This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: wi53nDCteQ3QJ2sheR9HXXFigjd6MOZGO2f+8upTBC0= Subject key identifier: 4B:88:FA:34:3E:B5:4D:D5:7B:27:77:C3:D9:EB:CA:0F:EE:48:5F:DA Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 497FC16188DB52166F21A5308E347FB96D97DF9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 0237 Signing time: Sun 25 Jan 2026 06:31:28 +0000 Manifest this update: Sun 25 Jan 2026 06:26:28 +0000 Manifest next update: Wed 28 Jan 2026 17:36:28 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) 2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) 3: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: 1VPxm+IGFr0IMMajq6/vrdBGMZR+EemDMQSI4fI8DTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7f:c1:61:88:db:52:16:6f:21:a5:30:8e:34:7f:b9:6d:97:df:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Jan 25 06:26:28 2026 GMT Not After : Jan 28 17:36:28 2026 GMT Subject: CN=4B88FA343EB54DD57B2777C3D9EBCA0FEE485FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:46:53:ad:25:bc:e5:ff:ff:28:20:41:10:10: 6d:74:a1:67:44:0d:92:48:77:36:b2:db:40:51:3a: 59:cb:5a:1b:81:52:96:80:ac:42:c1:1b:ee:51:36: 57:5b:eb:8d:e6:70:c4:31:19:35:10:42:26:43:3b: 6f:3f:a5:99:49:fe:6b:52:17:6f:0d:07:95:6a:f1: c6:90:84:e5:0e:e8:a0:6b:fe:36:f8:96:e2:8e:be: 3a:ae:d8:47:c4:21:61:a5:74:81:21:19:e0:c4:75: a7:7a:6e:8b:2e:bc:df:22:96:9a:4d:af:d0:99:a3: 2b:7d:48:d8:3f:f9:17:dd:10:2b:45:47:39:9e:42: ed:09:65:1b:19:2a:e7:f8:9f:a3:a9:1f:c4:d6:07: 58:8e:9f:2f:e4:76:fb:ed:a7:02:10:5e:58:ae:73: f4:c6:93:43:5c:a5:ae:6b:3f:11:fe:d2:ed:b4:3f: de:a6:a2:31:9e:85:9d:17:82:9d:42:9b:0b:57:d7: 18:2c:f0:89:54:a5:fa:72:bb:2a:82:2c:ee:ff:ce: 94:0d:16:6e:43:13:d9:7f:23:c0:1a:ec:eb:11:cc: bb:cc:31:39:45:da:26:03:44:65:a2:b5:37:38:0e: 5e:ac:70:33:f8:b3:0c:c4:0d:e8:3c:5e:06:cc:f6: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:FA:34:3E:B5:4D:D5:7B:27:77:C3:D9:EB:CA:0F:EE:48:5F:DA X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cd:f8:1f:b0:a4:81:fb:5e:64:16:bc:f8:9f:c4:9a:ce:47: 10:bb:de:b0:2d:42:dc:7f:c9:47:d6:1e:95:a0:a2:95:d1:ec: 2e:c1:87:b0:93:12:9b:f4:76:b9:b3:80:bb:d9:dc:78:8e:c4: d5:42:ca:43:5a:65:67:9a:d3:56:47:38:56:32:0e:e8:a5:cf: 58:33:d4:c4:b0:a0:d8:04:a5:09:cd:63:11:3c:fc:96:de:d5: 46:ac:36:ae:70:11:06:de:eb:e0:30:0c:9e:67:b9:68:ef:d2: db:66:0a:37:3c:5d:79:54:e5:24:3c:e1:c1:1a:d1:ae:2c:0e: c4:64:6c:13:a1:48:c5:64:74:b7:b8:c6:0d:0a:e6:63:8f:df: 94:85:ff:ef:ff:c8:10:78:32:a6:a2:75:46:16:e9:c7:67:9a: e5:65:f3:a1:d7:f9:c1:43:ae:a6:7b:28:9e:c3:cd:a0:b1:17: 7e:c9:a5:df:ea:5d:24:c1:51:5a:69:21:bc:0e:b7:92:55:7c: b5:d3:dc:e7:46:90:eb:97:54:fc:66:65:95:2a:be:18:d4:e5: 61:56:a7:13:d7:5d:74:09:03:bb:f9:ae:8c:40:4e:65:52:0d: b7:da:01:9c:df:09:f0:f7:0f:97:df:bc:37:fe:cf:39:27:75: e2:14:44:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSX/BYYjbUhZvIaUwjjR/uW2X35owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNjAxMjUwNjI2MjhaFw0yNjAxMjgxNzM2MjhaMDMxMTAvBgNV BAMTKDRCODhGQTM0M0VCNTRERDU3QjI3NzdDM0Q5RUJDQTBGRUU0ODVGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRlOtJbzl//8oIEEQEG10oWdE DZJIdzay20BROlnLWhuBUpaArELBG+5RNldb643mcMQxGTUQQiZDO28/pZlJ/mtS F28NB5Vq8caQhOUO6KBr/jb4luKOvjqu2EfEIWGldIEhGeDEdad6bosuvN8ilppN r9CZoyt9SNg/+RfdECtFRzmeQu0JZRsZKuf4n6OpH8TWB1iOny/kdvvtpwIQXliu c/TGk0Ncpa5rPxH+0u20P96mojGehZ0Xgp1CmwtX1xgs8IlUpfpyuyqCLO7/zpQN Fm5DE9l/I8Aa7OsRzLvMMTlF2iYDRGWitTc4Dl6scDP4swzEDeg8XgbM9mGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS4j6ND61TdV7J3fD2evKD+5IX9owHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTN+B+wpIH7XmQWvPifxJrORxC73rAtQtx/ yUfWHpWgopXR7C7Bh7CTEpv0drmzgLvZ3HiOxNVCykNaZWea01ZHOFYyDuilz1gz 1MSwoNgEpQnNYxE8/Jbe1UasNq5wEQbe6+AwDJ5nuWjv0ttmCjc8XXlU5SQ84cEa 0a4sDsRkbBOhSMVkdLe4xg0K5mOP35SF/+//yBB4MqaidUYW6cdnmuVl86HX+cFD rqZ7KJ7DzaCxF37Jpd/qXSTBUVppIbwOt5JVfLXT3OdGkOuXVPxmZZUqvhjU5WFW pxPXXXQJA7v5roxATmVSDbfaAZzfCfD3D5ffvDf+zzkndeIURJg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:20 2026 by rpki-client