This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: dPgTLtlrOJQp7QuhLuqqlRejpmx2EDRy8iX+3zrWDEg= Subject key identifier: B5:0D:2A:13:99:B2:1F:2B:E7:EB:2E:7F:7B:09:BE:84:CE:9D:1F:E0 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 68F37FC23EB9C81CC97623F4EFDECD18C73461F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 0545 Signing time: Mon 02 Feb 2026 04:41:48 +0000 Manifest this update: Mon 02 Feb 2026 04:36:48 +0000 Manifest next update: Thu 05 Feb 2026 13:04:48 +0000 Files and hashes: 1: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) 2: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: JMcLXLN0uSPACaGasgYimL/uflVaYmzrVTQWpOpO9aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f3:7f:c2:3e:b9:c8:1c:c9:76:23:f4:ef:de:cd:18:c7:34:61:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Feb 2 04:36:48 2026 GMT Not After : Feb 5 13:04:48 2026 GMT Subject: CN=B50D2A1399B21F2BE7EB2E7F7B09BE84CE9D1FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:f5:c8:39:cd:d7:2c:bf:40:7f:de:81:25: c9:3b:19:88:90:e3:43:f0:c8:e3:91:c6:e2:e7:d9: e0:1c:ad:66:25:53:85:e8:74:e0:70:0d:77:44:c0: 3a:6d:d4:46:59:38:8d:ea:91:de:04:8d:26:eb:de: ec:63:fe:94:92:01:1f:01:49:9d:75:13:e4:e7:b3: 75:46:c5:e4:53:73:40:1c:80:81:8e:31:50:42:f4: a0:a9:a6:49:1a:0d:c7:64:b5:8a:5a:3a:d3:10:65: f1:be:0c:6f:86:fa:33:f1:13:97:32:32:51:55:a0: d7:76:37:c9:f5:58:df:85:0b:bc:0c:04:b1:85:0b: 2b:dd:73:09:5c:30:95:08:45:31:1e:1f:99:ba:02: 2a:7e:a0:39:b6:b9:0d:6f:04:30:de:e8:82:41:d8: 70:54:ca:76:d2:9b:79:91:f3:e0:ea:39:f7:f9:0d: 3e:71:fc:dd:df:87:9e:91:6a:91:e8:a4:eb:6d:3d: 6b:dd:e5:05:4b:37:8f:b7:12:84:8e:fd:e9:4c:1d: eb:28:7e:82:9f:ea:44:2e:be:e0:86:8f:d0:54:a7: 15:03:34:cb:5b:cd:2e:59:07:26:cd:15:2f:71:2a: 9c:3e:ff:49:43:a7:e7:48:87:b4:4a:9b:2b:d9:c0: c9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0D:2A:13:99:B2:1F:2B:E7:EB:2E:7F:7B:09:BE:84:CE:9D:1F:E0 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:65:fd:ea:b5:47:3a:99:4d:be:a7:06:be:e2:7d:68:c4: 11:d5:15:14:13:88:60:50:ca:14:c3:52:c9:55:ab:74:da:ac: f7:1e:35:8c:95:57:a7:5b:4c:7c:21:78:9d:90:ee:2a:fb:46: 2b:2f:8c:63:79:1e:b3:a7:20:bd:ac:93:38:59:d5:24:17:84: 67:37:a0:bb:e6:55:6c:6a:cd:44:29:0a:73:93:ad:88:f0:a9: 32:a3:8b:ff:66:5d:ef:df:50:b4:12:42:0a:d0:7d:ad:7e:01: dd:2a:2c:0e:03:77:a2:bf:92:6a:c1:1d:18:fb:cc:62:68:d8: 46:70:50:c5:e9:cb:57:5c:40:db:ff:45:f2:e9:46:01:3e:08: ba:cb:1f:0b:9f:73:86:c6:ad:2c:10:84:c7:17:0a:e7:e8:1a: 86:d2:5f:64:53:a4:b3:c3:2d:8e:87:19:25:e2:32:e5:12:f9: 22:6c:14:63:7a:72:89:44:d3:28:f8:e0:6c:19:f9:ac:d6:7e: ee:0d:0f:a7:73:47:fd:b4:67:8d:11:ef:8a:65:6d:4e:6f:9a: 26:7e:3c:4a:d0:bf:40:94:8d:84:9b:fc:5b:3d:93:ed:4a:a0: 1a:e8:5a:31:a8:ef:03:07:4b:df:8e:d0:43:0d:43:be:7d:76: 1e:4e:93:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPN/wj65yBzJdiP0797NGMc0YfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNjAyMDIwNDM2NDhaFw0yNjAyMDUxMzA0NDhaMDMxMTAvBgNV BAMTKEI1MEQyQTEzOTlCMjFGMkJFN0VCMkU3RjdCMDlCRTg0Q0U5RDFGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBPXIOc3XLL9Af96BJck7GYiQ 40PwyOORxuLn2eAcrWYlU4XodOBwDXdEwDpt1EZZOI3qkd4EjSbr3uxj/pSSAR8B SZ11E+Tns3VGxeRTc0AcgIGOMVBC9KCppkkaDcdktYpaOtMQZfG+DG+G+jPxE5cy MlFVoNd2N8n1WN+FC7wMBLGFCyvdcwlcMJUIRTEeH5m6Aip+oDm2uQ1vBDDe6IJB 2HBUynbSm3mR8+DqOff5DT5x/N3fh56RapHopOttPWvd5QVLN4+3EoSO/elMHeso foKf6kQuvuCGj9BUpxUDNMtbzS5ZBybNFS9xKpw+/0lDp+dIh7RKmyvZwMm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQ0qE5myHyvn6y5/ewm+hM6dH+AwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXRZf3qtUc6mU2+pwa+4n1oxBHVFRQTiGBQ yhTDUslVq3TarPceNYyVV6dbTHwheJ2Q7ir7RisvjGN5HrOnIL2skzhZ1SQXhGc3 oLvmVWxqzUQpCnOTrYjwqTKji/9mXe/fULQSQgrQfa1+Ad0qLA4Dd6K/kmrBHRj7 zGJo2EZwUMXpy1dcQNv/RfLpRgE+CLrLHwufc4bGrSwQhMcXCufoGobSX2RTpLPD LY6HGSXiMuUS+SJsFGN6colE0yj44GwZ+azWfu4ND6dzR/20Z40R74plbU5vmiZ+ PErQv0CUjYSb/Fs9k+1KoBroWjGo7wMHS9+O0EMNQ759dh5Ok0s= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:05 2026 by rpki-client