This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: gANmuGRm0bRR/adlksqgnZ2rvm2g4V0oV767TUrrHA0= Subject key identifier: 0E:52:3F:B9:E7:75:D7:E2:61:3F:44:AE:61:B7:3E:EF:13:B8:41:4F Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 3A280A76A9FF323B0AAB313D2B9922717052054E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 0507 Signing time: Fri 09 Jan 2026 04:50:52 +0000 Manifest this update: Fri 09 Jan 2026 04:45:52 +0000 Manifest next update: Mon 12 Jan 2026 11:14:52 +0000 Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 2: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 3: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 4: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: iUq+0Qv4Y9XnnxJX/G4a0DcKyE18ylCCsWTPSpwY67s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 11:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:28:0a:76:a9:ff:32:3b:0a:ab:31:3d:2b:99:22:71:70:52:05:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Jan 9 04:45:52 2026 GMT Not After : Jan 12 11:14:52 2026 GMT Subject: CN=0E523FB9E775D7E2613F44AE61B73EEF13B8414F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:ac:c8:56:a2:a8:67:c8:f3:0b:30:3b:20: b5:f5:11:2f:f3:98:fe:74:fc:5c:4e:d7:ee:a7:a7: 60:3a:82:84:19:41:73:f0:d5:8a:8c:ff:5b:44:e8: 24:61:ef:df:ab:7e:0a:3e:8e:72:2b:11:30:91:5d: 95:d1:7b:89:79:7d:45:38:c6:4f:e3:a5:82:64:51: a4:ae:00:45:39:ac:f0:70:88:ac:61:fa:82:34:63: 72:bb:85:09:d0:54:97:e0:87:16:9d:65:e8:9f:d7: 4d:45:75:ff:d6:61:6b:5b:1b:41:30:9a:06:e3:2b: 75:6b:88:bb:60:bf:61:71:f5:8b:13:e3:0e:bc:70: 55:5e:35:bb:05:c0:cb:df:2c:4f:eb:d8:4b:82:36: 11:ba:62:69:7b:5b:53:8e:4f:3d:b2:db:71:86:53: f7:68:1c:b7:1e:c6:99:98:ee:4d:d9:11:89:85:3b: 50:04:a6:7e:da:a2:45:c3:68:13:dc:7d:5e:dd:4b: 84:3c:21:93:d5:c9:ad:e0:71:ee:45:c0:9d:04:41: c6:d8:67:f2:a7:c9:03:ac:d0:bf:b9:6f:ce:8d:82: 5a:21:c8:07:77:4c:f5:90:fc:c8:eb:25:05:62:e8: 75:8b:a2:8c:ae:9b:fa:98:a5:cd:48:1d:53:fa:f0: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:3F:B9:E7:75:D7:E2:61:3F:44:AE:61:B7:3E:EF:13:B8:41:4F X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4c:ac:32:e0:a5:c7:d7:8e:9f:ff:46:f5:36:12:6f:8c:41: 34:cf:02:42:d9:f4:32:45:ca:77:8e:9e:e0:d8:b3:95:6b:8a: 4d:99:86:3b:05:36:7f:8f:b4:f4:18:93:47:ae:9f:8d:8f:44: 61:ac:51:b5:8a:8a:f9:fd:6b:e5:41:b6:3f:3d:f6:97:26:c1: 31:e8:55:f7:7f:c0:0a:24:09:9b:84:8a:be:44:62:31:41:af: ab:fe:6e:75:f4:98:b2:01:91:62:33:75:bc:d2:ac:6e:c1:d6: 84:e3:d3:a9:9f:d4:73:dd:7b:ff:44:08:0a:a0:a9:56:aa:2b: 01:3f:c6:f4:1e:b1:0c:13:ff:69:62:4d:d9:81:85:1e:7f:b2: f5:75:8b:f4:76:4f:0b:30:26:f0:f9:75:08:b0:67:f0:cd:f1: d4:74:30:f6:23:55:d1:54:3b:e0:74:59:a0:b6:df:10:43:35: 60:4e:60:64:42:55:e9:6f:18:47:76:27:96:61:8f:11:eb:d0: 5f:53:4f:ca:a0:43:15:de:9e:1d:c5:0c:e9:b9:c3:6f:0d:54: c7:08:a0:1d:df:12:d6:e9:6e:81:04:3b:98:78:62:95:2b:70: 04:11:56:84:1e:9c:00:b9:da:8c:dc:f2:b7:98:f8:60:30:40: 76:ba:3c:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOigKdqn/MjsKqzE9K5kicXBSBU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNjAxMDkwNDQ1NTJaFw0yNjAxMTIxMTE0NTJaMDMxMTAvBgNV BAMTKDBFNTIzRkI5RTc3NUQ3RTI2MTNGNDRBRTYxQjczRUVGMTNCODQxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3KzIVqKoZ8jzCzA7ILX1ES/z mP50/FxO1+6np2A6goQZQXPw1YqM/1tE6CRh79+rfgo+jnIrETCRXZXRe4l5fUU4 xk/jpYJkUaSuAEU5rPBwiKxh+oI0Y3K7hQnQVJfghxadZeif101Fdf/WYWtbG0Ew mgbjK3VriLtgv2Fx9YsT4w68cFVeNbsFwMvfLE/r2EuCNhG6Yml7W1OOTz2y23GG U/doHLcexpmY7k3ZEYmFO1AEpn7aokXDaBPcfV7dS4Q8IZPVya3gce5FwJ0EQcbY Z/KnyQOs0L+5b86NglohyAd3TPWQ/MjrJQVi6HWLooyum/qYpc1IHVP68JX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlI/ued11+JhP0SuYbc+7xO4QU8wHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9MrDLgpcfXjp//RvU2Em+MQTTPAkLZ9DJF yneOnuDYs5Vrik2ZhjsFNn+PtPQYk0eun42PRGGsUbWKivn9a+VBtj899pcmwTHo Vfd/wAokCZuEir5EYjFBr6v+bnX0mLIBkWIzdbzSrG7B1oTj06mf1HPde/9ECAqg qVaqKwE/xvQesQwT/2liTdmBhR5/svV1i/R2TwswJvD5dQiwZ/DN8dR0MPYjVdFU O+B0WaC23xBDNWBOYGRCVelvGEd2J5ZhjxHr0F9TT8qgQxXenh3FDOm5w28NVMcI oB3fEtbpboEEO5h4YpUrcAQRVoQenAC52ozc8reY+GAwQHa6PG4= -----END CERTIFICATE-----Generated at Fri Jan 9 10:24:09 2026 by rpki-client