This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: s3NuME/mqYJCgOGfGJ2ZCjS6wcfy11hdwAfXLQRtUZs= Subject key identifier: BD:B7:44:2D:DB:BF:01:BE:14:70:6B:62:EA:E7:63:A3:66:D8:EB:B1 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 7249EDFF98546137304E6A153FC58C997DEBD080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 053D Signing time: Sat 10 Jan 2026 11:01:11 +0000 Manifest this update: Sat 10 Jan 2026 10:56:11 +0000 Manifest next update: Tue 13 Jan 2026 16:43:11 +0000 Files and hashes: 1: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: ii/d1crjnARuqVMfLnmfRWFFerxyKW9KZ1e4ey/yMvs=) 2: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 16:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:49:ed:ff:98:54:61:37:30:4e:6a:15:3f:c5:8c:99:7d:eb:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Jan 10 10:56:11 2026 GMT Not After : Jan 13 16:43:11 2026 GMT Subject: CN=BDB7442DDBBF01BE14706B62EAE763A366D8EBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:08:ca:2d:90:2b:e0:e5:58:df:02:70:51: c5:5f:28:9d:e2:67:ff:73:95:cd:c8:f3:92:d7:6f: ce:b4:69:47:1c:b6:ad:98:e3:a3:3c:a9:60:2b:38: 50:32:65:92:a7:61:ac:97:42:44:db:95:98:c2:41: 71:e3:df:a6:e5:4b:bb:ee:e4:9f:89:74:5a:38:be: 9a:05:ae:30:03:fc:4d:72:56:71:97:de:b1:96:06: 34:06:33:40:7f:48:28:2f:81:43:47:49:dc:c2:e3: 49:e4:23:a1:19:d2:91:43:6c:dd:c7:e1:6a:e8:33: f1:90:95:fe:46:5e:be:34:99:69:16:99:89:5a:03: ef:4b:f6:13:b5:75:6c:06:df:f7:63:1b:aa:a0:c4: fb:95:76:b6:a5:3b:c9:03:b0:6b:4e:26:6e:f1:50: 58:77:b5:fb:8d:da:98:36:3c:79:9e:21:40:b5:52: 95:4e:38:2e:e6:d4:83:87:66:47:22:a8:82:b3:c6: fc:72:c9:a7:4a:f1:71:35:ff:72:32:31:90:38:5d: a3:b4:51:01:71:9b:a0:ee:e1:42:00:09:65:d5:bc: 93:a8:4b:06:17:33:00:ae:2b:24:3a:76:e1:ae:eb: de:dd:c0:70:8c:76:35:07:d8:7f:19:f3:1c:28:91: 3a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:44:2D:DB:BF:01:BE:14:70:6B:62:EA:E7:63:A3:66:D8:EB:B1 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7b:43:f5:0f:2b:db:35:f7:58:1d:1e:bb:73:25:60:17:43: da:93:d8:de:9f:61:5c:d8:23:86:d7:34:b1:6f:ef:f3:1c:16: f3:90:bb:0a:22:dd:d0:c2:09:b1:a4:ab:3e:47:9b:3c:64:6b: a7:21:e6:68:a9:24:c6:0d:b9:ea:0a:05:7d:b7:2e:b6:ba:6c: 99:fd:8e:4e:84:52:0b:8e:51:9f:a3:ef:1a:71:19:7f:59:09: 1d:bb:f5:39:64:b6:f0:48:6f:9e:fc:95:b0:97:49:7b:c6:5b: 78:2b:71:09:a9:c9:40:f4:1c:e6:04:93:50:31:f0:bd:20:55: 4b:58:a9:5d:fc:45:c3:c7:83:86:70:be:5d:87:a7:63:62:81: ef:5d:14:83:4d:49:ee:ae:7c:26:7d:5f:a7:5c:16:06:ab:2f: b2:e4:69:e1:1a:b8:2b:85:d1:0f:3d:ac:f3:ae:c1:2a:6a:eb: ac:99:c1:09:db:6d:51:0e:97:56:53:84:4d:21:b0:72:5c:3f: a8:01:b8:0b:a0:38:f1:7c:99:53:81:47:ac:4c:a3:8c:a1:93: 9d:67:21:21:8c:fc:a3:20:53:a6:ce:1c:8d:03:12:72:4e:dd: 4f:e3:51:57:66:aa:30:4f:38:5c:d9:84:9c:71:68:e3:b0:19: 0f:22:d6:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcknt/5hUYTcwTmoVP8WMmX3r0IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjAxMTAxMDU2MTFaFw0yNjAxMTMxNjQzMTFaMDMxMTAvBgNV BAMTKEJEQjc0NDJEREJCRjAxQkUxNDcwNkI2MkVBRTc2M0EzNjZEOEVCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKQjKLZAr4OVY3wJwUcVfKJ3i Z/9zlc3I85LXb860aUcctq2Y46M8qWArOFAyZZKnYayXQkTblZjCQXHj36blS7vu 5J+JdFo4vpoFrjAD/E1yVnGX3rGWBjQGM0B/SCgvgUNHSdzC40nkI6EZ0pFDbN3H 4WroM/GQlf5GXr40mWkWmYlaA+9L9hO1dWwG3/djG6qgxPuVdralO8kDsGtOJm7x UFh3tfuN2pg2PHmeIUC1UpVOOC7m1IOHZkciqIKzxvxyyadK8XE1/3IyMZA4XaO0 UQFxm6Du4UIACWXVvJOoSwYXMwCuKyQ6duGu697dwHCMdjUH2H8Z8xwokTplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbdELdu/Ab4UcGti6udjo2bY67EwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ7Q/UPK9s191gdHrtzJWAXQ9qT2N6fYVzY I4bXNLFv7/McFvOQuwoi3dDCCbGkqz5Hmzxka6ch5mipJMYNueoKBX23Lra6bJn9 jk6EUguOUZ+j7xpxGX9ZCR279TlktvBIb578lbCXSXvGW3grcQmpyUD0HOYEk1Ax 8L0gVUtYqV38RcPHg4Zwvl2Hp2Nige9dFINNSe6ufCZ9X6dcFgarL7LkaeEauCuF 0Q89rPOuwSpq66yZwQnbbVEOl1ZThE0hsHJcP6gBuAugOPF8mVOBR6xMo4yhk51n ISGM/KMgU6bOHI0DEnJO3U/jUVdmqjBPOFzZhJxxaOOwGQ8i1uE= -----END CERTIFICATE-----Generated at Mon Jan 12 02:33:14 2026 by rpki-client