This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: z4LptLHCbRslP3OTEqGIo4ulk4TWtymb04ZhMcpOOS4= Subject key identifier: 32:E4:C7:DE:46:AB:AB:00:C3:6B:52:64:10:95:16:D0:F1:3F:EF:B2 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 075668BF992803F900BFA2E283C381BF5954AC73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 0233 Signing time: Sun 01 Feb 2026 03:11:44 +0000 Manifest this update: Sun 01 Feb 2026 03:06:44 +0000 Manifest next update: Wed 04 Feb 2026 13:58:44 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 2: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: G9SRqZB/Ytqzpm4KgSgkQuTJgtvxP/3Prwg4r23f5OU=) 4: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:56:68:bf:99:28:03:f9:00:bf:a2:e2:83:c3:81:bf:59:54:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Feb 1 03:06:44 2026 GMT Not After : Feb 4 13:58:44 2026 GMT Subject: CN=32E4C7DE46ABAB00C36B5264109516D0F13FEFB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ac:fe:dc:c6:65:d2:ad:d4:64:c6:ca:d9:76: 72:e3:f8:13:79:eb:cf:d0:7a:f8:7c:f7:2d:5a:0d: a2:c1:b1:e1:9d:be:84:1b:e6:e5:06:41:f7:22:a0: af:09:d5:0e:be:06:45:9f:d4:a8:a9:98:54:65:15: 1d:e8:60:2c:b7:98:a6:46:c7:32:41:14:f1:24:a2: 1c:f4:c2:f1:92:0a:2b:6c:15:a5:c7:f2:e2:2c:54: 25:1f:8b:06:55:66:a2:93:ec:44:75:9c:25:c3:03: ca:d9:95:c9:cc:18:dd:52:ff:4b:51:18:d9:ff:83: cb:e2:a9:16:2a:b1:8b:dd:38:59:fc:b0:cc:37:f0: 29:df:c6:31:cd:c2:18:2e:0b:fd:44:08:4d:64:56: 32:81:e4:9d:53:e8:c1:4a:ba:e4:94:60:cd:ac:c0: fb:10:58:1a:29:a2:b4:ef:c2:11:1f:b1:da:54:c3: 0f:d9:e6:c2:f0:5c:a2:58:5c:e1:91:34:1a:a7:16: 39:7c:94:b2:4c:b9:3b:dc:af:94:6c:02:56:6c:9f: 7c:64:a0:4c:ff:96:03:5b:a4:b6:5c:ee:84:f3:4f: 87:b5:bb:07:b8:de:c1:63:66:d1:34:f0:67:af:0d: 1a:17:5e:66:bb:13:d5:78:a3:ea:5c:e5:11:50:74: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:C7:DE:46:AB:AB:00:C3:6B:52:64:10:95:16:D0:F1:3F:EF:B2 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f6:6d:1c:be:ad:45:8b:0b:5b:ad:81:dd:ac:49:12:57:24: 83:78:17:f3:b6:6d:65:4a:f7:6a:90:94:93:36:ca:6c:35:0f: c3:bd:4a:dd:ab:d4:c7:ca:81:13:ee:46:06:f9:e1:dc:f8:6c: 6e:e3:b0:1f:cf:aa:5f:d3:2d:3a:2b:13:60:6c:f4:92:6e:2c: 54:62:9f:12:0b:ca:52:89:10:be:ff:0d:94:0a:57:3e:ac:0f: 1a:b6:63:74:4f:e1:7d:ee:ef:d3:2a:80:7a:7c:18:66:4b:af: df:1c:cf:eb:7c:78:0e:b7:d6:45:d8:95:93:d6:1f:20:80:c3: 7c:00:13:e2:60:f0:30:c7:a3:6a:9b:09:72:9c:4f:a1:33:4a: b9:87:dd:b1:69:98:36:44:1c:1f:89:ee:74:44:98:e5:f0:8b: 6e:3c:cf:1c:b6:44:17:98:73:9b:92:82:b1:46:d1:26:a3:60: d2:ef:49:a8:87:c6:f6:95:c4:97:d9:11:00:d8:4a:5d:e1:6a: 7c:94:0a:34:56:1c:45:6c:02:a4:3c:83:c5:23:78:64:9f:9e: 12:5f:96:10:c5:76:48:af:ef:bd:3b:1e:2c:b9:67:36:ea:8a: 5c:59:08:f9:fa:9c:9f:21:fe:0c:01:a4:08:8c:99:75:db:4a: 55:cc:8d:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1Zov5koA/kAv6Lig8OBv1lUrHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNjAyMDEwMzA2NDRaFw0yNjAyMDQxMzU4NDRaMDMxMTAvBgNV BAMTKDMyRTRDN0RFNDZBQkFCMDBDMzZCNTI2NDEwOTUxNkQwRjEzRkVGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrP7cxmXSrdRkxsrZdnLj+BN5 68/Qevh89y1aDaLBseGdvoQb5uUGQfcioK8J1Q6+BkWf1KipmFRlFR3oYCy3mKZG xzJBFPEkohz0wvGSCitsFaXH8uIsVCUfiwZVZqKT7ER1nCXDA8rZlcnMGN1S/0tR GNn/g8viqRYqsYvdOFn8sMw38CnfxjHNwhguC/1ECE1kVjKB5J1T6MFKuuSUYM2s wPsQWBoporTvwhEfsdpUww/Z5sLwXKJYXOGRNBqnFjl8lLJMuTvcr5RsAlZsn3xk oEz/lgNbpLZc7oTzT4e1uwe43sFjZtE08GevDRoXXma7E9V4o+pc5RFQdKE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMuTH3karqwDDa1JkEJUW0PE/77IwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn2bRy+rUWLC1utgd2sSRJXJIN4F/O2bWVK 92qQlJM2ymw1D8O9St2r1MfKgRPuRgb54dz4bG7jsB/Pql/TLTorE2Bs9JJuLFRi nxILylKJEL7/DZQKVz6sDxq2Y3RP4X3u79MqgHp8GGZLr98cz+t8eA631kXYlZPW HyCAw3wAE+Jg8DDHo2qbCXKcT6EzSrmH3bFpmDZEHB+J7nREmOXwi248zxy2RBeY c5uSgrFG0SajYNLvSaiHxvaVxJfZEQDYSl3hanyUCjRWHEVsAqQ8g8UjeGSfnhJf lhDFdkiv7707Hiy5ZzbqilxZCPn6nJ8h/gwBpAiMmXXbSlXMjSM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:35 2026 by rpki-client