This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft File: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft (raw, json) Hash identifier: XH7Cv6GXOY6jDG0Y5gHHUvvFV/+2+bGdU1Xk57pEJAc= Subject key identifier: 37:30:3B:D1:37:BA:9E:C5:1E:FE:28:E7:46:C1:EA:05:87:16:F4:B4 Authority key identifier: 49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 Certificate issuer: /CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Certificate serial: 4B9519146E0226BC8F3A816025E680C4B69D9D3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft Manifest number: 0543 Signing time: Sat 24 Jan 2026 16:41:11 +0000 Manifest this update: Sat 24 Jan 2026 16:36:11 +0000 Manifest next update: Tue 27 Jan 2026 23:21:11 +0000 Files and hashes: 1: 3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (hash: /239pszFQR401waeO1nbymytBG2YD4EpQ6fMJcBK450=) 2: 490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl (hash: Pr8PAT8IBkvN1YLziysULXe1eOlWdFwvq1ShuaQACMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:95:19:14:6e:02:26:bc:8f:3a:81:60:25:e6:80:c4:b6:9d:9d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490A06B20F6192568F1FE75F8A39FCE7E2AC87F5 Validity Not Before: Jan 24 16:36:11 2026 GMT Not After : Jan 27 23:21:11 2026 GMT Subject: CN=37303BD137BA9EC51EFE28E746C1EA058716F4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:45:57:3f:b6:8e:61:39:12:0e:ea:10:2a: d7:71:5c:b1:62:a4:57:87:ed:71:f6:db:53:f8:63: b2:59:66:c8:d9:93:a4:ed:2f:4f:a5:ef:dd:94:76: c6:de:9f:cd:90:0d:4d:1b:5f:84:0b:9a:05:33:4e: d6:b9:8d:4d:a4:95:7f:93:5c:be:11:b6:a0:6a:9a: 98:95:2d:4d:71:62:fa:13:55:0e:cc:0a:e9:6c:bc: 70:33:6c:4b:af:cd:5b:fc:41:03:ae:cc:7d:45:54: ad:03:c0:cb:15:2c:9f:29:f4:5c:f2:d8:51:26:0c: aa:76:1c:d4:50:b3:ee:e7:c6:89:8d:25:a3:64:b6: b8:15:eb:83:e6:df:f6:66:31:d2:aa:8d:a9:9b:bb: 39:df:13:c6:5e:f2:5d:34:4d:bc:92:06:51:1f:ca: 8d:6d:70:20:e7:94:5f:f6:af:a9:3c:35:b0:9e:d1: 66:c2:92:5e:10:79:95:87:1e:f8:cf:d4:71:61:18: e0:8e:90:3b:5d:4d:f3:ae:87:90:42:1b:0b:a1:77: 66:33:f2:eb:46:06:cc:18:d5:41:f1:29:b9:df:12: e1:ad:14:59:07:6e:66:50:2e:0b:7f:6f:87:52:54: cc:76:b2:1f:4f:5c:74:6d:00:95:62:6a:9d:19:47: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:3B:D1:37:BA:9E:C5:1E:FE:28:E7:46:C1:EA:05:87:16:F4:B4 X509v3 Authority Key Identifier: keyid:49:0A:06:B2:0F:61:92:56:8F:1F:E7:5F:8A:39:FC:E7:E2:AC:87:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/490A06B20F6192568F1FE75F8A39FCE7E2AC87F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:87:d6:f4:d4:9b:cd:b4:c5:eb:4e:c0:74:47:36:d7:56:cd: 