This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: pGC0arkWkjixdIaonnATh2ldU0I5iRVv1ymAoW+YTgM= Subject key identifier: 50:19:AF:E2:7B:BB:BD:39:54:33:BD:E1:8F:BC:AE:9E:10:1C:A6:70 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 49AECDBDEF01A9C006F113AD3E4B3BE164A2ACAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: 012A Signing time: Sat 24 Jan 2026 17:22:26 +0000 Manifest this update: Sat 24 Jan 2026 17:17:26 +0000 Manifest next update: Tue 27 Jan 2026 19:36:26 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 2: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: Uoo2IQw6mvOYLaCwUWvA0OyhKbyZTo5TF40rSRyIUVo=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ae:cd:bd:ef:01:a9:c0:06:f1:13:ad:3e:4b:3b:e1:64:a2:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Jan 24 17:17:26 2026 GMT Not After : Jan 27 19:36:26 2026 GMT Subject: CN=5019AFE27BBBBD395433BDE18FBCAE9E101CA670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:d9:3c:73:da:c2:7e:55:43:5f:4f:02:71: 68:3a:da:20:dc:de:78:0a:f6:17:10:d1:fc:83:60: c1:68:a0:09:b4:96:5b:c1:f3:6c:3e:12:c1:98:3e: 31:62:8d:bc:73:57:81:79:78:f2:65:ec:23:88:d2: 9f:1f:a7:04:91:15:31:db:9e:41:d7:44:34:7d:61: 6d:fa:8d:33:22:27:21:a7:5d:71:5b:8c:76:a6:9a: b1:8f:d3:e8:cb:71:f9:82:bc:0d:f8:07:1f:3f:bc: 6d:77:ba:a1:38:f2:24:19:e8:f8:78:f2:be:d8:b2: 12:3a:f6:67:1b:c3:87:d5:56:62:2f:72:b7:fd:59: 32:be:f3:42:4c:51:78:9b:87:6e:64:bf:61:43:e3: c0:29:e3:9d:2b:5c:1c:36:1a:a3:06:81:b3:6c:9b: f0:ac:7f:ec:17:75:b9:01:77:b5:f6:38:54:df:2e: 39:7c:db:e5:40:7c:9a:1b:15:d4:b0:dd:8d:92:3f: 90:9a:17:e0:c0:a8:be:af:92:e3:60:5f:31:6e:4f: b2:d1:ec:b4:7c:75:b8:72:32:c0:9d:f6:a5:57:6c: 07:30:9b:c9:42:a7:4b:a7:17:61:40:67:ab:25:32: bf:de:94:d5:1b:79:4f:d9:69:fb:40:85:ac:d8:6e: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:AF:E2:7B:BB:BD:39:54:33:BD:E1:8F:BC:AE:9E:10:1C:A6:70 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:57:60:07:9b:fe:66:63:cf:32:0e:fc:c3:31:e0:a4:27:98: 32:53:10:02:66:0e:61:71:d6:d4:82:bb:f6:62:49:f2:7a:43: 7b:db:8f:d6:c7:a2:a0:c2:bc:66:37:29:1d:50:86:fe:d5:1e: bc:2f:bc:fd:16:18:97:d3:1a:5e:eb:30:87:35:5d:36:7e:ac: 3d:7f:53:5f:ec:87:21:81:ce:35:04:c5:06:62:74:fc:fa:1b: 5d:cd:ab:b1:70:0e:e4:31:d2:e2:79:2f:ec:d9:d7:02:1f:b8: d2:9b:db:71:d2:a8:4f:9a:c9:18:5a:d2:d7:08:10:b6:b3:f8: 69:66:06:98:10:36:12:cd:00:af:1a:61:89:2f:e3:7d:29:d7: fb:ea:70:c8:1d:cf:90:6a:ba:46:40:35:f6:4d:3d:92:bc:fc: 27:10:16:2f:72:b6:cc:64:5d:3c:30:7f:1e:81:16:f9:10:94: 9f:fa:e4:b4:f5:c5:ec:15:ec:43:24:88:0e:dc:04:b8:f5:65: 2a:3f:96:f2:24:33:84:fe:93:08:6e:1b:9a:74:03:a2:03:88: 57:9e:8f:bf:9b:59:10:00:84:99:cd:c4:fe:ab:61:8c:75:e8: 83:5d:58:54:e9:ca:36:71:2a:39:cb:85:9d:73:72:af:1b:3c: 3b:82:5b:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSa7Nve8BqcAG8ROtPks74WSirKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNjAxMjQxNzE3MjZaFw0yNjAxMjcxOTM2MjZaMDMxMTAvBgNV BAMTKDUwMTlBRkUyN0JCQkJEMzk1NDMzQkRFMThGQkNBRTlFMTAxQ0E2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwh9k8c9rCflVDX08CcWg62iDc 3ngK9hcQ0fyDYMFooAm0llvB82w+EsGYPjFijbxzV4F5ePJl7COI0p8fpwSRFTHb nkHXRDR9YW36jTMiJyGnXXFbjHammrGP0+jLcfmCvA34Bx8/vG13uqE48iQZ6Ph4 8r7YshI69mcbw4fVVmIvcrf9WTK+80JMUXibh25kv2FD48Ap450rXBw2GqMGgbNs m/Csf+wXdbkBd7X2OFTfLjl82+VAfJobFdSw3Y2SP5CaF+DAqL6vkuNgXzFuT7LR 7LR8dbhyMsCd9qVXbAcwm8lCp0unF2FAZ6slMr/elNUbeU/ZaftAhazYblhzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBmv4nu7vTlUM73hj7yunhAcpnAwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJXYAeb/mZjzzIO/MMx4KQnmDJTEAJmDmFx 1tSCu/ZiSfJ6Q3vbj9bHoqDCvGY3KR1Qhv7VHrwvvP0WGJfTGl7rMIc1XTZ+rD1/ U1/shyGBzjUExQZidPz6G13Nq7FwDuQx0uJ5L+zZ1wIfuNKb23HSqE+ayRha0tcI ELaz+GlmBpgQNhLNAK8aYYkv430p1/vqcMgdz5BqukZANfZNPZK8/CcQFi9ytsxk XTwwfx6BFvkQlJ/65LT1xewV7EMkiA7cBLj1ZSo/lvIkM4T+kwhuG5p0A6IDiFee j7+bWRAAhJnNxP6rYYx16INdWFTpyjZxKjnLhZ1zcq8bPDuCW8Q= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:22 2026 by rpki-client