This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: o0C1mzh5QY7+6ZuZPTQa6deGVnNak8/9BLlxxIvDHbA= Subject key identifier: BC:46:A5:4F:6C:B1:5F:15:A4:3D:CF:6F:A7:7E:A7:24:51:93:70:00 Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 5AEB5568029C4E3F6E74C8935D3176D8C7B5775C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 0317 Signing time: Fri 23 Jan 2026 19:51:16 +0000 Manifest this update: Fri 23 Jan 2026 19:46:16 +0000 Manifest next update: Tue 27 Jan 2026 01:22:16 +0000 Files and hashes: 1: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: wEdCO3YyXLUpfkiKLdOWDdPh+9yeo9Z0D5c9ufB6gOc=) 2: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: RvlNgfW0J+bVY7d2yjeoXrc2sRB1/6Dnvn34DHTz4kU=) 3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: 0qCM2olgS4oE+YIGItrwN9xQiW2Tx+5S0Vcz+QMGK2k=) 4: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: IUj7O12mMiJEeYNCzDhLue8h7ZGw15QnC+H0OPK5qXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:eb:55:68:02:9c:4e:3f:6e:74:c8:93:5d:31:76:d8:c7:b5:77:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: Jan 23 19:46:16 2026 GMT Not After : Jan 27 01:22:16 2026 GMT Subject: CN=BC46A54F6CB15F15A43DCF6FA77EA72451937000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:e8:e3:e6:02:23:6a:20:44:0e:3f:17:3a: 04:3f:17:9c:46:e0:32:50:fb:3a:b8:a5:70:ab:77: 30:66:ac:9a:15:50:08:db:d5:bf:fb:10:bf:44:a4: 38:82:57:cc:4a:b0:92:44:42:7f:dd:69:b1:60:0e: 38:71:b9:13:2c:6a:90:74:5d:f1:85:cc:48:9d:9c: 64:bc:c0:0d:d2:f2:f2:55:ac:d4:65:f5:4e:b7:dc: 4c:9c:cf:0a:c1:f7:d5:7e:31:fc:0c:6a:3c:67:2e: d9:3b:5c:c0:e8:53:b0:44:7b:b8:75:73:93:ce:f1: 78:8b:66:94:70:92:65:ed:9c:c6:07:de:0e:13:5b: ed:a0:87:e9:7e:c7:e1:a8:b1:3c:23:79:fe:9a:d1: df:dc:30:32:8a:0d:6d:9e:1c:01:24:d7:77:d4:ec: dd:f3:70:cd:d8:76:a2:87:70:2b:8b:2a:cd:f9:91: f9:43:67:c0:04:fb:d8:c1:c7:ff:c3:72:9c:6f:04: 42:40:aa:90:d2:2e:dc:25:12:7b:41:1b:81:84:c8: 99:63:cc:b0:8c:03:92:f5:7b:c8:30:0b:f7:dd:76: 57:3e:52:d4:e1:b5:d3:65:24:62:e4:ff:38:e3:33: 18:e9:10:07:c6:6e:3a:90:fa:4a:09:1a:9c:4f:5b: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:A5:4F:6C:B1:5F:15:A4:3D:CF:6F:A7:7E:A7:24:51:93:70:00 X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:da:6c:62:fc:01:fa:c8:aa:23:ad:27:c7:35:f1:4a:e2:39: 33:8a:5f:49:c7:f0:35:bb:68:d9:15:d4:c5:5e:3a:3d:42:ed: 1d:90:ef:8c:96:23:b4:38:4f:31:a9:31:33:fa:f2:48:af:1d: 92:fb:24:de:99:4a:ae:fe:1a:91:07:b6:c8:92:38:64:39:c1: 79:eb:8c:30:09:9b:57:5a:6a:d1:87:6a:3b:f8:62:e7:b8:6a: 11:21:28:9f:5d:aa:d1:f9:6a:59:65:87:14:2f:0b:91:16:43: 0e:4b:eb:00:4a:c4:66:57:0f:a6:c0:87:be:09:49:64:1d:19: 1a:09:75:81:96:0d:68:5f:86:7a:33:30:61:b7:5d:e5:90:a8: 9c:04:ae:71:98:f6:35:b3:a7:a7:50:ac:74:4b:fc:b5:21:12: 99:36:8b:c6:67:62:e3:fd:1d:3e:bf:47:1b:9e:32:58:04:f6: 1e:bd:2f:aa:47:eb:ce:06:fd:62:67:56:4e:da:86:2a:7d:f4: 7e:00:66:b9:83:a3:d4:84:95:de:96:8b:6b:96:ae:b0:89:9c: ee:e5:b2:8d:c6:5d:e6:7a:16:a2:44:2b:6c:c3:55:4d:36:71: 17:10:ea:cf:ba:ed:fa:aa:97:e8:13:ac:1e:83:d9:84:74:7b: c1:b3:30:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWutVaAKcTj9udMiTXTF22Me1d1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNjAxMjMxOTQ2MTZaFw0yNjAxMjcwMTIyMTZaMDMxMTAvBgNV BAMTKEJDNDZBNTRGNkNCMTVGMTVBNDNEQ0Y2RkE3N0VBNzI0NTE5MzcwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXejj5gIjaiBEDj8XOgQ/F5xG 4DJQ+zq4pXCrdzBmrJoVUAjb1b/7EL9EpDiCV8xKsJJEQn/dabFgDjhxuRMsapB0 XfGFzEidnGS8wA3S8vJVrNRl9U633EyczwrB99V+MfwMajxnLtk7XMDoU7BEe7h1 c5PO8XiLZpRwkmXtnMYH3g4TW+2gh+l+x+GosTwjef6a0d/cMDKKDW2eHAEk13fU 7N3zcM3YdqKHcCuLKs35kflDZ8AE+9jBx//DcpxvBEJAqpDSLtwlEntBG4GEyJlj zLCMA5L1e8gwC/fddlc+UtThtdNlJGLk/zjjMxjpEAfGbjqQ+koJGpxPWyddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEalT2yxXxWkPc9vp36nJFGTcAAwHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXabGL8AfrIqiOtJ8c18UriOTOKX0nH8DW7 aNkV1MVeOj1C7R2Q74yWI7Q4TzGpMTP68kivHZL7JN6ZSq7+GpEHtsiSOGQ5wXnr jDAJm1daatGHajv4Yue4ahEhKJ9dqtH5alllhxQvC5EWQw5L6wBKxGZXD6bAh74J SWQdGRoJdYGWDWhfhnozMGG3XeWQqJwErnGY9jWzp6dQrHRL/LUhEpk2i8ZnYuP9 HT6/RxueMlgE9h69L6pH684G/WJnVk7ahip99H4AZrmDo9SEld6Wi2uWrrCJnO7l so3GXeZ6FqJEK2zDVU02cRcQ6s+67fqql+gTrB6D2YR0e8GzMM4= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:48 2026 by rpki-client