This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: D4HWQgLpgD6vHkQR5fntTxOwmav9BLgUbeciuFx+Gx0= Subject key identifier: 20:2B:66:7C:B5:D1:34:0C:14:DC:39:17:2A:F2:68:74:D0:93:AD:DE Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 1B26D113CF29A4167961EE9BA9BE383FEAE60B97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01E6 Signing time: Sat 31 Jan 2026 00:11:38 +0000 Manifest this update: Sat 31 Jan 2026 00:06:38 +0000 Manifest next update: Tue 03 Feb 2026 08:29:38 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: xA/B3DdN0BHBTtK+SnKRSofJkrUnQt8EBy5FAX+K+UE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:26:d1:13:cf:29:a4:16:79:61:ee:9b:a9:be:38:3f:ea:e6:0b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Jan 31 00:06:38 2026 GMT Not After : Feb 3 08:29:38 2026 GMT Subject: CN=202B667CB5D1340C14DC39172AF26874D093ADDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:d5:fe:f7:8c:04:f1:6a:b2:f9:a8:67:86: d6:0d:0a:f1:0f:12:5a:aa:15:1e:35:77:7b:9d:4d: 05:b1:56:3a:80:fc:98:a1:0a:f9:fc:87:37:70:2d: cf:f7:b2:e7:b2:f9:2e:c3:39:6c:74:00:05:84:77: 32:ea:f1:a4:d2:e6:8a:f7:9d:0e:f9:1a:ca:6d:ca: 5d:78:ce:1b:85:5d:44:25:fc:68:75:5a:c8:2a:fd: 99:cf:4f:73:54:87:ba:3d:a7:59:58:cd:40:92:27: 1f:a2:2e:d2:ae:0d:ce:45:d6:b3:37:34:58:1e:ce: ef:a9:1d:5d:40:6e:08:c6:ad:da:03:a5:cd:8d:ee: a6:0b:6a:f9:7d:1f:2f:b2:0a:12:bd:64:41:7f:f8: a5:26:30:41:51:e8:3f:e9:ae:2f:5d:7b:04:25:3e: e2:cc:14:c2:2f:46:ed:93:1c:e8:59:ae:2c:35:6a: fd:e2:ac:de:d7:e6:d6:be:75:9f:1d:65:19:2d:5d: 45:78:cb:e5:4c:db:2e:67:12:f0:d1:ed:0b:b9:4d: d8:b5:29:5d:76:a9:0c:ad:85:13:67:85:90:c2:1d: 81:39:13:7e:10:5e:26:24:ba:c6:d7:c4:5f:75:8f: 36:51:f8:b0:68:ce:7d:5f:66:b5:bf:02:c4:67:d9: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2B:66:7C:B5:D1:34:0C:14:DC:39:17:2A:F2:68:74:D0:93:AD:DE X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1a:97:1b:dc:4f:0a:14:27:40:09:fb:81:bb:3f:f3:7b:dc: 1c:78:fa:9f:84:88:b4:81:8c:88:61:4f:71:98:de:2c:62:46: c0:2f:77:b7:f9:d7:b3:f7:ba:c7:f5:8b:0a:81:c5:88:19:30: bd:5d:59:32:b0:ed:8c:14:43:7d:6a:01:4d:de:04:75:55:9a: ca:5e:fa:bf:bc:90:da:c1:98:9d:9d:90:f7:7b:b0:bf:00:4b: 04:7c:02:9e:83:27:48:8e:02:03:f6:b5:7d:c7:30:36:07:cb: 69:b8:f7:05:9f:d3:ed:d3:e2:65:34:f9:26:6e:da:d5:f8:d6: a5:59:8c:ed:e3:d5:c7:a8:f2:01:56:94:41:82:5d:d8:65:d8: 56:2e:79:35:fc:8b:25:50:a7:a2:ef:19:6b:f7:13:d1:a2:31: ed:d9:d3:89:8e:08:26:99:ad:d0:0c:07:5b:d4:1f:28:2f:f3: 9c:9f:15:2d:0b:95:4a:4e:57:e1:e7:9b:8d:d5:60:4f:ff:09: 46:dc:43:7b:40:10:0a:34:91:81:25:fd:b6:b4:2f:02:8d:c6: ca:9e:4c:37:09:e1:a7:20:88:30:b5:f8:f6:db:c2:7f:d2:7f: 2a:31:24:60:dd:28:b3:8d:96:fb:4b:a9:35:78:50:27:46:20: 36:e1:7c:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGybRE88ppBZ5Ye6bqb44P+rmC5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNjAxMzEwMDA2MzhaFw0yNjAyMDMwODI5MzhaMDMxMTAvBgNV BAMTKDIwMkI2NjdDQjVEMTM0MEMxNERDMzkxNzJBRjI2ODc0RDA5M0FEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSdX+94wE8Wqy+ahnhtYNCvEP ElqqFR41d3udTQWxVjqA/JihCvn8hzdwLc/3suey+S7DOWx0AAWEdzLq8aTS5or3 nQ75Gsptyl14zhuFXUQl/Gh1Wsgq/ZnPT3NUh7o9p1lYzUCSJx+iLtKuDc5F1rM3 NFgezu+pHV1AbgjGrdoDpc2N7qYLavl9Hy+yChK9ZEF/+KUmMEFR6D/pri9dewQl PuLMFMIvRu2THOhZriw1av3irN7X5ta+dZ8dZRktXUV4y+VM2y5nEvDR7Qu5Tdi1 KV12qQythRNnhZDCHYE5E34QXiYkusbXxF91jzZR+LBozn1fZrW/AsRn2fz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUICtmfLXRNAwU3DkXKvJodNCTrd4wHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkalxvcTwoUJ0AJ+4G7P/N73Bx4+p+EiLSB jIhhT3GY3ixiRsAvd7f517P3usf1iwqBxYgZML1dWTKw7YwUQ31qAU3eBHVVmspe +r+8kNrBmJ2dkPd7sL8ASwR8Ap6DJ0iOAgP2tX3HMDYHy2m49wWf0+3T4mU0+SZu 2tX41qVZjO3j1ceo8gFWlEGCXdhl2FYueTX8iyVQp6LvGWv3E9GiMe3Z04mOCCaZ rdAMB1vUHygv85yfFS0LlUpOV+Hnm43VYE//CUbcQ3tAEAo0kYEl/ba0LwKNxsqe TDcJ4acgiDC1+Pbbwn/SfyoxJGDdKLONlvtLqTV4UCdGIDbhfOo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:53 2026 by rpki-client