This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: TRJpMY6Yi0AbSCSYs0On9O6NNUCHqjitANFqKlLIBj0= Subject key identifier: 60:FC:A6:EA:8E:04:C9:1E:E1:C2:1B:F3:40:C1:76:EF:31:8B:9C:1A Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 4604B244E82F17C7CED4E67F7E9900338B8DAE91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 012E Signing time: Wed 21 Jan 2026 00:10:39 +0000 Manifest this update: Wed 21 Jan 2026 00:05:39 +0000 Manifest next update: Sat 24 Jan 2026 05:27:39 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 3: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: XciQFalgN3ejh0/sNiLLvXNia2ksiVupRUU5nci3//4=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:04:b2:44:e8:2f:17:c7:ce:d4:e6:7f:7e:99:00:33:8b:8d:ae:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Jan 21 00:05:39 2026 GMT Not After : Jan 24 05:27:39 2026 GMT Subject: CN=60FCA6EA8E04C91EE1C21BF340C176EF318B9C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:a0:38:59:11:ec:f0:5c:22:2d:0b:d6:ee: 65:c3:b1:84:59:bc:c5:03:18:fa:85:e4:4f:e9:64: de:51:3c:26:13:c5:d4:5b:20:25:2c:3a:a5:46:2b: a5:59:aa:31:ed:44:a8:36:56:1a:d9:59:92:2c:d7: 0b:92:51:e3:26:6e:0a:a1:ea:6f:d8:78:4e:86:d1: 80:fd:cd:f5:7c:52:1a:75:58:cc:b0:c8:db:61:d0: c3:54:6c:2a:45:0f:a4:99:73:30:30:54:0d:9e:5b: 9d:fb:d3:ab:58:be:5b:53:5d:03:ea:71:30:24:a5: 55:62:5d:07:3f:28:6f:88:d1:fe:58:cf:d8:ec:e1: c8:9d:d6:0a:16:99:a7:b0:4d:f2:c6:df:e9:56:e5: 03:0c:f2:3a:e8:a9:e9:37:f1:16:ff:47:2d:7f:d9: 48:01:b3:17:77:36:f6:c3:9b:74:da:d5:17:81:bc: b8:ea:ba:20:61:ba:1f:11:35:a3:69:37:ff:a7:cf: 16:21:c4:9b:da:7a:0c:74:2a:d2:3b:f2:ca:97:6f: c8:50:11:f6:e7:3e:90:e4:99:5c:bc:e3:60:be:79: 47:77:9f:a6:c3:1d:1e:b7:d0:f6:6f:20:07:4a:86: f6:d3:b3:90:dd:90:29:9b:93:15:78:e5:b0:0d:8e: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:A6:EA:8E:04:C9:1E:E1:C2:1B:F3:40:C1:76:EF:31:8B:9C:1A X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c5:33:d6:1c:fd:04:6a:4b:c6:7f:92:98:e1:c2:fe:b7:f3: 73:c5:f6:5a:a3:58:00:ce:b4:94:60:2b:ed:08:a0:38:a6:be: e1:2d:00:d5:9a:a5:ab:83:fa:25:28:17:14:75:be:8d:ab:5f: 13:9c:5e:bd:27:3f:19:2b:4e:3d:76:8d:72:07:2c:48:5b:c7: 19:3e:ad:af:16:da:80:e4:f4:01:5f:7d:c6:21:1e:1c:11:6a: 28:3d:00:35:4e:28:e7:25:64:d3:97:c6:a1:d3:64:d1:73:a2: 50:10:67:eb:00:fc:75:53:64:87:ac:74:7d:94:93:63:1b:9e: b3:5f:c5:75:80:bc:d2:0a:a4:1e:b5:2d:c5:d2:20:11:42:9e: 85:01:dc:d3:d5:13:54:f4:3e:b4:04:56:4b:9e:88:d4:19:40: e8:41:45:52:87:8a:6b:fc:aa:06:aa:d5:2b:59:8c:46:e9:74: 34:86:5a:5d:62:94:9c:a1:27:50:0e:53:b9:f6:14:4a:2d:d5: 8d:d0:b3:15:d5:ce:93:c3:d0:0d:00:ec:d4:22:71:0b:96:0b: 89:02:86:03:28:a3:49:b9:9a:87:f4:96:04:13:33:c5:32:d8: e0:9e:f4:56:8f:69:e5:b7:94:d5:0a:66:60:cc:70:46:f5:16: 1a:b9:69:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgSyROgvF8fO1OZ/fpkAM4uNrpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNjAxMjEwMDA1MzlaFw0yNjAxMjQwNTI3MzlaMDMxMTAvBgNV BAMTKDYwRkNBNkVBOEUwNEM5MUVFMUMyMUJGMzQwQzE3NkVGMzE4QjlDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtW6A4WRHs8FwiLQvW7mXDsYRZ vMUDGPqF5E/pZN5RPCYTxdRbICUsOqVGK6VZqjHtRKg2VhrZWZIs1wuSUeMmbgqh 6m/YeE6G0YD9zfV8Uhp1WMywyNth0MNUbCpFD6SZczAwVA2eW53706tYvltTXQPq cTAkpVViXQc/KG+I0f5Yz9js4cid1goWmaewTfLG3+lW5QMM8jroqek38Rb/Ry1/ 2UgBsxd3NvbDm3Ta1ReBvLjquiBhuh8RNaNpN/+nzxYhxJvaegx0KtI78sqXb8hQ EfbnPpDkmVy842C+eUd3n6bDHR630PZvIAdKhvbTs5DdkCmbkxV45bANjo+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPym6o4EyR7hwhvzQMF27zGLnBowHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLFM9Yc/QRqS8Z/kpjhwv6383PF9lqjWADO tJRgK+0IoDimvuEtANWapauD+iUoFxR1vo2rXxOcXr0nPxkrTj12jXIHLEhbxxk+ ra8W2oDk9AFffcYhHhwRaig9ADVOKOclZNOXxqHTZNFzolAQZ+sA/HVTZIesdH2U k2MbnrNfxXWAvNIKpB61LcXSIBFCnoUB3NPVE1T0PrQEVkueiNQZQOhBRVKHimv8 qgaq1StZjEbpdDSGWl1ilJyhJ1AOU7n2FEot1Y3QsxXVzpPD0A0A7NQicQuWC4kC hgMoo0m5mof0lgQTM8Uy2OCe9FaPaeW3lNUKZmDMcEb1Fhq5aTM= -----END CERTIFICATE-----Generated at Wed Jan 21 12:14:31 2026 by rpki-client