This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: TScm12dm7Ge1jj4L30QhexUQ3hIM9yuRvIzLCpSPfII= Subject key identifier: 8C:64:56:6E:31:8E:5B:06:9F:E8:D7:C3:85:7F:34:B5:53:0E:92:17 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 2CC955CE7351349D2C4C0E48D490B38C30408942 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03E9 Signing time: Sat 24 Jan 2026 03:40:01 +0000 Manifest this update: Sat 24 Jan 2026 03:35:01 +0000 Manifest next update: Tue 27 Jan 2026 08:55:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 3: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: 9sK2y9FQpvJd379f8H8Hs6zGw576pXBnXjSY53vkQeA=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c9:55:ce:73:51:34:9d:2c:4c:0e:48:d4:90:b3:8c:30:40:89:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Jan 24 03:35:01 2026 GMT Not After : Jan 27 08:55:01 2026 GMT Subject: CN=8C64566E318E5B069FE8D7C3857F34B5530E9217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f4:96:03:92:b2:2b:bc:50:b0:e2:97:5d:62: 03:f6:b2:ca:08:2e:e5:ed:62:35:a5:1f:45:91:c3: 6e:9c:3e:53:d9:eb:07:e5:7a:e4:22:ad:3d:94:28: d3:51:02:d7:50:cf:96:88:2c:0d:34:a5:f0:46:67: 02:d3:7f:3e:94:52:9f:82:a9:a5:1b:67:92:51:5e: e3:ed:b5:06:f2:49:30:39:cd:0e:84:80:d6:67:b8: 24:f0:37:74:e9:e1:f1:91:df:8e:44:22:c8:29:75: 74:a7:50:dd:87:9a:27:2b:d2:85:97:94:8b:81:a6: 1c:88:5a:ff:82:b7:01:5a:02:f2:82:f2:a3:f4:d2: 4c:05:09:a6:67:95:f1:ac:09:af:75:51:33:04:25: f9:10:92:23:9a:c3:b0:f6:b0:41:f7:6a:c9:3e:70: 02:8c:00:db:2a:33:10:da:2e:1e:e9:61:15:66:c0: 78:b1:ef:22:f9:1f:e7:7f:71:23:17:93:61:fa:43: 2d:3c:a4:9f:25:eb:02:3b:f8:12:40:67:e5:26:72: d6:c1:75:54:7e:b5:4f:ba:57:b5:a9:3c:75:4e:7b: b8:11:5c:ef:b5:64:93:7a:79:c1:b1:6f:1d:aa:24: d0:b8:98:23:12:8e:86:0f:11:cf:9a:0d:c4:19:04: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:64:56:6E:31:8E:5B:06:9F:E8:D7:C3:85:7F:34:B5:53:0E:92:17 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:63:23:2b:24:d8:3a:02:6c:26:91:5e:fa:d1:dc:87:a6:d6: 24:49:11:3b:d4:5b:92:f5:46:f0:31:6d:17:ce:b3:7d:e3:46: 20:05:31:e5:90:3a:12:a2:27:3d:11:cc:fc:66:f1:ff:3b:96: 6e:bd:9c:ec:c1:4a:8b:7b:f2:a9:2d:ff:ba:6c:5e:5a:5b:00: db:bc:a1:7b:ff:7a:45:b7:fc:f0:56:0c:0f:7f:22:d3:0e:4b: 58:d6:6d:cb:7d:84:35:4f:8b:72:0c:53:67:75:c9:2f:25:71: b8:3e:00:5c:c0:59:a4:f8:2c:0b:72:92:97:0b:44:4d:fb:14: d6:dc:91:71:66:e9:ba:3b:d5:f4:2d:aa:2f:96:41:85:ec:d9: a9:1f:e2:27:f6:84:d0:81:b9:8d:4a:ef:65:5a:67:61:a4:76: ec:62:76:95:4a:c4:13:4e:0b:6e:20:9c:3c:72:18:8f:b8:b3: a4:23:b3:6a:3e:35:86:ac:34:c9:d8:24:d5:fb:80:af:b0:e8: 24:80:23:d9:62:1a:55:ed:96:bc:70:07:8d:eb:52:34:64:ae: a6:0a:25:02:5c:d7:ff:7f:20:98:67:08:ac:c9:c8:77:95:63: 4d:29:55:99:2d:43:34:33:80:cb:10:d9:61:f9:e4:3a:21:b7: ad:22:25:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMlVznNRNJ0sTA5I1JCzjDBAiUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNjAxMjQwMzM1MDFaFw0yNjAxMjcwODU1MDFaMDMxMTAvBgNV BAMTKDhDNjQ1NjZFMzE4RTVCMDY5RkU4RDdDMzg1N0YzNEI1NTMwRTkyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp9JYDkrIrvFCw4pddYgP2ssoI LuXtYjWlH0WRw26cPlPZ6wfleuQirT2UKNNRAtdQz5aILA00pfBGZwLTfz6UUp+C qaUbZ5JRXuPttQbySTA5zQ6EgNZnuCTwN3Tp4fGR345EIsgpdXSnUN2Hmicr0oWX lIuBphyIWv+CtwFaAvKC8qP00kwFCaZnlfGsCa91UTMEJfkQkiOaw7D2sEH3ask+ cAKMANsqMxDaLh7pYRVmwHix7yL5H+d/cSMXk2H6Qy08pJ8l6wI7+BJAZ+UmctbB dVR+tU+6V7WpPHVOe7gRXO+1ZJN6ecGxbx2qJNC4mCMSjoYPEc+aDcQZBL1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGRWbjGOWwaf6NfDhX80tVMOkhcwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRjIysk2DoCbCaRXvrR3Iem1iRJETvUW5L1 RvAxbRfOs33jRiAFMeWQOhKiJz0RzPxm8f87lm69nOzBSot78qkt/7psXlpbANu8 oXv/ekW3/PBWDA9/ItMOS1jWbct9hDVPi3IMU2d1yS8lcbg+AFzAWaT4LAtykpcL RE37FNbckXFm6bo71fQtqi+WQYXs2akf4if2hNCBuY1K72VaZ2GkduxidpVKxBNO C24gnDxyGI+4s6Qjs2o+NYasNMnYJNX7gK+w6CSAI9liGlXtlrxwB43rUjRkrqYK JQJc1/9/IJhnCKzJyHeVY00pVZktQzQzgMsQ2WH55Doht60iJZg= -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:45 2026 by rpki-client