This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: HYuSr1iW7ABdPfYdclClQ8L2UDnGm4zksX9YpJ46YUc= Subject key identifier: 32:39:B2:20:A7:26:7B:37:AC:1E:56:1F:9F:F5:77:C3:B8:87:79:D6 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 6889FEAA92D8A4E27271A5855AF9B1A3B6403E79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03BB Signing time: Sat 24 Jan 2026 10:11:14 +0000 Manifest this update: Sat 24 Jan 2026 10:06:14 +0000 Manifest next update: Tue 27 Jan 2026 14:39:14 +0000 Files and hashes: 1: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 3: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: /ek4m8kycQhaxmQNrbaBJ2n2gmGsLF/owfSwe0vilwU=) 4: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:89:fe:aa:92:d8:a4:e2:72:71:a5:85:5a:f9:b1:a3:b6:40:3e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Jan 24 10:06:14 2026 GMT Not After : Jan 27 14:39:14 2026 GMT Subject: CN=3239B220A7267B37AC1E561F9FF577C3B88779D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:67:ac:3a:aa:5c:3b:8d:9d:5f:81:5f:30: 79:6a:3d:e9:b6:d9:47:5e:75:16:8d:e4:7d:ee:a3: 08:75:86:d7:b3:5e:15:a9:53:a3:d3:8e:59:1d:a1: cd:57:bc:03:87:d8:a5:4a:af:2c:23:1e:8c:1d:d2: db:19:00:42:94:62:36:b5:60:20:fa:b5:81:83:c7: 6a:4d:31:5d:12:ff:61:39:dc:07:5b:6d:9b:5e:0a: f9:23:f0:c8:fb:0a:7b:e1:08:a0:32:38:bd:4e:a1: 74:c4:c1:46:f6:31:a5:a5:a9:f3:98:fa:6b:d9:2b: 5c:0c:50:a4:20:12:d7:83:64:46:ba:12:4c:d4:96: cc:3d:1f:44:9b:fc:c3:06:e9:8b:45:79:d7:24:d7: 0d:a6:fc:96:55:b6:0a:3f:34:aa:5b:fb:cb:59:eb: 4b:bf:9c:bf:99:73:5a:a9:23:9b:0d:59:1f:02:9c: 5e:45:b5:9b:48:17:c7:a8:2f:1e:b1:8f:22:60:25: 26:2e:d5:10:6c:9e:ca:98:77:fe:0f:b0:f7:d3:f3: 9d:b1:7e:fc:14:c8:d8:cd:ac:4d:c0:16:b7:a9:3a: c9:1e:3d:57:bc:79:56:83:d5:63:cf:95:84:13:20: 6a:b4:09:af:7d:da:ad:a2:dc:07:8a:91:66:27:e3: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:B2:20:A7:26:7B:37:AC:1E:56:1F:9F:F5:77:C3:B8:87:79:D6 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:41:d5:58:1d:fa:37:fc:14:04:5c:a2:33:34:a3:c4:06:f6: b8:e8:82:34:ea:e8:c4:93:fc:26:2a:1d:39:5d:80:14:81:5f: d1:fb:67:fd:62:fa:b3:eb:43:31:83:2b:a9:af:8c:d8:d8:a7: 55:4e:98:c6:ac:ef:76:1c:52:af:2e:65:36:81:2b:b5:41:44: 75:97:13:d6:05:8c:fa:6b:ad:97:eb:dd:80:95:f0:66:e2:3f: cc:29:13:78:98:1e:5c:2b:8b:4e:19:f1:17:28:da:77:c3:93: 63:47:23:f8:83:5c:4e:37:02:0f:1c:92:13:e7:86:37:bb:3b: 79:06:5b:ed:91:33:af:03:8e:d4:37:c7:01:b9:dc:7f:73:f3: 10:c7:38:b9:ba:56:e3:53:c8:88:e8:9a:5f:69:48:4e:70:8a: 3d:45:c4:fc:ad:08:2b:75:f1:44:e6:4f:40:85:86:6f:50:0d: b3:f6:02:2f:b9:4f:23:54:35:45:c5:d2:9c:f4:7e:2b:d8:9a: e5:ba:43:16:c5:4a:89:f6:80:1c:7d:ab:f2:ab:93:c5:b0:26: c1:36:d1:8e:9d:e5:17:1a:27:f0:d8:c6:7b:da:08:83:e0:5b: 21:fe:dc:5a:cc:7b:45:98:da:6c:d8:6e:9d:88:d6:ad:41:d1: a9:3c:23:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIn+qpLYpOJycaWFWvmxo7ZAPnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNjAxMjQxMDA2MTRaFw0yNjAxMjcxNDM5MTRaMDMxMTAvBgNV BAMTKDMyMzlCMjIwQTcyNjdCMzdBQzFFNTYxRjlGRjU3N0MzQjg4Nzc5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4WesOqpcO42dX4FfMHlqPem2 2UdedRaN5H3uowh1htezXhWpU6PTjlkdoc1XvAOH2KVKrywjHowd0tsZAEKUYja1 YCD6tYGDx2pNMV0S/2E53AdbbZteCvkj8Mj7CnvhCKAyOL1OoXTEwUb2MaWlqfOY +mvZK1wMUKQgEteDZEa6EkzUlsw9H0Sb/MMG6YtFedck1w2m/JZVtgo/NKpb+8tZ 60u/nL+Zc1qpI5sNWR8CnF5FtZtIF8eoLx6xjyJgJSYu1RBsnsqYd/4PsPfT852x fvwUyNjNrE3AFrepOskePVe8eVaD1WPPlYQTIGq0Ca992q2i3AeKkWYn4xfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjmyIKcmezesHlYfn/V3w7iHedYwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhB1Vgd+jf8FARcojM0o8QG9rjogjTq6MST /CYqHTldgBSBX9H7Z/1i+rPrQzGDK6mvjNjYp1VOmMas73YcUq8uZTaBK7VBRHWX E9YFjPprrZfr3YCV8GbiP8wpE3iYHlwri04Z8Rco2nfDk2NHI/iDXE43Ag8ckhPn hje7O3kGW+2RM68DjtQ3xwG53H9z8xDHOLm6VuNTyIjoml9pSE5wij1FxPytCCt1 8UTmT0CFhm9QDbP2Ai+5TyNUNUXF0pz0fivYmuW6QxbFSon2gBx9q/Krk8WwJsE2 0Y6d5RcaJ/DYxnvaCIPgWyH+3FrMe0WY2mzYbp2I1q1B0ak8I6w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:34 2026 by rpki-client