This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: 1BDmphGD8IlBYVqo2GEPLvX/3tGdQjKWHW35eFvvGQU= Subject key identifier: CB:CF:D7:A3:62:E2:C6:25:74:79:58:17:97:D9:0D:3D:C3:5F:96:75 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 45C2DF628CD754596866E15C72661275BB32C84D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 016E Signing time: Sat 24 Jan 2026 02:22:31 +0000 Manifest this update: Sat 24 Jan 2026 02:17:31 +0000 Manifest next update: Tue 27 Jan 2026 05:21:31 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: JyCqeCvpBUAwfJqD40gWl9ETrI0DBUuucNV4PEen/Jg=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) 3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c2:df:62:8c:d7:54:59:68:66:e1:5c:72:66:12:75:bb:32:c8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Jan 24 02:17:31 2026 GMT Not After : Jan 27 05:21:31 2026 GMT Subject: CN=CBCFD7A362E2C6257479581797D90D3DC35F9675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:02:78:e9:6a:ae:e6:1c:e9:93:b4:3a:ff: 77:46:f7:25:7c:ee:99:ac:8b:53:52:af:72:28:3d: 48:73:a6:86:3b:da:ee:95:e8:1c:20:d4:51:9f:41: 43:72:5b:ce:ce:c4:1a:7d:06:55:c5:25:53:fc:fe: 26:22:85:d6:2c:c3:f3:90:5c:30:44:6a:c5:f9:dc: 85:cc:c9:a0:16:68:9a:66:f6:b2:ff:9a:ab:87:47: 77:21:b1:b3:1e:8b:8c:02:b1:ed:57:80:54:52:30: b6:a1:31:02:9c:b8:a7:21:4f:6f:e5:7b:1f:48:8d: fe:48:0d:e0:77:96:50:f4:c9:42:ee:f6:91:c9:24: 37:54:d1:a3:1b:55:09:f6:5c:97:74:3e:a4:68:e2: a8:8a:55:e6:23:8e:e4:f8:18:71:6d:26:bd:36:dc: 4b:24:68:9c:58:99:36:fd:e2:19:2a:35:93:ce:4a: db:1f:f0:f9:4f:9c:73:3c:49:00:c4:6d:1a:90:44: 42:83:59:81:71:81:a0:37:20:aa:12:0b:1b:2a:f4: 04:40:b1:1d:a3:cf:8e:fd:32:b2:c4:8a:50:2e:27: d4:00:5e:15:64:9c:d5:41:88:ce:ac:51:71:44:8c: 92:61:30:e0:60:50:d8:ce:7a:94:16:02:97:8f:a8: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CF:D7:A3:62:E2:C6:25:74:79:58:17:97:D9:0D:3D:C3:5F:96:75 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:30:ef:13:8e:40:97:7d:02:7f:58:f0:5a:4e:54:26:6a:4c: 79:d2:b9:9b:90:7a:f4:41:33:73:08:4c:22:06:51:f6:54:8f: 46:6c:4b:98:a9:a3:01:17:5f:fd:cd:1b:4e:20:17:54:73:03: 08:1a:d9:03:7e:40:9b:02:43:01:43:77:49:b5:4e:3b:e8:14: 02:63:70:fb:ca:5d:fe:43:71:1f:15:b5:c7:ee:0a:29:0c:a6: f5:bd:2f:dd:04:13:d5:f3:e9:b9:b5:60:eb:df:22:a5:71:98: 27:e0:b6:96:ff:cf:98:47:6a:ce:75:2e:da:b2:dd:8c:c3:77: 00:b7:c9:9b:d8:9b:95:fa:14:43:da:db:06:27:cb:ff:d7:fb: 95:9b:f7:f1:4e:a2:b4:30:52:58:44:45:f1:6d:24:d4:50:45: bd:7d:47:ee:dc:e0:14:a0:b7:56:67:cc:19:0a:d9:57:32:2a: d7:22:61:97:46:f3:f9:b2:e2:38:39:c9:10:6b:3b:1a:66:51: 33:04:a8:64:3a:c1:47:9d:ba:25:f3:d5:7a:87:74:a7:3c:70: 86:6c:5b:43:97:1b:84:1e:35:48:a0:82:c3:a4:90:35:47:1c: a8:d3:5e:70:60:57:36:87:27:6b:85:5c:c2:cd:32:0c:32:27: d2:bb:00:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcLfYozXVFloZuFccmYSdbsyyE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNjAxMjQwMjE3MzFaFw0yNjAxMjcwNTIxMzFaMDMxMTAvBgNV BAMTKENCQ0ZEN0EzNjJFMkM2MjU3NDc5NTgxNzk3RDkwRDNEQzM1Rjk2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrQJ46Wqu5hzpk7Q6/3dG9yV8 7pmsi1NSr3IoPUhzpoY72u6V6Bwg1FGfQUNyW87OxBp9BlXFJVP8/iYihdYsw/OQ XDBEasX53IXMyaAWaJpm9rL/mquHR3chsbMei4wCse1XgFRSMLahMQKcuKchT2/l ex9Ijf5IDeB3llD0yULu9pHJJDdU0aMbVQn2XJd0PqRo4qiKVeYjjuT4GHFtJr02 3EskaJxYmTb94hkqNZPOStsf8PlPnHM8SQDEbRqQREKDWYFxgaA3IKoSCxsq9ARA sR2jz479MrLEilAuJ9QAXhVknNVBiM6sUXFEjJJhMOBgUNjOepQWApePqO03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy8/Xo2LixiV0eVgXl9kNPcNflnUwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIw7xOOQJd9An9Y8FpOVCZqTHnSuZuQevRB M3MITCIGUfZUj0ZsS5ipowEXX/3NG04gF1RzAwga2QN+QJsCQwFDd0m1TjvoFAJj cPvKXf5DcR8VtcfuCikMpvW9L90EE9Xz6bm1YOvfIqVxmCfgtpb/z5hHas51Ltqy 3YzDdwC3yZvYm5X6FEPa2wYny//X+5Wb9/FOorQwUlhERfFtJNRQRb19R+7c4BSg t1ZnzBkK2VcyKtciYZdG8/my4jg5yRBrOxpmUTMEqGQ6wUeduiXz1XqHdKc8cIZs W0OXG4QeNUiggsOkkDVHHKjTXnBgVzaHJ2uFXMLNMgwyJ9K7AE8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:06 2026 by rpki-client