This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: eudN45m8AieQi24tMyAMCayHUX9krZzJItu5FCdzusE= Subject key identifier: C0:4E:C8:A7:4F:A2:B2:B4:17:57:73:5F:CA:4E:BD:87:C1:FE:EA:8C Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 3272099AFEA67B4298791E58AC06E1E08EAF2470 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: 012D Signing time: Sat 31 Jan 2026 18:42:27 +0000 Manifest this update: Sat 31 Jan 2026 18:37:27 +0000 Manifest next update: Wed 04 Feb 2026 00:58:27 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 2: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 3: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: jEHOnkcw1ptCMK77iNDIoL66cqNDAJU1FOcsPdw2aLU=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 00:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:72:09:9a:fe:a6:7b:42:98:79:1e:58:ac:06:e1:e0:8e:af:24:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Jan 31 18:37:27 2026 GMT Not After : Feb 4 00:58:27 2026 GMT Subject: CN=C04EC8A74FA2B2B41757735FCA4EBD87C1FEEA8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:32:35:06:1a:cf:13:8c:05:49:e0:65:f2: 02:9e:9e:83:7b:df:86:23:04:fe:b7:dc:d6:2d:51: a5:c4:5b:52:f8:cd:34:2b:15:95:f1:84:a8:8a:16: 7a:cd:c8:a3:45:6c:03:cc:ea:9f:32:2e:12:12:97: e5:1a:30:93:73:9d:35:9f:b3:fa:62:c4:8c:34:2d: 4b:ca:27:c7:a8:77:84:78:97:49:f3:47:3b:d0:b5: cd:8e:60:07:1e:dc:39:71:0c:54:db:60:45:ad:7e: 5f:e6:e1:d5:f0:fb:f5:3b:dc:dd:80:b6:07:67:03: 81:4b:0f:76:4b:a1:a5:70:72:7b:ea:7c:8a:00:dc: 7e:cb:86:1d:ac:42:dc:ad:d6:c7:ac:30:43:9e:fa: 36:c2:17:86:9c:4c:c7:75:16:68:cb:bd:e3:e9:9a: 6d:06:26:14:e3:67:65:b7:82:01:a8:70:77:8a:61: 78:64:09:b6:9e:0b:fa:1e:86:96:3d:a9:cb:8a:f8: 32:31:af:e8:03:f8:af:10:c9:da:2e:cb:57:2f:47: 7c:fe:0d:a6:9f:af:0a:c6:4c:60:e6:04:24:03:a8: b1:2e:3b:61:d0:9a:0b:80:8c:b6:22:5d:08:21:30: fc:fa:c9:26:41:5b:8e:5e:84:47:01:c9:29:c5:c6: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:C8:A7:4F:A2:B2:B4:17:57:73:5F:CA:4E:BD:87:C1:FE:EA:8C X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:64:88:a8:78:5d:9c:c3:c9:8d:d6:af:b3:28:c4:58:ed: 48:65:cb:d7:e5:d4:e4:65:43:0d:72:9a:c4:b5:44:c2:7f:1c: 24:09:80:28:26:9b:6e:e6:b0:28:67:a2:92:32:20:81:e8:51: 33:1e:f0:e8:c9:96:36:f7:35:12:8f:c7:8e:72:c7:8e:f0:8d: 07:7a:71:54:79:c7:e6:bf:03:e9:e6:46:0f:5e:31:38:d2:d1: 98:db:7e:a0:75:dc:58:e2:99:83:a3:19:c5:60:89:38:1a:74: ee:57:35:e9:62:c0:c1:86:fe:2a:0f:84:6f:e2:eb:e2:f0:b4: dd:02:b2:d6:57:d3:82:66:53:18:4f:b1:ac:1c:44:42:84:ed: 4b:70:4f:9d:9e:80:80:b0:50:8d:14:13:b9:07:2a:8f:f9:9b: 84:e0:15:53:f4:7e:52:1c:68:1c:6d:ce:1c:a2:8d:4f:cd:07: 2c:bd:01:20:02:9f:16:a9:78:29:06:26:c4:c0:61:45:6b:6b: d9:f1:18:8b:db:24:24:7d:1c:b5:7b:24:e3:cd:94:44:17:46: f1:14:b2:bf:08:4d:30:d8:47:92:d8:13:9c:e4:12:f7:2a:94: 5c:b0:e9:c7:e4:94:ff:17:45:b5:cc:c3:d3:ee:92:f5:cc:88: 8b:f9:b3:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnIJmv6me0KYeR5YrAbh4I6vJHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNjAxMzExODM3MjdaFw0yNjAyMDQwMDU4MjdaMDMxMTAvBgNV BAMTKEMwNEVDOEE3NEZBMkIyQjQxNzU3NzM1RkNBNEVCRDg3QzFGRUVBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhzI1BhrPE4wFSeBl8gKenoN7 34YjBP633NYtUaXEW1L4zTQrFZXxhKiKFnrNyKNFbAPM6p8yLhISl+UaMJNznTWf s/pixIw0LUvKJ8eod4R4l0nzRzvQtc2OYAce3DlxDFTbYEWtfl/m4dXw+/U73N2A tgdnA4FLD3ZLoaVwcnvqfIoA3H7Lhh2sQtyt1sesMEOe+jbCF4acTMd1FmjLvePp mm0GJhTjZ2W3ggGocHeKYXhkCbaeC/oehpY9qcuK+DIxr+gD+K8Qydouy1cvR3z+ DaafrwrGTGDmBCQDqLEuO2HQmguAjLYiXQghMPz6ySZBW45ehEcBySnFxp6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwE7Ip0+isrQXV3Nfyk69h8H+6owwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXjZIioeF2cw8mN1q+zKMRY7Uhly9fl1ORl Qw1ymsS1RMJ/HCQJgCgmm27msChnopIyIIHoUTMe8OjJljb3NRKPx45yx47wjQd6 cVR5x+a/A+nmRg9eMTjS0ZjbfqB13FjimYOjGcVgiTgadO5XNeliwMGG/ioPhG/i 6+LwtN0CstZX04JmUxhPsawcREKE7UtwT52egICwUI0UE7kHKo/5m4TgFVP0flIc aBxtzhyijU/NByy9ASACnxapeCkGJsTAYUVra9nxGIvbJCR9HLV7JOPNlEQXRvEU sr8ITTDYR5LYE5zkEvcqlFyw6cfklP8XRbXMw9PukvXMiIv5s/8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:25 2026 by rpki-client