This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: 2N8ztNBzoDO4eVwz2oplSR85FMUvHa6ZhEzUMm2aF2c= Subject key identifier: 39:D1:00:F4:A2:A7:D8:5E:2A:5F:EE:4F:3B:44:D0:7C:B1:13:5F:AA Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 3D5183369EEBBAB1FDD789F1B5E735AEAF9B105B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01D0 Signing time: Sat 31 Jan 2026 06:10:51 +0000 Manifest this update: Sat 31 Jan 2026 06:05:51 +0000 Manifest next update: Tue 03 Feb 2026 15:15:51 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: Cs6rRaadaiKNBAGfyrZ9MdEIeSU2HISCw6WXM4G+S84=) 2: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: cnuV3XBMOXYCEsZye3rtB+j/sH8H265eHTPTRDcKOJM=) 3: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: wuNIHLORz4Vdmg8tO/nySnMFBaLuy8MnBl+qb8R+V1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:51:83:36:9e:eb:ba:b1:fd:d7:89:f1:b5:e7:35:ae:af:9b:10:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Jan 31 06:05:51 2026 GMT Not After : Feb 3 15:15:51 2026 GMT Subject: CN=39D100F4A2A7D85E2A5FEE4F3B44D07CB1135FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:84:a9:09:dc:50:64:d0:2b:fb:4c:18:03:85: 7e:9c:58:7e:19:6d:6d:95:f1:ce:5f:1e:97:70:90: ea:5e:96:1d:3d:4c:11:de:71:2c:43:d4:b6:ac:0b: 76:0d:50:3a:51:ef:69:2a:5a:e0:1d:5c:db:3d:b8: 5e:8d:c4:0d:00:db:83:67:54:55:32:b1:d2:24:3b: 38:ba:d5:10:4d:92:78:8e:b8:68:23:cf:f0:b3:e4: c6:3b:3c:3d:c2:25:e1:17:cc:75:84:61:8e:57:4d: 0c:d5:11:35:bb:e8:70:2e:df:41:5a:d0:f8:35:11: 4d:4e:61:26:5a:88:ca:96:47:ce:06:99:84:87:00: 8c:12:2f:d0:8d:89:33:88:b5:f3:52:28:b2:c8:40: 54:4b:df:99:27:ef:d1:97:e8:44:69:c6:f9:02:6c: 7e:af:fe:7a:9b:a5:3d:8c:99:0a:da:b3:15:89:aa: 79:cf:8d:1e:c8:d1:a0:e5:71:c5:61:99:f8:79:57: d7:a3:58:e6:2c:aa:cc:22:34:5a:b2:fd:7f:6e:2c: c9:b4:bc:de:c0:01:a9:66:2b:b4:64:b2:fd:a9:82: f6:c0:9c:19:5e:d3:cb:f1:06:19:c1:6f:9e:c7:89: 72:32:3a:44:8b:5e:b3:ff:60:b6:61:a5:6e:13:ed: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D1:00:F4:A2:A7:D8:5E:2A:5F:EE:4F:3B:44:D0:7C:B1:13:5F:AA X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:58:7a:ff:1c:b7:a2:bb:3d:6b:a6:6b:64:13:d2:e6:92:c3: ec:76:34:8a:cc:d5:ab:30:41:1d:52:8b:55:12:1e:31:78:78: 25:ae:8d:2e:5e:a2:5b:e8:10:ba:f7:ff:29:98:06:7a:17:28: ee:33:08:2d:30:74:ac:94:c5:33:ec:52:50:f9:b7:c8:f1:a4: 3b:b3:58:5d:d4:99:8b:60:b7:16:0d:b0:83:1f:0d:9f:e7:f7: da:95:43:c8:7c:b2:6e:6d:1e:a1:58:4b:c2:54:47:4d:64:8f: c5:21:1e:3d:ab:24:1a:e1:61:4d:4e:1d:35:0e:62:49:36:77: 0b:e3:e9:7e:fc:4b:fd:24:90:64:6c:35:7b:ea:16:e0:2b:9f: 24:71:e2:bd:e0:ee:85:27:e2:a2:85:f7:8c:2b:eb:d5:cd:49: be:e1:0b:ee:29:e1:5b:16:7e:35:be:6a:be:54:9b:8d:ef:79: ca:d2:f6:4a:4b:bf:2c:d0:8f:b0:da:c9:7a:ea:ae:05:af:80: 98:03:a4:bf:0e:84:03:93:d1:c3:af:db:44:63:2a:f5:f7:76: a0:84:75:fa:ea:f1:04:d9:8d:c2:e3:b8:9b:8a:11:62:eb:09: a3:3f:ef:b3:10:3e:d7:e7:9a:c5:af:66:e0:67:3f:19:79:a7: fa:39:78:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVGDNp7rurH914nxtec1rq+bEFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNjAxMzEwNjA1NTFaFw0yNjAyMDMxNTE1NTFaMDMxMTAvBgNV BAMTKDM5RDEwMEY0QTJBN0Q4NUUyQTVGRUU0RjNCNDREMDdDQjExMzVGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhKkJ3FBk0Cv7TBgDhX6cWH4Z bW2V8c5fHpdwkOpelh09TBHecSxD1LasC3YNUDpR72kqWuAdXNs9uF6NxA0A24Nn VFUysdIkOzi61RBNkniOuGgjz/Cz5MY7PD3CJeEXzHWEYY5XTQzVETW76HAu30Fa 0Pg1EU1OYSZaiMqWR84GmYSHAIwSL9CNiTOItfNSKLLIQFRL35kn79GX6ERpxvkC bH6v/nqbpT2MmQrasxWJqnnPjR7I0aDlccVhmfh5V9ejWOYsqswiNFqy/X9uLMm0 vN7AAalmK7Rksv2pgvbAnBle08vxBhnBb57HiXIyOkSLXrP/YLZhpW4T7Q57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdEA9KKn2F4qX+5PO0TQfLETX6owHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZYev8ct6K7PWuma2QT0uaSw+x2NIrM1asw QR1Si1USHjF4eCWujS5eolvoELr3/ymYBnoXKO4zCC0wdKyUxTPsUlD5t8jxpDuz WF3UmYtgtxYNsIMfDZ/n99qVQ8h8sm5tHqFYS8JUR01kj8UhHj2rJBrhYU1OHTUO Ykk2dwvj6X78S/0kkGRsNXvqFuArnyRx4r3g7oUn4qKF94wr69XNSb7hC+4p4VsW fjW+ar5Um43vecrS9kpLvyzQj7DayXrqrgWvgJgDpL8OhAOT0cOv20RjKvX3dqCE dfrq8QTZjcLjuJuKEWLrCaM/77MQPtfnmsWvZuBnPxl5p/o5eG4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:07 2026 by rpki-client