This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json)
Hash identifier: COk3IWbzrcM6lX6pPzODN4dupkv+av/+GDR4CVSSENM=
Subject key identifier: 44:FA:54:22:F4:A6:77:B3:BD:BA:86:ED:07:79:EB:32:03:3F:84:A1
Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77
Certificate serial: 521855C50E21CE707FB0D26A28909454C5068393
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
Manifest number: 0178
Signing time: Sat 24 Jan 2026 08:43:26 +0000
Manifest this update: Sat 24 Jan 2026 08:38:26 +0000
Manifest next update: Tue 27 Jan 2026 13:50:26 +0000
Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=)
2: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: /A0amvCvJlIXlAW3COovJ02c6vei3OVW1oxob4vRYV4=)
3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 13:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:18:55:c5:0e:21:ce:70:7f:b0:d2:6a:28:90:94:54:c5:06:83:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42467B1885830A9908EAE67935311639B090AA77
Validity
Not Before: Jan 24 08:38:26 2026 GMT
Not After : Jan 27 13:50:26 2026 GMT
Subject: CN=44FA5422F4A677B3BDBA86ED0779EB32033F84A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:fb:ab:0a:1b:97:d6:1b:13:5f:15:31:39:
f1:ea:97:f5:76:e1:f8:63:68:48:92:04:34:be:77:
93:29:d6:dd:a6:76:fe:39:6a:0d:c6:7e:07:b3:4a:
f1:d7:23:77:91:39:60:e6:f6:b7:5b:04:b8:dd:d0:
08:57:80:1a:86:c0:e0:ed:66:76:9d:30:5f:0b:f9:
07:ea:c6:a7:ef:23:e6:fc:98:09:88:90:dd:c3:3c:
d3:f6:ed:47:16:a5:0f:28:8f:3b:d3:76:e1:65:c5:
7f:fe:f2:d2:42:0a:bd:29:07:6c:db:94:46:e5:f0:
b4:a8:ac:72:f8:52:54:6b:f5:e4:a0:91:ad:2a:e1:
a6:78:13:e5:3f:92:82:b2:f3:36:6b:69:1e:34:58:
88:d2:77:0d:8c:25:ae:af:8b:06:bb:05:97:f0:08:
67:f6:4f:7c:68:62:0b:4d:e8:3b:01:38:b9:1a:18:
68:96:37:3d:60:88:32:44:b8:9f:a4:70:5e:81:ca:
2d:b7:99:ee:b5:0d:b5:20:b4:e2:a8:af:e0:eb:05:
82:85:9f:da:81:b8:24:00:57:4f:39:a7:57:38:ab:
76:54:0c:bb:38:c2:fc:8b:50:cc:9a:af:70:5c:4f:
48:54:15:a6:f4:35:b5:d5:34:2b:6a:34:2a:1d:dd:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:54:22:F4:A6:77:B3:BD:BA:86:ED:07:79:EB:32:03:3F:84:A1
X509v3 Authority Key Identifier:
keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:e5:b7:83:66:cd:0b:12:3c:85:19:bd:09:28:aa:ab:eb:
df:2a:e7:97:82:64:2e:d5:5d:4c:90:02:55:e0:2f:0f:e9:5e:
b3:09:2b:5f:1b:b5:5b:50:4c:1a:e1:d4:84:66:e2:06:af:44:
ad:74:c2:31:0e:94:d6:1c:10:be:ac:68:b9:cf:da:75:3b:95:
75:cc:8e:30:35:21:ad:5b:40:3f:87:a3:56:dc:da:e0:9e:20:
24:37:05:a2:a2:c5:54:95:3f:e4:92:17:f1:ca:0e:11:18:03:
e2:cb:b8:ae:fb:de:20:8e:d0:28:68:ac:fc:fb:38:e6:be:c4:
4a:c5:82:86:92:bb:59:8f:eb:f1:10:80:0e:f6:5c:1c:69:f7:
62:6b:73:d4:45:84:ad:a5:8e:88:68:e0:22:0a:c3:87:42:f8:
de:39:75:ac:b3:f9:4d:5a:5d:22:7e:79:8b:93:8b:00:d9:27:
a4:02:78:c7:8e:b7:9a:64:59:e9:2f:d2:70:7c:7e:24:b8:d9:
0a:71:91:12:32:6d:45:3e:c6:ed:e4:50:6b:54:8a:5b:61:60:
07:18:94:0d:49:f1:ac:fd:fd:43:55:d1:80:08:01:62:9b:0f:
df:23:4b:38:35:42:7b:ac:09:2e:de:76:7e:e3:74:23:db:47:
49:55:24:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUhhVxQ4hznB/sNJqKJCUVMUGg5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC
MDkwQUE3NzAeFw0yNjAxMjQwODM4MjZaFw0yNjAxMjcxMzUwMjZaMDMxMTAvBgNV
BAMTKDQ0RkE1NDIyRjRBNjc3QjNCREJBODZFRDA3NzlFQjMyMDMzRjg0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZvurChuX1hsTXxUxOfHql/V2
4fhjaEiSBDS+d5Mp1t2mdv45ag3GfgezSvHXI3eROWDm9rdbBLjd0AhXgBqGwODt
ZnadMF8L+QfqxqfvI+b8mAmIkN3DPNP27UcWpQ8ojzvTduFlxX/+8tJCCr0pB2zb
lEbl8LSorHL4UlRr9eSgka0q4aZ4E+U/koKy8zZraR40WIjSdw2MJa6viwa7BZfw
CGf2T3xoYgtN6DsBOLkaGGiWNz1giDJEuJ+kcF6Byi23me61DbUgtOKor+DrBYKF
n9qBuCQAV085p1c4q3ZUDLs4wvyLUMyar3BcT0hUFab0NbXVNCtqNCod3TczAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURPpUIvSmd7O9uobtB3nrMgM/hKEwHwYDVR0j
BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1
ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw
QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl
NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2
MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFbq5beDZs0LEjyFGb0JKKqr698q55eCZC7V
XUyQAlXgLw/pXrMJK18btVtQTBrh1IRm4gavRK10wjEOlNYcEL6saLnP2nU7lXXM
jjA1Ia1bQD+Ho1bc2uCeICQ3BaKixVSVP+SSF/HKDhEYA+LLuK773iCO0ChorPz7
OOa+xErFgoaSu1mP6/EQgA72XBxp92Jrc9RFhK2ljoho4CIKw4dC+N45dayz+U1a
XSJ+eYuTiwDZJ6QCeMeOt5pkWekv0nB8fiS42QpxkRIybUU+xu3kUGtUilthYAcY
lA1J8az9/UNV0YAIAWKbD98jSzg1QnusCS7edn7jdCPbR0lVJIs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:13:02 2026 by rpki-client