This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: zUIdE2MKz3TNx5cGO22QQmIl3yDv6i3TXXUbFSBdLfI= Subject key identifier: 50:27:F4:E0:F9:73:6E:A2:EF:CE:8C:03:15:FF:11:CF:27:B6:B8:EB Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 014B9E5498C41DB01D5394C0A1866CE88F0757F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 04BE Signing time: Sat 24 Jan 2026 14:22:29 +0000 Manifest this update: Sat 24 Jan 2026 14:17:29 +0000 Manifest next update: Tue 27 Jan 2026 15:18:29 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: fLwHMIH/vU7AkQotJjP3osM+3ftPfOz4Ax6O8v+xPvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4b:9e:54:98:c4:1d:b0:1d:53:94:c0:a1:86:6c:e8:8f:07:57:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Jan 24 14:17:29 2026 GMT Not After : Jan 27 15:18:29 2026 GMT Subject: CN=5027F4E0F9736EA2EFCE8C0315FF11CF27B6B8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fa:11:e1:3f:57:94:47:9e:95:36:f5:01:31: d5:eb:bb:f0:a3:b8:53:58:5c:f0:12:e9:9b:94:ce: 73:32:d4:9d:68:76:31:fc:ed:19:7f:da:45:01:35: 4b:74:91:c1:ee:9e:fa:f5:39:22:17:62:19:6a:d4: 63:1a:18:ee:68:fa:51:e4:4a:2b:4f:18:c5:3e:2c: 46:b6:1f:7e:45:57:b0:7a:53:6b:a7:0a:44:01:11: a3:1e:b4:33:35:42:10:ef:a5:21:19:ab:bf:3d:90: 1f:ed:fd:4c:b6:91:32:9b:33:b1:ad:a2:33:63:62: 9d:b0:94:3c:da:0a:3f:5b:05:7f:06:b5:a0:e9:be: 75:ff:3d:6b:c1:a6:d9:d2:3b:d1:38:cd:e3:70:f0: 48:c2:b7:fc:a7:a5:71:95:f9:0c:67:d3:51:fc:c3: e9:53:d7:26:c7:13:e6:8a:39:f9:9d:1f:3d:a6:df: a3:89:43:4e:42:74:af:35:c7:05:dd:58:79:5a:66: 2d:5d:90:11:b6:ee:81:57:c7:5f:ec:76:09:d3:b9: 9d:c4:50:10:8a:48:97:76:51:d1:66:44:b4:d5:1b: ac:87:59:11:88:8c:c3:c5:2a:fd:72:a8:0a:7e:51: b4:52:d5:69:b6:14:92:62:ff:61:58:60:a1:09:0b: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:27:F4:E0:F9:73:6E:A2:EF:CE:8C:03:15:FF:11:CF:27:B6:B8:EB X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:20:66:66:11:d8:c7:cc:4c:37:b7:f6:76:d0:8c:89:62:7f: 8e:4c:08:0b:0f:d2:54:91:3c:3d:a9:c5:26:70:ff:ea:5e:ae: 34:a8:32:6c:06:ca:10:d2:ee:f4:f1:48:38:fe:05:16:1e:aa: 97:96:e1:02:2a:b1:bb:1f:d4:dd:4f:85:84:a1:20:50:a0:55: 6d:78:df:47:71:63:31:9d:4f:4b:96:39:77:dc:2b:ee:d7:74: 8e:af:96:91:d3:83:ac:c5:bb:44:22:bc:47:0d:b4:ac:ba:d6: 62:46:45:77:af:83:97:0e:21:12:82:eb:25:3d:23:08:a1:e0: 96:e3:9e:6c:48:91:55:3e:9d:45:5c:7f:58:15:61:2c:7b:3d: e8:05:37:5d:8f:8c:ec:0f:e6:f2:5d:92:85:38:0d:b5:9d:db: 4e:f6:9c:6d:a6:f4:5c:a9:d8:97:b9:40:e0:5a:2f:ed:e4:76: f3:82:96:06:11:cd:4f:d6:a2:3a:fe:a5:df:8e:3a:92:8c:f2: 19:97:b8:f9:76:9f:a5:d5:49:d9:e4:57:d8:0a:bb:46:10:e7: 47:f4:d7:6d:e2:09:92:03:e0:49:93:1d:83:e0:c6:c9:4b:ad: 1e:9b:df:31:92:4e:39:93:fd:55:39:62:35:20:04:0f:89:4b: 9c:fa:3a:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUueVJjEHbAdU5TAoYZs6I8HV/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNjAxMjQxNDE3MjlaFw0yNjAxMjcxNTE4MjlaMDMxMTAvBgNV BAMTKDUwMjdGNEUwRjk3MzZFQTJFRkNFOEMwMzE1RkYxMUNGMjdCNkI4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+hHhP1eUR56VNvUBMdXru/Cj uFNYXPAS6ZuUznMy1J1odjH87Rl/2kUBNUt0kcHunvr1OSIXYhlq1GMaGO5o+lHk SitPGMU+LEa2H35FV7B6U2unCkQBEaMetDM1QhDvpSEZq789kB/t/Uy2kTKbM7Gt ojNjYp2wlDzaCj9bBX8GtaDpvnX/PWvBptnSO9E4zeNw8EjCt/ynpXGV+Qxn01H8 w+lT1ybHE+aKOfmdHz2m36OJQ05CdK81xwXdWHlaZi1dkBG27oFXx1/sdgnTuZ3E UBCKSJd2UdFmRLTVG6yHWRGIjMPFKv1yqAp+UbRS1Wm2FJJi/2FYYKEJC33pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUCf04PlzbqLvzowDFf8Rzye2uOswHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEgZmYR2MfMTDe39nbQjIlif45MCAsP0lSR PD2pxSZw/+perjSoMmwGyhDS7vTxSDj+BRYeqpeW4QIqsbsf1N1PhYShIFCgVW14 30dxYzGdT0uWOXfcK+7XdI6vlpHTg6zFu0QivEcNtKy61mJGRXevg5cOIRKC6yU9 Iwih4JbjnmxIkVU+nUVcf1gVYSx7PegFN12PjOwP5vJdkoU4DbWd2072nG2m9Fyp 2Je5QOBaL+3kdvOClgYRzU/Wojr+pd+OOpKM8hmXuPl2n6XVSdnkV9gKu0YQ50f0 123iCZID4EmTHYPgxslLrR6b3zGSTjmT/VU5YjUgBA+JS5z6On8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:32 2026 by rpki-client