75:e7:af:7c:72:34:2c:ca:2f:b5:6f:2b:77:b6:2c:38:24:c3: 6a:ce:7a:f6:7d:70:75:46:11:1b:e3:1e:26:fa:b0:3f:96:8e: d2:cb:45:03:16:43:01:97:52:57:89:8f:97:04:4b:92:99:da: 57:7d:13:36:b2:6b:a0:c2:32:5d:e3:6f:2b:d8:c0:9a:4f:34: 56:0f:75:89:d1:dd:34:6b:38:69:79:95:9c:a7:93:17:61:cc: b0:f2:07:df:a0:9c:bd:36:74:0a:55:e2:0e:97:b0:0a:5c:cd: 67:3f:df:3b:70:8e:34:ef:17:4b:35:01:7b:8b:4d:ec:da:45: f3:25:de:8e:61:f6:26:c7:23:f0:73:d7:67:89:bd:83:9a:39: c5:6c:eb:a2:73:1c:55:95:59:33:aa:d8:6d:1e:d6:b6:d7:f3: a1:61:60:66:e2:d4:ff:53:31:4c:b5:d0:0b:87:87:84:18:20: 6d:b7:55:20:66:a7:ea:1e:e3:ba:d8:55:d7:ef:0b:d2:8f:5d: d2:be:64:4b:b2:2c:e5:6c:99:de:0d:25:eb:69:94:aa:2c:d9: 1c:2b:b5:51:68:59:8d:21:7f:09:9d:62:e5:77:31:9d:7c:c9: 96:d0:27:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5UZFG4CJryPOoFgJeaAxLadnTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdF MkFDODdGNTAeFw0yNjAxMjQxNjM2MTFaFw0yNjAxMjcyMzIxMTFaMDMxMTAvBgNV BAMTKDM3MzAzQkQxMzdCQTlFQzUxRUZFMjhFNzQ2QzFFQTA1ODcxNkY0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr6UVXP7aOYTkSDuoQKtdxXLFi pFeH7XH221P4Y7JZZsjZk6TtL0+l792Udsben82QDU0bX4QLmgUzTta5jU2klX+T XL4RtqBqmpiVLU1xYvoTVQ7MCulsvHAzbEuvzVv8QQOuzH1FVK0DwMsVLJ8p9Fzy 2FEmDKp2HNRQs+7nxomNJaNktrgV64Pm3/ZmMdKqjambuznfE8Ze8l00TbySBlEf yo1tcCDnlF/2r6k8NbCe0WbCkl4QeZWHHvjP1HFhGOCOkDtdTfOuh5BCGwuhd2Yz 8utGBswY1UHxKbnfEuGtFFkHbmZQLgt/b4dSVMx2sh9PXHRtAJViap0ZR5y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNzA70Te6nsUe/ijnRsHqBYcW9LQwHwYDVR0j BBgwFoAUSQoGsg9hklaPH+dfijn85+Ksh/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFjMzU2Mi1kNTQ5LTQzY2UtODUxZi1mZTkyNDcyN2Y5MTgvMC80OTBBMDZCMjBG NjE5MjU2OEYxRkU3NUY4QTM5RkNFN0UyQUM4N0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZDRTdFMkFD ODdGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhYzM1NjItZDU0OS00M2NlLTg1 MWYtZmU5MjQ3MjdmOTE4LzAvNDkwQTA2QjIwRjYxOTI1NjhGMUZFNzVGOEEzOUZD RTdFMkFDODdGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2H1vTUm820xetOwHRHNtdWzXXnr3xyNCzK L7VvK3e2LDgkw2rOevZ9cHVGERvjHib6sD+WjtLLRQMWQwGXUleJj5cES5KZ2ld9 Ezaya6DCMl3jbyvYwJpPNFYPdYnR3TRrOGl5lZynkxdhzLDyB9+gnL02dApV4g6X sApczWc/3ztwjjTvF0s1AXuLTezaRfMl3o5h9ibHI/Bz12eJvYOaOcVs66JzHFWV WTOq2G0e1rbX86FhYGbi1P9TMUy10AuHh4QYIG23VSBmp+oe47rYVdfvC9KPXdK+ ZEuyLOVsmd4NJetplKos2RwrtVFoWY0hfwmdYuV3MZ18yZbQJ7s= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:36 2026 by rpki-client