This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: K59a433HNKi6KhBsO3ioF1OHIT+IJxqb3j6dpE7OdhQ= Subject key identifier: E3:EF:4D:98:41:06:F4:93:15:84:F5:A3:F5:02:3E:99:CB:54:39:DA Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 6A28B3C567CD05BB3216418BEA9078208DAF7FB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 03CA Signing time: Sun 25 Jan 2026 18:11:27 +0000 Manifest this update: Sun 25 Jan 2026 18:06:27 +0000 Manifest next update: Thu 29 Jan 2026 00:36:27 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: 6GVl/qQKuUDRY6f4wGu8AhrsRR04Jw7hKchXaLSM0hE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:28:b3:c5:67:cd:05:bb:32:16:41:8b:ea:90:78:20:8d:af:7f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Jan 25 18:06:27 2026 GMT Not After : Jan 29 00:36:27 2026 GMT Subject: CN=E3EF4D984106F4931584F5A3F5023E99CB5439DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:cd:a4:85:29:03:90:ff:60:6e:d5:75:f8: ff:71:23:85:b8:6b:47:3d:c9:74:71:8f:03:60:e6: 48:a0:fb:b4:c4:7f:7f:31:f1:b9:33:01:32:73:e5: 75:8f:0a:2b:32:f7:09:4b:34:7b:6f:3e:3f:55:7b: 92:29:cb:8e:95:a0:f1:5c:ed:0e:79:5a:6a:f7:6b: 6c:b8:d9:1a:00:08:3c:98:48:b4:c2:1e:27:14:ad: 75:57:12:6b:24:3e:ac:2b:e6:0f:82:cb:68:8a:45: 4b:35:2e:74:8f:6b:9f:de:71:a2:0d:18:f5:2a:e2: f6:34:71:41:fb:47:fa:64:eb:06:e3:62:8c:c6:ff: 53:02:8a:6e:78:64:48:ad:76:af:ae:66:7d:4a:5b: 35:69:10:4f:a5:fa:2d:29:4c:28:f0:10:6b:fd:9b: 08:bd:7a:1a:29:36:ed:95:37:7b:69:52:6a:aa:e7: ae:22:c0:70:f0:c4:a5:1d:6a:16:39:c7:5e:12:1f: c4:9d:26:4f:0c:78:c5:fe:7f:91:b1:75:98:3c:04: 10:51:ed:32:5b:d2:6b:33:0d:cd:4c:bc:8e:ab:64: 43:52:5a:8a:90:3b:94:5b:44:37:bd:58:c9:c1:d3: 3e:cf:5e:3e:e9:8b:a3:96:4c:a8:af:f3:4b:5e:31: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EF:4D:98:41:06:F4:93:15:84:F5:A3:F5:02:3E:99:CB:54:39:DA X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b5:92:7d:e7:46:1e:19:95:1a:9a:c0:08:54:f1:f5:4a:b1: 22:f2:aa:a4:c6:01:f5:e3:03:62:4c:50:d1:67:d8:18:3d:43: a9:43:27:b1:c2:14:5d:dd:2f:19:06:2c:91:c4:eb:49:29:92: 03:74:c9:3a:4d:0b:69:e0:de:a8:0c:d1:bb:8c:eb:17:a6:02: a8:80:8f:c8:c8:21:2e:3e:17:bc:96:18:60:61:18:ce:75:6d: b0:27:82:58:a4:dc:06:14:9c:ba:ff:ec:40:3a:0f:3d:35:f9: 49:43:e1:c7:e2:6c:35:d9:8b:27:78:06:6e:4d:f2:80:34:94: d0:28:ad:ea:bf:3d:68:2e:a3:07:14:f8:39:db:ac:98:bf:57: 45:69:0f:e8:82:91:c5:38:8c:88:65:9e:63:60:f6:f1:96:3d: 3e:58:14:5c:54:8e:33:44:20:d2:0f:8e:e7:51:93:a4:59:5b: bb:96:46:68:ba:d7:05:43:6c:43:dc:91:bf:0f:b3:ad:c6:68: ed:e8:1d:0e:51:fb:57:ae:83:21:47:f8:9e:2f:d2:0c:78:9d: 02:d2:9f:3c:9a:c0:2b:36:cf:0d:01:c6:b8:16:0b:07:5f:2d: 57:25:2e:ed:b9:7b:5e:76:f0:31:20:db:45:b2:ae:e8:d2:80: 04:6e:73:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaiizxWfNBbsyFkGL6pB4II2vf7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNjAxMjUxODA2MjdaFw0yNjAxMjkwMDM2MjdaMDMxMTAvBgNV BAMTKEUzRUY0RDk4NDEwNkY0OTMxNTg0RjVBM0Y1MDIzRTk5Q0I1NDM5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBs2khSkDkP9gbtV1+P9xI4W4 a0c9yXRxjwNg5kig+7TEf38x8bkzATJz5XWPCisy9wlLNHtvPj9Ve5Ipy46VoPFc 7Q55Wmr3a2y42RoACDyYSLTCHicUrXVXEmskPqwr5g+Cy2iKRUs1LnSPa5/ecaIN GPUq4vY0cUH7R/pk6wbjYozG/1MCim54ZEitdq+uZn1KWzVpEE+l+i0pTCjwEGv9 mwi9ehopNu2VN3tpUmqq564iwHDwxKUdahY5x14SH8SdJk8MeMX+f5GxdZg8BBBR 7TJb0mszDc1MvI6rZENSWoqQO5RbRDe9WMnB0z7PXj7pi6OWTKiv80teMRU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+9NmEEG9JMVhPWj9QI+mctUOdowHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm1kn3nRh4ZlRqawAhU8fVKsSLyqqTGAfXj A2JMUNFn2Bg9Q6lDJ7HCFF3dLxkGLJHE60kpkgN0yTpNC2ng3qgM0buM6xemAqiA j8jIIS4+F7yWGGBhGM51bbAnglik3AYUnLr/7EA6Dz01+UlD4cfibDXZiyd4Bm5N 8oA0lNAoreq/PWguowcU+DnbrJi/V0VpD+iCkcU4jIhlnmNg9vGWPT5YFFxUjjNE INIPjudRk6RZW7uWRmi61wVDbEPckb8Ps63GaO3oHQ5R+1eugyFH+J4v0gx4nQLS nzyawCs2zw0BxrgWCwdfLVclLu25e1528DEg20WyrujSgARucxY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:53 2026 by rpki-client