This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: N5KWgYq022zQrfBOt71CRl8hZjz6R010lIiJE7gjpzY= Subject key identifier: E8:60:ED:70:DE:7F:B4:49:80:46:46:60:15:54:13:90:F3:FD:BE:BF Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 4AD65ED134B5CBEDE08C737CD2D60343137C59FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 020E Signing time: Sat 31 Jan 2026 10:51:06 +0000 Manifest this update: Sat 31 Jan 2026 10:46:06 +0000 Manifest next update: Tue 03 Feb 2026 15:02:06 +0000 Files and hashes: 1: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: sm8jeStS9mRgsrGl5CeRQ6sBSscm5f2rHE/KQpXoWj8=) 2: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: EQbr12ySqIrNTM9njp7Wb0XN8yJtB1BDEx2u9gpZun8=) 3: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: OjD7igAi8uIoux+rVxGtZEh2dpv8xELOea0gwWs5+6I=) 4: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: kdSkL6/3RBtYXw/gqIVQjjF8xv3I0xvjEwV6eE4LWHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d6:5e:d1:34:b5:cb:ed:e0:8c:73:7c:d2:d6:03:43:13:7c:59:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Jan 31 10:46:06 2026 GMT Not After : Feb 3 15:02:06 2026 GMT Subject: CN=E860ED70DE7FB4498046466015541390F3FDBEBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:6a:0e:e3:0f:d2:d3:d9:31:45:0a:0c:3f: 01:8c:38:a4:96:ad:c1:c3:80:eb:30:7c:65:05:5a: 53:64:cf:8a:45:8c:a3:fc:9a:a7:56:89:5c:f5:44: c7:13:7b:11:e1:d6:7e:69:f9:c5:5c:45:92:91:44: aa:be:57:84:f6:7f:c2:db:45:78:4f:39:eb:ed:61: 7c:47:c0:ae:54:78:0c:1e:f1:77:da:3c:ed:5b:68: 11:80:7b:1e:aa:8e:04:da:b1:7d:44:54:29:d9:80: 29:57:14:93:64:bb:09:57:2d:5b:a9:b7:4b:f9:29: cb:7a:f5:5c:1d:8f:f3:13:f1:ce:bf:1a:e3:2c:c9: 05:75:7b:32:bb:fa:87:03:e8:db:95:0a:27:4e:7f: 65:f9:90:cf:5f:c9:5a:28:a7:eb:1f:e4:f9:5c:df: 35:91:15:0b:52:77:d4:90:cc:25:fb:3a:14:02:c6: 1f:7f:fc:11:95:2c:23:b6:05:2a:87:84:bd:b4:bb: 7c:ba:68:46:28:4b:61:aa:33:8f:8a:71:6e:22:2e: a9:b5:a8:af:72:ee:1e:74:7a:d3:32:18:92:74:73: 2c:bd:43:32:d1:2c:29:14:5a:14:55:f4:cd:0c:1e: 96:08:d4:e4:7a:9a:6a:6e:1f:67:3b:eb:eb:b8:89: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:60:ED:70:DE:7F:B4:49:80:46:46:60:15:54:13:90:F3:FD:BE:BF X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:43:e9:3a:30:f8:a1:22:5e:c3:bb:b5:08:78:4d:95:cd:13: 3c:3b:37:b6:7d:df:f0:6f:cb:8e:6c:73:52:3c:58:46:31:94: e2:9b:75:61:57:15:cf:ad:79:9a:bc:88:e9:02:41:6c:76:7a: 0f:bd:aa:c6:75:2d:ca:5e:57:21:7f:b0:c2:f1:f2:0d:5c:c8: 69:42:b6:68:f9:54:a3:04:30:ea:60:0f:c2:cb:35:1e:d5:16: b5:08:0b:8b:06:b1:83:5f:7d:d2:fa:b8:d3:1d:e6:c1:71:37: 06:79:21:2e:ca:9d:83:97:4a:d0:c4:be:e1:1b:46:f7:36:6a: f3:72:9f:ab:ad:e1:a0:99:78:00:84:bb:81:3d:ae:67:80:00: 2a:6d:3d:2d:98:fc:5d:89:87:1e:7e:0f:d5:57:0b:77:5b:ed: 6c:79:03:8d:e5:29:2d:88:2e:57:a1:21:44:0b:2c:95:d5:39: c8:92:9e:40:20:79:fa:40:f1:30:0f:00:0e:e3:17:01:18:86: f6:4d:54:8e:bb:8d:e2:10:87:4f:1e:3c:44:98:01:cf:8a:c1: 1a:b9:8a:2e:a6:b0:fb:c7:c5:41:27:ee:1c:2d:f3:0a:cb:de: 9a:ba:0f:5b:85:2a:ba:cb:3b:2a:1e:83:06:60:44:dc:ba:b7: a3:37:15:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStZe0TS1y+3gjHN80tYDQxN8WfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNjAxMzExMDQ2MDZaFw0yNjAyMDMxNTAyMDZaMDMxMTAvBgNV BAMTKEU4NjBFRDcwREU3RkI0NDk4MDQ2NDY2MDE1NTQxMzkwRjNGREJFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFWoO4w/S09kxRQoMPwGMOKSW rcHDgOswfGUFWlNkz4pFjKP8mqdWiVz1RMcTexHh1n5p+cVcRZKRRKq+V4T2f8Lb RXhPOevtYXxHwK5UeAwe8XfaPO1baBGAex6qjgTasX1EVCnZgClXFJNkuwlXLVup t0v5Kct69Vwdj/MT8c6/GuMsyQV1ezK7+ocD6NuVCidOf2X5kM9fyVoop+sf5Plc 3zWRFQtSd9SQzCX7OhQCxh9//BGVLCO2BSqHhL20u3y6aEYoS2GqM4+KcW4iLqm1 qK9y7h50etMyGJJ0cyy9QzLRLCkUWhRV9M0MHpYI1OR6mmpuH2c76+u4if8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GDtcN5/tEmARkZgFVQTkPP9vr8wHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFD6Tow+KEiXsO7tQh4TZXNEzw7N7Z93/Bv y45sc1I8WEYxlOKbdWFXFc+teZq8iOkCQWx2eg+9qsZ1LcpeVyF/sMLx8g1cyGlC tmj5VKMEMOpgD8LLNR7VFrUIC4sGsYNffdL6uNMd5sFxNwZ5IS7KnYOXStDEvuEb Rvc2avNyn6ut4aCZeACEu4E9rmeAACptPS2Y/F2Jhx5+D9VXC3db7Wx5A43lKS2I LlehIUQLLJXVOciSnkAgefpA8TAPAA7jFwEYhvZNVI67jeIQh08ePESYAc+KwRq5 ii6msPvHxUEn7hwt8wrL3pq6D1uFKrrLOyoegwZgRNy6t6M3FTk= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:16 2026 by rpki-client