This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: 26v4xZiSrbfp14uyLtM6vA7CGMk7LtOMN+l2xEPqOEE= Subject key identifier: 8C:9A:51:26:DB:7C:37:F1:36:68:F8:71:80:DE:2F:D3:FD:AA:3F:B4 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 27D37F23E8FFF6D485B5EAA5CEDCF6539570035C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 022A Signing time: Sat 31 Jan 2026 23:01:39 +0000 Manifest this update: Sat 31 Jan 2026 22:56:39 +0000 Manifest next update: Wed 04 Feb 2026 01:23:39 +0000 Files and hashes: 1: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: MzEupSrXlebebmZ66Gd92DusEJ4mRAdQ/8taDo8z+bk=) 2: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: s4O+1P9scM9BCZG01KFNzUilcWUoQttCFuoaD7mHs+8=) 3: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: a5a2FZuaU8+YwWyJiNpJaq/a07NXsjnc5SwcHCXziC4=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: CllgKLcIRd3lX7KQsM2tAZpeFF8Rj9z8kpx3sCEVEDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d3:7f:23:e8:ff:f6:d4:85:b5:ea:a5:ce:dc:f6:53:95:70:03:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Jan 31 22:56:39 2026 GMT Not After : Feb 4 01:23:39 2026 GMT Subject: CN=8C9A5126DB7C37F13668F87180DE2FD3FDAA3FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:17:eb:4e:ac:bb:e8:0c:46:c3:68:84:70: 96:85:30:46:2a:e0:2f:a5:df:09:e4:b2:61:19:64: 18:87:7c:59:6d:55:7e:eb:43:64:00:15:c9:12:75: bb:5f:9e:dd:03:91:18:2a:64:a7:c0:58:30:e0:41: b2:82:38:0e:69:d0:be:5b:4c:fb:56:31:cc:35:3b: 6a:6f:5b:9e:15:5e:41:03:9c:37:f1:e9:d0:b0:65: a3:54:39:8c:7b:e1:4c:8b:5c:50:56:c7:49:ab:be: fd:34:60:d8:6b:96:98:25:79:6f:8c:19:ab:9d:2e: b1:c6:27:d8:13:38:89:9e:2a:13:e7:d2:16:29:8b: 1e:c9:a1:5e:55:53:d2:3d:55:bb:29:c4:4b:29:1b: 5c:a4:39:ab:fb:a7:d3:0f:49:8a:0c:9e:73:9b:76: 45:6d:b1:3e:d3:5b:4b:68:24:d0:79:bc:ea:38:6c: aa:47:49:6d:58:a8:2a:5d:1a:e7:b3:44:8d:1f:1d: 96:8e:dc:a7:2d:e8:ef:b9:9a:f0:07:34:68:f1:4c: 71:bb:4b:29:d0:bd:26:e3:85:88:50:c2:04:ac:84: 79:1e:51:20:be:8c:0e:14:7d:f0:45:af:2c:f8:62: 2c:72:63:f7:39:28:7d:a4:b5:b2:ba:2b:3e:b4:5a: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9A:51:26:DB:7C:37:F1:36:68:F8:71:80:DE:2F:D3:FD:AA:3F:B4 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8c:0d:03:0c:07:dc:66:dd:24:bd:ea:e0:4b:3f:9a:a1:bc: 4a:0f:b6:3c:a6:e7:1f:f0:6b:05:da:40:c6:88:a8:5b:e2:0a: 5c:a4:a8:45:ee:98:c9:8d:df:58:dc:2e:07:31:ef:58:3d:4d: 4d:4a:be:1d:4c:8a:6a:3d:71:d3:55:00:d5:5f:81:75:5e:50: c8:8a:98:c2:cd:a1:43:5d:aa:1d:05:50:fe:89:a3:fa:c9:24: fd:b6:b5:b8:f7:09:c2:5c:6c:86:8e:61:87:68:74:8f:6b:d9: 00:bb:44:45:40:66:23:81:1d:0e:e1:b9:bd:71:fe:b0:ee:0f: f1:22:40:93:eb:fe:26:52:42:b7:57:07:a8:31:94:9c:1b:2b: df:1f:d5:c6:0a:32:9f:71:85:b9:8a:0f:55:9b:80:93:5f:97: bc:bd:1b:a5:ec:3a:ac:c5:1f:09:74:44:af:1f:42:05:25:5e: 15:21:8b:db:86:45:a9:5f:03:33:ca:05:46:41:1e:5d:77:82: 8e:eb:7e:33:4f:1d:5e:2c:59:41:cf:da:31:5e:01:71:e1:5c: 08:3f:9f:3d:94:0a:11:8c:20:bc:c9:9d:dd:4d:41:d5:2d:37: d9:88:02:d3:34:98:5b:65:b7:eb:0c:42:a8:ee:b1:45:e2:3e: e6:a1:34:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9N/I+j/9tSFteqlztz2U5VwA1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNjAxMzEyMjU2MzlaFw0yNjAyMDQwMTIzMzlaMDMxMTAvBgNV BAMTKDhDOUE1MTI2REI3QzM3RjEzNjY4Rjg3MTgwREUyRkQzRkRBQTNGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFBfrTqy76AxGw2iEcJaFMEYq 4C+l3wnksmEZZBiHfFltVX7rQ2QAFckSdbtfnt0DkRgqZKfAWDDgQbKCOA5p0L5b TPtWMcw1O2pvW54VXkEDnDfx6dCwZaNUOYx74UyLXFBWx0mrvv00YNhrlpgleW+M GaudLrHGJ9gTOImeKhPn0hYpix7JoV5VU9I9VbspxEspG1ykOav7p9MPSYoMnnOb dkVtsT7TW0toJNB5vOo4bKpHSW1YqCpdGuezRI0fHZaO3Kct6O+5mvAHNGjxTHG7 SynQvSbjhYhQwgSshHkeUSC+jA4UffBFryz4YixyY/c5KH2ktbK6Kz60WvEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJpRJtt8N/E2aPhxgN4v0/2qP7QwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGMDQMMB9xm3SS96uBLP5qhvEoPtjym5x/w awXaQMaIqFviClykqEXumMmN31jcLgcx71g9TU1Kvh1Mimo9cdNVANVfgXVeUMiK mMLNoUNdqh0FUP6Jo/rJJP22tbj3CcJcbIaOYYdodI9r2QC7REVAZiOBHQ7hub1x /rDuD/EiQJPr/iZSQrdXB6gxlJwbK98f1cYKMp9xhbmKD1WbgJNfl7y9G6XsOqzF Hwl0RK8fQgUlXhUhi9uGRalfAzPKBUZBHl13go7rfjNPHV4sWUHP2jFeAXHhXAg/ nz2UChGMILzJnd1NQdUtN9mIAtM0mFtlt+sMQqjusUXiPuahNLw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:11 2026 by rpki-client