This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: b+o4Clh/HBZVgS4QCyBwTnXgXWkrfZjUg99rEWYgXko= Subject key identifier: 4C:34:A4:23:3B:37:45:C7:EA:75:01:EE:27:6D:1F:98:30:F8:28:95 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 5A5D7C08A2A0E203325B6DFBB91F4DF6132FECF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 0549 Signing time: Sat 24 Jan 2026 10:21:56 +0000 Manifest this update: Sat 24 Jan 2026 10:16:56 +0000 Manifest next update: Tue 27 Jan 2026 20:59:56 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: 1LTnBrc0fN4EwwDKaj24Od+SF8cdktiRIfymNtWV8/M=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5d:7c:08:a2:a0:e2:03:32:5b:6d:fb:b9:1f:4d:f6:13:2f:ec:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Jan 24 10:16:56 2026 GMT Not After : Jan 27 20:59:56 2026 GMT Subject: CN=4C34A4233B3745C7EA7501EE276D1F9830F82895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:8a:2b:0b:19:bf:57:cd:4f:d3:dd:9e:65: bb:74:64:87:94:ce:1c:50:58:53:ef:5b:60:4c:87: 9b:94:23:cd:f4:91:1f:8a:b7:dd:ea:64:15:ab:a7: a4:7a:fc:a5:b8:7a:49:e0:93:f8:5d:0b:c2:6c:b1: 88:36:44:c5:39:ff:21:55:1d:c8:51:57:3b:6d:0d: 66:68:e9:c4:f7:9e:12:f1:3b:ec:99:6f:28:38:36: 2c:40:7c:d4:ab:c3:ed:5a:8a:34:5b:9e:2e:b6:4d: a3:ae:fa:67:ed:82:c4:10:d3:42:aa:f0:8b:5b:0f: 53:50:4d:31:64:c4:3b:87:37:d0:cf:6f:83:de:41: f4:b9:8e:d4:cc:39:4a:99:35:1f:dd:ff:5b:75:8e: 1c:d4:75:b7:34:74:78:c9:e5:2d:77:aa:5f:81:2d: 8a:72:25:bb:9d:3f:a5:2a:7a:4a:c0:3e:d9:0d:50: 58:0d:b2:61:01:77:cb:98:f4:89:d3:99:ca:da:1a: d9:e3:64:db:bf:76:48:cb:92:8e:56:94:48:43:3a: a2:aa:05:44:02:18:f0:70:04:ed:ce:64:4e:77:a7: 9b:73:2b:6a:0b:9a:1d:10:57:72:34:17:24:48:e0: d2:98:b2:ea:4e:31:b5:96:05:a3:4c:ea:55:de:af: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:34:A4:23:3B:37:45:C7:EA:75:01:EE:27:6D:1F:98:30:F8:28:95 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3a:bb:a4:ab:37:39:40:df:3d:0b:07:2a:c6:59:15:71:8a: 32:7b:fc:d6:10:60:fc:97:9e:a2:2b:20:75:6a:df:ad:49:7d: 1c:b5:f8:47:47:5c:87:0a:f0:9f:3d:39:cc:3c:de:11:92:4d: f1:89:cb:29:3e:cc:23:52:63:63:dd:fd:0e:e3:87:9b:8a:36: dc:c8:a8:01:44:dd:3a:78:00:c0:10:5b:3a:06:0d:c3:24:47: 8c:c6:df:34:74:93:21:d6:f8:f5:5b:04:b2:35:3d:fb:b2:20: 51:b7:d7:7f:ad:c6:9e:0e:64:49:ab:bc:f7:2e:37:e0:61:fb: be:b9:b6:52:36:30:03:20:20:72:ed:de:eb:b2:8d:03:1a:db: 3b:d6:2d:6c:e4:d7:81:8a:5d:e6:00:4f:f4:b7:a6:07:6f:4f: c1:ee:ad:da:62:98:c9:39:e6:ca:15:c8:dc:82:05:b5:ae:66: 72:eb:39:1c:3a:b9:8e:8b:40:b7:3f:92:52:8c:76:26:6f:a0: e0:eb:07:b5:2f:c7:e1:b9:ef:db:50:59:67:c1:30:23:6f:a1: 4e:be:dd:16:04:c8:a6:76:25:2b:e7:3a:c1:b4:6e:b3:75:ee: d6:fd:9d:d5:b0:a7:a5:a1:e7:31:b7:6f:0c:b9:7a:47:d8:b5: a2:46:09:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl18CKKg4gMyW237uR9N9hMv7PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNjAxMjQxMDE2NTZaFw0yNjAxMjcyMDU5NTZaMDMxMTAvBgNV BAMTKDRDMzRBNDIzM0IzNzQ1QzdFQTc1MDFFRTI3NkQxRjk4MzBGODI4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo9IorCxm/V81P092eZbt0ZIeU zhxQWFPvW2BMh5uUI830kR+Kt93qZBWrp6R6/KW4ekngk/hdC8JssYg2RMU5/yFV HchRVzttDWZo6cT3nhLxO+yZbyg4NixAfNSrw+1aijRbni62TaOu+mftgsQQ00Kq 8ItbD1NQTTFkxDuHN9DPb4PeQfS5jtTMOUqZNR/d/1t1jhzUdbc0dHjJ5S13ql+B LYpyJbudP6UqekrAPtkNUFgNsmEBd8uY9InTmcraGtnjZNu/dkjLko5WlEhDOqKq BUQCGPBwBO3OZE53p5tzK2oLmh0QV3I0FyRI4NKYsupOMbWWBaNM6lXer6CVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDSkIzs3RcfqdQHuJ20fmDD4KJUwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA6u6SrNzlA3z0LByrGWRVxijJ7/NYQYPyX nqIrIHVq361JfRy1+EdHXIcK8J89Ocw83hGSTfGJyyk+zCNSY2Pd/Q7jh5uKNtzI qAFE3Tp4AMAQWzoGDcMkR4zG3zR0kyHW+PVbBLI1PfuyIFG313+txp4OZEmrvPcu N+Bh+765tlI2MAMgIHLt3uuyjQMa2zvWLWzk14GKXeYAT/S3pgdvT8HurdpimMk5 5soVyNyCBbWuZnLrORw6uY6LQLc/klKMdiZvoODrB7Uvx+G579tQWWfBMCNvoU6+ 3RYEyKZ2JSvnOsG0brN17tb9ndWwp6Wh5zG3bwy5ekfYtaJGCbQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:09 2026 by rpki-client