This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: tycBvFbjXuve5ZpP3mxeIMrzWpG1YZCwqo/kBF//8r8= Subject key identifier: 66:68:EF:99:59:97:04:93:8E:A9:E8:00:42:A6:D2:9C:A6:32:25:DA Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 11E0AAF7007F7B4210BD882E026AA9ECD2B769DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01D8 Signing time: Sat 31 Jan 2026 18:21:57 +0000 Manifest this update: Sat 31 Jan 2026 18:16:57 +0000 Manifest next update: Tue 03 Feb 2026 19:31:57 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: EGjpe6jfA6u2MeTc7XpYNQqakkzzFHhjKsHdsZ3LbNU=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: mFejQ+rZMYWI2e2oK1mVjUKVpb9d3Kj3eFkk7uGq9z8=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 1puyNHEGNNhGWrQg/vX5HkRvqQmry57OCK++TTBuetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e0:aa:f7:00:7f:7b:42:10:bd:88:2e:02:6a:a9:ec:d2:b7:69:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Jan 31 18:16:57 2026 GMT Not After : Feb 3 19:31:57 2026 GMT Subject: CN=6668EF99599704938EA9E80042A6D29CA63225DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:c2:26:53:ea:21:1d:92:38:2d:8e:17:6b: c8:36:f0:7b:5d:3e:89:56:3e:6b:93:cb:26:65:3e: 7e:23:21:fc:45:9e:c3:5e:70:38:53:a0:f2:a4:f2: 2e:dd:d7:99:2e:3b:c8:af:83:95:d8:d2:d6:4f:db: d1:6a:c2:0f:ed:e5:5c:8d:ae:64:4a:28:83:5b:94: 99:58:93:8b:b1:9c:99:9a:8c:6a:82:a5:a5:f7:cf: 3c:f6:85:37:58:c9:e4:2a:0b:44:e2:47:bc:9f:2c: c3:dc:e1:b8:23:d9:a8:90:90:d3:34:25:77:53:59: 1b:d8:af:4c:a7:bd:5b:c2:2f:d1:50:f2:6b:7b:19: 88:4e:ff:ed:0b:fd:65:b8:15:67:c0:33:28:f7:1a: 9e:1a:de:17:9b:17:c5:b9:79:33:ee:a6:d3:2b:3d: 9d:9a:90:23:6d:8a:69:0b:84:ab:da:7b:ce:92:81: b2:56:91:75:a1:8d:c4:b2:21:d3:82:13:ca:94:29: 56:a6:54:f9:08:f2:e3:a6:06:0e:64:a2:ad:4a:36: d6:a8:62:6d:cd:de:dc:14:bb:18:47:44:05:03:b2: 9b:87:fa:00:7f:fb:5b:dc:05:29:0f:b5:2a:e8:b2: 0c:65:3c:55:1e:22:c4:eb:34:a6:d8:b3:ec:78:2d: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:EF:99:59:97:04:93:8E:A9:E8:00:42:A6:D2:9C:A6:32:25:DA X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:70:36:cb:1c:33:e4:27:d5:01:b7:e4:3a:ed:91:bc:71: 35:f2:3b:1a:83:e8:ff:a4:86:a6:2e:f9:19:b3:f8:93:b4:3b: 38:33:d2:0f:4a:f3:79:12:5d:61:20:fa:08:ac:7f:6e:9f:a3: 79:fa:5b:68:c8:1d:48:77:0d:b3:1e:3c:c2:fa:9f:dc:4d:0b: ab:2c:6b:6c:e9:11:dd:c0:00:b9:e9:c3:b1:49:ce:ca:d8:a7: aa:03:95:77:49:30:c9:84:a3:6b:ff:a5:31:39:81:a9:b8:44: eb:29:45:2d:c6:0d:aa:ca:24:73:27:79:15:37:84:a8:00:bd: 37:6d:f6:46:ae:fc:d8:b8:00:f3:0a:6b:8a:ea:22:e4:44:4d: 82:15:3d:ff:b4:ae:c1:e1:2c:f7:95:6f:ce:a4:e0:17:d7:33: 52:fd:85:99:50:6b:2b:08:84:12:32:9d:28:a1:80:34:df:f3: 42:82:d9:3a:76:50:9e:54:87:61:1d:fc:8d:d1:60:99:61:29: 53:89:29:0f:a6:35:e2:63:21:26:95:a6:ee:0e:c3:4e:e9:05: 84:47:2a:db:27:a3:34:f6:58:3a:90:74:a5:ce:7a:c3:40:44: 37:a0:b1:eb:3d:c0:eb:5c:d6:1a:87:0c:c3:52:ba:a0:91:5f: 26:5a:de:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeCq9wB/e0IQvYguAmqp7NK3ad8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNjAxMzExODE2NTdaFw0yNjAyMDMxOTMxNTdaMDMxMTAvBgNV BAMTKDY2NjhFRjk5NTk5NzA0OTM4RUE5RTgwMDQyQTZEMjlDQTYzMjI1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDau8ImU+ohHZI4LY4Xa8g28Htd PolWPmuTyyZlPn4jIfxFnsNecDhToPKk8i7d15kuO8ivg5XY0tZP29Fqwg/t5VyN rmRKKINblJlYk4uxnJmajGqCpaX3zzz2hTdYyeQqC0TiR7yfLMPc4bgj2aiQkNM0 JXdTWRvYr0ynvVvCL9FQ8mt7GYhO/+0L/WW4FWfAMyj3Gp4a3hebF8W5eTPuptMr PZ2akCNtimkLhKvae86SgbJWkXWhjcSyIdOCE8qUKVamVPkI8uOmBg5koq1KNtao Ym3N3twUuxhHRAUDspuH+gB/+1vcBSkPtSrosgxlPFUeIsTrNKbYs+x4LYCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmjvmVmXBJOOqegAQqbSnKYyJdowHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqYcDbLHDPkJ9UBt+Q67ZG8cTXyOxqD6P+k hqYu+Rmz+JO0Ozgz0g9K83kSXWEg+gisf26fo3n6W2jIHUh3DbMePML6n9xNC6ss a2zpEd3AALnpw7FJzsrYp6oDlXdJMMmEo2v/pTE5gam4ROspRS3GDarKJHMneRU3 hKgAvTdt9kau/Ni4APMKa4rqIuRETYIVPf+0rsHhLPeVb86k4BfXM1L9hZlQaysI hBIynSihgDTf80KC2Tp2UJ5Uh2Ed/I3RYJlhKVOJKQ+mNeJjISaVpu4Ow07pBYRH KtsnozT2WDqQdKXOesNARDegses9wOtc1hqHDMNSuqCRXyZa3sQ= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:20 2026 by rpki-client