This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft File: 483F366E1FE9C068ED4417FD71D5B18420D56B62.mft (raw, json) Hash identifier: g2UzvqVu4b5J1rAFphpeuBrDhybudXj+FlisHwprCD0= Subject key identifier: 28:C3:5D:82:64:DC:09:58:B3:CE:1A:EC:A9:7A:82:C2:01:9C:CF:24 Authority key identifier: 48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62 Certificate issuer: /CN=483F366E1FE9C068ED4417FD71D5B18420D56B62 Certificate serial: 021544709E8FCB10DDB26FC8FCB9801022826DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft Manifest number: 0509 Signing time: Sun 25 Jan 2026 00:40:47 +0000 Manifest this update: Sun 25 Jan 2026 00:35:47 +0000 Manifest next update: Wed 28 Jan 2026 01:55:47 +0000 Files and hashes: 1: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: nJfbDfnLQ0hPzTdK1jvw4RWKNmgPHIKJaKdLROAz98U=) 2: 483F366E1FE9C068ED4417FD71D5B18420D56B62.crl (hash: 3CTEb0R1C8xhhZar33p3zvAePo5D18GqYoX2de4/I6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:15:44:70:9e:8f:cb:10:dd:b2:6f:c8:fc:b9:80:10:22:82:6d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=483F366E1FE9C068ED4417FD71D5B18420D56B62 Validity Not Before: Jan 25 00:35:47 2026 GMT Not After : Jan 28 01:55:47 2026 GMT Subject: CN=28C35D8264DC0958B3CE1AECA97A82C2019CCF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:53:fa:8a:f6:3c:f8:0f:a2:18:99:e1:a4: d7:d0:9a:35:7e:fe:17:d4:0b:87:be:32:54:95:1f: be:4a:bb:ae:21:82:e8:07:ef:78:8f:3f:03:0c:8c: 3a:d2:35:06:65:03:94:1c:4a:c0:5e:67:80:03:1e: 3a:eb:24:69:40:db:77:a8:65:53:32:97:8c:e1:9c: 36:e5:93:75:b7:a7:6b:00:8c:af:c2:07:38:58:1d: d3:a1:bf:c7:57:22:94:45:f4:d7:1f:85:39:aa:2b: 31:43:05:3e:82:c6:ac:f4:1f:d2:2d:ea:e3:99:b3: 53:21:13:4e:56:bb:c9:42:76:42:9a:85:86:d7:f7: 08:e5:2d:14:9c:b1:b4:47:a2:72:58:f7:a4:41:b6: ce:ba:92:9e:4b:d1:31:0f:51:94:c2:b7:70:8b:cd: bc:fd:ed:b9:f9:6b:0f:d7:f6:57:e9:f6:23:cf:3e: a4:95:6c:3a:76:07:dd:36:41:08:2a:00:96:7e:ae: 88:85:eb:ec:f8:e4:da:3c:79:3c:f1:3b:7d:30:3a: 61:19:bb:95:e3:54:57:0c:f2:6c:0c:12:87:61:82: a7:95:4f:55:a9:4e:f9:b4:f3:53:7b:d8:e2:f5:80: 14:54:77:3f:62:bc:33:d2:9d:46:98:07:2e:79:91: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C3:5D:82:64:DC:09:58:B3:CE:1A:EC:A9:7A:82:C2:01:9C:CF:24 X509v3 Authority Key Identifier: keyid:48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:74:08:45:3c:b6:c2:14:41:db:e4:9e:2a:38:c2:1b:55:ae: 