This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft File: 49E141888BC2948405FED00F49F101FAF7483662.mft (raw, json) Hash identifier: ilcNXD6hi0dK9S7MAMyu/dET9t1ZTAT7o2NV36tslh0= Subject key identifier: 3C:EA:5F:8A:2B:EF:1F:D0:A6:24:75:09:45:06:AA:42:18:61:6C:DF Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 35CB84686575C49BBAF7DBC0F377810ECDA1C324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft Manifest number: F4 Signing time: Fri 23 Jan 2026 14:20:54 +0000 Manifest this update: Fri 23 Jan 2026 14:15:54 +0000 Manifest next update: Tue 27 Jan 2026 02:05:54 +0000 Files and hashes: 1: 49E141888BC2948405FED00F49F101FAF7483662.crl (hash: 9Ey23W8WUo8+6OsLD25xpnVbhSKOF9U4ggwGeRg1twk=) 2: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww=) 3: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cb:84:68:65:75:c4:9b:ba:f7:db:c0:f3:77:81:0e:cd:a1:c3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Jan 23 14:15:54 2026 GMT Not After : Jan 27 02:05:54 2026 GMT Subject: CN=3CEA5F8A2BEF1FD0A62475094506AA4218616CDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:14:af:7e:11:0f:c5:68:fd:a2:ac:78:ff: 65:08:6e:37:01:4a:5e:54:f8:61:e7:e0:6b:c3:5c: f7:b4:61:95:41:3f:ed:5c:d4:99:af:cc:03:f5:d9: f3:8b:dc:53:4a:09:41:5a:b4:e8:57:e3:1a:50:2d: 42:45:f4:10:8c:c5:1e:ac:46:85:72:62:04:97:18: c7:a9:c0:6d:d5:ff:66:69:db:2e:c1:2d:c4:84:c2: 10:01:04:a6:bc:21:fc:5a:d1:b0:0d:89:08:11:42: 12:f6:a9:7d:1b:f6:ef:42:dc:ea:7d:3e:1d:40:c8: 1f:1b:88:e6:c1:0e:51:94:74:3b:59:f8:9f:91:fc: cc:28:fb:2a:4c:b3:7d:c5:74:e0:6b:c9:b0:95:e9: 0b:e9:fb:fb:af:68:ae:0d:8d:ef:12:72:eb:e0:f6: ad:b9:32:f8:fd:7e:1f:a2:4a:a3:1e:a3:f4:97:29: 6b:76:91:b2:53:4a:f8:7c:fd:aa:72:85:f7:8d:d4: b0:96:83:03:73:a2:2a:4a:59:49:7a:99:c7:1f:1c: 2f:0a:89:0a:48:cb:6d:66:e0:f3:f5:dc:e9:65:8b: 1e:0f:9e:24:9c:a5:ce:88:55:74:54:c7:6b:e4:92: e4:37:30:80:64:85:32:ba:f0:21:05:c0:c3:c3:7b: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:5F:8A:2B:EF:1F:D0:A6:24:75:09:45:06:AA:42:18:61:6C:DF X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:ba:7d:3c:53:11:4d:f0:e4:42:77:39:c9:88:41:0c:7c:72: 7e:e3:0e:94:5c:c8:da:2b:9d:d3:09:98:89:ce:af:f6:ec:06: 58:2c:94:17:ec:2d:07:73:11:e8:38:95:30:1e:05:aa:c2:54: 61:10:9a:79:a1:6d:14:83:c9:3a:e9:e3:6e:5d:86:5b:c1:eb: 2b:47:a3:df:4d:00:66:2b:63:c1:aa:77:22:a9:c7:4f:b9:6f: d3:83:e2:5e:72:cf:8c:6c:cf:18:2f:f2:77:71:c8:2b:b5:3e: 06:50:1d:06:40:f2:05:9a:8b:4f:4c:e9:8b:42:45:76:55:a1: f0:cb:c4:a9:b0:ec:df:81:47:28:5f:5a:6f:2f:41:0f:36:33: 29:88:65:44:dd:9c:93:40:ac:2f:3b:da:d3:9b:bb:b2:f0:c0: 31:bc:7a:89:62:09:ea:4d:0c:f2:81:32:2a:60:7c:f3:58:86: a4:08:be:c3:a0:aa:7a:83:b7:5b:e2:e7:0d:08:66:54:4a:69: 7e:91:b4:b6:7a:22:9b:99:ec:b8:9f:9e:42:8e:ac:66:b7:79: 41:21:e8:bf:e7:12:9e:af:49:14:4a:f4:13:89:a8:ca:72:c7: b0:dc:e4:a9:09:f4:e0:9f:78:01:4e:e2:68:36:75:73:b7:6e: 82:45:94:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcuEaGV1xJu699vA83eBDs2hwyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNjAxMjMxNDE1NTRaFw0yNjAxMjcwMjA1NTRaMDMxMTAvBgNV BAMTKDNDRUE1RjhBMkJFRjFGRDBBNjI0NzUwOTQ1MDZBQTQyMTg2MTZDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ohSvfhEPxWj9oqx4/2UIbjcB Sl5U+GHn4GvDXPe0YZVBP+1c1JmvzAP12fOL3FNKCUFatOhX4xpQLUJF9BCMxR6s RoVyYgSXGMepwG3V/2Zp2y7BLcSEwhABBKa8Ifxa0bANiQgRQhL2qX0b9u9C3Op9 Ph1AyB8biObBDlGUdDtZ+J+R/Mwo+ypMs33FdOBrybCV6Qvp+/uvaK4Nje8Scuvg 9q25Mvj9fh+iSqMeo/SXKWt2kbJTSvh8/apyhfeN1LCWgwNzoipKWUl6mccfHC8K iQpIy21m4PP13Ollix4PniScpc6IVXRUx2vkkuQ3MIBkhTK68CEFwMPDe30vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOpfiivvH9CmJHUJRQaqQhhhbN8wHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAx RkFGNzQ4MzY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANC6fTxTEU3w5EJ3OcmIQQx8cn7jDpRcyNor ndMJmInOr/bsBlgslBfsLQdzEeg4lTAeBarCVGEQmnmhbRSDyTrp425dhlvB6ytH o99NAGYrY8GqdyKpx0+5b9OD4l5yz4xszxgv8ndxyCu1PgZQHQZA8gWai09M6YtC RXZVofDLxKmw7N+BRyhfWm8vQQ82MymIZUTdnJNArC872tObu7LwwDG8eoliCepN DPKBMipgfPNYhqQIvsOgqnqDt1vi5w0IZlRKaX6RtLZ6IpuZ7LifnkKOrGa3eUEh 6L/nEp6vSRRK9BOJqMpyx7Dc5KkJ9OCfeAFO4mg2dXO3boJFlPY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:42 2026 by rpki-client