This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json) Hash identifier: ZDPkVu0scN4gzxI+q7J7gKPpLtGQHXEJKwLrSDLrJq8= Subject key identifier: 99:8A:9F:99:40:96:0D:FA:85:1F:06:15:C5:6A:D7:65:8E:00:0C:4E Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 35B00BF08A8BD5B7F37C66AC0DC6BC70E2683F64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft Manifest number: 0240 Signing time: Sat 31 Jan 2026 14:21:12 +0000 Manifest this update: Sat 31 Jan 2026 14:16:12 +0000 Manifest next update: Tue 03 Feb 2026 22:28:12 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=) 2: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: MCpINb87G3FQfPOy1UuExLfPiwfo6td4dBnSHbQ4iB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b0:0b:f0:8a:8b:d5:b7:f3:7c:66:ac:0d:c6:bc:70:e2:68:3f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: Jan 31 14:16:12 2026 GMT Not After : Feb 3 22:28:12 2026 GMT Subject: CN=998A9F9940960DFA851F0615C56AD7658E000C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:86:2e:5b:df:84:7c:9e:93:a5:60:30:16: b4:fe:a9:2f:fe:5e:75:5d:63:bb:22:70:60:80:19: 5e:bb:73:7c:85:f3:a0:e3:d6:51:93:2e:e9:4c:38: 2a:28:44:bd:e2:7c:d3:5d:c2:79:0e:58:1c:68:a3: ef:ee:b4:ee:1b:e3:e6:3c:f2:75:38:84:f2:e0:17: 00:f6:39:bb:01:21:41:65:85:65:6b:27:85:7e:74: e8:93:66:65:60:ee:cd:a9:47:a3:02:55:ca:6e:4d: 7a:0e:20:09:29:ba:9b:c6:56:cd:31:48:ed:00:1f: bc:a0:84:60:9b:6e:6f:0b:fb:02:80:f4:b4:c4:7e: a2:da:08:84:24:94:30:68:18:1e:6f:18:1c:4a:d0: b8:e6:1a:86:a4:62:73:65:59:a8:fd:1f:a0:38:32: 04:98:57:6e:39:d8:5b:62:e1:98:ce:c3:34:a1:f0: 7d:bf:45:e0:83:e1:56:d8:d1:22:54:c9:66:f3:72: 36:f8:82:ac:35:c5:33:a5:c8:38:e4:ab:58:89:3a: 17:b5:77:cc:6c:a3:73:2f:26:96:32:32:e7:e9:4f: b8:97:94:15:19:b1:bc:42:20:5d:f7:05:0f:fa:3b: eb:e0:03:31:b6:fc:39:b2:84:87:8d:1f:07:23:6f: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8A:9F:99:40:96:0D:FA:85:1F:06:15:C5:6A:D7:65:8E:00:0C:4E X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:19:91:d1:a8:35:9b:ad:e5:11:33:14:28:66:fe:6c:e7:51: 43:c5:ba:c2:8a:9f:98:21:48:63:dc:d7:b4:c7:35:60:e9:d5: 87:a6:ec:35:f4:fa:0c:a7:69:a2:96:77:c9:4f:85:23:b6:76: a8:01:2d:34:33:6d:20:01:a6:d5:42:40:47:71:4b:5e:f7:84: 82:a8:12:f6:8b:92:fc:84:76:12:b4:c1:51:2c:53:cb:1b:92: fe:c7:1c:7f:d6:2a:60:79:06:92:88:18:1a:ed:08:6e:42:c9: 3d:9c:0d:ef:50:40:70:be:d9:b2:d7:3f:5a:bf:65:1b:a9:1e: 96:5a:2b:57:15:c6:a1:c8:7f:3e:47:f6:06:cd:0a:90:95:f1: f6:2a:cf:c2:f4:89:d9:ea:94:a5:e3:3d:8a:37:60:32:78:29: be:c1:8b:cd:d4:07:0e:2c:6e:48:12:26:b8:c7:82:67:38:60: e4:69:d5:66:42:28:21:75:c1:a9:80:3a:fe:e0:c4:7b:ad:84: 47:39:9a:f2:00:c2:78:95:2f:a6:18:03:4e:75:9a:48:df:83: 15:9b:e7:2d:4f:ea:fa:1a:c9:c4:91:21:1d:e8:95:91:a1:d0: 74:8a:b9:bc:01:41:02:fd:36:90:7c:d1:ad:14:37:94:90:d8: f2:5f:43:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbAL8IqL1bfzfGasDca8cOJoP2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNjAxMzExNDE2MTJaFw0yNjAyMDMyMjI4MTJaMDMxMTAvBgNV BAMTKDk5OEE5Rjk5NDA5NjBERkE4NTFGMDYxNUM1NkFENzY1OEUwMDBDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5p4YuW9+EfJ6TpWAwFrT+qS/+ XnVdY7sicGCAGV67c3yF86Dj1lGTLulMOCooRL3ifNNdwnkOWBxoo+/utO4b4+Y8 8nU4hPLgFwD2ObsBIUFlhWVrJ4V+dOiTZmVg7s2pR6MCVcpuTXoOIAkpupvGVs0x SO0AH7yghGCbbm8L+wKA9LTEfqLaCIQklDBoGB5vGBxK0LjmGoakYnNlWaj9H6A4 MgSYV2452Fti4ZjOwzSh8H2/ReCD4VbY0SJUyWbzcjb4gqw1xTOlyDjkq1iJOhe1 d8xso3MvJpYyMufpT7iXlBUZsbxCIF33BQ/6O+vgAzG2/DmyhIeNHwcjb4+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmYqfmUCWDfqFHwYVxWrXZY4ADE4wHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDcz NjE4MkY4ODFFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0ZkdGoNZut5REzFChm/mznUUPFusKKn5gh SGPc17THNWDp1Yem7DX0+gynaaKWd8lPhSO2dqgBLTQzbSABptVCQEdxS173hIKo EvaLkvyEdhK0wVEsU8sbkv7HHH/WKmB5BpKIGBrtCG5CyT2cDe9QQHC+2bLXP1q/ ZRupHpZaK1cVxqHIfz5H9gbNCpCV8fYqz8L0idnqlKXjPYo3YDJ4Kb7Bi83UBw4s bkgSJrjHgmc4YORp1WZCKCF1wamAOv7gxHuthEc5mvIAwniVL6YYA051mkjfgxWb 5y1P6voaycSRIR3olZGh0HSKubwBQQL9NpB80a0UN5SQ2PJfQ/8= -----END CERTIFICATE-----Generated at Mon Feb 2 14:27:00 2026 by rpki-client