This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: eART7gSY0Z1MEyzfHWVeJEBD7FUF4RLyDBHIUSSoQyg= Subject key identifier: E4:FB:CD:94:78:21:98:D4:94:87:03:DD:56:51:F1:A5:05:4D:63:6E Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 56E3EC39D5ACDDCA1EC86E675BF278DB8718E9FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 016C Signing time: Mon 19 Jan 2026 16:02:30 +0000 Manifest this update: Mon 19 Jan 2026 15:57:30 +0000 Manifest next update: Thu 22 Jan 2026 19:00:30 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: BDcvz9dcmFMDymuENd5dYQO6a9H4RjRtn2tuDJw7fSg=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e3:ec:39:d5:ac:dd:ca:1e:c8:6e:67:5b:f2:78:db:87:18:e9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Jan 19 15:57:30 2026 GMT Not After : Jan 22 19:00:30 2026 GMT Subject: CN=E4FBCD94782198D4948703DD5651F1A5054D636E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:e6:74:83:68:0d:fa:31:46:0f:aa:a5:9c: e0:53:4f:de:73:26:9b:16:7b:11:1f:9f:c5:c3:0c: 80:d9:1d:7d:1e:fe:48:28:46:c1:d1:e5:7e:b7:4a: 08:f1:5f:15:f1:66:df:e1:24:19:e5:0b:c4:3c:60: ef:7c:12:17:3d:ab:14:c3:0e:50:9a:0a:38:15:0c: 71:78:58:c9:a2:7d:fb:8e:ff:b0:cc:45:0d:6f:da: f6:5f:bf:b0:79:85:1e:02:93:34:e0:a9:c8:c2:a9: e5:c2:c7:73:b3:f6:93:ad:ac:36:9e:ee:23:d2:06: a8:bd:fa:77:b3:40:94:6e:38:85:09:49:0c:00:6e: f0:f4:20:13:33:53:c0:59:de:d4:bf:6d:3e:df:62: 85:b1:92:87:83:0c:93:66:01:ed:d1:44:0f:bf:42: 1d:d2:7e:7c:3f:a8:1b:30:98:fb:59:12:3d:62:bf: 85:65:8f:a0:7d:ce:eb:ab:36:f4:fd:f1:26:99:b4: 79:4c:44:d3:b9:a5:27:c0:ca:d4:ac:f6:e0:ae:1e: 46:4d:57:f7:1c:c7:52:bb:c4:57:ad:4a:82:95:c6: 7f:d7:34:0f:6d:97:af:da:06:56:b9:96:76:f8:8c: d6:49:bf:3e:63:bd:41:22:cc:33:a4:0a:98:b5:00: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FB:CD:94:78:21:98:D4:94:87:03:DD:56:51:F1:A5:05:4D:63:6E X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3b:4a:f1:ee:36:db:12:89:40:74:5d:eb:72:a4:30:15:bc: ac:56:99:d6:18:50:4e:eb:68:ae:9c:77:a2:a9:e3:08:d7:0e: 05:99:ea:88:d3:f5:c2:8e:83:c5:ce:5a:38:6f:b2:f3:76:83: 9b:bb:fc:6b:19:b8:d7:bf:a6:71:15:d6:7f:bb:cc:5e:57:39: 16:db:62:22:25:19:96:41:0f:fb:59:88:33:ed:63:51:b5:07: 67:b7:cf:a3:a5:5f:81:44:ff:a0:28:13:4a:08:66:83:c9:a4: ef:90:09:e2:95:a9:5c:de:bf:83:44:c7:86:ca:10:2a:80:3d: b2:3c:81:72:4c:5c:62:14:d6:fa:ea:a9:44:5c:6d:58:f0:81: 93:fe:6f:b1:fd:1b:2a:1d:df:e6:4c:eb:70:87:39:73:12:53: 35:55:29:1c:b2:5f:a0:02:45:ea:5a:d8:d0:0a:0e:a5:b2:94: d1:9c:e3:b6:3d:a2:6d:66:7e:c1:07:54:74:e6:74:e5:23:7f: 55:f4:35:af:9a:bf:7e:4e:3e:fa:46:ef:ea:04:c6:95:46:aa: 20:30:b8:b8:e5:4d:9a:69:e2:de:72:67:6f:97:e7:57:fa:74: c5:12:ed:61:b6:ca:27:22:c6:a8:e3:76:77:e7:fb:f6:a0:69: 39:3f:69:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuPsOdWs3coeyG5nW/J424cY6f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNjAxMTkxNTU3MzBaFw0yNjAxMjIxOTAwMzBaMDMxMTAvBgNV BAMTKEU0RkJDRDk0NzgyMTk4RDQ5NDg3MDNERDU2NTFGMUE1MDU0RDYzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiOZ0g2gN+jFGD6qlnOBTT95z JpsWexEfn8XDDIDZHX0e/kgoRsHR5X63SgjxXxXxZt/hJBnlC8Q8YO98Ehc9qxTD DlCaCjgVDHF4WMmiffuO/7DMRQ1v2vZfv7B5hR4CkzTgqcjCqeXCx3Oz9pOtrDae 7iPSBqi9+nezQJRuOIUJSQwAbvD0IBMzU8BZ3tS/bT7fYoWxkoeDDJNmAe3RRA+/ Qh3Sfnw/qBswmPtZEj1iv4Vlj6B9zuurNvT98SaZtHlMRNO5pSfAytSs9uCuHkZN V/ccx1K7xFetSoKVxn/XNA9tl6/aBla5lnb4jNZJvz5jvUEizDOkCpi1AMQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5PvNlHghmNSUhwPdVlHxpQVNY24wHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ7SvHuNtsSiUB0XetypDAVvKxWmdYYUE7r aK6cd6Kp4wjXDgWZ6ojT9cKOg8XOWjhvsvN2g5u7/GsZuNe/pnEV1n+7zF5XORbb YiIlGZZBD/tZiDPtY1G1B2e3z6OlX4FE/6AoE0oIZoPJpO+QCeKVqVzev4NEx4bK ECqAPbI8gXJMXGIU1vrqqURcbVjwgZP+b7H9Gyod3+ZM63CHOXMSUzVVKRyyX6AC Repa2NAKDqWylNGc47Y9om1mfsEHVHTmdOUjf1X0Na+av35OPvpG7+oExpVGqiAw uLjlTZpp4t5yZ2+X51f6dMUS7WG2yicixqjjdnfn+/agaTk/afk= -----END CERTIFICATE-----Generated at Wed Jan 21 18:11:02 2026 by rpki-client