This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: 0Rc3KlBt4rou81fTDT1iwJhmxB3HHy5AC1TkosHlOAM= Subject key identifier: AE:38:FA:65:36:42:A2:80:D2:DC:56:10:CF:F2:A0:CD:61:B2:B1:A5 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 27E356E146CC66D3F4B00F5749BD40AC1BFF6EA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 025D Signing time: Sat 31 Jan 2026 14:40:55 +0000 Manifest this update: Sat 31 Jan 2026 14:35:55 +0000 Manifest next update: Tue 03 Feb 2026 20:12:55 +0000 Files and hashes: 1: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 2: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: v3yW8b4PkLI0ERZoC/5L1sidUmuI5a4Ql2Jfi4VOPuU=) 3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e3:56:e1:46:cc:66:d3:f4:b0:0f:57:49:bd:40:ac:1b:ff:6e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Jan 31 14:35:55 2026 GMT Not After : Feb 3 20:12:55 2026 GMT Subject: CN=AE38FA653642A280D2DC5610CFF2A0CD61B2B1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:64:4a:ed:3b:a6:8b:67:79:7d:db:bc:0e: e0:99:57:fe:0e:24:f0:61:ae:01:2f:7b:8d:88:b0: 4a:6a:ac:0a:df:f0:7f:60:d3:4b:f5:ce:ba:d5:66: 59:cd:96:92:6c:8c:e5:ed:38:ba:9f:b3:9d:c8:79: a3:fd:c4:de:16:e1:3a:f8:29:9a:0c:94:e9:8a:79: bc:e2:90:b6:70:8f:4d:a9:c4:f3:19:ba:24:03:ef: 75:74:67:7d:3c:e3:23:91:c9:e3:13:38:96:ad:47: 81:46:de:ca:e3:c2:27:33:9e:8e:c7:12:e9:46:22: 45:fe:f4:38:91:2a:71:c5:c3:00:33:d0:34:43:40: 27:f6:95:65:67:b6:52:5c:9f:2b:36:95:c9:5e:fd: e6:25:81:54:ac:53:d4:32:62:99:de:99:be:d5:35: 22:55:b0:6a:70:8e:9e:10:96:2d:ff:b0:04:c6:e0: 40:e1:f3:43:0a:67:64:7b:38:4f:04:19:4c:63:e2: 8c:76:d3:96:b9:74:63:d2:4a:21:4a:18:e2:6d:da: f6:17:24:a8:bf:63:70:4c:f1:44:be:43:96:3d:81: 10:91:e5:83:f9:b3:86:05:03:ee:09:d5:52:55:e6: bc:05:57:16:0e:df:d0:5b:e2:e0:07:53:3e:ae:a4: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:38:FA:65:36:42:A2:80:D2:DC:56:10:CF:F2:A0:CD:61:B2:B1:A5 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9a:67:84:9f:80:23:0d:b3:aa:e2:14:50:9e:1c:7b:f1:da: ff:a6:cd:2a:4e:32:72:5c:87:64:b5:45:19:6e:b5:6e:d2:e1: b7:d9:fa:18:8a:d9:2b:c1:a0:e4:a1:1a:dc:a0:cc:e7:f4:4e: c6:39:5e:1e:40:36:ca:13:74:1a:98:70:c9:bc:a9:15:43:cb: d4:10:58:60:9d:61:07:f8:75:95:80:c7:54:e4:11:da:df:79: 21:e7:73:8f:6a:7f:c2:dc:a8:fb:34:c8:a5:11:8c:9a:e4:cc: d8:42:d9:36:27:b2:32:32:a3:fd:8d:1a:3d:7f:79:e6:05:33: 46:dd:ac:98:83:83:81:f5:67:c6:ba:52:76:95:7e:03:78:bd: 01:7b:80:bd:27:0f:b8:76:9d:d3:ba:0c:ed:d1:3f:54:65:5b: af:b4:5f:e3:bc:df:bf:ab:6f:74:2f:8d:03:61:e6:2c:02:bd: e0:20:7c:59:eb:be:71:f7:c6:27:df:b0:f1:20:8d:4b:65:38: 57:36:68:fc:94:16:1b:76:b8:8b:5e:6d:df:c1:c2:7b:ef:2a: ea:11:bc:be:d9:fc:0b:2c:dc:fd:98:6c:ea:a9:7b:f9:e9:7e: 6a:16:86:5c:ee:aa:e2:eb:cb:7b:9d:46:e5:08:a6:10:65:74: fe:56:ba:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+NW4UbMZtP0sA9XSb1ArBv/bqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNjAxMzExNDM1NTVaFw0yNjAyMDMyMDEyNTVaMDMxMTAvBgNV BAMTKEFFMzhGQTY1MzY0MkEyODBEMkRDNTYxMENGRjJBMENENjFCMkIxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5WRK7Tumi2d5fdu8DuCZV/4O JPBhrgEve42IsEpqrArf8H9g00v1zrrVZlnNlpJsjOXtOLqfs53IeaP9xN4W4Tr4 KZoMlOmKebzikLZwj02pxPMZuiQD73V0Z3084yORyeMTOJatR4FG3srjwiczno7H EulGIkX+9DiRKnHFwwAz0DRDQCf2lWVntlJcnys2lcle/eYlgVSsU9QyYpnemb7V NSJVsGpwjp4Qli3/sATG4EDh80MKZ2R7OE8EGUxj4ox205a5dGPSSiFKGOJt2vYX JKi/Y3BM8US+Q5Y9gRCR5YP5s4YFA+4J1VJV5rwFVxYO39Bb4uAHUz6upKO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjj6ZTZCooDS3FYQz/KgzWGysaUwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeaZ4SfgCMNs6riFFCeHHvx2v+mzSpOMnJc h2S1RRlutW7S4bfZ+hiK2SvBoOShGtygzOf0TsY5Xh5ANsoTdBqYcMm8qRVDy9QQ WGCdYQf4dZWAx1TkEdrfeSHnc49qf8LcqPs0yKURjJrkzNhC2TYnsjIyo/2NGj1/ eeYFM0bdrJiDg4H1Z8a6UnaVfgN4vQF7gL0nD7h2ndO6DO3RP1RlW6+0X+O837+r b3QvjQNh5iwCveAgfFnrvnH3xiffsPEgjUtlOFc2aPyUFht2uItebd/BwnvvKuoR vL7Z/Ass3P2YbOqpe/npfmoWhlzuquLry3udRuUIphBldP5WurA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:34 2026 by rpki-client