This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: G6tc0J+u+sbjOaAzQlo9S4o8dj+bcNdhZUv5GUyZuzw= Subject key identifier: 46:DE:08:0D:7F:77:D7:12:59:D7:BA:9F:4D:80:45:B6:9D:B1:62:FE Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 1EF2C1CB7D78A32181679E3C541EBDDC1E619323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 0325 Signing time: Sat 31 Jan 2026 07:01:48 +0000 Manifest this update: Sat 31 Jan 2026 06:56:48 +0000 Manifest next update: Tue 03 Feb 2026 16:30:48 +0000 Files and hashes: 1: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 2: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: JEmuafFOxMwW6YrDl/l4eFoiHt8UFxwrrAttP2lTvg0=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f2:c1:cb:7d:78:a3:21:81:67:9e:3c:54:1e:bd:dc:1e:61:93:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Jan 31 06:56:48 2026 GMT Not After : Feb 3 16:30:48 2026 GMT Subject: CN=46DE080D7F77D71259D7BA9F4D8045B69DB162FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:47:e6:b4:c4:36:e7:20:32:7a:ee:b4:46: 93:3b:e3:1f:8f:fa:00:34:d9:cf:4a:62:8a:1a:b3: bf:be:d0:db:1a:20:e0:ee:36:0f:0b:78:93:c9:a3: 41:80:66:d5:37:85:ce:7c:38:a4:b4:c5:34:e2:b2: 2c:89:72:3c:93:ab:68:c9:d5:01:9a:99:c6:63:89: dd:b9:cb:86:8f:f6:e1:6d:75:ff:69:2f:55:6c:b7: 91:77:f8:96:35:d6:a1:8a:6f:8d:28:06:fc:0d:2b: 03:23:b6:e6:3e:b8:39:df:59:ce:fa:3e:8a:ec:92: 16:7a:e7:7f:87:b7:34:5c:93:da:19:b8:98:f0:cd: 6d:09:d2:71:dc:75:e8:c5:4e:c7:85:e6:8a:13:60: b4:8a:ca:d6:dc:c1:29:a6:03:f6:d0:4a:58:6b:f1: 62:f4:e0:83:ca:f7:e9:fd:0a:ee:06:2d:2c:f9:f4: e8:d1:7e:62:20:22:2f:da:8b:09:87:c1:bc:1e:98: f2:4a:f5:fe:b5:ce:7b:a4:df:2e:dd:2f:ac:4c:6b: 46:62:a4:c6:e8:ec:cb:2e:76:f5:78:bb:01:57:7a: cb:69:7f:74:1a:1c:5e:31:74:e5:f3:11:62:a1:41: f6:6b:4c:89:28:9a:07:73:95:9b:fa:7a:9d:6e:a1: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:08:0D:7F:77:D7:12:59:D7:BA:9F:4D:80:45:B6:9D:B1:62:FE X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6a:93:81:6f:8c:63:87:19:69:43:b0:11:ab:76:40:4a:21: db:0c:89:e5:82:6b:57:ac:fa:9c:bd:35:71:9f:66:df:41:a5: 62:86:f7:ac:87:20:49:22:64:9f:39:e1:89:0c:d2:95:b9:8d: 99:59:03:6c:09:e1:33:b8:8a:7b:f9:15:f5:2c:6e:33:e4:7d: 55:87:b6:05:8a:9c:c5:b9:58:53:c3:fa:47:00:a0:ac:f7:30: db:83:8a:ea:9d:a2:10:78:32:fa:9d:e7:b7:0d:0b:ec:e9:bf: e8:e1:9a:1b:c9:fd:36:ed:4a:f1:11:da:cd:d5:03:ac:4a:92: ab:f9:93:a0:55:4c:76:67:7f:b9:62:b1:b1:a7:74:c1:4d:8a: c0:c2:d1:94:26:c8:7d:d4:38:01:a0:4c:e0:b7:e6:b3:a4:92: 6a:ba:d8:b7:9e:91:04:1b:c4:12:e8:a5:ce:18:23:55:6b:cf: 8b:44:c6:c9:12:77:44:8c:73:03:c4:6c:58:91:93:0c:a9:2a: 53:0f:a3:9f:0d:98:0f:41:f9:17:26:59:2c:1f:f7:75:98:12: 87:79:f6:92:52:00:ff:54:b9:92:c4:12:42:3d:74:50:78:8c: bc:35:b0:39:5a:ec:d0:b9:a1:21:91:a5:9e:dd:9b:6d:4d:8f: ab:ea:3b:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvLBy314oyGBZ548VB693B5hkyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNjAxMzEwNjU2NDhaFw0yNjAyMDMxNjMwNDhaMDMxMTAvBgNV BAMTKDQ2REUwODBEN0Y3N0Q3MTI1OUQ3QkE5RjREODA0NUI2OURCMTYyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xUfmtMQ25yAyeu60RpM74x+P +gA02c9KYooas7++0NsaIODuNg8LeJPJo0GAZtU3hc58OKS0xTTisiyJcjyTq2jJ 1QGamcZjid25y4aP9uFtdf9pL1Vst5F3+JY11qGKb40oBvwNKwMjtuY+uDnfWc76 PorskhZ653+HtzRck9oZuJjwzW0J0nHcdejFTseF5ooTYLSKytbcwSmmA/bQSlhr 8WL04IPK9+n9Cu4GLSz59OjRfmIgIi/aiwmHwbwemPJK9f61znuk3y7dL6xMa0Zi pMbo7MsudvV4uwFXestpf3QaHF4xdOXzEWKhQfZrTIkomgdzlZv6ep1uoRe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURt4IDX931xJZ17qfTYBFtp2xYv4wHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtqk4FvjGOHGWlDsBGrdkBKIdsMieWCa1es +py9NXGfZt9BpWKG96yHIEkiZJ854YkM0pW5jZlZA2wJ4TO4inv5FfUsbjPkfVWH tgWKnMW5WFPD+kcAoKz3MNuDiuqdohB4Mvqd57cNC+zpv+jhmhvJ/TbtSvER2s3V A6xKkqv5k6BVTHZnf7lisbGndMFNisDC0ZQmyH3UOAGgTOC35rOkkmq62LeekQQb xBLopc4YI1Vrz4tExskSd0SMcwPEbFiRkwypKlMPo58NmA9B+RcmWSwf93WYEod5 9pJSAP9UuZLEEkI9dFB4jLw1sDla7NC5oSGRpZ7dm21Nj6vqO4U= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:15 2026 by rpki-client