This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft File: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft (raw, json) Hash identifier: YufwsxpC7PAZYScOBIP6lDltzr/Rd1soUyUfmcPYIRU= Subject key identifier: 80:8E:A3:3D:55:0D:6A:AD:C8:D8:B4:9C:5C:7A:59:ED:49:B1:98:57 Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 0624DC73B3A26CC67876CA2F9ADA3019F711CF8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft Manifest number: D3 Signing time: Sun 25 Jan 2026 14:11:50 +0000 Manifest this update: Sun 25 Jan 2026 14:06:50 +0000 Manifest next update: Wed 28 Jan 2026 22:34:50 +0000 Files and hashes: 1: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: qv3evecT8eZzX3bUVJHE05QFEmJ8YwvyFd0dQ0gXUtc=) 2: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: jCMcTRKT9AZJevifSXh6jid95wyd/fIpOWD7LnrfE5Y=) 3: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: Lj0hcqeyTQssBrCkzs3hGKwcyyQ8e4rZksVRkWRzAgo=) 4: 48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl (hash: 1OU40Ah1YNsiQzoZTVNT06Nwbp1ojYlhwEB72tLPkk4=) 5: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: RRjpYe+sCryGtP2L5KYhg6i9BBg+veNKIMjpWUEXvlQ=) 6: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: d7SZXhA3MtIvsZoPKAEFGlIFwwbXCkHUGIXlm7+3ws0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:24:dc:73:b3:a2:6c:c6:78:76:ca:2f:9a:da:30:19:f7:11:cf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Jan 25 14:06:50 2026 GMT Not After : Jan 28 22:34:50 2026 GMT Subject: CN=808EA33D550D6AADC8D8B49C5C7A59ED49B19857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:71:68:e0:e0:40:62:f5:44:79:ee:7c:5a: 0b:39:fc:0b:86:74:55:dc:e9:4e:87:80:3a:06:e8: 4d:4b:2b:10:aa:41:67:2d:b1:f8:ba:bd:f4:3b:6e: 53:3d:02:46:27:b5:ad:ed:ee:97:60:35:d9:e1:82: af:6a:d8:e5:6c:4d:b3:ec:ac:c0:56:bd:46:d0:61: 1c:50:c3:be:db:13:de:69:e8:20:2a:05:c9:9f:62: 11:09:d3:7e:15:cc:8e:40:de:3e:90:ca:59:9c:3d: 66:3f:95:5d:59:42:47:5b:fc:53:ba:b6:b5:ff:ee: a6:3b:e8:df:3d:f1:25:92:27:98:29:02:f0:1d:20: bb:9a:1d:af:ca:30:0f:cd:f7:02:dd:43:23:5a:d4: ed:7e:1b:c5:e4:74:6a:b0:95:a6:78:24:97:f6:be: 58:da:04:5f:16:45:05:2b:fd:2f:f0:c2:7f:3f:84: d0:9b:eb:26:8a:be:7f:44:77:00:11:a6:ea:8d:d7: 5c:b0:28:d2:75:8f:83:f4:f5:86:9e:fc:31:22:e9: b5:8c:ca:b4:66:26:7e:94:d0:ea:26:6a:13:b7:23: 59:84:69:01:1a:34:b8:73:1c:11:ed:a6:cb:7f:40: 94:6d:b6:be:3a:9b:6b:f9:a7:0c:6b:5f:36:4c:66: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8E:A3:3D:55:0D:6A:AD:C8:D8:B4:9C:5C:7A:59:ED:49:B1:98:57 X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:21:c4:e9:64:7c:21:c6:5f:ad:ce:b2:c4:71:c9:0b:af:dc: 6d:7c:39:15:a1:c3:52:aa:5a:33:bd:2a:0f:d4:c5:80:15:bf: b8:74:34:7e:6e:30:8c:f0:7e:52:e4:03:b4:d4:fc:e5:b8:88: 4a:5e:b4:da:1a:b9:93:e1:55:0b:d4:31:85:b7:83:7a:1e:1b: 8e:fe:11:2c:58:32:0a:ab:a7:73:1c:11:76:4f:d4:eb:7c:5e: ef:c3:04:8c:12:90:5a:72:61:d5:54:3c:6a:a6:8e:1d:99:78: 6f:52:00:7b:f5:9d:9c:db:48:39:c7:17:e2:25:a7:8d:b7:24: 02:9c:b3:76:6c:7f:a7:d1:e3:6b:86:49:c4:77:18:70:5b:1f: 11:e4:de:63:e9:97:c3:2d:2c:43:c6:1e:d5:f8:76:da:b1:de: 62:ea:34:d7:6f:5a:be:3c:61:22:5f:41:51:8a:0c:a2:25:09: dc:fd:c1:c5:d1:57:45:63:5d:f7:97:ae:12:be:04:e8:4a:1b: 2a:af:be:1d:df:d6:c6:2c:0b:b5:bb:c3:74:17:00:a7:1b:1a: 17:25:cb:ca:f2:fd:32:c7:c8:05:3b:74:2b:01:7c:fb:af:b6: 4b:4d:7b:d9:c5:8c:5f:ca:66:12:c4:61:c3:65:af:a0:8c:c5: 4d:4e:75:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiTcc7OibMZ4dsovmtowGfcRz4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNjAxMjUxNDA2NTBaFw0yNjAxMjgyMjM0NTBaMDMxMTAvBgNV BAMTKDgwOEVBMzNENTUwRDZBQURDOEQ4QjQ5QzVDN0E1OUVENDlCMTk4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqY3Fo4OBAYvVEee58Wgs5/AuG dFXc6U6HgDoG6E1LKxCqQWctsfi6vfQ7blM9AkYnta3t7pdgNdnhgq9q2OVsTbPs rMBWvUbQYRxQw77bE95p6CAqBcmfYhEJ034VzI5A3j6QylmcPWY/lV1ZQkdb/FO6 trX/7qY76N898SWSJ5gpAvAdILuaHa/KMA/N9wLdQyNa1O1+G8XkdGqwlaZ4JJf2 vljaBF8WRQUr/S/wwn8/hNCb6yaKvn9EdwARpuqN11ywKNJ1j4P09Yae/DEi6bWM yrRmJn6U0OomahO3I1mEaQEaNLhzHBHtpst/QJRttr46m2v5pwxrXzZMZjDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgI6jPVUNaq3I2LScXHpZ7UmxmFcwHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJC Q0REQzM0RUE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8hxOlkfCHGX63OssRxyQuv3G18ORWhw1Kq WjO9Kg/UxYAVv7h0NH5uMIzwflLkA7TU/OW4iEpetNoauZPhVQvUMYW3g3oeG47+ ESxYMgqrp3McEXZP1Ot8Xu/DBIwSkFpyYdVUPGqmjh2ZeG9SAHv1nZzbSDnHF+Il p423JAKcs3Zsf6fR42uGScR3GHBbHxHk3mPpl8MtLEPGHtX4dtqx3mLqNNdvWr48 YSJfQVGKDKIlCdz9wcXRV0VjXfeXrhK+BOhKGyqvvh3f1sYsC7W7w3QXAKcbGhcl y8ry/TLHyAU7dCsBfPuvtktNe9nFjF/KZhLEYcNlr6CMxU1OdQs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:44 2026 by rpki-client