This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: z5toGN/jyOzLoi19lSd1bZNTTpPq6z79PqvDwYC9R24= Subject key identifier: 0C:C9:48:53:EF:02:84:69:D7:F4:84:AA:E9:95:73:09:AD:B7:63:86 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 6369BE66AC471C6F2F9308C76065C4B61C68C41E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 0250 Signing time: Sat 24 Jan 2026 05:31:31 +0000 Manifest this update: Sat 24 Jan 2026 05:26:31 +0000 Manifest next update: Tue 27 Jan 2026 06:16:31 +0000 Files and hashes: 1: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: gw0Npu5dUCYIdLRnY4O6ohg14CPAihSxN1rXYL1z3Ps=) 2: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:69:be:66:ac:47:1c:6f:2f:93:08:c7:60:65:c4:b6:1c:68:c4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Jan 24 05:26:31 2026 GMT Not After : Jan 27 06:16:31 2026 GMT Subject: CN=0CC94853EF028469D7F484AAE9957309ADB76386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:1b:e9:82:c3:58:d0:ea:e3:c4:82:81:0e: af:a6:ab:c8:86:6c:78:e2:df:1e:cd:5b:1c:7e:d0: 50:86:3d:70:a0:95:60:ae:e6:b5:40:c5:4f:b4:96: a5:19:d3:46:c3:32:6a:72:3f:cc:c2:1c:08:b7:91: 28:c7:41:48:97:cf:d7:27:f8:bf:09:f5:5c:63:33: 3b:4e:ce:f3:26:24:e9:89:0b:2d:5b:2c:5a:46:12: a3:9f:e9:6f:e0:cf:fd:dd:be:b7:1c:97:47:33:3c: b2:3e:d8:a7:c0:70:0e:49:93:a2:5a:d6:8d:53:c7: 5b:57:ce:8b:0f:b1:11:55:f8:b6:8c:03:5e:fd:2f: 49:f5:d7:27:cf:2d:dd:65:ff:3f:98:b8:55:29:3b: cf:6b:71:f0:83:c2:02:2e:65:02:6b:15:41:e3:79: a8:ca:f6:b7:4b:26:70:22:8a:28:7b:10:03:63:05: c2:15:5f:36:85:65:05:2c:2a:da:a5:8a:b8:ee:59: a1:24:cf:2e:8e:8e:29:33:39:5c:67:f1:89:ef:f7: f2:b3:c5:5c:35:2c:20:1b:57:17:db:97:f5:65:a0: 79:b8:1f:37:38:8e:3f:11:91:a7:65:91:21:15:b0: f7:e0:c1:f7:82:98:f6:f1:d9:03:c0:3c:ea:bf:e6: 88:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:48:53:EF:02:84:69:D7:F4:84:AA:E9:95:73:09:AD:B7:63:86 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c6:7a:32:bf:51:5c:f1:f6:e6:9d:43:e1:eb:bf:ee:3c:c9: b5:9a:37:a3:d0:d8:da:ea:8e:b3:3f:1f:09:3b:28:ec:3b:e9: 7f:f2:5a:c1:39:51:bb:7f:47:f5:9b:c2:df:5b:97:0b:dc:c8: 62:94:80:f5:04:8b:f5:ba:ea:70:c5:8c:d0:f7:17:01:16:d2: 5c:6b:ec:a2:9c:e3:9f:b8:5b:fd:69:cd:f0:60:cd:5f:eb:94: 63:c3:46:c4:83:ab:ec:d6:ae:cf:7d:dd:09:af:27:4a:d3:c3: d8:f9:40:3a:ad:0e:0d:61:a5:51:1c:dd:f0:d1:6e:e7:e3:b5: 76:eb:9e:96:da:12:75:fc:f6:8b:e9:94:08:0e:3b:f5:dd:0a: 93:59:a7:e8:b3:b9:44:90:e8:f3:21:4c:45:97:99:0f:12:03: af:05:33:61:4a:df:8a:45:dd:d3:40:dd:62:4a:4d:12:94:8a: 96:b2:31:be:7e:f0:10:61:cb:65:66:03:57:4b:0e:5c:f8:b4: 35:63:11:dc:fd:26:80:15:a5:10:db:17:fa:aa:80:c3:4c:2f: e3:06:11:17:79:af:21:59:3c:36:f5:6f:1a:8a:81:58:53:04: 17:4a:d5:6e:20:ba:8d:7b:f4:ad:d3:1c:82:ca:e5:ac:b7:63: dd:5a:86:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2m+ZqxHHG8vkwjHYGXEthxoxB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNjAxMjQwNTI2MzFaFw0yNjAxMjcwNjE2MzFaMDMxMTAvBgNV BAMTKDBDQzk0ODUzRUYwMjg0NjlEN0Y0ODRBQUU5OTU3MzA5QURCNzYzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3xvpgsNY0OrjxIKBDq+mq8iG bHji3x7NWxx+0FCGPXCglWCu5rVAxU+0lqUZ00bDMmpyP8zCHAi3kSjHQUiXz9cn +L8J9VxjMztOzvMmJOmJCy1bLFpGEqOf6W/gz/3dvrccl0czPLI+2KfAcA5Jk6Ja 1o1Tx1tXzosPsRFV+LaMA179L0n11yfPLd1l/z+YuFUpO89rcfCDwgIuZQJrFUHj eajK9rdLJnAiiih7EANjBcIVXzaFZQUsKtqlirjuWaEkzy6OjikzOVxn8Ynv9/Kz xVw1LCAbVxfbl/VloHm4Hzc4jj8RkadlkSEVsPfgwfeCmPbx2QPAPOq/5ojBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMlIU+8ChGnX9ISq6ZVzCa23Y4YwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjGejK/UVzx9uadQ+Hrv+48ybWaN6PQ2Nrq jrM/Hwk7KOw76X/yWsE5Ubt/R/Wbwt9blwvcyGKUgPUEi/W66nDFjND3FwEW0lxr 7KKc45+4W/1pzfBgzV/rlGPDRsSDq+zWrs993QmvJ0rTw9j5QDqtDg1hpVEc3fDR bufjtXbrnpbaEnX89ovplAgOO/XdCpNZp+izuUSQ6PMhTEWXmQ8SA68FM2FK34pF 3dNA3WJKTRKUipayMb5+8BBhy2VmA1dLDlz4tDVjEdz9JoAVpRDbF/qqgMNML+MG ERd5ryFZPDb1bxqKgVhTBBdK1W4guo179K3THILK5ay3Y91ahgQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:40 2026 by rpki-client