This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: 1+NknOvJdtFOGAtARq2TQIVc7n9tXouZFv8PinNA6ZI= Subject key identifier: B8:E6:71:A5:D8:8C:03:5E:41:CA:66:92:63:9B:2F:D0:13:A6:24:35 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 0E5890A488803B2CDA2BCC4B322440852CF1002D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0546 Signing time: Mon 26 Jan 2026 02:12:26 +0000 Manifest this update: Mon 26 Jan 2026 02:07:26 +0000 Manifest next update: Thu 29 Jan 2026 08:02:26 +0000 Files and hashes: 1: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) 2: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: +h7ZJK20Y3pjtMiDzZ0cuXMJNZauXYUd3uRyH0ru7Fc=) 3: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:58:90:a4:88:80:3b:2c:da:2b:cc:4b:32:24:40:85:2c:f1:00:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Jan 26 02:07:26 2026 GMT Not After : Jan 29 08:02:26 2026 GMT Subject: CN=B8E671A5D88C035E41CA6692639B2FD013A62435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:82:a7:14:58:c4:0d:cb:de:4b:70:d3:eb: 45:6a:e1:5b:35:8b:1a:c4:a9:69:aa:c6:25:fe:cd: 57:39:47:4e:eb:78:e2:4e:b3:ea:8c:3b:14:f8:1f: db:0e:5e:cd:21:f9:05:11:37:cf:a4:71:49:95:a4: 7f:5c:f4:52:1c:3b:80:47:f7:e6:21:1a:67:c4:9c: ab:bb:2a:86:16:b9:ab:70:ce:f9:27:9b:76:f0:14: 35:70:b2:ac:06:4d:25:28:9d:2d:e0:d6:3c:01:4e: 38:6e:aa:19:fe:a0:5c:e4:51:9e:39:91:77:46:0c: 90:60:8c:21:49:18:fc:9a:94:0d:e3:4f:c7:d4:2c: eb:67:00:56:ec:57:45:5f:c8:50:ce:38:ed:64:67: b4:d6:87:0a:5a:dd:f6:79:8c:71:8f:7f:9b:bc:3c: 08:95:63:40:cd:da:f3:44:2f:ad:f1:8f:74:f0:82: 04:2c:3d:d4:2e:0b:f7:ba:f5:5c:15:7b:e9:a8:d4: 6b:8e:4f:b7:2d:21:bb:40:00:e3:ed:86:51:b6:c6: f9:7e:e5:ef:20:29:df:4a:7f:2b:42:1d:cd:bc:56: 26:2d:03:f7:fd:7e:fa:55:2d:0a:77:33:38:e3:7c: ea:5f:7a:74:90:7b:f9:58:b3:ec:d3:58:02:0f:e4: b9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E6:71:A5:D8:8C:03:5E:41:CA:66:92:63:9B:2F:D0:13:A6:24:35 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1c:92:de:bf:9f:92:d2:d7:56:3c:1f:db:8b:46:0c:7d:e1: 98:26:e1:7f:44:06:ef:30:ab:c2:72:65:bc:ab:f5:26:f4:68: 46:24:d7:3e:21:69:f4:3b:fb:73:cc:92:85:77:b2:6d:30:8b: 73:01:72:6a:e5:11:ad:97:a7:a0:39:14:8d:e0:92:c4:de:63: b0:20:7c:4f:bd:12:94:6b:2e:3b:98:37:20:a1:db:b5:e5:e9: cd:56:82:76:00:c8:fb:5f:fd:e3:0e:22:e8:ae:6c:1d:ef:c9: 44:9f:05:d6:69:2e:69:0f:0c:c4:67:19:dd:cc:ed:16:02:30: f3:e2:c7:0b:c9:3d:fd:70:41:0b:0d:e2:97:50:9c:2d:60:82: 06:80:72:27:4b:dd:16:0f:b5:c8:e2:84:c7:25:eb:41:9a:36: e1:2c:fb:59:75:7e:88:c8:b0:ee:dd:59:57:ee:ed:32:e9:11: ff:a8:90:74:3c:be:1f:10:63:7f:b6:01:88:08:f7:65:04:2e: 19:93:8e:fe:23:1c:4e:1a:88:44:9f:b7:8f:69:63:11:92:60: 94:3f:62:e8:35:0d:2d:1a:b0:35:35:94:c2:f6:7c:5c:53:3a: e1:27:9c:d3:07:60:c7:74:38:15:3f:2a:0d:05:91:c5:d0:72: 0e:5a:16:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDliQpIiAOyzaK8xLMiRAhSzxAC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNjAxMjYwMjA3MjZaFw0yNjAxMjkwODAyMjZaMDMxMTAvBgNV BAMTKEI4RTY3MUE1RDg4QzAzNUU0MUNBNjY5MjYzOUIyRkQwMTNBNjI0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zYKnFFjEDcveS3DT60Vq4Vs1 ixrEqWmqxiX+zVc5R07reOJOs+qMOxT4H9sOXs0h+QURN8+kcUmVpH9c9FIcO4BH 9+YhGmfEnKu7KoYWuatwzvknm3bwFDVwsqwGTSUonS3g1jwBTjhuqhn+oFzkUZ45 kXdGDJBgjCFJGPyalA3jT8fULOtnAFbsV0VfyFDOOO1kZ7TWhwpa3fZ5jHGPf5u8 PAiVY0DN2vNEL63xj3TwggQsPdQuC/e69VwVe+mo1GuOT7ctIbtAAOPthlG2xvl+ 5e8gKd9KfytCHc28ViYtA/f9fvpVLQp3MzjjfOpfenSQe/lYs+zTWAIP5LmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOZxpdiMA15BymaSY5sv0BOmJDUwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAckt6/n5LS11Y8H9uLRgx94Zgm4X9EBu8w q8JyZbyr9Sb0aEYk1z4hafQ7+3PMkoV3sm0wi3MBcmrlEa2Xp6A5FI3gksTeY7Ag fE+9EpRrLjuYNyCh27Xl6c1WgnYAyPtf/eMOIuiubB3vyUSfBdZpLmkPDMRnGd3M 7RYCMPPixwvJPf1wQQsN4pdQnC1gggaAcidL3RYPtcjihMcl60GaNuEs+1l1fojI sO7dWVfu7TLpEf+okHQ8vh8QY3+2AYgI92UELhmTjv4jHE4aiESft49pYxGSYJQ/ Yug1DS0asDU1lML2fFxTOuEnnNMHYMd0OBU/Kg0FkcXQcg5aFjU= -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:59 2026 by rpki-client