This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: sMB580c3tzgCop0H62zqo7IQclkcjXJrTXs8zVKg/sY= Subject key identifier: 7A:A9:1A:87:0B:2D:3C:18:AA:66:A5:4F:1D:E7:65:EF:85:E4:4A:68 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 19A1C421449DFEF5B319FE851E9A80E5A9DA2878 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 0540 Signing time: Sat 24 Jan 2026 00:32:04 +0000 Manifest this update: Sat 24 Jan 2026 00:27:04 +0000 Manifest next update: Tue 27 Jan 2026 11:17:04 +0000 Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: VU8aewyjzq2AYRn/AxX4KNN9MCg2XSh/07PYP4YW+KQ=) 2: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: o5PBQNC7IUVZRXbNA+bINI3LXUdMwHv532R/ek7HOG0=) 3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a1:c4:21:44:9d:fe:f5:b3:19:fe:85:1e:9a:80:e5:a9:da:28:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Jan 24 00:27:04 2026 GMT Not After : Jan 27 11:17:04 2026 GMT Subject: CN=7AA91A870B2D3C18AA66A54F1DE765EF85E44A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:f7:2a:25:5b:d9:9f:1c:a7:70:72:9b:b3: c6:d3:db:a4:86:bd:44:fb:5d:9a:e5:98:ea:be:54: f2:6c:29:30:db:8c:26:bb:7b:82:59:53:ca:32:3d: ee:72:6d:a5:80:6b:89:1e:61:e4:5a:e4:84:4a:bf: d1:88:ca:37:aa:9e:5a:b2:9c:eb:40:7f:90:a0:a8: 55:58:8e:76:76:60:13:08:4c:ae:d2:cc:60:9e:34: 26:d4:fa:e8:c2:2f:3a:d9:bc:d0:98:bd:0d:4a:fe: 2a:96:b9:f6:1a:e6:90:c6:9a:3f:e1:43:c8:6b:98: d3:13:64:a9:9f:ea:d3:f1:58:19:51:73:9a:c6:1b: 70:72:7a:4b:45:99:3c:d0:8b:a6:5b:a3:6a:38:80: 7e:c8:dd:6c:89:98:72:fd:60:f3:fd:1c:26:82:e7: 9f:0c:8f:ed:cb:00:5c:8b:e1:09:75:5b:07:5f:e1: ba:69:3a:af:f2:80:27:05:ef:45:b3:d8:d2:05:8e: a7:e1:b0:3e:e4:a1:57:92:9c:4f:43:11:dd:b9:75: 89:b5:85:54:f3:e6:e4:59:06:3a:fd:de:88:92:69: c0:de:b7:6c:73:68:a4:e0:08:a9:24:64:c6:c9:a9: 7b:cf:e7:0d:d2:94:c4:3b:2e:ba:15:70:5d:06:b9: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A9:1A:87:0B:2D:3C:18:AA:66:A5:4F:1D:E7:65:EF:85:E4:4A:68 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:5f:45:55:03:fa:2f:5d:b7:fe:7f:73:ce:9e:25:c1:ad:02: 5d:db:29:70:e6:98:f2:0c:88:e6:5e:73:43:32:bb:04:d8:3b: 1c:53:4f:ea:1e:bc:56:29:99:ed:60:05:b3:14:be:e7:a0:f3: 48:d1:01:6f:2d:52:8e:09:ed:b9:1a:cf:d3:c4:82:06:3c:f6: 98:9d:bc:47:30:ae:95:8a:ac:50:27:7c:a2:ff:f5:9c:a4:56: 3f:b3:ca:1d:24:f6:65:fe:c5:8d:d2:69:16:28:37:32:81:7c: d5:95:35:9a:2d:c8:1a:25:cd:b8:7d:6e:f3:9d:03:f6:75:6f: 48:99:72:22:ee:2f:8e:19:60:b9:bf:2b:26:90:ca:9f:04:d5: fd:63:8d:a7:f9:98:dd:42:af:89:9e:f8:b1:e0:45:e3:40:99: 8f:14:fd:b9:a9:0a:94:09:a5:a0:fd:0a:f2:ab:90:6c:c7:e6: 30:66:1e:07:5c:f2:64:27:cf:fe:19:e1:a2:3d:ac:42:07:9e: aa:22:7e:d5:42:d0:c2:8d:42:11:30:33:19:70:36:66:e2:65: 14:98:d7:1c:3c:49:c6:40:7b:ab:ba:30:2a:0e:c0:e7:cf:45: 32:31:aa:da:b7:ef:ed:f8:61:72:91:6a:74:3f:b8:76:95:a0: f6:c9:1d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaHEIUSd/vWzGf6FHpqA5anaKHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNjAxMjQwMDI3MDRaFw0yNjAxMjcxMTE3MDRaMDMxMTAvBgNV BAMTKDdBQTkxQTg3MEIyRDNDMThBQTY2QTU0RjFERTc2NUVGODVFNDRBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbPcqJVvZnxyncHKbs8bT26SG vUT7XZrlmOq+VPJsKTDbjCa7e4JZU8oyPe5ybaWAa4keYeRa5IRKv9GIyjeqnlqy nOtAf5CgqFVYjnZ2YBMITK7SzGCeNCbU+ujCLzrZvNCYvQ1K/iqWufYa5pDGmj/h Q8hrmNMTZKmf6tPxWBlRc5rGG3ByektFmTzQi6Zbo2o4gH7I3WyJmHL9YPP9HCaC 558Mj+3LAFyL4Ql1Wwdf4bppOq/ygCcF70Wz2NIFjqfhsD7koVeSnE9DEd25dYm1 hVTz5uRZBjr93oiSacDet2xzaKTgCKkkZMbJqXvP5w3SlMQ7LroVcF0GuRntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqkahwstPBiqZqVPHedl74XkSmgwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJfRVUD+i9dt/5/c86eJcGtAl3bKXDmmPIM iOZec0MyuwTYOxxTT+oevFYpme1gBbMUvueg80jRAW8tUo4J7bkaz9PEggY89pid vEcwrpWKrFAnfKL/9ZykVj+zyh0k9mX+xY3SaRYoNzKBfNWVNZotyBolzbh9bvOd A/Z1b0iZciLuL44ZYLm/KyaQyp8E1f1jjaf5mN1Cr4me+LHgReNAmY8U/bmpCpQJ paD9CvKrkGzH5jBmHgdc8mQnz/4Z4aI9rEIHnqoiftVC0MKNQhEwMxlwNmbiZRSY 1xw8ScZAe6u6MCoOwOfPRTIxqtq37+34YXKRanQ/uHaVoPbJHSo= -----END CERTIFICATE-----Generated at Mon Jan 26 03:49:02 2026 by rpki-client