This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: CqS84oRlN4BZjvrjLoOJyRIIqvC+B116UKyiHIX+muE= Subject key identifier: 00:66:87:C9:51:56:F0:3D:8F:9C:AC:5C:3F:93:2B:DF:37:BD:C5:65 Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 7FF33524DC50DBAFD94B40E26698AC40283C1735 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01EC Signing time: Sun 01 Feb 2026 00:02:19 +0000 Manifest this update: Sat 31 Jan 2026 23:57:19 +0000 Manifest next update: Wed 04 Feb 2026 01:15:19 +0000 Files and hashes: 1: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 2: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=) 4: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: EhKhnaBLbkG/yEhN/C0/IZkAAA56mnvQBBPOwNNieww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f3:35:24:dc:50:db:af:d9:4b:40:e2:66:98:ac:40:28:3c:17:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Jan 31 23:57:19 2026 GMT Not After : Feb 4 01:15:19 2026 GMT Subject: CN=006687C95156F03D8F9CAC5C3F932BDF37BDC565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2e:06:1e:1d:85:fe:e2:87:d4:31:bf:20:be: 2a:a8:88:6d:ca:f8:30:c9:bf:f9:22:61:07:82:5d: dd:28:ab:5a:5f:c1:66:fd:69:53:19:39:ff:44:83: ca:e7:c9:4e:5a:06:df:ec:eb:7b:eb:55:37:55:a8: 6d:f6:77:27:dd:84:21:c3:ba:33:8a:0d:24:00:96: 13:d0:08:c8:2c:28:f6:ba:2a:11:5b:72:3e:88:30: 03:7e:7b:69:d1:03:e4:e7:32:51:db:8e:f3:31:ae: eb:d9:1f:90:a1:a6:54:50:41:95:0e:79:26:75:0a: a4:3e:87:7c:e4:24:22:85:5c:8e:d8:b5:fe:86:28: 3b:07:ff:41:34:f8:23:ba:55:40:f2:33:9f:86:9e: bd:87:ff:9f:38:45:56:5c:9b:48:4c:cd:86:ab:95: 6c:24:d2:8d:60:61:ec:48:cc:e6:ae:25:cb:88:44: 0c:6d:90:7b:2a:7f:e1:89:60:22:79:5b:c7:1d:a7: 62:c1:8c:7a:59:d7:e2:88:92:ec:50:99:8e:fd:57: 1a:19:e6:6c:a1:2f:47:87:04:e4:65:3e:6a:3b:89: 6f:aa:86:3e:8f:4a:ee:c2:04:5b:e4:57:c4:b1:37: db:14:f1:03:d6:a0:dd:71:73:55:88:34:10:76:cb: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:87:C9:51:56:F0:3D:8F:9C:AC:5C:3F:93:2B:DF:37:BD:C5:65 X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9e:ff:4e:d5:c3:bc:86:79:f1:1b:8b:84:cd:21:3a:21:04: b0:8b:dd:1b:c4:60:11:fd:78:57:ff:d6:01:7e:ed:5d:ae:b1: 01:32:71:fd:64:f3:ee:0d:40:4d:94:13:3c:3e:33:4e:3d:e1: 89:b6:2d:71:b5:77:9f:e0:ed:8e:97:23:18:cd:6e:ad:ed:85: b9:39:13:a2:24:ab:b9:07:2b:fe:92:fa:59:25:87:e9:20:ea: f9:2c:2e:0a:d0:0b:0f:6b:ee:fa:4f:d5:12:5a:2e:a9:5d:0e: ce:46:32:94:27:9a:d7:05:40:e6:65:91:de:a9:59:1d:b8:57: 42:d9:02:16:c3:68:f5:89:a2:a1:a2:c5:da:5d:6d:8b:3f:00: f5:fa:6b:1c:c4:ff:c6:d3:89:4c:96:ab:31:18:f7:b6:8b:fd: b7:69:bd:1c:aa:4e:3f:c3:5a:84:b5:b8:07:1a:4a:81:cd:3a: 45:c2:ff:94:45:f9:f4:8a:a9:12:14:6a:1d:ba:f0:4e:e4:a4: ab:97:dc:36:d3:ea:57:ff:3d:25:8d:5c:a0:f4:77:db:ea:d4: bf:57:78:6a:02:fe:69:aa:19:33:17:83:ed:e6:96:73:3e:a6: 9d:7d:60:d4:e6:d0:ab:86:58:e4:c8:ce:83:a1:06:32:2a:7b: 96:f7:e9:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/M1JNxQ26/ZS0DiZpisQCg8FzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNjAxMzEyMzU3MTlaFw0yNjAyMDQwMTE1MTlaMDMxMTAvBgNV BAMTKDAwNjY4N0M5NTE1NkYwM0Q4RjlDQUM1QzNGOTMyQkRGMzdCREM1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxLgYeHYX+4ofUMb8gviqoiG3K +DDJv/kiYQeCXd0oq1pfwWb9aVMZOf9Eg8rnyU5aBt/s63vrVTdVqG32dyfdhCHD ujOKDSQAlhPQCMgsKPa6KhFbcj6IMAN+e2nRA+TnMlHbjvMxruvZH5ChplRQQZUO eSZ1CqQ+h3zkJCKFXI7Ytf6GKDsH/0E0+CO6VUDyM5+Gnr2H/584RVZcm0hMzYar lWwk0o1gYexIzOauJcuIRAxtkHsqf+GJYCJ5W8cdp2LBjHpZ1+KIkuxQmY79VxoZ 5myhL0eHBORlPmo7iW+qhj6PSu7CBFvkV8SxN9sU8QPWoN1xc1WINBB2y0ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGaHyVFW8D2PnKxcP5Mr3ze9xWUwHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACee/07Vw7yGefEbi4TNITohBLCL3RvEYBH9 eFf/1gF+7V2usQEycf1k8+4NQE2UEzw+M0494Ym2LXG1d5/g7Y6XIxjNbq3thbk5 E6Ikq7kHK/6S+lklh+kg6vksLgrQCw9r7vpP1RJaLqldDs5GMpQnmtcFQOZlkd6p WR24V0LZAhbDaPWJoqGixdpdbYs/APX6axzE/8bTiUyWqzEY97aL/bdpvRyqTj/D WoS1uAcaSoHNOkXC/5RF+fSKqRIUah268E7kpKuX3DbT6lf/PSWNXKD0d9vq1L9X eGoC/mmqGTMXg+3mlnM+pp19YNTm0KuGWOTIzoOhBjIqe5b36R8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:44 2026 by rpki-client