This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json) Hash identifier: 4Gdq7hehO2EPmE7Lp8ns5h0O5HC5Il4fcSgYwTtthl0= Subject key identifier: 7E:DC:54:62:5F:78:31:7D:5D:64:39:A3:B8:83:84:3E:A2:82:EE:15 Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 57B090F0C60654B4440AE9B600037D1B6FA979E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft Manifest number: 016A Signing time: Sun 25 Jan 2026 19:41:16 +0000 Manifest this update: Sun 25 Jan 2026 19:36:16 +0000 Manifest next update: Wed 28 Jan 2026 21:30:16 +0000 Files and hashes: 1: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: NkDaIeWsM/gPXaHtYqNr3YcOAUXw5i1dgIsc199+Uh8=) 2: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: yXTkW60GOZZ9N/VIjulkmadt8AvcqAL97NY/DZvxI1Q=) 3: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: XwTy3von9UfcQqdLvssnHX18UIYiFkJwOgDC3XKu89E=) 4: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: Zq+hDXCXg7wPaj3zjswvRtUqEkQkK/KKj4BtXPCkjpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b0:90:f0:c6:06:54:b4:44:0a:e9:b6:00:03:7d:1b:6f:a9:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Jan 25 19:36:16 2026 GMT Not After : Jan 28 21:30:16 2026 GMT Subject: CN=7EDC54625F78317D5D6439A3B883843EA282EE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:d8:89:88:a7:69:9e:df:f4:fc:1e:61:ab: df:cb:9f:9a:8a:b1:22:af:55:a4:72:02:24:a3:95: fe:f8:6a:e0:cd:3c:3c:cf:28:d8:92:c0:13:43:06: 8c:10:39:90:b0:78:cb:af:ac:e8:6b:8d:19:02:55: 5b:b3:af:e7:d3:fd:6c:73:30:41:9e:4c:7d:4d:41: 13:8b:73:e5:a5:4a:d1:0f:90:6d:cb:d0:f0:ee:99: ba:d7:13:f9:1c:a5:45:50:1d:df:d6:31:98:32:eb: 42:d3:cc:7f:5d:72:ed:35:99:8a:b4:51:c5:08:b7: a0:c7:83:3c:5c:5c:dd:70:d1:6e:cc:be:63:0c:8f: f6:21:79:8b:04:17:20:a6:3f:e5:61:f3:a1:a8:11: b0:d8:4a:bf:10:41:e0:83:94:31:d6:9f:2b:93:80: 76:6f:d3:2a:c8:c2:3e:46:7c:0d:a8:2c:d5:47:6b: c5:30:5b:25:65:f6:1e:7a:6b:ee:2f:4c:bf:89:4d: 83:14:15:7f:9d:13:94:93:cd:3e:89:72:18:2a:b4: 56:42:7e:55:e1:ba:3c:bf:6f:10:2b:2e:54:ee:c8: eb:d4:e9:6e:ad:93:12:b4:33:9a:0c:ba:24:9e:a1: d8:98:05:60:a5:fa:a7:11:e5:27:21:10:4e:e0:09: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DC:54:62:5F:78:31:7D:5D:64:39:A3:B8:83:84:3E:A2:82:EE:15 X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:11:ac:74:66:23:53:b3:b6:c3:07:3c:93:24:5a:a9:64:f8: fa:a5:51:80:e3:33:11:d4:94:19:42:61:ee:13:96:c3:f6:fa: 82:8d:97:18:38:fb:0b:35:76:8e:d2:9b:88:2d:8d:81:69:75: 82:ae:59:14:a6:ee:25:c8:65:5c:9f:25:bb:62:fb:13:83:9e: c1:bf:b5:be:83:99:c1:b6:f2:e3:60:be:3b:c6:77:f6:3b:75: 9d:64:e1:ee:76:6e:72:cd:36:d7:4f:c9:54:74:2a:92:a4:18: e9:f9:0c:2c:30:3c:1f:56:f0:e8:cd:15:ff:1f:a9:c9:27:e5: 17:ee:29:aa:c2:20:8b:db:12:90:15:99:8e:9e:bb:65:02:97: ba:28:5e:27:6f:2a:b8:a4:db:e5:fa:cc:fb:31:52:54:6d:6a: 92:05:e9:38:a0:20:27:50:26:05:94:23:91:54:30:72:d0:1e: 56:99:c2:54:37:d1:d8:06:79:91:f1:c2:43:ee:75:be:a6:46: 76:0c:c0:c4:94:07:22:05:2b:8d:4b:05:3b:4a:35:41:68:c2: 55:de:92:3a:94:0c:a0:70:5f:b3:bf:39:96:1b:a9:90:f8:ea: 90:3c:ab:a5:37:7a:b2:42:1c:17:e2:86:73:a5:7d:f9:5f:46: b6:53:4d:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7CQ8MYGVLRECum2AAN9G2+peeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yNjAxMjUxOTM2MTZaFw0yNjAxMjgyMTMwMTZaMDMxMTAvBgNV BAMTKDdFREM1NDYyNUY3ODMxN0Q1RDY0MzlBM0I4ODM4NDNFQTI4MkVFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eNiJiKdpnt/0/B5hq9/Ln5qK sSKvVaRyAiSjlf74auDNPDzPKNiSwBNDBowQOZCweMuvrOhrjRkCVVuzr+fT/Wxz MEGeTH1NQROLc+WlStEPkG3L0PDumbrXE/kcpUVQHd/WMZgy60LTzH9dcu01mYq0 UcUIt6DHgzxcXN1w0W7MvmMMj/YheYsEFyCmP+Vh86GoEbDYSr8QQeCDlDHWnyuT gHZv0yrIwj5GfA2oLNVHa8UwWyVl9h56a+4vTL+JTYMUFX+dE5STzT6JchgqtFZC flXhujy/bxArLlTuyOvU6W6tkxK0M5oMuiSeodiYBWCl+qcR5SchEE7gCZUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftxUYl94MX1dZDmjuIOEPqKC7hUwHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUy NEI2NjRFN0M5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIRrHRmI1OztsMHPJMkWqlk+PqlUYDjMxHU lBlCYe4TlsP2+oKNlxg4+ws1do7Sm4gtjYFpdYKuWRSm7iXIZVyfJbti+xODnsG/ tb6DmcG28uNgvjvGd/Y7dZ1k4e52bnLNNtdPyVR0KpKkGOn5DCwwPB9W8OjNFf8f qckn5RfuKarCIIvbEpAVmY6eu2UCl7ooXidvKrik2+X6zPsxUlRtapIF6TigICdQ JgWUI5FUMHLQHlaZwlQ30dgGeZHxwkPudb6mRnYMwMSUByIFK41LBTtKNUFowlXe kjqUDKBwX7O/OZYbqZD46pA8q6U3erJCHBfihnOlfflfRrZTTS0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:57 2026 by rpki-client