This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: utHrD/8QEMMUWxYOcaFilLkdWSu6EdSuCSgQvy6bXDQ= Subject key identifier: 3A:BB:5D:5F:BE:B9:35:BD:F0:58:02:73:5D:8E:68:03:2F:4C:AB:27 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 2C518C2E5AD1DA3E5E12D0B11E4603CCFB092A24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0266 Signing time: Sun 25 Jan 2026 08:31:18 +0000 Manifest this update: Sun 25 Jan 2026 08:26:18 +0000 Manifest next update: Wed 28 Jan 2026 18:48:18 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: U0EQT2/xYMlEO8m3ZVtKxlZl3aQJKZDT52xMUdqqdqY=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:51:8c:2e:5a:d1:da:3e:5e:12:d0:b1:1e:46:03:cc:fb:09:2a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Jan 25 08:26:18 2026 GMT Not After : Jan 28 18:48:18 2026 GMT Subject: CN=3ABB5D5FBEB935BDF05802735D8E68032F4CAB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:45:a7:d2:86:63:eb:6b:bf:fe:11:68:d7: 07:29:e0:38:a8:fc:eb:5b:01:0a:66:fb:c1:67:92: 3d:53:1d:b5:dc:c4:e2:67:29:aa:88:1f:dd:a5:fb: 6e:22:70:ff:04:81:70:56:a2:c3:99:bb:31:b4:6a: ed:9d:11:4b:01:04:ec:69:d7:73:ac:ea:dc:10:fb: 90:bc:24:d6:b4:84:4c:f3:a7:54:03:47:81:0b:5b: ca:5e:13:80:9b:08:fb:46:3f:cc:2c:82:01:d6:4b: 87:4f:e1:56:8f:ff:2f:b3:3a:29:dd:5d:c2:10:c1: cf:33:0d:21:48:22:2e:c3:70:51:5c:3e:0e:aa:3d: 0c:8c:dc:e6:9b:6b:19:90:17:13:c6:55:28:76:5d: 83:43:13:e2:d0:7c:0c:65:35:ee:9f:e6:77:a7:b3: 15:50:15:9a:4a:8e:9e:43:a2:c3:cf:d4:2f:69:a6: 76:bd:5d:ab:11:97:4c:8b:01:e5:5c:7e:23:38:3a: f5:ad:ab:19:b2:1f:4a:cc:6a:97:a7:81:88:e5:b9: a0:ab:2c:c4:46:7b:ba:dd:e4:23:7c:ea:29:ff:46: bb:77:c8:28:b6:ca:f5:73:66:5f:cf:d0:c8:69:6f: f6:30:84:a3:f8:a1:bf:90:dc:eb:60:33:38:75:2f: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BB:5D:5F:BE:B9:35:BD:F0:58:02:73:5D:8E:68:03:2F:4C:AB:27 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:88:db:26:29:c2:08:e8:2d:3c:03:f2:fb:35:d9:46:1e: cf:3a:6a:83:6f:67:16:59:a2:86:1a:c3:06:d2:c4:eb:7a:ed: 17:b5:3b:cc:3f:5c:be:60:19:67:c5:cf:54:a8:8d:75:c1:79: 6b:93:1d:10:e9:5e:01:5c:64:41:cd:3c:01:a4:07:e9:cc:20: 1f:e0:0a:b6:7d:11:e8:b9:82:29:8e:5e:12:39:fa:9c:47:13: 36:eb:de:9f:c3:d3:be:d0:ec:12:2a:6b:c5:7e:d5:7e:0d:b9: 0a:67:dd:5d:ad:03:d7:43:b9:53:87:66:54:2b:57:eb:05:45: de:ee:48:78:87:b4:02:2f:16:3c:93:86:ff:ed:64:74:a0:fe: 3b:ad:ed:a3:11:83:71:d0:32:a0:13:c3:04:b2:37:c1:26:f9: 60:7a:37:82:27:01:06:1a:28:c5:7c:de:62:81:4b:1c:0f:07: 9b:9c:a6:87:91:34:40:85:19:81:41:46:b5:07:51:39:fd:3c: 34:e7:6f:3e:6a:35:64:31:19:c8:d7:91:f2:89:fe:41:10:83: 4f:b0:4d:bd:71:d2:43:9b:59:43:35:92:9d:d0:b6:1e:8f:a2: 07:ef:70:cf:eb:1e:39:50:9c:ef:4b:70:0a:4a:b5:40:5f:ab: 24:9a:f7:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFGMLlrR2j5eEtCxHkYDzPsJKiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNjAxMjUwODI2MThaFw0yNjAxMjgxODQ4MThaMDMxMTAvBgNV BAMTKDNBQkI1RDVGQkVCOTM1QkRGMDU4MDI3MzVEOEU2ODAzMkY0Q0FCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmUWn0oZj62u//hFo1wcp4Dio /OtbAQpm+8Fnkj1THbXcxOJnKaqIH92l+24icP8EgXBWosOZuzG0au2dEUsBBOxp 13Os6twQ+5C8JNa0hEzzp1QDR4ELW8peE4CbCPtGP8wsggHWS4dP4VaP/y+zOind XcIQwc8zDSFIIi7DcFFcPg6qPQyM3OabaxmQFxPGVSh2XYNDE+LQfAxlNe6f5nen sxVQFZpKjp5DosPP1C9ppna9XasRl0yLAeVcfiM4OvWtqxmyH0rMapengYjluaCr LMRGe7rd5CN86in/Rrt3yCi2yvVzZl/P0Mhpb/YwhKP4ob+Q3OtgMzh1L5eTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrtdX765Nb3wWAJzXY5oAy9MqycwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3piNsmKcII6C08A/L7NdlGHs86aoNvZxZZ ooYawwbSxOt67Re1O8w/XL5gGWfFz1SojXXBeWuTHRDpXgFcZEHNPAGkB+nMIB/g CrZ9Eei5gimOXhI5+pxHEzbr3p/D077Q7BIqa8V+1X4NuQpn3V2tA9dDuVOHZlQr V+sFRd7uSHiHtAIvFjyThv/tZHSg/jut7aMRg3HQMqATwwSyN8Em+WB6N4InAQYa KMV83mKBSxwPB5ucpoeRNECFGYFBRrUHUTn9PDTnbz5qNWQxGcjXkfKJ/kEQg0+w Tb1x0kObWUM1kp3Qth6PogfvcM/rHjlQnO9LcApKtUBfqySa978= -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:54 2026 by rpki-client