This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: 96uFrWmhchkehjXti1QVb9okWzzyyLic5ljJI5B4Zio= Subject key identifier: 0B:86:7A:AB:84:D0:84:17:9D:BE:B9:F2:1C:1C:B8:63:0B:F0:0B:C9 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 43A184E5EFC57CB2D55A46BFEBFFE3E92DD8330B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02C3 Signing time: Fri 23 Jan 2026 23:50:45 +0000 Manifest this update: Fri 23 Jan 2026 23:45:45 +0000 Manifest next update: Tue 27 Jan 2026 03:18:45 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) 2: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: AEY6Rql+pUtq3nSuu564jEyFlbK6fFIvvdLujmHnMH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a1:84:e5:ef:c5:7c:b2:d5:5a:46:bf:eb:ff:e3:e9:2d:d8:33:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Jan 23 23:45:45 2026 GMT Not After : Jan 27 03:18:45 2026 GMT Subject: CN=0B867AAB84D084179DBEB9F21C1CB8630BF00BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:40:ef:3d:af:39:1c:8c:b5:e5:f7:12:a5: 06:4f:5f:fb:02:bf:bc:89:06:47:37:df:1a:22:54: 67:ed:76:77:41:dd:c0:d3:80:3d:f9:28:dd:fd:93: 25:de:dc:1c:30:d6:b5:58:a9:a1:68:c9:98:15:9b: ab:59:bb:ea:10:11:53:50:ba:52:c4:5b:ba:2a:32: 9e:b2:3d:0d:b6:3a:fe:94:81:6e:2d:b5:e3:23:30: 9d:14:17:11:99:6c:2e:d1:80:da:10:51:14:2b:24: 8f:20:df:08:be:73:34:cd:5c:f2:03:e7:73:28:86: 24:fb:23:bc:53:9e:5e:0e:dc:d7:5e:48:99:4b:c6: 31:af:21:ff:60:19:74:b4:d2:07:37:83:9f:6e:ed: a6:bb:75:ce:cd:b4:71:6f:b9:b5:07:26:be:a1:eb: 71:e4:91:1d:1d:f9:a3:65:99:99:66:a0:3e:07:b1: 7f:05:d3:6b:2a:30:98:98:cd:ca:83:98:5e:a4:6e: f3:71:e4:6f:76:2f:f9:2c:e3:fd:c2:c8:ee:84:36: 4c:15:24:68:21:de:4f:0e:4a:89:f0:22:1e:7e:0c: 3f:0d:16:cb:0b:7b:7f:b0:d1:b8:8d:0f:12:0a:bc: 50:6e:48:a5:7b:6e:06:61:33:e0:00:ac:20:ec:c7: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:86:7A:AB:84:D0:84:17:9D:BE:B9:F2:1C:1C:B8:63:0B:F0:0B:C9 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ca:be:70:ce:d1:2a:10:5e:6a:d3:90:c1:a9:e1:22:8e:bc: 2e:4f:96:9a:a1:3f:d9:e3:e2:f5:04:f8:d7:20:7f:63:97:a8: 79:95:4a:de:d8:7f:e3:71:b6:52:27:01:42:9a:6f:f3:fc:1a: ca:86:ca:ce:14:be:cc:b2:24:ad:88:ac:80:45:47:8c:b4:69: 85:40:a3:c4:94:47:c0:44:81:d0:af:bf:63:a4:da:1d:df:f0: 03:47:f9:01:80:a1:c0:e2:d9:fd:f7:54:69:5f:3e:5e:16:6d: cb:80:f8:b7:1f:30:36:08:c9:ca:fe:0a:f3:d4:5d:75:47:96: 40:8a:a3:9b:68:97:54:9f:0f:1c:5b:10:25:6a:3f:2d:25:a0: b6:a5:9e:78:b1:29:85:a6:17:1c:4d:71:43:e0:1a:6e:49:7b: 12:92:72:a9:5c:f8:d9:13:94:74:65:52:63:5b:98:c4:af:09: 45:50:6e:2d:4f:22:fe:b1:d0:05:11:83:20:ed:0f:79:fc:78: d4:71:32:b0:a2:86:b5:ff:4a:e3:34:e5:36:bd:06:ad:8b:36: 3e:16:02:7d:eb:09:30:2c:81:05:05:dd:6a:ae:fd:09:3f:9c: 8a:0b:64:5b:c9:2f:c1:07:f9:dc:7c:0e:9b:a8:b6:62:a6:8c: 6e:61:68:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6GE5e/FfLLVWka/6//j6S3YMwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjAxMjMyMzQ1NDVaFw0yNjAxMjcwMzE4NDVaMDMxMTAvBgNV BAMTKDBCODY3QUFCODREMDg0MTc5REJFQjlGMjFDMUNCODYzMEJGMDBCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC330DvPa85HIy15fcSpQZPX/sC v7yJBkc33xoiVGftdndB3cDTgD35KN39kyXe3Bww1rVYqaFoyZgVm6tZu+oQEVNQ ulLEW7oqMp6yPQ22Ov6UgW4tteMjMJ0UFxGZbC7RgNoQURQrJI8g3wi+czTNXPID 53MohiT7I7xTnl4O3NdeSJlLxjGvIf9gGXS00gc3g59u7aa7dc7NtHFvubUHJr6h 63HkkR0d+aNlmZlmoD4HsX8F02sqMJiYzcqDmF6kbvNx5G92L/ks4/3CyO6ENkwV JGgh3k8OSonwIh5+DD8NFssLe3+w0biNDxIKvFBuSKV7bgZhM+AArCDsxyljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4Z6q4TQhBedvrnyHBy4YwvwC8kwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDKvnDO0SoQXmrTkMGp4SKOvC5PlpqhP9nj 4vUE+Ncgf2OXqHmVSt7Yf+NxtlInAUKab/P8GsqGys4UvsyyJK2IrIBFR4y0aYVA o8SUR8BEgdCvv2Ok2h3f8ANH+QGAocDi2f33VGlfPl4WbcuA+LcfMDYIycr+CvPU XXVHlkCKo5tol1SfDxxbECVqPy0loLalnnixKYWmFxxNcUPgGm5JexKScqlc+NkT lHRlUmNbmMSvCUVQbi1PIv6x0AURgyDtD3n8eNRxMrCihrX/SuM05Ta9Bq2LNj4W An3rCTAsgQUF3Wqu/Qk/nIoLZFvJL8EH+dx8DpuotmKmjG5haGo= -----END CERTIFICATE-----Generated at Sun Jan 25 23:58:30 2026 by rpki-client