This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: SfAGgZGxKumW2P53hKYySqeYaI8faUxS4Ck2TN6xUWQ= Subject key identifier: 5E:8A:C9:02:0B:77:E7:3D:0A:04:B3:B7:A2:17:2E:74:9F:10:76:B3 Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 1A86AD4E92904AF6EF1892320E1883FFFB949B93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 56 Signing time: Sun 25 Jan 2026 16:40:00 +0000 Manifest this update: Sun 25 Jan 2026 16:35:00 +0000 Manifest next update: Wed 28 Jan 2026 18:12:00 +0000 Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 2: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: VbY8nnL+ELC/UdSntNW0vYwPa6xR0XCTmEO/HhAsleA=) 3: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 4: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 5: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:86:ad:4e:92:90:4a:f6:ef:18:92:32:0e:18:83:ff:fb:94:9b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Jan 25 16:35:00 2026 GMT Not After : Jan 28 18:12:00 2026 GMT Subject: CN=5E8AC9020B77E73D0A04B3B7A2172E749F1076B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:ca:dd:0d:70:db:85:96:c2:58:03:b6:92: 48:78:f2:cb:74:d2:1c:52:19:40:f3:82:5d:4f:4a: 81:47:8f:9c:16:c3:be:5b:25:8b:2c:bd:b1:13:35: 79:53:03:20:2d:e9:c5:62:e1:78:e0:2d:5e:9b:90: 2f:aa:e4:cf:e9:ad:71:96:7c:cc:47:7d:9f:6c:53: ab:c9:af:a7:6a:0b:ea:6a:92:c4:24:83:dc:e7:06: ab:57:34:97:63:7f:1e:ee:9b:29:b6:0b:3e:01:03: 22:77:e2:eb:bc:13:b5:5a:50:96:2d:6a:a3:e1:01: 79:a3:71:78:e9:0a:0e:1f:a7:ca:e5:29:cd:79:86: 1c:91:fc:4f:17:08:d0:87:94:c9:6e:b9:06:68:84: cb:89:2e:74:62:c0:00:e9:84:3a:7a:f6:6b:0b:e4: 5a:a2:7a:6a:f3:6d:8b:80:d2:bf:eb:ba:ea:3d:19: 08:1c:2b:6f:5f:27:8f:cc:c3:56:f0:c6:df:84:5c: 9b:16:b6:09:70:55:f2:98:e1:b0:e3:9f:05:c6:be: 00:fc:e6:6e:8c:fc:36:df:51:04:a4:09:6a:9c:3e: b8:aa:99:e3:cb:31:5e:2d:76:4c:28:08:bc:bc:ee: 65:fa:d3:bf:dc:69:7f:3f:ab:07:1c:c8:a7:86:f1: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8A:C9:02:0B:77:E7:3D:0A:04:B3:B7:A2:17:2E:74:9F:10:76:B3 X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:29:54:83:4a:db:3f:13:99:39:e0:49:b8:fb:0d:1a:3f:7b: e8:e5:7e:1a:3d:e1:24:c0:8f:59:e7:fb:85:b4:f9:9e:72:d7: 5d:82:3c:92:7f:82:4a:74:62:e7:a7:97:65:ad:07:63:a0:58: 19:79:d1:6d:0f:6e:9a:36:14:78:90:7a:db:69:62:1b:1c:c5: db:d8:44:62:aa:b8:35:d4:f4:a7:ef:2c:ba:f6:1f:58:c3:83: 9e:59:8a:a3:d6:9f:f7:04:8a:6b:da:72:cc:c6:a7:40:83:5a: 5b:18:8d:5c:76:98:36:ab:0a:80:f0:58:e0:7b:6a:b5:d3:57: 57:16:7f:cb:3f:f6:4b:8a:1f:9f:2c:69:4e:03:2a:a7:de:fc: 24:0a:6d:09:91:91:ea:e0:c5:f5:ec:53:31:46:2a:d3:e3:47: 70:55:6d:38:94:f2:d4:82:31:e3:f7:07:26:fe:4b:a4:b9:64: 77:14:e2:ff:17:16:bc:73:24:a5:ea:d9:05:4d:88:d2:62:fb: 4a:13:78:6f:34:20:71:c4:8c:2a:77:a4:56:35:15:b6:52:ce: c8:ac:35:e1:f5:30:21:9e:6d:fe:dc:b4:c0:39:cd:60:cd:00: 54:10:5f:ef:8f:05:8c:bf:f3:e7:4e:f5:b4:bc:f0:3b:ea:d5: 45:d6:f6:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoatTpKQSvbvGJIyDhiD//uUm5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNjAxMjUxNjM1MDBaFw0yNjAxMjgxODEyMDBaMDMxMTAvBgNV BAMTKDVFOEFDOTAyMEI3N0U3M0QwQTA0QjNCN0EyMTcyRTc0OUYxMDc2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/srdDXDbhZbCWAO2kkh48st0 0hxSGUDzgl1PSoFHj5wWw75bJYssvbETNXlTAyAt6cVi4XjgLV6bkC+q5M/prXGW fMxHfZ9sU6vJr6dqC+pqksQkg9znBqtXNJdjfx7umym2Cz4BAyJ34uu8E7VaUJYt aqPhAXmjcXjpCg4fp8rlKc15hhyR/E8XCNCHlMluuQZohMuJLnRiwADphDp69msL 5FqiemrzbYuA0r/ruuo9GQgcK29fJ4/Mw1bwxt+EXJsWtglwVfKY4bDjnwXGvgD8 5m6M/DbfUQSkCWqcPriqmePLMV4tdkwoCLy87mX607/caX8/qwccyKeG8et7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXorJAgt35z0KBLO3ohcudJ8QdrMwHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQpVINK2z8TmTngSbj7DRo/e+jlfho94STA j1nn+4W0+Z5y112CPJJ/gkp0Yuenl2WtB2OgWBl50W0Pbpo2FHiQettpYhscxdvY RGKquDXU9KfvLLr2H1jDg55ZiqPWn/cEimvacszGp0CDWlsYjVx2mDarCoDwWOB7 arXTV1cWf8s/9kuKH58saU4DKqfe/CQKbQmRkergxfXsUzFGKtPjR3BVbTiU8tSC MeP3Byb+S6S5ZHcU4v8XFrxzJKXq2QVNiNJi+0oTeG80IHHEjCp3pFY1FbZSzsis NeH1MCGebf7ctMA5zWDNAFQQX++PBYy/8+dO9bS88Dvq1UXW9gE= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:10 2026 by rpki-client