This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft (raw, json) Hash identifier: 3VcaJue+VYJe/eBqO7Ll53R3Ikmlr1d+rbkFKbxTf7o= Subject key identifier: 86:92:4E:C7:28:5E:F5:7B:E2:82:37:4D:32:A3:76:DF:D4:8E:28:46 Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB Certificate issuer: /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Certificate serial: 1C9B1AC994E12F7ADEBA175A2ADDFA671A4BBD87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft Manifest number: 014A Signing time: Sun 25 Jan 2026 00:51:44 +0000 Manifest this update: Sun 25 Jan 2026 00:46:44 +0000 Manifest next update: Wed 28 Jan 2026 08:59:44 +0000 Files and hashes: 1: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl (hash: TL6p6LFlsodkW6ygEWlKjrS3MHC9u/yWYdHMTX0H6P8=) 2: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: qDLyTdPWSG6q8vGu/DnC4p5fkC9xQVIbSAKqWF4GTxo=) 3: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: y5O1Ppu2ytn4g8GvvxC2f7T0LX+os0fh9M12M0RIzb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9b:1a:c9:94:e1:2f:7a:de:ba:17:5a:2a:dd:fa:67:1a:4b:bd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Validity Not Before: Jan 25 00:46:44 2026 GMT Not After : Jan 28 08:59:44 2026 GMT Subject: CN=86924EC7285EF57BE282374D32A376DFD48E2846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:22:01:36:23:ff:f9:f7:32:94:c3:5e:77: 2e:b5:06:18:2c:f8:43:aa:8c:df:50:57:12:90:7f: 0e:75:d9:28:39:fb:f3:54:ab:54:88:1d:f0:26:30: ee:8d:48:45:ee:1c:80:9c:cf:1a:cc:e5:4b:ab:06: de:49:a2:5a:e5:7a:a9:36:d0:f6:dc:8d:39:10:d8: e3:ba:bc:4d:ca:e9:a3:de:bd:b5:3d:77:ec:25:f0: bc:12:be:5c:b7:ac:9d:f9:78:e2:5c:9b:bd:b8:79: c9:05:79:14:ff:f0:ae:bf:55:85:95:57:2f:34:bd: 2f:76:a1:c3:b0:d1:fc:e6:44:f6:74:ac:4a:fb:06: 70:8c:17:52:60:7e:62:91:5b:fd:14:bd:7d:57:2a: fd:54:95:bd:7c:f8:72:7d:c6:b6:17:ad:e5:e2:fa: f2:b7:c4:e0:14:05:29:7e:a8:13:46:93:ac:3c:db: 13:e3:66:49:72:fc:df:78:27:21:3c:73:60:dd:6d: cd:3c:40:0b:9e:ae:63:65:b5:c8:2c:d6:33:ae:04: 32:33:c4:e7:93:1b:a1:51:29:e8:c1:7d:61:48:1c: 0a:ee:43:1a:f5:a2:7d:bc:8d:76:c8:d8:db:28:46: 76:1d:f4:47:d1:92:c8:e2:fe:44:c9:fe:ae:c4:62: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:92:4E:C7:28:5E:F5:7B:E2:82:37:4D:32:A3:76:DF:D4:8E:28:46 X509v3 Authority Key Identifier: keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b6:d7:3b:77:b0:f4:a7:7f:6b:22:54:51:27:65:3f:46:67: 2c:8b:7f:dd:ff:d7:50:a6:fd:ef:34:c4:c3:8c:2a:8a:5b:63: a4:65:83:21:dc:8d:c7:aa:04:32:3f:d2:0f:1a:7d:af:e3:08: 25:78:1c:93:54:df:76:76:84:8d:ad:29:94:49:43:4a:d7:fc: 24:8e:d3:24:6f:5a:09:8c:36:86:ea:c7:81:ff:07:7c:55:45: 5f:fd:69:94:36:fd:af:8c:bd:75:ad:59:9c:61:b0:65:8e:cd: ba:3e:97:ab:fe:f9:34:3c:bf:1e:f3:f4:e6:53:78:dd:34:10: fd:94:fe:55:44:67:36:de:b9:30:e2:76:51:46:ab:d2:a6:a5: ac:ae:79:68:e6:9c:ba:06:ab:c4:60:55:be:29:e2:99:f9:65: 4a:41:b6:7f:bb:58:9d:f8:2b:4e:24:d2:49:47:ef:00:f5:e2: 1d:0a:97:9d:11:e1:8a:12:c6:ea:cc:5f:f7:83:82:7f:b8:24: b1:13:f9:54:4f:f3:05:85:36:6a:c6:de:ee:ce:72:a3:3f:22: 64:ef:47:56:07:42:68:6e:92:4c:29:66:27:39:3c:25:e4:54: ad:e1:f8:98:bc:9c:65:ca:26:e1:2c:91:53:b8:41:20:0d:8f: 91:4a:65:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJsayZThL3reuhdaKt36ZxpLvYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FB OTg3ODJCQjAeFw0yNjAxMjUwMDQ2NDRaFw0yNjAxMjgwODU5NDRaMDMxMTAvBgNV BAMTKDg2OTI0RUM3Mjg1RUY1N0JFMjgyMzc0RDMyQTM3NkRGRDQ4RTI4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjSIBNiP/+fcylMNedy61Bhgs +EOqjN9QVxKQfw512Sg5+/NUq1SIHfAmMO6NSEXuHICczxrM5UurBt5Jolrleqk2 0PbcjTkQ2OO6vE3K6aPevbU9d+wl8LwSvly3rJ35eOJcm724eckFeRT/8K6/VYWV Vy80vS92ocOw0fzmRPZ0rEr7BnCMF1JgfmKRW/0UvX1XKv1Ulb18+HJ9xrYXreXi +vK3xOAUBSl+qBNGk6w82xPjZkly/N94JyE8c2Ddbc08QAuermNltcgs1jOuBDIz xOeTG6FRKejBfWFIHAruQxr1on28jXbI2NsoRnYd9EfRksji/kTJ/q7EYglnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpJOxyhe9XvigjdNMqN239SOKEYwHwYDVR0j BBgwFoAUH0xG4Y8hr75NismEYJC2OqmHgrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDdiMDI2NC05YTBhLTRjZTQtOTNjYi0yY2RkODQwYjg1MzQvMC8xRjRDNDZFMThG MjFBRkJFNEQ4QUM5ODQ2MDkwQjYzQUE5ODc4MkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FBOTg3 ODJCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2 M0FBOTg3ODJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG21zt3sPSnf2siVFEnZT9GZyyLf93/11Cm /e80xMOMKopbY6RlgyHcjceqBDI/0g8afa/jCCV4HJNU33Z2hI2tKZRJQ0rX/CSO 0yRvWgmMNobqx4H/B3xVRV/9aZQ2/a+MvXWtWZxhsGWOzbo+l6v++TQ8vx7z9OZT eN00EP2U/lVEZzbeuTDidlFGq9KmpayueWjmnLoGq8RgVb4p4pn5ZUpBtn+7WJ34 K04k0klH7wD14h0Kl50R4YoSxurMX/eDgn+4JLET+VRP8wWFNmrG3u7OcqM/ImTv R1YHQmhukkwpZic5PCXkVK3h+Ji8nGXKJuEskVO4QSANj5FKZRE= -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:08 2026 by rpki-client