This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: ARyFISAvOuFgSrxongXj5ZZTvomQWHrFFFw3Slpd82M= Subject key identifier: A6:DE:9C:F0:28:E1:23:89:D6:C2:04:C4:7E:9F:8F:7E:92:D2:12:D8 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 13B0F6017E8DE8830CF74660A96D3327B8BADC4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 01DF Signing time: Sun 01 Feb 2026 17:51:03 +0000 Manifest this update: Sun 01 Feb 2026 17:46:03 +0000 Manifest next update: Wed 04 Feb 2026 18:41:03 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: L9nKp3o0ozBHoTU7OJBl6M4dz+TJJtcjGQ9cqVuy84c=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 18:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b0:f6:01:7e:8d:e8:83:0c:f7:46:60:a9:6d:33:27:b8:ba:dc:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Feb 1 17:46:03 2026 GMT Not After : Feb 4 18:41:03 2026 GMT Subject: CN=A6DE9CF028E12389D6C204C47E9F8F7E92D212D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:e4:86:b9:1b:7d:18:3b:3b:b6:fc:5d:1a: f1:8a:aa:f6:65:30:5b:0c:75:aa:ca:fd:3c:ea:dd: 46:5d:93:e5:43:8d:68:b9:81:03:06:68:ed:d8:ff: cb:5e:c4:ca:80:89:d1:05:3c:2a:99:93:c2:58:48: 7d:ee:fe:12:90:02:87:2f:ae:82:e5:21:95:b3:61: 1e:b4:e2:9a:dc:3b:0d:17:14:f3:8a:b6:00:ae:16: 92:0c:01:40:c4:46:9d:eb:31:cd:02:88:09:04:00: d8:a9:31:6e:21:c5:00:bf:72:4d:71:0c:1a:dc:d3: 5e:05:d1:9c:9a:36:1d:0d:00:68:03:6b:ae:7f:fe: e6:67:e7:9b:9d:49:b4:88:44:a3:57:96:ee:e8:1f: 23:24:90:e9:f6:b2:34:84:4e:aa:91:15:34:eb:cc: 86:49:de:5d:b2:cb:79:11:f3:3e:40:7a:61:a6:dc: d6:8f:ef:3a:26:96:1f:ff:2d:33:dc:6d:2d:35:7e: a1:a9:4a:3a:b8:ac:b1:8f:a0:03:c8:7d:fb:06:eb: 87:8e:b7:ed:9c:5a:41:ba:0c:fb:47:80:49:c4:d0: 8d:e0:7f:4f:eb:79:df:c9:0e:da:18:66:2a:84:da: 90:ea:51:9f:ce:f3:87:85:66:1b:ad:41:ac:50:5c: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:9C:F0:28:E1:23:89:D6:C2:04:C4:7E:9F:8F:7E:92:D2:12:D8 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e5:c7:bc:0f:e4:53:9a:72:b3:d2:af:37:09:85:93:90:cd: 75:47:d7:15:26:e5:24:b1:33:14:76:d5:a7:c3:4c:59:cd:0c: 3a:e3:aa:4d:50:07:ae:90:9e:0d:e9:63:1d:1d:17:5b:ce:be: dc:cd:de:24:0d:8e:89:96:93:c9:05:50:6a:a2:0f:54:00:e8: 05:01:d1:86:ae:78:58:76:e6:ab:c3:5e:71:99:1a:17:eb:28: 79:c9:46:b1:61:94:aa:71:fa:f8:12:ef:e6:77:ae:8c:bb:50: 23:47:ae:b8:ed:26:ca:a0:c5:6d:7c:65:1e:d2:1a:40:dd:6e: 68:cc:ce:46:d6:ab:00:a6:22:76:e0:2b:1d:08:fe:9f:fe:27: 64:5d:2c:8d:de:54:16:1b:99:b8:84:be:96:fb:89:32:fe:9e: aa:6b:59:7e:85:86:75:ff:7a:d1:e3:3c:6c:78:bc:0c:6f:db: 3f:f3:31:3f:2a:f4:3a:8b:54:0b:13:ca:ad:b2:b5:25:a7:6e: 6c:f1:22:cc:8a:3d:22:36:c4:4f:a2:17:44:c1:04:5d:8d:e6: 48:16:0d:b8:a0:26:f5:7c:a1:fa:98:9b:c9:02:e1:6e:4f:88: 89:dd:2a:be:a7:0e:ab:05:ed:b3:f6:f7:4b:65:ef:74:a2:df: 22:17:91:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7D2AX6N6IMM90ZgqW0zJ7i63EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNjAyMDExNzQ2MDNaFw0yNjAyMDQxODQxMDNaMDMxMTAvBgNV BAMTKEE2REU5Q0YwMjhFMTIzODlENkMyMDRDNDdFOUY4RjdFOTJEMjEyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFeSGuRt9GDs7tvxdGvGKqvZl MFsMdarK/Tzq3UZdk+VDjWi5gQMGaO3Y/8texMqAidEFPCqZk8JYSH3u/hKQAocv roLlIZWzYR604prcOw0XFPOKtgCuFpIMAUDERp3rMc0CiAkEANipMW4hxQC/ck1x DBrc014F0ZyaNh0NAGgDa65//uZn55udSbSIRKNXlu7oHyMkkOn2sjSETqqRFTTr zIZJ3l2yy3kR8z5AemGm3NaP7zomlh//LTPcbS01fqGpSjq4rLGPoAPIffsG64eO t+2cWkG6DPtHgEnE0I3gf0/red/JDtoYZiqE2pDqUZ/O84eFZhutQaxQXB85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpt6c8CjhI4nWwgTEfp+PfpLSEtgwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTlx7wP5FOacrPSrzcJhZOQzXVH1xUm5SSx MxR21afDTFnNDDrjqk1QB66Qng3pYx0dF1vOvtzN3iQNjomWk8kFUGqiD1QA6AUB 0YaueFh25qvDXnGZGhfrKHnJRrFhlKpx+vgS7+Z3roy7UCNHrrjtJsqgxW18ZR7S GkDdbmjMzkbWqwCmInbgKx0I/p/+J2RdLI3eVBYbmbiEvpb7iTL+nqprWX6FhnX/ etHjPGx4vAxv2z/zMT8q9DqLVAsTyq2ytSWnbmzxIsyKPSI2xE+iF0TBBF2N5kgW DbigJvV8ofqYm8kC4W5PiIndKr6nDqsF7bP290tl73Si3yIXkQA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:48 2026 by rpki-client