This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft File: 4C44F6F543BDBB858D3656D41A36660407672BDE.mft (raw, json) Hash identifier: H4b0vbIWGTxpjrsKVkbDKn3mk65Doui01PeU/G3FG+c= Subject key identifier: E7:43:F9:84:7C:7E:81:4B:BF:5A:4B:B1:27:80:CE:1F:D8:17:F6:F9 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 776C9287E617CC943836E0BAC126268A22A23FA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft Manifest number: 0298 Signing time: Sat 31 Jan 2026 17:31:01 +0000 Manifest this update: Sat 31 Jan 2026 17:26:01 +0000 Manifest next update: Wed 04 Feb 2026 05:03:01 +0000 Files and hashes: 1: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: BmTBKF81iqbHECVQY3Ck/WKC+nTPpzrh6SVPoZTsvD4=) 2: 4C44F6F543BDBB858D3656D41A36660407672BDE.crl (hash: wKFMygDRD2Egz7hg1GHEjtdcqDokPFFOmk/dezLqYCU=) 3: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: LV0F6O0JrtgL58ARC8h1flo+UOdpKwAYXIa3PEvRfFg=) 4: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: TW2RLqGqp5GMVEosRG1Cl0owKGLEGJyPDYB2l9dTN4E=) 5: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: VWdyOYYTifudfSUwEVWa9ANGPIHpQabnls++DgVxljE=) 6: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: vJ0JThPWN5z9ya3yGVitmhJSsuKICvURyRQCb1oSUaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 05:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6c:92:87:e6:17:cc:94:38:36:e0:ba:c1:26:26:8a:22:a2:3f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Jan 31 17:26:01 2026 GMT Not After : Feb 4 05:03:01 2026 GMT Subject: CN=E743F9847C7E814BBF5A4BB12780CE1FD817F6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:24:6b:0b:31:76:5c:21:3b:dd:08:13:c2: 95:d7:1d:14:d3:61:89:9b:4b:ca:c6:bc:f3:ca:c6: ce:8c:26:1c:6e:1c:a4:e0:94:11:52:8f:c2:7d:05: 3d:f7:3e:fb:47:3c:30:2f:12:95:3c:61:af:71:f1: c0:0a:aa:b7:69:ac:41:95:a7:6d:35:9c:1b:01:68: c1:49:75:8f:3d:bc:fb:47:d6:4b:be:85:80:f4:16: af:de:3c:d2:3c:c2:73:0e:96:d1:c3:d9:30:2d:8f: bc:4a:6e:00:fa:5b:9a:57:49:8d:1f:b1:42:0d:1d: ef:42:46:76:21:93:03:e9:f8:38:be:4d:91:77:80: 16:9c:6e:78:bc:ae:20:f6:21:92:4e:fe:f9:52:f1: a4:9e:aa:c1:d7:75:51:cd:e7:fa:d8:5b:21:d7:61: 3c:e2:8b:cd:21:5c:c5:21:bf:3c:de:59:74:4e:44: 56:14:d7:c7:65:0c:d0:4b:67:a7:0a:77:d8:01:b0: aa:03:1f:a9:3a:c1:df:20:00:18:b1:2b:5f:ef:ea: 24:21:55:3c:e5:cc:4f:16:bc:07:3e:3a:a6:20:52: fa:ad:45:af:fb:73:bf:60:b8:d9:14:00:42:a1:84: 7d:13:5a:97:ce:07:9c:7d:8d:98:48:0d:ab:00:10: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:F9:84:7C:7E:81:4B:BF:5A:4B:B1:27:80:CE:1F:D8:17:F6:F9 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9b:96:a4:89:a2:8e:30:77:2b:a1:44:1c:a0:88:68:77:0e: 42:a4:27:52:d3:0e:c7:c8:be:62:a4:4c:ff:6f:71:33:c9:e2: 94:0d:fb:ae:df:c7:92:4d:86:48:2e:0d:82:f1:93:0a:97:ad: 62:7c:23:77:eb:82:cb:6e:c7:41:46:f4:9c:05:6c:b2:e1:d3: a8:0a:99:a9:3b:e4:6a:ac:ac:0b:6f:3a:11:cc:1f:0a:4a:c5: 53:5e:53:dd:57:dc:69:2a:f8:20:26:1d:08:22:30:10:4e:67: 7a:a6:d2:93:2c:42:82:f1:bd:b1:79:65:dc:5d:d0:4c:f3:bf: 4c:4c:18:7b:4c:95:10:bc:4f:b1:ae:20:80:11:04:f3:7f:d9: 74:e0:f4:91:a8:17:51:bb:bd:8f:e8:1a:dc:b7:40:f3:2f:95: c6:f9:2a:21:3d:12:97:60:70:7a:e7:fa:c9:6b:9b:6b:89:d3: a9:0c:a3:9b:55:ad:d9:e6:06:7f:de:d5:e2:e2:5e:ce:47:cc: 41:bb:71:54:03:a6:71:79:97:03:f9:ac:e0:ad:94:b5:7e:50: 9b:bd:18:13:0f:fe:8e:87:78:19:52:ac:15:50:6a:26:60:e2: 7b:b7:8e:56:1b:66:7b:d5:67:c3:82:00:dd:d0:d4:4a:f8:bc: ae:de:e0:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2ySh+YXzJQ4NuC6wSYmiiKiP6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yNjAxMzExNzI2MDFaFw0yNjAyMDQwNTAzMDFaMDMxMTAvBgNV BAMTKEU3NDNGOTg0N0M3RTgxNEJCRjVBNEJCMTI3ODBDRTFGRDgxN0Y2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2yRrCzF2XCE73QgTwpXXHRTT YYmbS8rGvPPKxs6MJhxuHKTglBFSj8J9BT33PvtHPDAvEpU8Ya9x8cAKqrdprEGV p201nBsBaMFJdY89vPtH1ku+hYD0Fq/ePNI8wnMOltHD2TAtj7xKbgD6W5pXSY0f sUINHe9CRnYhkwPp+Di+TZF3gBacbni8riD2IZJO/vlS8aSeqsHXdVHN5/rYWyHX YTzii80hXMUhvzzeWXRORFYU18dlDNBLZ6cKd9gBsKoDH6k6wd8gABixK1/v6iQh VTzlzE8WvAc+OqYgUvqtRa/7c79guNkUAEKhhH0TWpfOB5x9jZhIDasAEP1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50P5hHx+gUu/WkuxJ4DOH9gX9vkwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2 MDQwNzY3MkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiblqSJoo4wdyuhRBygiGh3DkKkJ1LTDsfI vmKkTP9vcTPJ4pQN+67fx5JNhkguDYLxkwqXrWJ8I3frgstux0FG9JwFbLLh06gK mak75GqsrAtvOhHMHwpKxVNeU91X3Gkq+CAmHQgiMBBOZ3qm0pMsQoLxvbF5Zdxd 0Ezzv0xMGHtMlRC8T7GuIIARBPN/2XTg9JGoF1G7vY/oGty3QPMvlcb5KiE9Epdg cHrn+slrm2uJ06kMo5tVrdnmBn/e1eLiXs5HzEG7cVQDpnF5lwP5rOCtlLV+UJu9 GBMP/o6HeBlSrBVQaiZg4nu3jlYbZnvVZ8OCAN3Q1Er4vK7e4Cw= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:52 2026 by rpki-client