This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: HaW+dpLdlxRSNQnB/BbIIYim8jB9sORIGTEKRlmEvjE= Subject key identifier: F4:EB:02:CB:FF:2F:CB:F9:14:12:62:2F:98:79:03:87:03:47:D5:00 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 2F8A12F16DDD5047D250D650F059BA62EA4FF74C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0365 Signing time: Fri 23 Jan 2026 18:32:18 +0000 Manifest this update: Fri 23 Jan 2026 18:27:18 +0000 Manifest next update: Mon 26 Jan 2026 23:00:18 +0000 Files and hashes: 1: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) 2: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: j4M7iD1lOc8itdpifdR/7uw1WHYe/EZVRo41QieISwM=) 3: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8a:12:f1:6d:dd:50:47:d2:50:d6:50:f0:59:ba:62:ea:4f:f7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Jan 23 18:27:18 2026 GMT Not After : Jan 26 23:00:18 2026 GMT Subject: CN=F4EB02CBFF2FCBF91412622F987903870347D500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:71:05:f0:6d:f3:e4:3b:1e:4a:d0:60:f8: 6f:43:6f:17:c8:a1:c6:f1:c0:0f:7e:b8:39:fc:ed: 71:77:c7:84:5f:54:b5:5b:77:1c:bf:61:47:57:f9: cb:4d:a6:1d:39:8d:a5:8e:75:32:21:e6:de:01:ce: 21:19:96:e1:e4:6e:6c:9f:63:1b:92:4d:c5:31:c7: af:15:58:0b:76:39:cc:05:65:52:5f:69:c5:e4:39: aa:dd:39:ed:1a:12:2c:d5:31:c0:40:f6:49:b4:a8: 05:67:5e:1f:7e:23:3e:00:65:5a:1f:bc:c9:80:c1: 46:ec:8c:1a:a5:3c:79:c4:77:25:ae:a3:91:52:f9: f0:db:93:ed:ad:19:15:20:e1:0e:29:be:f8:9f:60: 51:bf:3e:b9:7b:b4:d2:67:dd:9c:01:11:67:03:aa: 00:87:12:69:a6:3f:9c:e9:c0:65:e5:97:b2:ae:03: 59:3e:54:c5:fe:9e:cc:f1:67:50:bd:fc:e7:c9:a9: 17:05:8a:f2:ce:79:48:f5:41:71:df:23:64:9f:4b: c8:c5:f8:fd:b6:72:32:79:1e:b1:56:0b:3b:0c:26: 43:23:4d:91:56:b2:ae:96:f3:eb:7b:87:01:df:1e: f2:50:1b:e6:b7:d1:bf:ea:8b:d9:b0:7b:38:0a:a2: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EB:02:CB:FF:2F:CB:F9:14:12:62:2F:98:79:03:87:03:47:D5:00 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c2:3c:ae:6e:a5:57:c8:4e:01:fb:df:00:0a:e8:2e:bc:a4: ff:54:30:b4:aa:ba:60:71:3e:c0:9c:8f:8d:de:85:65:db:ac: c7:ee:32:80:62:ee:df:38:72:18:ca:8e:53:e0:7a:71:89:8f: 73:b8:e3:02:c8:fd:8f:a2:19:3d:60:cf:2a:87:b9:c4:04:d4: 40:8c:94:be:7c:2e:eb:d2:ab:33:fe:2a:92:ac:32:e4:07:db: 23:9a:f4:37:2c:17:97:12:37:10:60:d4:20:61:6a:4b:f6:a1: 2f:80:bd:4e:51:5e:85:99:3f:08:86:bb:92:e3:7a:ab:70:c5: 16:a7:26:15:01:fb:08:9e:a4:ae:3c:63:ce:56:a1:f9:59:99: 56:1f:2a:c3:c6:53:fc:6c:6b:02:0f:8a:e6:78:5d:d4:6d:f6: a7:73:c6:b0:cc:8b:b3:54:c1:1b:d0:cf:f9:c0:f9:e8:18:63: bd:b1:17:4a:f0:06:6f:12:1b:ed:eb:4b:82:ea:3d:2c:84:5f: fa:c4:8d:9c:20:7c:d5:90:a2:fd:90:9f:6a:49:13:24:c4:2a: e0:1f:3d:fb:52:84:5d:5d:b8:2c:20:e3:a7:a1:09:dc:a7:16: 2c:1e:db:4d:5e:af:10:83:d0:45:60:6d:1e:11:ab:d0:32:b9: 39:93:ff:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4oS8W3dUEfSUNZQ8Fm6YupP90wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNjAxMjMxODI3MThaFw0yNjAxMjYyMzAwMThaMDMxMTAvBgNV BAMTKEY0RUIwMkNCRkYyRkNCRjkxNDEyNjIyRjk4NzkwMzg3MDM0N0Q1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkXEF8G3z5DseStBg+G9DbxfI ocbxwA9+uDn87XF3x4RfVLVbdxy/YUdX+ctNph05jaWOdTIh5t4BziEZluHkbmyf YxuSTcUxx68VWAt2OcwFZVJfacXkOardOe0aEizVMcBA9km0qAVnXh9+Iz4AZVof vMmAwUbsjBqlPHnEdyWuo5FS+fDbk+2tGRUg4Q4pvvifYFG/Prl7tNJn3ZwBEWcD qgCHEmmmP5zpwGXll7KuA1k+VMX+nszxZ1C9/OfJqRcFivLOeUj1QXHfI2SfS8jF +P22cjJ5HrFWCzsMJkMjTZFWsq6W8+t7hwHfHvJQG+a30b/qi9mwezgKoka7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9OsCy/8vy/kUEmIvmHkDhwNH1QAwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3CPK5upVfITgH73wAK6C68pP9UMLSqumBx PsCcj43ehWXbrMfuMoBi7t84chjKjlPgenGJj3O44wLI/Y+iGT1gzyqHucQE1ECM lL58LuvSqzP+KpKsMuQH2yOa9DcsF5cSNxBg1CBhakv2oS+AvU5RXoWZPwiGu5Lj eqtwxRanJhUB+wiepK48Y85WoflZmVYfKsPGU/xsawIPiuZ4XdRt9qdzxrDMi7NU wRvQz/nA+egYY72xF0rwBm8SG+3rS4LqPSyEX/rEjZwgfNWQov2Qn2pJEyTEKuAf PftShF1duCwg46ehCdynFiwe201erxCD0EVgbR4Rq9AyuTmT/5A= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:43 2026 by rpki-client