This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json) Hash identifier: 3PnfVq9Wa35xa+11VNZyVc2sc5EJNwXcEfNxjT+W8X0= Subject key identifier: 10:4C:F2:99:04:22:6E:F9:3B:7B:7E:EA:0E:54:52:92:3B:2E:65:0A Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B Certificate serial: 134CBECD752C9D1C9E6971042393D494712619F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft Manifest number: B2 Signing time: Mon 12 Jan 2026 13:20:58 +0000 Manifest this update: Mon 12 Jan 2026 13:15:58 +0000 Manifest next update: Fri 16 Jan 2026 01:00:58 +0000 Files and hashes: 1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=) 2: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: Q3nNW9CLwQ8+xEaKPfxpm6trKHjfcajpbBK5uhqm1CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4c:be:cd:75:2c:9d:1c:9e:69:71:04:23:93:d4:94:71:26:19:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B Validity Not Before: Jan 12 13:15:58 2026 GMT Not After : Jan 16 01:00:58 2026 GMT Subject: CN=104CF29904226EF93B7B7EEA0E5452923B2E650A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:45:28:f0:1a:c9:d5:ff:63:9e:85:63:d6: f3:4f:cd:df:fe:ef:d6:03:81:4c:ef:6b:0e:37:6b: a6:a3:9e:b7:9f:e2:85:f2:ef:2c:fe:94:b4:36:2f: cb:e5:5d:38:ed:d6:dc:f0:45:34:67:30:0a:bd:0b: 13:43:fa:bd:1e:68:98:57:81:46:64:7e:ad:63:27: 70:9e:d9:e9:f5:ce:eb:56:06:60:93:d6:74:b6:30: 12:81:8f:b6:d8:99:7c:7d:bd:1b:a6:fe:6a:2e:76: b0:45:a8:8d:d5:d7:29:6a:2d:db:2c:26:3b:1c:28: 93:ef:97:07:d8:9b:d3:28:f5:97:01:0e:cd:49:41: 1a:93:95:e4:70:25:6e:8f:f6:2f:42:95:50:7d:8d: c0:ae:1b:ca:7a:14:ba:57:e9:dc:d8:e1:37:58:c8: 5a:02:92:cd:ff:10:64:b2:aa:46:8d:76:c6:76:64: 73:23:58:22:5e:13:14:a7:e7:64:aa:70:91:c4:72: b3:3c:cf:49:06:f7:c7:b9:23:51:6b:a2:87:e5:f9: e9:d3:08:06:79:3a:70:67:ed:00:40:4a:25:9d:07: 3a:80:a3:63:02:87:58:65:d4:38:72:66:8b:92:56: 62:11:d9:55:5c:06:11:7c:5d:0d:fc:e6:f0:eb:48: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:F2:99:04:22:6E:F9:3B:7B:7E:EA:0E:54:52:92:3B:2E:65:0A X509v3 Authority Key Identifier: keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:29:30:1e:e9:51:11:02:84:68:64:3f:e1:12:c9:b6:d2:2b: 18:f9:24:42:b0:d7:1b:2f:53:03:69:06:9a:17:dc:79:da:1d: 94:db:ea:53:95:22:27:53:72:93:bc:94:da:4a:f9:5d:fc:07: 25:15:e8:9d:9f:29:b2:f1:c0:30:e3:0f:f9:35:1f:89:fe:92: ba:bf:9f:ca:f4:2f:a6:e2:af:93:8d:0b:48:57:5d:fa:64:33: b5:0c:42:33:c9:e4:76:28:56:40:66:12:71:a4:8e:fa:77:aa: bd:73:09:02:29:51:b6:f4:87:f9:51:07:15:4f:a7:54:7a:25: 9f:b2:81:09:bc:58:b9:10:f8:f1:6b:d7:53:81:6e:f5:2d:7c: d0:10:c3:d9:67:ae:6a:77:c5:b2:e7:1f:9f:49:f4:8b:78:62: 2f:1d:9c:7d:7d:00:41:80:fe:ab:90:5d:04:8f:22:0f:3f:a7: 44:de:f8:d7:d4:6a:75:e5:71:22:f9:f4:48:03:4a:31:2c:67: ee:7a:54:e5:65:56:7b:ee:d1:a4:9a:33:2f:79:c8:08:f6:e7: e2:69:50:12:cd:78:bd:94:f1:1a:c8:a4:f8:c7:18:26:89:15: 9a:56:8f:86:b0:7f:47:bd:26:cd:cc:19:b3:4f:75:76:e5:37: 9f:5e:a8:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0y+zXUsnRyeaXEEI5PUlHEmGfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0 MDdENTM1QjAeFw0yNjAxMTIxMzE1NThaFw0yNjAxMTYwMTAwNThaMDMxMTAvBgNV BAMTKDEwNENGMjk5MDQyMjZFRjkzQjdCN0VFQTBFNTQ1MjkyM0IyRTY1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflUUo8BrJ1f9jnoVj1vNPzd/+ 79YDgUzvaw43a6ajnref4oXy7yz+lLQ2L8vlXTjt1tzwRTRnMAq9CxND+r0eaJhX gUZkfq1jJ3Ce2en1zutWBmCT1nS2MBKBj7bYmXx9vRum/moudrBFqI3V1ylqLdss JjscKJPvlwfYm9Mo9ZcBDs1JQRqTleRwJW6P9i9ClVB9jcCuG8p6FLpX6dzY4TdY yFoCks3/EGSyqkaNdsZ2ZHMjWCJeExSn52SqcJHEcrM8z0kG98e5I1Froofl+enT CAZ5OnBn7QBASiWdBzqAo2MCh1hl1DhyZouSVmIR2VVcBhF8XQ385vDrSFdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEzymQQibvk7e37qDlRSkjsuZQowHwYDVR0j BBgwFoAUTpIiznm5z+8mDIN1I/4mhEB9U1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjE2ZjFiZC05NThlLTQ3ZjUtOTQ4ZS04N2UxMWU5MmU2MDEvMC80RTkyMjJDRTc5 QjlDRkVGMjYwQzgzNzUyM0ZFMjY4NDQwN0Q1MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0MDdE NTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2 ODQ0MDdENTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQpMB7pUREChGhkP+ESybbSKxj5JEKw1xsv UwNpBpoX3HnaHZTb6lOVIidTcpO8lNpK+V38ByUV6J2fKbLxwDDjD/k1H4n+krq/ n8r0L6bir5ONC0hXXfpkM7UMQjPJ5HYoVkBmEnGkjvp3qr1zCQIpUbb0h/lRBxVP p1R6JZ+ygQm8WLkQ+PFr11OBbvUtfNAQw9lnrmp3xbLnH59J9It4Yi8dnH19AEGA /quQXQSPIg8/p0Te+NfUanXlcSL59EgDSjEsZ+56VOVlVnvu0aSaMy95yAj25+Jp UBLNeL2U8RrIpPjHGCaJFZpWj4awf0e9Js3MGbNPdXblN59eqPQ= -----END CERTIFICATE-----Generated at Wed Jan 14 11:30:30 2026 by rpki-client