This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft (raw, json) Hash identifier: PiCZs0/fNCuv+CZbKJOqTjp2wcI+9YapSu40uny29zA= Subject key identifier: 4B:3D:78:90:B2:A7:E8:FE:1C:25:44:C5:81:97:41:EF:EA:16:3F:54 Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB Certificate issuer: /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Certificate serial: 2C05A99C4D5746616059A5552667222781CA97E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft Manifest number: 014D Signing time: Sat 31 Jan 2026 23:11:45 +0000 Manifest this update: Sat 31 Jan 2026 23:06:45 +0000 Manifest next update: Wed 04 Feb 2026 10:28:45 +0000 Files and hashes: 1: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: y5O1Ppu2ytn4g8GvvxC2f7T0LX+os0fh9M12M0RIzb8=) 2: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: qDLyTdPWSG6q8vGu/DnC4p5fkC9xQVIbSAKqWF4GTxo=) 3: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl (hash: Uam/td5l3UEN3eSsr/EIQljOQbwnRR98I0+/CIyB04Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:05:a9:9c:4d:57:46:61:60:59:a5:55:26:67:22:27:81:ca:97:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Validity Not Before: Jan 31 23:06:45 2026 GMT Not After : Feb 4 10:28:45 2026 GMT Subject: CN=4B3D7890B2A7E8FE1C2544C5819741EFEA163F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:a6:30:2e:1d:48:8a:30:5b:28:b8:5d:72: 5d:fc:8e:23:b8:02:ca:e0:e3:7a:e7:b4:2c:a5:b3: 75:6b:6f:e4:53:7c:b9:b9:b0:16:7d:07:50:49:17: bf:a5:c8:44:64:e1:fc:e1:37:a4:89:00:b1:33:36: 21:cb:37:15:66:f9:00:d6:37:f6:51:02:a9:54:8b: a5:eb:12:d7:fa:11:fc:fc:1b:40:3e:3d:94:68:4c: c5:94:a5:f4:12:97:4d:1e:80:a5:18:c7:4a:ad:25: 6a:c2:3f:e3:4f:47:a3:ce:8d:c8:3b:09:74:d1:a9: 11:b1:01:11:17:0a:5e:c5:be:bf:d7:0c:7a:b3:a9: b1:43:d3:af:6e:b9:6f:2f:87:b9:d3:ae:f5:db:44: 00:54:8d:91:20:23:cf:68:03:a6:cd:21:fd:07:6b: 29:c5:b2:42:25:5a:52:f5:1c:d5:88:54:b2:c0:3d: 5e:57:5d:c4:39:da:e7:c3:dc:9d:22:86:7e:13:40: 09:74:ad:04:f0:a2:5e:0a:41:ce:38:b8:24:6d:90: 85:90:84:07:06:46:d1:7a:4d:de:ea:a9:0e:3b:a2: 87:82:cd:2b:f4:3d:d5:8c:70:9d:bc:69:06:25:87: dd:6e:0a:8b:97:e5:90:d4:bb:7f:0d:f3:3a:3c:19: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3D:78:90:B2:A7:E8:FE:1C:25:44:C5:81:97:41:EF:EA:16:3F:54 X509v3 Authority Key Identifier: keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:46:2d:3d:45:88:96:93:5f:76:66:6a:28:ce:2b:e0:f7:78: 4d:66:4d:ef:9a:65:f5:6c:94:65:ef:dc:0b:2b:b9:e5:1a:eb: 54:42:5a:64:65:f5:20:32:ce:8b:64:00:ff:ad:bb:eb:a9:5c: fd:c3:c2:a6:8e:c6:93:fa:36:85:cf:e7:3b:d6:66:cc:03:fe: 19:5f:e1:9e:21:1b:e6:4c:83:19:78:4b:4b:3b:87:ed:34:df: 92:3c:a0:d8:52:43:05:3e:d6:5b:c5:8d:da:ce:07:6b:8c:53: 4f:43:76:6b:d5:63:fe:aa:b8:13:c3:4a:c7:0b:30:68:d6:6f: 4d:9a:06:2d:c0:82:bd:cc:02:eb:7d:0f:19:9f:c2:ca:d0:94: d4:01:9d:38:65:de:df:42:0e:08:99:90:c7:94:5e:96:fd:5f: 90:b0:bb:46:9f:f0:f8:f5:7e:c2:d6:b5:2f:b7:b3:69:37:42: 41:bb:4d:a3:73:82:25:d9:4d:cf:0d:4a:64:78:3e:3d:e9:4d: 31:cd:8e:22:dc:55:cc:ae:e6:72:d1:d1:69:d7:00:83:08:53: 84:c2:41:75:68:d9:b2:f6:7c:44:42:26:1d:11:6d:37:c8:97: 9e:32:47:e4:90:75:cb:62:9d:55:02:82:69:1b:fb:7f:da:60: 6e:3c:6a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAWpnE1XRmFgWaVVJmciJ4HKl+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FB OTg3ODJCQjAeFw0yNjAxMzEyMzA2NDVaFw0yNjAyMDQxMDI4NDVaMDMxMTAvBgNV BAMTKDRCM0Q3ODkwQjJBN0U4RkUxQzI1NDRDNTgxOTc0MUVGRUExNjNGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJ6YwLh1IijBbKLhdcl38jiO4 Asrg43rntCyls3Vrb+RTfLm5sBZ9B1BJF7+lyERk4fzhN6SJALEzNiHLNxVm+QDW N/ZRAqlUi6XrEtf6Efz8G0A+PZRoTMWUpfQSl00egKUYx0qtJWrCP+NPR6POjcg7 CXTRqRGxAREXCl7Fvr/XDHqzqbFD069uuW8vh7nTrvXbRABUjZEgI89oA6bNIf0H aynFskIlWlL1HNWIVLLAPV5XXcQ52ufD3J0ihn4TQAl0rQTwol4KQc44uCRtkIWQ hAcGRtF6Td7qqQ47ooeCzSv0PdWMcJ28aQYlh91uCouX5ZDUu38N8zo8GZo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSz14kLKn6P4cJUTFgZdB7+oWP1QwHwYDVR0j BBgwFoAUH0xG4Y8hr75NismEYJC2OqmHgrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDdiMDI2NC05YTBhLTRjZTQtOTNjYi0yY2RkODQwYjg1MzQvMC8xRjRDNDZFMThG MjFBRkJFNEQ4QUM5ODQ2MDkwQjYzQUE5ODc4MkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FBOTg3 ODJCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2 M0FBOTg3ODJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdGLT1FiJaTX3ZmaijOK+D3eE1mTe+aZfVs lGXv3AsrueUa61RCWmRl9SAyzotkAP+tu+upXP3DwqaOxpP6NoXP5zvWZswD/hlf 4Z4hG+ZMgxl4S0s7h+0035I8oNhSQwU+1lvFjdrOB2uMU09DdmvVY/6quBPDSscL MGjWb02aBi3Agr3MAut9DxmfwsrQlNQBnThl3t9CDgiZkMeUXpb9X5Cwu0af8Pj1 fsLWtS+3s2k3QkG7TaNzgiXZTc8NSmR4Pj3pTTHNjiLcVcyu5nLR0WnXAIMIU4TC QXVo2bL2fERCJh0RbTfIl54yR+SQdctinVUCgmkb+3/aYG48al8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:26 2026 by rpki-client