This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: 7lMyve4uxkI9YGcbjkv6+ZjsSu+4UgpdnPB1v7ablzk= Subject key identifier: D5:8A:69:D8:44:6D:E6:33:C2:55:88:0F:CE:62:69:46:16:03:EF:8A Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 0BDC5766F804E83A932C9437FC8115B6F3174D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0511 Signing time: Sun 25 Jan 2026 17:52:00 +0000 Manifest this update: Sun 25 Jan 2026 17:47:00 +0000 Manifest next update: Wed 28 Jan 2026 21:40:00 +0000 Files and hashes: 1: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) 2: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: 5UNw3Arvvxg/tJFOSiVMjNBMJRzahyJr5ilk51uV9ig=) 3: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:dc:57:66:f8:04:e8:3a:93:2c:94:37:fc:81:15:b6:f3:17:4d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Jan 25 17:47:00 2026 GMT Not After : Jan 28 21:40:00 2026 GMT Subject: CN=D58A69D8446DE633C255880FCE6269461603EF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:91:9f:94:52:1a:17:01:85:eb:a3:37:be: 8b:a7:42:9d:af:68:55:a9:40:a5:cd:c2:c2:92:e5: 8e:b9:ac:94:52:e4:e0:c5:f9:69:b3:68:75:42:11: bc:69:7a:a2:d6:84:53:26:99:0c:a4:57:20:ab:bd: e6:26:af:3a:a3:80:87:f1:a7:63:38:8d:8e:92:a7: ee:49:36:15:54:b1:29:18:bd:e1:e2:8b:c2:63:07: 9f:4e:bc:8e:0f:25:5c:54:f2:b1:5d:58:d5:64:55: 97:55:4f:ef:ad:bd:ff:0d:3d:9d:27:8d:44:d2:5f: f7:06:8a:ee:8b:93:59:5a:92:c8:42:b6:06:f7:b5: 32:b5:4f:79:ba:0b:10:a2:2d:1e:43:d2:aa:db:15: f0:1f:bc:cc:44:25:a7:f4:52:31:ac:88:46:2b:6f: 54:48:b6:71:67:15:cf:a4:c6:2d:60:de:27:c4:07: 93:3f:be:86:99:3c:f2:2d:9f:f3:fc:a0:f5:c5:96: 1a:de:07:e3:8c:a4:ca:c6:56:2a:1e:a9:32:03:86: 26:dd:23:b9:09:cf:51:62:67:c7:b1:10:f5:56:73: 92:c8:21:cc:72:73:7e:66:20:66:7f:f1:81:ad:40: dc:bd:a3:65:3e:2e:57:17:99:7c:03:ee:6e:5b:af: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:69:D8:44:6D:E6:33:C2:55:88:0F:CE:62:69:46:16:03:EF:8A X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e9:69:b0:90:7e:fb:da:8c:0c:61:bc:46:f5:dc:5c:98:a2: 9d:bb:14:4a:52:1a:e1:b9:7b:ee:9e:b9:12:68:c5:a9:fa:af: 86:6c:04:ed:4e:0e:9d:30:c8:8a:53:c2:f0:0f:73:20:39:05: 4e:50:7c:8c:cc:69:d2:b8:ce:26:96:7e:28:5f:74:10:34:41: 08:58:2d:88:c7:44:c3:1b:98:d3:2b:b9:66:11:74:89:14:0c: ac:12:ff:fe:f0:c2:d9:00:f9:bb:ba:45:45:5d:9f:11:70:1a: 1b:46:5f:17:a5:62:13:bd:c8:1f:ad:24:19:dc:b3:74:76:41: c7:17:64:b8:47:22:1a:94:1e:4e:ae:bd:d8:d1:44:34:7c:bf: b9:b7:28:07:cc:e8:b1:d7:33:98:4a:75:60:07:5f:c0:8e:23: 44:aa:24:61:ad:f3:cf:1d:0d:11:1a:91:20:fd:eb:19:5c:c0: 76:c7:12:83:27:55:37:22:44:d4:e8:96:ba:50:79:46:0d:7e: 39:01:15:89:0d:fe:83:14:f7:ec:5c:0b:62:bf:68:fb:0e:78: 75:f7:87:48:ef:12:fe:77:96:6f:5a:36:52:f9:3d:67:03:d4: f1:2f:1a:48:b6:dd:ee:e0:37:4f:62:55:9a:97:f2:1d:ad:c3: 7b:25:87:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9xXZvgE6DqTLJQ3/IEVtvMXTXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNjAxMjUxNzQ3MDBaFw0yNjAxMjgyMTQwMDBaMDMxMTAvBgNV BAMTKEQ1OEE2OUQ4NDQ2REU2MzNDMjU1ODgwRkNFNjI2OTQ2MTYwM0VGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMZGflFIaFwGF66M3vounQp2v aFWpQKXNwsKS5Y65rJRS5ODF+WmzaHVCEbxpeqLWhFMmmQykVyCrveYmrzqjgIfx p2M4jY6Sp+5JNhVUsSkYveHii8JjB59OvI4PJVxU8rFdWNVkVZdVT++tvf8NPZ0n jUTSX/cGiu6Lk1lakshCtgb3tTK1T3m6CxCiLR5D0qrbFfAfvMxEJaf0UjGsiEYr b1RItnFnFc+kxi1g3ifEB5M/voaZPPItn/P8oPXFlhreB+OMpMrGVioeqTIDhibd I7kJz1FiZ8exEPVWc5LIIcxyc35mIGZ/8YGtQNy9o2U+LlcXmXwD7m5br4m9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Ypp2ERt5jPCVYgPzmJpRhYD74owHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPpabCQfvvajAxhvEb13FyYop27FEpSGuG5 e+6euRJoxan6r4ZsBO1ODp0wyIpTwvAPcyA5BU5QfIzMadK4ziaWfihfdBA0QQhY LYjHRMMbmNMruWYRdIkUDKwS//7wwtkA+bu6RUVdnxFwGhtGXxelYhO9yB+tJBnc s3R2QccXZLhHIhqUHk6uvdjRRDR8v7m3KAfM6LHXM5hKdWAHX8COI0SqJGGt888d DREakSD96xlcwHbHEoMnVTciRNTolrpQeUYNfjkBFYkN/oMU9+xcC2K/aPsOeHX3 h0jvEv53lm9aNlL5PWcD1PEvGki23e7gN09iVZqX8h2tw3slhzg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:34:47 2026 by rpki-client