UKktTIMms6iWGtdtnwGB9abxE= Subject key identifier: 5D:71:A1:87:31:02:DE:80:4A:C4:15:CD:F5:C3:A2:61:46:40:36:50 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 690F529A77E1529A06A526B58425E5039924ACBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 015E Signing time: Sun 01 Feb 2026 08:11:42 +0000 Manifest this update: Sun 01 Feb 2026 08:06:42 +0000 Manifest next update: Wed 04 Feb 2026 18:50:42 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: dPvCdTIoeAV9F2zZWORJCeV8dkcEZ4Sf71xyGyJ8TbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 18:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0f:52:9a:77:e1:52:9a:06:a5:26:b5:84:25:e5:03:99:24:ac:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Feb 1 08:06:42 2026 GMT Not After : Feb 4 18:50:42 2026 GMT Subject: CN=5D71A1873102DE804AC415CDF5C3A26146403650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:c6:10:1e:62:bc:1f:a7:49:64:17:3f:b5: b7:4e:20:95:a3:37:b9:dc:23:7e:fb:c4:41:81:24: 2d:bd:4a:b1:0b:2a:61:50:b7:0e:42:1c:a5:02:3b: 8f:01:9e:bc:ba:16:5f:99:0f:0a:d8:25:3e:22:42: 2b:3e:34:0d:1d:e0:82:a2:15:12:c6:f2:4e:33:4d: 07:b0:1c:ab:fa:42:01:bd:33:03:70:68:51:75:0b: d4:ee:91:d6:5e:6c:51:41:85:36:80:37:56:8c:f7: 3a:4f:6d:5a:79:c0:28:fe:9e:e0:08:88:19:1f:72: 3a:4a:ba:36:35:77:e4:04:ca:da:6a:77:1f:5b:6a: 88:3c:a5:25:48:42:8b:01:81:d7:cb:a9:3f:da:17: 4d:8e:ca:1c:01:41:94:b1:b0:4e:99:dd:f9:d1:5e: 65:80:3a:b4:bd:b3:fd:8f:ed:8a:ca:e9:77:fc:96: 4c:3b:8c:21:ef:d9:dd:90:fc:d6:47:19:7d:d8:39: 0f:d3:18:2b:f0:12:a5:0c:bb:6a:ba:99:83:e7:b4: 24:5e:5c:f4:ac:6c:17:c1:08:af:30:9c:1c:a9:bf: a1:01:43:80:ef:a2:f4:67:b1:5d:43:e5:ff:17:91: 32:57:64:e6:d7:38:e6:58:80:25:b5:32:83:83:72: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:71:A1:87:31:02:DE:80:4A:C4:15:CD:F5:C3:A2:61:46:40:36:50 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ce:a0:51:d3:7c:9f:20:ea:88:d0:02:41:52:bd:6e:1f:77: ea:bf:12:2f:b0:a9:be:80:79:41:c9:df:11:41:72:a4:10:82: 17:21:06:f3:c5:db:80:a7:82:05:ee:72:07:37:e7:70:c3:23: 8a:66:33:a2:22:f3:23:4a:24:f4:90:48:e5:b9:45:db:fe:2a: 7a:35:8f:a6:42:4f:5c:46:47:b0:02:3e:57:96:7e:da:7d:2f: 97:40:22:c1:ff:17:58:51:d5:70:f8:2f:6a:c7:63:58:af:76: ed:af:e2:95:98:97:79:ce:56:82:cc:40:ca:05:4f:66:f8:a8: c0:27:a9:f2:87:89:5b:e9:89:85:6b:3c:30:80:af:c5:ca:ec: 31:58:1c:08:f7:55:95:92:f0:0d:a4:1c:ca:14:a3:8b:93:20: 64:50:12:2c:35:6d:70:93:46:2c:e5:07:c5:36:67:45:96:e1: f2:a6:e3:76:e9:8d:73:1f:cc:87:bd:95:c9:65:e3:99:2c:ea: bb:1b:33:50:f2:2d:c9:4b:b0:a6:bf:02:67:55:cd:28:43:b9: d4:7f:28:07:ab:ec:74:6a:12:50:5f:01:48:4c:29:9d:b6:fc: fa:91:53:9d:5c:0e:4d:22:1d:b9:0f:1c:4a:84:fe:05:14:0e: 05:8c:31:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQ9SmnfhUpoGpSa1hCXlA5kkrL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNjAyMDEwODA2NDJaFw0yNjAyMDQxODUwNDJaMDMxMTAvBgNV BAMTKDVENzFBMTg3MzEwMkRFODA0QUM0MTVDREY1QzNBMjYxNDY0MDM2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqecYQHmK8H6dJZBc/tbdOIJWj N7ncI377xEGBJC29SrELKmFQtw5CHKUCO48Bnry6Fl+ZDwrYJT4iQis+NA0d4IKi FRLG8k4zTQewHKv6QgG9MwNwaFF1C9TukdZebFFBhTaAN1aM9zpPbVp5wCj+nuAI iBkfcjpKujY1d+QEytpqdx9baog8pSVIQosBgdfLqT/aF02OyhwBQZSxsE6Z3fnR XmWAOrS9s/2P7YrK6Xf8lkw7jCHv2d2Q/NZHGX3YOQ/TGCvwEqUMu2q6mYPntCRe XPSsbBfBCK8wnBypv6EBQ4DvovRnsV1D5f8XkTJXZObXOOZYgCW1MoODciGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXGhhzEC3oBKxBXN9cOiYUZANlAwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzOoFHTfJ8g6ojQAkFSvW4fd+q/Ei+wqb6A eUHJ3xFBcqQQghchBvPF24CnggXucgc353DDI4pmM6Ii8yNKJPSQSOW5Rdv+Kno1 j6ZCT1xGR7ACPleWftp9L5dAIsH/F1hR1XD4L2rHY1ivdu2v4pWYl3nOVoLMQMoF T2b4qMAnqfKHiVvpiYVrPDCAr8XK7DFYHAj3VZWS8A2kHMoUo4uTIGRQEiw1bXCT RizlB8U2Z0WW4fKm43bpjXMfzIe9lcll45ks6rsbM1DyLclLsKa/AmdVzShDudR/ KAer7HRqElBfAUhMKZ22/PqRU51cDk0iHbkPHEqE/gUUDgWMMY8= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:37 2026 by rpki-client