56:1c:65:fa:e4:e3:bb:99:42:3d:d6:f2:5c:89:ed:5e:9f:78: ff:7e:75:12:76:0b:ea:82:3e:3f:c3:f8:cf:5c:0c:ba:e3:bb: 7e:7b:8d:2b:2d:1b:6e:4d:28:f6:7e:1a:dd:0f:0c:0e:57:66: d9:24:0f:af:ed:63:ec:51:a7:93:52:43:a8:05:dc:ec:9b:55: 11:93:51:1d:68:23:08:64:9e:9a:50:ff:d4:d0:63:ab:af:71: 3b:c2:c0:02:f5:5c:a7:19:ae:55:b1:e4:99:6d:9e:25:f7:ef: 46:af:1d:34:ea:d5:76:b5:1e:30:0c:65:42:7e:4f:36:43:4f: f1:3e:fb:1c:b0:fe:5a:2b:9b:e3:d8:98:e7:1a:ef:46:2f:0c: 29:4c:75:7c:9c:50:98:df:6b:57:08:12:c8:7f:cd:7a:5b:ef: f0:49:eb:38:a1:21:e0:bc:15:f5:33:20:5c:c0:56:9a:bd:ff: 35:ff:21:cc:88:a5:36:4d:d6:64:77:c8:11:58:36:31:5a:b3: e7:57:66:20:cb:63:d2:2e:ef:d4:28:0f:17:26:be:88:88:31: 75:68:da:57:00:6a:91:44:4c:23:39:a3:34:b6:08:b2:30:3f: 7d:75:c8:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhVEcJ6PyxDdsm/I/LmAECKCbdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIxODQy MEQ1NkI2MjAeFw0yNjAxMjUwMDM1NDdaFw0yNjAxMjgwMTU1NDdaMDMxMTAvBgNV BAMTKDI4QzM1RDgyNjREQzA5NThCM0NFMUFFQ0E5N0E4MkMyMDE5Q0NGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWFP6ivY8+A+iGJnhpNfQmjV+ /hfUC4e+MlSVH75Ku64hgugH73iPPwMMjDrSNQZlA5QcSsBeZ4ADHjrrJGlA23eo ZVMyl4zhnDblk3W3p2sAjK/CBzhYHdOhv8dXIpRF9NcfhTmqKzFDBT6Cxqz0H9It 6uOZs1MhE05Wu8lCdkKahYbX9wjlLRScsbRHonJY96RBts66kp5L0TEPUZTCt3CL zbz97bn5aw/X9lfp9iPPPqSVbDp2B902QQgqAJZ+roiF6+z45No8eTzxO30wOmEZ u5XjVFcM8mwMEodhgqeVT1WpTvm081N72OL1gBRUdz9ivDPSnUaYBy55kcNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMNdgmTcCVizzhrsqXqCwgGczyQwHwYDVR0j BBgwFoAUSD82bh/pwGjtRBf9cdWxhCDVa2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmYyYWQ0Zi1hNzJhLTQ2ZDEtYmQ3ZC1hNTYwYzMxZWZjYWQvMC80ODNGMzY2RTFG RTlDMDY4RUQ0NDE3RkQ3MUQ1QjE4NDIwRDU2QjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIxODQyMEQ1 NkI2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJmMmFkNGYtYTcyYS00NmQxLWJk N2QtYTU2MGMzMWVmY2FkLzAvNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIx ODQyMEQ1NkI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR0CEU8tsIUQdvknio4whtVrlYcZfrk47uZ Qj3W8lyJ7V6feP9+dRJ2C+qCPj/D+M9cDLrju357jSstG25NKPZ+Gt0PDA5XZtkk D6/tY+xRp5NSQ6gF3OybVRGTUR1oIwhknppQ/9TQY6uvcTvCwAL1XKcZrlWx5Jlt niX370avHTTq1Xa1HjAMZUJ+TzZDT/E++xyw/lorm+PYmOca70YvDClMdXycUJjf a1cIEsh/zXpb7/BJ6zihIeC8FfUzIFzAVpq9/zX/IcyIpTZN1mR3yBFYNjFas+dX ZiDLY9Iu79QoDxcmvoiIMXVo2lcAapFETCM5ozS2CLIwP311yP0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:44 2026 by rpki-client