This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: 7TFyuzk0qpUKamcCqmEkK+4uAsBdRacWVB/Ag/6D6hA= Subject key identifier: DA:88:B4:DF:54:3E:AA:FB:CE:E6:69:FF:33:45:B8:16:18:D0:36:98 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 4788F127458185A5E0A70A6568D4401AC41E0786 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 04:42:10 +0000 Manifest this update: Sat 24 Jan 2026 04:37:10 +0000 Manifest next update: Tue 27 Jan 2026 04:51:10 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 2: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 3: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 4: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) 5: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: nTcx7XeF43RO1zqPtrb7i5UgrPmXZtjb1ewOTENemPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:88:f1:27:45:81:85:a5:e0:a7:0a:65:68:d4:40:1a:c4:1e:07:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Jan 24 04:37:10 2026 GMT Not After : Jan 27 04:51:10 2026 GMT Subject: CN=DA88B4DF543EAAFBCEE669FF3345B81618D03698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:a7:77:7a:6d:02:3b:2c:3b:7a:82:e1:43: f0:8b:36:5b:f8:b8:51:c5:50:94:05:d1:4e:d6:ec: ba:fe:f1:00:ac:5b:43:18:a8:7f:3e:06:5a:78:a2: e8:1e:70:41:55:78:ea:b8:e7:e8:da:bd:01:33:0b: 36:07:be:6f:7b:f4:3a:2e:42:e2:b7:8c:ef:a3:0d: 58:2e:bf:31:60:8a:60:dd:ad:03:9f:42:6a:98:ef: 2b:79:a1:26:0e:11:78:d9:a0:5f:67:c4:d8:b8:3a: 75:7e:c7:fd:53:64:ac:d4:a4:37:b5:14:a5:dc:8e: d7:49:c0:af:51:87:5a:f5:6f:1b:7e:ee:d4:07:b4: 01:6b:5a:61:5f:d0:43:bf:96:ea:4c:27:e3:15:34: 1b:8e:1a:13:3f:3e:98:0c:d7:23:e4:b1:3c:40:1b: d8:ad:57:e9:b4:36:ae:1a:be:c6:ca:87:c8:0a:9f: e1:52:9e:ac:7f:0a:dc:69:b5:e0:9f:23:44:2b:06: 3a:6e:5a:5b:44:60:e2:2c:52:ee:4e:64:7e:09:4c: 23:d9:e4:92:6c:cb:9f:eb:75:6a:35:cf:87:2b:15: dc:eb:62:53:f0:b6:c2:3a:58:be:3d:c1:67:1c:54: bd:e5:32:fa:43:2e:61:88:5b:b2:5e:85:50:e9:65: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:B4:DF:54:3E:AA:FB:CE:E6:69:FF:33:45:B8:16:18:D0:36:98 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f9:d3:a0:2f:c1:39:a2:34:96:d2:3d:50:a7:b4:00:82:14: f0:69:5c:21:7f:33:e4:48:99:55:9c:31:78:75:50:d1:53:b2: 83:45:96:ef:f9:55:a1:e7:12:ca:b5:75:af:1a:a9:b1:6a:f1: b2:4d:ab:b1:95:43:e5:48:2e:a3:5f:6f:9e:35:8b:97:e4:28: c6:31:cd:c4:22:da:5a:9d:0d:31:fb:a6:6e:8e:b6:16:d3:31: 88:18:d4:09:f8:31:28:65:4d:80:f2:dc:19:dd:50:74:62:47: 67:34:20:ac:ea:40:0a:c7:fb:99:a1:32:16:31:1c:16:f9:5c: 47:a2:8e:48:cf:1f:cd:48:92:69:eb:ed:c2:6f:5b:db:b0:08: 90:a5:69:24:56:8f:da:05:66:fc:61:2d:c8:e6:40:d1:02:0a: ae:b4:35:b4:d5:15:20:56:65:ff:ee:50:ea:90:a1:86:22:ae: 74:56:15:3e:1f:de:6a:d6:fe:e9:3e:92:30:74:27:6a:ae:ba: 5f:42:b6:e4:01:d8:19:f3:c4:23:23:2e:2b:c7:67:e0:20:bd: 2f:69:4c:8f:e4:17:45:75:18:9d:dd:74:1b:0a:e5:a7:de:07: 48:96:45:f8:e8:88:53:7d:54:b0:6d:bd:b4:2a:3d:da:fe:88: 50:0a:80:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4jxJ0WBhaXgpwplaNRAGsQeB4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNjAxMjQwNDM3MTBaFw0yNjAxMjcwNDUxMTBaMDMxMTAvBgNV BAMTKERBODhCNERGNTQzRUFBRkJDRUU2NjlGRjMzNDVCODE2MThEMDM2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yqd3em0COyw7eoLhQ/CLNlv4 uFHFUJQF0U7W7Lr+8QCsW0MYqH8+Blp4ougecEFVeOq45+javQEzCzYHvm979Dou QuK3jO+jDVguvzFgimDdrQOfQmqY7yt5oSYOEXjZoF9nxNi4OnV+x/1TZKzUpDe1 FKXcjtdJwK9Rh1r1bxt+7tQHtAFrWmFf0EO/lupMJ+MVNBuOGhM/PpgM1yPksTxA G9itV+m0Nq4avsbKh8gKn+FSnqx/CtxpteCfI0QrBjpuWltEYOIsUu5OZH4JTCPZ 5JJsy5/rdWo1z4crFdzrYlPwtsI6WL49wWccVL3lMvpDLmGIW7JehVDpZQ4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oi031Q+qvvO5mn/M0W4FhjQNpgwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP506AvwTmiNJbSPVCntACCFPBpXCF/M+RI mVWcMXh1UNFTsoNFlu/5VaHnEsq1da8aqbFq8bJNq7GVQ+VILqNfb541i5fkKMYx zcQi2lqdDTH7pm6OthbTMYgY1An4MShlTYDy3BndUHRiR2c0IKzqQArH+5mhMhYx HBb5XEeijkjPH81Ikmnr7cJvW9uwCJClaSRWj9oFZvxhLcjmQNECCq60NbTVFSBW Zf/uUOqQoYYirnRWFT4f3mrW/uk+kjB0J2quul9CtuQB2BnzxCMjLivHZ+AgvS9p TI/kF0V1GJ3ddBsK5afeB0iWRfjoiFN9VLBtvbQqPdr+iFAKgLs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:53 2026 by rpki-client