This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: nC/wdbwU/zdvNhtSVPlc9NGf5AaiopFBk+WsWf2OgMM= Subject key identifier: 99:EC:54:25:8B:51:BD:6A:B2:46:1A:94:C5:22:49:92:1C:94:CD:1C Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 4C6CA2E78753E5BC4F535F73F42AA44A6772A57D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 025C Signing time: Sat 31 Jan 2026 07:31:44 +0000 Manifest this update: Sat 31 Jan 2026 07:26:44 +0000 Manifest next update: Tue 03 Feb 2026 13:28:44 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: 29EwyU92wMo2KWDvgyD1kquOJ0/UWDMTbcLOQRMaasg=) 2: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: 889R2qDVPOeLO53uMLPPQOp8+26GcDZpCOvF9T+/+UE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6c:a2:e7:87:53:e5:bc:4f:53:5f:73:f4:2a:a4:4a:67:72:a5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Jan 31 07:26:44 2026 GMT Not After : Feb 3 13:28:44 2026 GMT Subject: CN=99EC54258B51BD6AB2461A94C52249921C94CD1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:c9:f1:f1:4c:98:ef:9f:73:56:6d:52:b8: 3d:dd:e7:3d:ec:df:ba:5a:ca:b1:69:b5:d2:35:51: eb:78:90:a1:4a:05:d6:9f:ca:69:ea:d2:77:39:66: 5b:cd:e5:dc:61:4c:d4:a8:1b:17:5b:13:db:e9:3c: 32:83:2d:1e:4f:2c:ba:3e:b0:fb:6a:d3:65:36:04: 85:3a:80:a8:98:54:f4:80:12:58:5d:d7:82:e0:cd: e3:f5:8f:30:d6:5e:e3:7a:c6:1c:62:ed:ba:52:6c: 6e:9e:2c:24:af:ea:ae:11:e6:72:5f:4a:61:64:34: a8:ab:8a:aa:e6:35:48:a7:bb:bb:7d:99:14:c6:3c: 5c:ed:70:8b:50:51:eb:e2:f2:21:1f:c4:a4:01:46: bb:fe:a0:c1:f9:20:d5:b0:64:14:fa:45:38:f0:76: 0c:29:9d:0a:57:34:2d:4b:2f:fc:7a:a7:91:34:16: 2a:dd:ae:2f:9c:5b:52:25:c5:60:7a:26:ab:9f:70: 84:b6:d1:a9:cf:9e:93:b0:ea:e7:ec:6a:4a:3c:28: f0:02:0e:6a:34:7a:f8:af:6f:5d:49:63:23:c7:e7: 38:92:d9:36:81:dd:01:6d:d6:dc:b7:dd:ce:73:93: 5c:bc:4e:7b:d0:32:7e:d1:a6:fb:89:59:01:91:a1: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EC:54:25:8B:51:BD:6A:B2:46:1A:94:C5:22:49:92:1C:94:CD:1C X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c5:ab:d9:39:5f:d1:6d:53:54:4e:09:31:11:8c:8b:ec:ee: 8d:41:d5:d6:a0:f8:0a:07:62:66:37:e5:dc:15:3d:7b:40:f9: da:92:71:f4:65:98:fd:f4:ea:96:b2:49:50:32:76:36:96:ae: 79:87:ff:d8:37:b1:ee:f3:45:06:8e:08:2a:a4:04:5f:65:b1: ea:ee:bb:49:e1:d8:c9:07:23:a2:dc:33:59:46:f7:54:2d:be: e7:05:7c:b8:08:87:ec:7a:8b:a4:cf:76:37:64:6e:0c:90:6f: d2:9a:40:46:a5:38:7d:bc:35:31:ac:dd:48:09:1c:12:1d:80: 4c:2c:db:66:6c:0c:76:7d:ab:6a:16:6c:b4:62:da:71:7a:11: 25:15:84:29:80:ee:78:5a:79:13:61:8f:04:0d:8f:6d:be:c2: 66:6a:29:9e:26:ba:84:a5:7e:5d:f7:a1:c3:d6:8c:0b:31:d0: 8c:0d:f9:fb:5f:70:33:53:d4:5c:43:e7:50:77:7b:ed:19:e3: b3:37:d7:a9:46:25:da:5c:4d:8e:70:db:cc:20:e9:34:5e:1a: e4:2e:40:75:0e:ab:cb:54:13:46:d7:ac:3a:e2:93:1b:b2:f8: 56:fc:1f:e7:38:13:85:07:c7:83:ec:8f:75:76:c0:e3:20:08: ee:98:59:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGyi54dT5bxPU19z9CqkSmdypX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNjAxMzEwNzI2NDRaFw0yNjAyMDMxMzI4NDRaMDMxMTAvBgNV BAMTKDk5RUM1NDI1OEI1MUJENkFCMjQ2MUE5NEM1MjI0OTkyMUM5NENEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUesnx8UyY759zVm1SuD3d5z3s 37payrFptdI1Uet4kKFKBdafymnq0nc5ZlvN5dxhTNSoGxdbE9vpPDKDLR5PLLo+ sPtq02U2BIU6gKiYVPSAElhd14LgzeP1jzDWXuN6xhxi7bpSbG6eLCSv6q4R5nJf SmFkNKiriqrmNUinu7t9mRTGPFztcItQUevi8iEfxKQBRrv+oMH5INWwZBT6RTjw dgwpnQpXNC1LL/x6p5E0Firdri+cW1IlxWB6JqufcIS20anPnpOw6ufsako8KPAC Dmo0evivb11JYyPH5ziS2TaB3QFt1ty33c5zk1y8TnvQMn7RpvuJWQGRoVd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmexUJYtRvWqyRhqUxSJJkhyUzRwwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTFq9k5X9FtU1ROCTERjIvs7o1B1dag+AoH YmY35dwVPXtA+dqScfRlmP306paySVAydjaWrnmH/9g3se7zRQaOCCqkBF9lseru u0nh2MkHI6LcM1lG91QtvucFfLgIh+x6i6TPdjdkbgyQb9KaQEalOH28NTGs3UgJ HBIdgEws22ZsDHZ9q2oWbLRi2nF6ESUVhCmA7nhaeRNhjwQNj22+wmZqKZ4muoSl fl33ocPWjAsx0IwN+ftfcDNT1FxD51B3e+0Z47M316lGJdpcTY5w28wg6TReGuQu QHUOq8tUE0bXrDrikxuy+Fb8H+c4E4UHx4Psj3V2wOMgCO6YWaQ= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:08 2026 by rpki-client