This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: 4gSIGZztNr/xoi9aU33V3GEMsNp0e4ote3Wb1/3kXmc= Subject key identifier: 3C:BD:32:D9:08:F9:92:D4:C1:72:DE:DD:0C:6E:EF:45:2D:29:96:B2 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 3E53D3C25425AFD66A3EB4761487FE45630F8529 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01D7 Signing time: Fri 23 Jan 2026 22:01:16 +0000 Manifest this update: Fri 23 Jan 2026 21:56:16 +0000 Manifest next update: Mon 26 Jan 2026 22:53:16 +0000 Files and hashes: 1: 3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (hash: Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=) 2: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: UyrTOOz8+Rb7DE5vXoigVJ7+IWQklHc26QGIMM6jgeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:53:d3:c2:54:25:af:d6:6a:3e:b4:76:14:87:fe:45:63:0f:85:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Jan 23 21:56:16 2026 GMT Not After : Jan 26 22:53:16 2026 GMT Subject: CN=3CBD32D908F992D4C172DEDD0C6EEF452D2996B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:7f:40:de:43:77:ac:33:1a:96:66:50:7e: d7:e5:7b:04:c4:da:89:66:32:0d:45:f1:cb:e8:f9: ed:b7:60:51:de:30:c6:36:6f:b2:3c:cb:1b:ab:d2: 39:85:8b:0f:9f:a2:6c:13:67:ab:6a:c1:7c:bd:b5: a8:28:ce:8f:9d:f0:58:ef:f8:c7:2f:f8:9c:1f:c1: 87:80:fc:0e:3a:09:a5:c7:e5:5a:e2:c8:ca:12:bb: 22:a3:aa:5a:29:01:f6:2b:bf:8c:f0:7b:a0:2b:bb: 6c:12:44:6e:6f:bc:76:fb:c0:b9:21:dd:44:93:4d: 50:51:3f:1e:75:79:d3:12:4a:5a:13:09:39:3e:59: ba:ad:ad:c3:04:fb:6c:0e:1e:2d:0e:ef:19:9e:1f: c7:cb:97:c6:77:96:2f:b4:70:f2:57:54:ac:bf:d5: 04:40:16:fa:19:41:e3:36:c0:1c:61:e6:39:51:37: 18:2c:e5:3e:58:83:4f:5d:c0:d8:8b:7c:3a:bc:d5: 3e:97:a0:1e:48:98:bc:b8:c4:7d:b9:fa:51:12:7d: e7:31:91:6d:cc:76:83:37:76:cf:91:cf:d7:1b:8e: 9d:51:64:01:d1:33:78:fe:9f:0f:87:3b:e7:fe:2c: a5:c4:fa:36:57:f5:fb:ff:e5:8c:b2:93:bd:ce:0c: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BD:32:D9:08:F9:92:D4:C1:72:DE:DD:0C:6E:EF:45:2D:29:96:B2 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:98:a7:65:8e:79:98:b1:24:4b:bd:e9:7c:72:98:e0:6c:bb: 38:b7:a7:e5:9e:76:ac:e6:49:2e:39:53:2e:55:f1:e5:ad:79: f6:c7:f1:31:6a:bd:41:08:cb:fe:67:d4:53:df:7d:54:94:bd: 78:f7:b9:55:f1:51:ed:0b:c9:af:00:6c:e7:8f:ca:38:c2:03: 98:0f:0e:0b:89:b3:39:85:59:a6:a7:f8:55:13:b2:36:53:67: bc:0a:07:1e:09:97:01:5f:d2:a0:f5:59:6e:f4:06:4f:ca:e6: 90:c7:71:c5:73:32:16:d1:20:06:b9:bc:06:b3:b5:b8:92:15: 2a:8a:7b:72:2b:25:27:c1:5e:45:13:aa:0e:13:46:51:81:2f: e3:8f:29:5e:12:99:cd:25:5b:aa:c5:57:4c:53:f1:8d:bc:75: f9:c9:1b:07:be:1f:63:d6:aa:33:e7:42:df:d1:3d:d0:96:a1: f2:61:45:9f:bc:3d:bd:21:60:2b:df:e3:4f:d6:fe:29:80:c8: d0:67:69:24:d1:2d:b0:cd:75:4a:01:11:12:bc:3b:d0:a6:7a: 80:5a:f2:a7:f1:9a:a2:d5:b4:87:63:61:7d:e3:4d:67:40:63: ee:e2:40:b0:20:f0:84:00:0e:a9:e4:64:7b:13:35:5b:90:94: ce:46:83:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlPTwlQlr9ZqPrR2FIf+RWMPhSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNjAxMjMyMTU2MTZaFw0yNjAxMjYyMjUzMTZaMDMxMTAvBgNV BAMTKDNDQkQzMkQ5MDhGOTkyRDRDMTcyREVERDBDNkVFRjQ1MkQyOTk2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDH9A3kN3rDMalmZQftflewTE 2olmMg1F8cvo+e23YFHeMMY2b7I8yxur0jmFiw+fomwTZ6tqwXy9tagozo+d8Fjv +Mcv+JwfwYeA/A46CaXH5VriyMoSuyKjqlopAfYrv4zwe6Aru2wSRG5vvHb7wLkh 3USTTVBRPx51edMSSloTCTk+WbqtrcME+2wOHi0O7xmeH8fLl8Z3li+0cPJXVKy/ 1QRAFvoZQeM2wBxh5jlRNxgs5T5Yg09dwNiLfDq81T6XoB5ImLy4xH25+lESfecx kW3MdoM3ds+Rz9cbjp1RZAHRM3j+nw+HO+f+LKXE+jZX9fv/5Yyyk73ODMBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPL0y2Qj5ktTBct7dDG7vRS0plrIwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeYp2WOeZixJEu96XxymOBsuzi3p+Wedqzm SS45Uy5V8eWtefbH8TFqvUEIy/5n1FPffVSUvXj3uVXxUe0Lya8AbOePyjjCA5gP DguJszmFWaan+FUTsjZTZ7wKBx4JlwFf0qD1WW70Bk/K5pDHccVzMhbRIAa5vAaz tbiSFSqKe3IrJSfBXkUTqg4TRlGBL+OPKV4Smc0lW6rFV0xT8Y28dfnJGwe+H2PW qjPnQt/RPdCWofJhRZ+8Pb0hYCvf40/W/imAyNBnaSTRLbDNdUoBERK8O9CmeoBa 8qfxmqLVtIdjYX3jTWdAY+7iQLAg8IQADqnkZHsTNVuQlM5Gg8c= -----END CERTIFICATE-----Generated at Mon Jan 26 00:45:14 2026 by rpki-client