This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: hI49Vv2OgLlA+CrL2wYjjOgcFGAcIzHp6qrkHAFTMk8= Subject key identifier: 0A:BE:06:8D:92:CA:09:C7:BB:04:39:8E:C9:9B:F2:99:EA:F8:92:27 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 5F845C8618F20F795978D7474F5D7EE85FD2B977 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01E8 Signing time: Fri 30 Jan 2026 23:31:25 +0000 Manifest this update: Fri 30 Jan 2026 23:26:25 +0000 Manifest next update: Tue 03 Feb 2026 09:12:25 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 2: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 3: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: trDPeOaXn/63WxTIb5Z05Hi3BIUu4jTIlymVTQ8bEc0=) 4: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=) 5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 09:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:84:5c:86:18:f2:0f:79:59:78:d7:47:4f:5d:7e:e8:5f:d2:b9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Jan 30 23:26:25 2026 GMT Not After : Feb 3 09:12:25 2026 GMT Subject: CN=0ABE068D92CA09C7BB04398EC99BF299EAF89227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:4e:c2:7c:31:30:1c:39:a5:84:4e:cd:dc: 1c:f3:31:30:26:93:f8:82:1e:f1:1d:0c:33:85:7f: 00:28:ea:61:ce:30:1d:2b:f7:83:be:93:e6:19:da: 28:05:03:0f:b5:ea:a1:f3:c0:0b:ea:53:4b:93:7e: dd:48:4f:29:4f:9d:88:73:2e:f2:cd:c4:7e:69:d8: b4:b7:8f:8f:3e:42:5c:c2:ef:e3:ec:92:14:d1:7b: 37:d2:65:f6:c4:49:cf:fd:62:44:b8:ef:45:d8:5a: b5:f2:5d:25:b3:6d:a1:2c:dc:c3:85:f9:4a:29:45: a5:6a:fb:90:fb:b6:dd:5a:9c:12:4b:04:69:90:cf: 07:38:5d:9c:d5:c2:c3:79:a9:42:91:77:26:23:53: 08:c3:19:7e:8f:50:ef:f9:04:e8:d5:e2:91:f3:b5: 89:92:c8:42:de:59:cd:e6:d0:77:8e:8e:d0:ef:c9: 9b:9b:cf:3e:e1:47:e0:1f:bd:a3:fc:5d:3f:6f:1d: e3:d9:fd:25:30:3d:94:04:b8:c9:da:b6:54:ac:48: c6:25:30:57:fc:2f:75:98:a4:9b:c4:6c:05:1b:58: 18:61:59:56:4f:dc:2b:f2:1a:2b:e2:ae:ca:0e:a8: 52:41:ff:c6:c0:3a:0f:89:6f:c9:b4:4f:60:f6:b7: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BE:06:8D:92:CA:09:C7:BB:04:39:8E:C9:9B:F2:99:EA:F8:92:27 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0e:d8:05:11:fa:e4:84:19:ab:53:10:74:98:25:47:80:1b: 31:0f:9e:7a:20:52:f3:50:c5:d8:fb:40:4a:80:83:1b:31:88: b4:bd:62:d2:0b:e2:b7:74:f6:9c:7e:23:43:3c:1b:dc:bc:55: ba:c4:4b:a6:af:2c:e3:98:1c:fb:9e:4e:78:a9:49:3b:b8:86: 20:d8:3b:f5:dc:58:26:82:c4:ea:2d:69:37:b7:cb:27:2f:74: 14:e3:13:e6:40:f3:96:41:6c:02:0a:3c:fd:6e:3a:12:60:b1: e5:a8:88:e4:ae:ed:bb:06:8a:58:ac:3d:d2:11:29:3f:09:31: 8b:01:8b:74:31:f8:66:cb:1f:4a:1c:12:0a:c4:de:68:8d:b1: da:4b:04:2f:da:6b:e3:06:7d:c2:ab:af:b8:f5:74:f5:52:6b: dd:81:a8:63:ae:df:ba:3c:99:8c:e8:2f:19:5d:c2:7c:62:60: 42:b6:ed:c8:ab:2b:b6:ed:fb:e8:45:52:b9:d8:c4:8d:8f:19: a7:3b:f3:dd:6e:1c:a8:fc:cb:39:2b:21:d9:05:3e:96:5e:6d: 78:54:ef:f5:f5:99:3d:34:e1:ec:25:2c:39:97:06:48:ae:de: 4a:64:31:63:b4:36:10:8f:a1:45:9b:75:af:47:56:2e:b6:9a: c9:73:dc:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4RchhjyD3lZeNdHT11+6F/SuXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNjAxMzAyMzI2MjVaFw0yNjAyMDMwOTEyMjVaMDMxMTAvBgNV BAMTKDBBQkUwNjhEOTJDQTA5QzdCQjA0Mzk4RUM5OUJGMjk5RUFGODkyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYo07CfDEwHDmlhE7N3BzzMTAm k/iCHvEdDDOFfwAo6mHOMB0r94O+k+YZ2igFAw+16qHzwAvqU0uTft1ITylPnYhz LvLNxH5p2LS3j48+QlzC7+PskhTRezfSZfbESc/9YkS470XYWrXyXSWzbaEs3MOF +UopRaVq+5D7tt1anBJLBGmQzwc4XZzVwsN5qUKRdyYjUwjDGX6PUO/5BOjV4pHz tYmSyELeWc3m0HeOjtDvyZubzz7hR+AfvaP8XT9vHePZ/SUwPZQEuMnatlSsSMYl MFf8L3WYpJvEbAUbWBhhWVZP3CvyGivirsoOqFJB/8bAOg+Jb8m0T2D2t96DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCr4GjZLKCce7BDmOyZvymer4kicwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcO2AUR+uSEGatTEHSYJUeAGzEPnnogUvNQ xdj7QEqAgxsxiLS9YtIL4rd09px+I0M8G9y8VbrES6avLOOYHPueTnipSTu4hiDY O/XcWCaCxOotaTe3yycvdBTjE+ZA85ZBbAIKPP1uOhJgseWoiOSu7bsGilisPdIR KT8JMYsBi3Qx+GbLH0ocEgrE3miNsdpLBC/aa+MGfcKrr7j1dPVSa92BqGOu37o8 mYzoLxldwnxiYEK27cirK7bt++hFUrnYxI2PGac7891uHKj8yzkrIdkFPpZebXhU 7/X1mT004ewlLDmXBkiu3kpkMWO0NhCPoUWbda9HVi62mslz3L8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:28 2026 by rpki-client