This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: RVCSmL9ZAAQwXIHjpmqsUdYaEuxDuMOYvv8QH4WM3mY= Subject key identifier: 5E:29:29:2D:C6:F2:37:95:D8:5F:0D:8F:E3:36:FD:E4:76:9D:B6:4F Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 28C606F1FCB0234A4A369DB4686670356B82F267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 0230 Signing time: Sun 25 Jan 2026 09:11:33 +0000 Manifest this update: Sun 25 Jan 2026 09:06:33 +0000 Manifest next update: Wed 28 Jan 2026 12:30:33 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: jme/aSE7m+M93+4yazxWHLH6deAhECvm6KUkZ5WbBxQ=) 4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c6:06:f1:fc:b0:23:4a:4a:36:9d:b4:68:66:70:35:6b:82:f2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Jan 25 09:06:33 2026 GMT Not After : Jan 28 12:30:33 2026 GMT Subject: CN=5E29292DC6F23795D85F0D8FE336FDE4769DB64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:93:6c:08:8f:47:cc:cc:7c:a3:c1:a2:89: 90:00:0d:7e:5e:9a:0c:e1:b0:7c:bd:17:92:8f:97: 03:3c:3b:44:be:e6:87:50:10:2d:0f:46:10:bf:e9: ea:3f:96:ef:b7:c9:8c:6b:78:f9:76:2d:ce:8e:16: 16:46:4c:f3:8d:14:c1:02:df:0b:c7:46:34:bb:6a: 22:ba:e5:f3:d3:fc:a6:17:4e:80:18:bd:be:7d:75: 83:93:1d:69:a1:74:2a:8a:67:1a:ff:be:c4:99:77: fc:62:d2:bd:f1:f9:f9:55:98:84:30:b0:8b:20:44: 7e:c4:5c:e7:2a:e6:8e:f2:36:14:c9:a7:f0:88:75: 37:c0:aa:43:a9:8e:aa:e8:17:e1:9d:9a:18:87:8f: 67:73:3c:1a:aa:fe:1d:cb:0f:c5:23:2d:1d:35:1e: 60:82:34:0a:a3:03:e3:6e:7e:a3:e4:c4:c8:59:3c: ea:83:c1:09:a2:0b:a9:c9:e1:09:4b:4b:f5:6a:e7: 7d:37:5c:e1:f4:c6:8a:07:58:fa:3c:51:e5:75:76: 0f:4d:b7:e9:b9:47:67:fc:ce:d7:3b:80:1f:b7:27: 91:ac:fd:ad:a0:a2:23:87:6c:e4:06:8e:fa:18:c9: 5e:62:26:68:b7:58:87:9d:ba:36:81:39:b0:ae:17: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:29:29:2D:C6:F2:37:95:D8:5F:0D:8F:E3:36:FD:E4:76:9D:B6:4F X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:66:c7:d4:17:1d:2b:dc:96:51:d7:fa:bb:d8:2f:42:2d:58: 21:c5:42:fd:f1:8d:ad:58:dd:0a:b5:c6:d6:ea:47:65:7c:c2: 0c:05:c8:19:a4:71:41:29:9d:db:f8:99:8b:e7:37:8c:f8:b4: 49:87:cf:86:0f:0f:f4:d4:d2:b6:4e:0a:8e:a1:2e:76:dc:df: ca:e6:be:9e:69:61:7d:55:1e:96:58:cc:57:d0:f4:a7:20:3a: 18:c3:bc:04:90:e7:8f:30:eb:95:e6:a1:c0:dd:bb:e4:ad:b0: 2a:59:e4:1a:ca:7d:f6:80:07:e0:22:44:12:bc:6d:f9:df:f2: 34:fd:9a:3f:05:8e:4b:68:d6:b8:97:08:27:89:9d:8f:11:90: 1c:cd:ee:ec:ca:78:ae:70:68:ad:85:e5:b9:95:c3:1b:2b:b4: 83:8a:31:24:dd:2d:ad:81:ba:54:b0:08:62:58:a2:fc:c9:f2: 3d:ad:e3:18:ae:18:97:91:c1:13:3c:dc:71:a7:d3:98:96:5b: f8:b3:ba:d1:67:74:dd:95:40:84:88:26:4a:5b:28:bc:7d:ab: 25:30:00:55:33:12:5a:b8:63:5d:c2:ab:4f:1f:04:9c:0b:55: 1a:ed:ae:75:c5:b8:62:5b:2f:21:03:4f:d1:92:73:bb:7f:5a: 99:43:51:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMYG8fywI0pKNp20aGZwNWuC8mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNjAxMjUwOTA2MzNaFw0yNjAxMjgxMjMwMzNaMDMxMTAvBgNV BAMTKDVFMjkyOTJEQzZGMjM3OTVEODVGMEQ4RkUzMzZGREU0NzY5REI2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfZNsCI9HzMx8o8GiiZAADX5e mgzhsHy9F5KPlwM8O0S+5odQEC0PRhC/6eo/lu+3yYxrePl2Lc6OFhZGTPONFMEC 3wvHRjS7aiK65fPT/KYXToAYvb59dYOTHWmhdCqKZxr/vsSZd/xi0r3x+flVmIQw sIsgRH7EXOcq5o7yNhTJp/CIdTfAqkOpjqroF+GdmhiHj2dzPBqq/h3LD8UjLR01 HmCCNAqjA+NufqPkxMhZPOqDwQmiC6nJ4QlLS/Vq5303XOH0xooHWPo8UeV1dg9N t+m5R2f8ztc7gB+3J5Gs/a2goiOHbOQGjvoYyV5iJmi3WIedujaBObCuF8qtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXikpLcbyN5XYXw2P4zb95Hadtk8wHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxmx9QXHSvcllHX+rvYL0ItWCHFQv3xja1Y 3Qq1xtbqR2V8wgwFyBmkcUEpndv4mYvnN4z4tEmHz4YPD/TU0rZOCo6hLnbc38rm vp5pYX1VHpZYzFfQ9KcgOhjDvASQ548w65XmocDdu+StsCpZ5BrKffaAB+AiRBK8 bfnf8jT9mj8Fjkto1riXCCeJnY8RkBzN7uzKeK5waK2F5bmVwxsrtIOKMSTdLa2B ulSwCGJYovzJ8j2t4xiuGJeRwRM83HGn05iWW/izutFndN2VQISIJkpbKLx9qyUw AFUzElq4Y13Cq08fBJwLVRrtrnXFuGJbLyEDT9GSc7t/WplDUa0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:39 2026 by rpki-client