This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json) Hash identifier: TcsViaKfr9CV1wPWZrtMzyc1wfN1f774/nY3kZQ1muc= Subject key identifier: 2A:29:1E:B1:1C:7B:BB:C6:71:DB:35:38:0F:8C:F9:74:1A:B2:CB:55 Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 2819BE716B4A56AC18D97792B077A7BFB3BE57F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft Manifest number: 0167 Signing time: Mon 19 Jan 2026 06:31:18 +0000 Manifest this update: Mon 19 Jan 2026 06:26:18 +0000 Manifest next update: Thu 22 Jan 2026 13:25:18 +0000 Files and hashes: 1: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: mRTqvUGr89It/F5zWX6knR4gQak/fks9vYbyjN31CDg=) 2: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: yXTkW60GOZZ9N/VIjulkmadt8AvcqAL97NY/DZvxI1Q=) 3: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: NkDaIeWsM/gPXaHtYqNr3YcOAUXw5i1dgIsc199+Uh8=) 4: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: XwTy3von9UfcQqdLvssnHX18UIYiFkJwOgDC3XKu89E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 13:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:19:be:71:6b:4a:56:ac:18:d9:77:92:b0:77:a7:bf:b3:be:57:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Jan 19 06:26:18 2026 GMT Not After : Jan 22 13:25:18 2026 GMT Subject: CN=2A291EB11C7BBBC671DB35380F8CF9741AB2CB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:2f:cf:4e:9b:e0:51:94:b0:36:6d:2d:2d: cf:81:94:0a:3f:bf:6e:1f:fa:97:8a:81:78:fe:af: 29:3d:d4:f9:4b:0d:9c:65:7a:23:3d:30:b8:f8:28: e0:0d:09:5b:d1:d8:6a:48:25:55:2a:f5:88:e0:e3: 8c:0f:cb:cd:1b:3a:6b:a9:75:f1:78:90:ed:e8:6a: b3:96:52:2f:5d:d9:80:65:a7:37:7c:53:6b:bd:0e: 2f:31:ab:0a:d4:51:dc:cd:9a:b5:ac:7b:1e:28:70: e2:9f:a9:f0:76:88:b6:2d:34:ca:63:56:ab:ec:7a: 3b:5f:20:2c:33:16:b7:bd:a9:c6:96:db:eb:44:03: f9:be:59:0a:54:15:da:ba:6b:ec:a0:91:e3:3a:84: 7f:bd:85:0d:48:ea:e5:c2:d1:60:50:e5:1c:8f:90: 54:2c:1d:17:48:7e:62:a9:82:e6:78:e5:16:c5:1f: 52:ab:f2:4e:7c:93:68:fb:15:08:d1:41:10:39:c6: c5:ff:65:53:30:fc:d8:8f:e1:b5:af:4f:39:df:87: 4a:7b:0a:6b:4c:87:4e:95:98:39:f3:a4:cc:9d:bd: 93:a9:8e:f0:6b:34:d8:fa:43:23:b6:fb:67:56:0a: 97:13:a6:9d:dc:0c:fa:8a:fa:12:66:cf:44:ea:0f: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:29:1E:B1:1C:7B:BB:C6:71:DB:35:38:0F:8C:F9:74:1A:B2:CB:55 X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5b:b7:d4:54:b9:d1:37:10:62:54:da:05:45:10:01:82:e6: df:a5:c4:aa:73:f4:8b:90:84:19:80:92:b0:ce:a4:80:27:25: 2b:9f:f2:86:37:4d:3f:9c:d2:fd:d0:61:0a:d8:c2:df:85:e4: a6:50:c7:1a:19:1b:ea:b6:f5:e7:60:45:83:7f:91:3c:72:11: 97:61:68:5c:d6:64:df:89:67:2f:2e:a6:b5:60:72:58:fc:5a: dc:f2:77:21:04:a7:26:77:85:75:74:8c:0d:57:f7:57:ae:de: 54:0d:48:80:7c:2f:c6:01:75:c6:95:6b:32:5f:7c:1f:d0:c5: 1b:4c:bd:e8:63:15:aa:03:b8:f2:0b:32:4f:3e:d2:05:a4:de: 7c:5e:f0:4d:b2:89:68:40:4a:fa:7c:88:bd:8f:95:dd:90:7e: 7f:43:40:a6:77:c4:3a:ac:47:a2:a5:4e:e3:30:3c:43:9a:0d: 04:a2:98:00:39:11:49:86:d3:35:76:c2:2f:89:6d:87:c1:a2: 9d:78:98:25:b9:4a:4c:ce:aa:63:6d:84:f1:80:c6:05:7b:f4: f8:90:71:4f:01:43:af:e9:0d:97:f7:de:d1:e0:c4:eb:c6:41: 4d:0f:ad:23:2f:87:7a:1d:ae:a1:c6:2c:31:d9:35:d9:e7:15: 85:0d:65:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBm+cWtKVqwY2XeSsHenv7O+V/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yNjAxMTkwNjI2MThaFw0yNjAxMjIxMzI1MThaMDMxMTAvBgNV BAMTKDJBMjkxRUIxMUM3QkJCQzY3MURCMzUzODBGOENGOTc0MUFCMkNCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdS/PTpvgUZSwNm0tLc+BlAo/ v24f+peKgXj+ryk91PlLDZxleiM9MLj4KOANCVvR2GpIJVUq9Yjg44wPy80bOmup dfF4kO3oarOWUi9d2YBlpzd8U2u9Di8xqwrUUdzNmrWsex4ocOKfqfB2iLYtNMpj VqvsejtfICwzFre9qcaW2+tEA/m+WQpUFdq6a+ygkeM6hH+9hQ1I6uXC0WBQ5RyP kFQsHRdIfmKpguZ45RbFH1Kr8k58k2j7FQjRQRA5xsX/ZVMw/NiP4bWvTznfh0p7 CmtMh06VmDnzpMydvZOpjvBrNNj6QyO2+2dWCpcTpp3cDPqK+hJmz0TqDxpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKikesRx7u8Zx2zU4D4z5dBqyy1UwHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUy NEI2NjRFN0M5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1bt9RUudE3EGJU2gVFEAGC5t+lxKpz9IuQ hBmAkrDOpIAnJSuf8oY3TT+c0v3QYQrYwt+F5KZQxxoZG+q29edgRYN/kTxyEZdh aFzWZN+JZy8uprVgclj8WtzydyEEpyZ3hXV0jA1X91eu3lQNSIB8L8YBdcaVazJf fB/QxRtMvehjFaoDuPILMk8+0gWk3nxe8E2yiWhASvp8iL2Pld2Qfn9DQKZ3xDqs R6KlTuMwPEOaDQSimAA5EUmG0zV2wi+JbYfBop14mCW5SkzOqmNthPGAxgV79PiQ cU8BQ6/pDZf33tHgxOvGQU0PrSMvh3odrqHGLDHZNdnnFYUNZdg= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:54 2026 by rpki-client