This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: tDuFjH0G6Qsp1K4FdOeuqYxjHhOHYRNkn5Gci/EkBpk= Subject key identifier: EB:02:1D:5D:49:FC:98:49:CF:E2:2D:E4:EF:07:25:63:A2:10:62:46 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 5D3E2C4B90A9B15DC02084C14FBE9E88FCFFC64F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 0165 Signing time: Sun 25 Jan 2026 15:31:10 +0000 Manifest this update: Sun 25 Jan 2026 15:26:10 +0000 Manifest next update: Thu 29 Jan 2026 03:14:10 +0000 Files and hashes: 1: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: 8bOqfkEnisQlEBbNvJd1FdPLrdgsxsRd2iy0AXQ+KTI=) 2: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: jur3GwCCR/cxdnMD6W4cwMvOKZw4VghZsOtg/kxwW48=) 3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: fg/QZptFLqxRoiOqaYt9GVklul/Zo57x2b9Yx8hCCKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3e:2c:4b:90:a9:b1:5d:c0:20:84:c1:4f:be:9e:88:fc:ff:c6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Jan 25 15:26:10 2026 GMT Not After : Jan 29 03:14:10 2026 GMT Subject: CN=EB021D5D49FC9849CFE22DE4EF072563A2106246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:be:26:25:66:32:8a:da:02:87:b8:d6:f8: 59:22:a3:aa:1e:a3:fc:28:c7:3d:77:db:5d:d9:3a: 6b:45:82:46:1f:cc:5b:60:42:e1:9d:f8:14:00:5c: 42:57:c5:e1:62:0b:52:5a:60:7c:a2:b0:97:f9:14: 27:cc:c1:96:37:d8:71:6c:94:ee:64:06:1c:69:37: 3c:be:21:70:98:05:05:f8:14:7f:3b:86:21:a0:6d: f8:a8:2d:79:83:05:9a:45:4a:45:22:4f:cc:d9:f1: 87:a4:49:ed:2b:48:0e:40:ab:7c:fb:8f:3e:3f:42: 5c:44:22:4a:c4:06:28:a5:94:c4:53:a1:36:6d:e7: c7:35:23:16:27:b1:12:52:91:93:90:f2:50:5b:40: 48:79:ef:c6:0e:7a:ee:8d:84:54:d5:12:01:a2:0c: b4:0f:84:b1:9a:62:7d:e1:21:13:10:be:3b:13:bb: b2:7d:83:cd:10:7d:1d:fb:96:8f:a5:26:ce:e8:66: cc:9e:33:78:71:ca:a4:66:31:ce:73:7a:2f:e7:20: 81:de:fe:a2:d0:da:8d:2f:68:7d:64:9a:8d:42:3c: db:da:dc:ac:a6:ef:ff:3d:ae:d1:ef:77:8d:93:7a: d2:2c:c5:73:5b:f1:fd:e9:b5:61:e1:76:42:0a:9c: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:1D:5D:49:FC:98:49:CF:E2:2D:E4:EF:07:25:63:A2:10:62:46 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:6e:f6:db:b8:31:97:97:25:80:5e:cb:8f:51:5d:83:a7:73: b9:c0:71:2d:fd:26:e9:11:1d:58:f8:0e:c9:6f:3f:32:44:34: 03:aa:ab:49:ab:89:a9:3d:1d:1b:d9:29:5c:24:ce:fd:08:33: 83:ed:12:35:1c:41:ed:a8:0c:83:ab:88:03:86:c5:02:8e:96: 89:fa:90:db:ff:c0:27:48:3e:2f:e6:ce:bb:5d:78:10:21:c0: 9c:fe:fa:3c:de:be:82:ad:a4:38:63:23:da:4c:87:02:56:ba: 75:a6:7f:5a:8f:88:41:6a:50:2f:c7:8d:5e:df:df:1d:3f:d7: f8:9b:ff:e3:36:0f:b5:51:b7:b9:6e:13:2e:98:fc:a8:c8:1b: 69:24:8d:a7:7b:18:bd:45:ff:72:99:97:bd:d2:b7:75:4c:47: 8e:f0:69:06:9c:b8:0e:4b:9b:1f:6e:7b:ef:95:45:50:16:e7: 6c:3e:f8:14:6f:ea:1d:37:af:d2:7a:42:b5:4a:f3:11:30:e1: aa:b0:3a:ba:50:7d:95:92:e8:e9:65:44:1d:c3:e5:eb:ed:3b: 5d:fe:12:5a:e0:01:42:30:54:b6:c6:7a:8d:04:1e:2c:36:6c: e2:77:17:5c:0d:4e:76:23:8d:f4:63:d7:f6:16:18:4e:db:00: 34:2f:b0:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXT4sS5CpsV3AIITBT76eiPz/xk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNjAxMjUxNTI2MTBaFw0yNjAxMjkwMzE0MTBaMDMxMTAvBgNV BAMTKEVCMDIxRDVENDlGQzk4NDlDRkUyMkRFNEVGMDcyNTYzQTIxMDYyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjr4mJWYyitoCh7jW+Fkio6oe o/woxz13213ZOmtFgkYfzFtgQuGd+BQAXEJXxeFiC1JaYHyisJf5FCfMwZY32HFs lO5kBhxpNzy+IXCYBQX4FH87hiGgbfioLXmDBZpFSkUiT8zZ8YekSe0rSA5Aq3z7 jz4/QlxEIkrEBiillMRToTZt58c1IxYnsRJSkZOQ8lBbQEh578YOeu6NhFTVEgGi DLQPhLGaYn3hIRMQvjsTu7J9g80QfR37lo+lJs7oZsyeM3hxyqRmMc5zei/nIIHe /qLQ2o0vaH1kmo1CPNva3Kym7/89rtHvd42TetIsxXNb8f3ptWHhdkIKnLkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wIdXUn8mEnP4i3k7wclY6IQYkYwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFu9tu4MZeXJYBey49RXYOnc7nAcS39JukR HVj4DslvPzJENAOqq0mriak9HRvZKVwkzv0IM4PtEjUcQe2oDIOriAOGxQKOlon6 kNv/wCdIPi/mzrtdeBAhwJz++jzevoKtpDhjI9pMhwJWunWmf1qPiEFqUC/HjV7f 3x0/1/ib/+M2D7VRt7luEy6Y/KjIG2kkjad7GL1F/3KZl73St3VMR47waQacuA5L mx9ue++VRVAW52w++BRv6h03r9J6QrVK8xEw4aqwOrpQfZWS6OllRB3D5evtO13+ ElrgAUIwVLbGeo0EHiw2bOJ3F1wNTnYjjfRj1/YWGE7bADQvsMk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:15 2026 by rpki-client