This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: VvVPX2BSYdL26iJa5pIrIMPBQtTOeWtNhf/LtFmf1us= Subject key identifier: C2:33:55:BC:BE:9B:18:55:8D:43:B7:13:A6:87:06:41:6B:7F:1B:AC Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 440CBBD1390A95D2A3A448B9C53EDC5FDF03B9CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01D5 Signing time: Sat 24 Jan 2026 22:31:57 +0000 Manifest this update: Sat 24 Jan 2026 22:26:57 +0000 Manifest next update: Wed 28 Jan 2026 02:31:57 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: mFejQ+rZMYWI2e2oK1mVjUKVpb9d3Kj3eFkk7uGq9z8=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 1puyNHEGNNhGWrQg/vX5HkRvqQmry57OCK++TTBuetA=) 3: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: 4+WV9hCjKBtz6zs8PEr3v9pu45FrGa5Idu/0GaZMYI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0c:bb:d1:39:0a:95:d2:a3:a4:48:b9:c5:3e:dc:5f:df:03:b9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Jan 24 22:26:57 2026 GMT Not After : Jan 28 02:31:57 2026 GMT Subject: CN=C23355BCBE9B18558D43B713A68706416B7F1BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:59:20:ea:23:61:27:c0:a1:c9:70:45:d6: b5:d8:45:fd:67:e9:08:68:1d:f3:87:91:ff:4f:3e: 9c:80:3e:d8:e5:89:ad:ae:31:d0:dc:68:78:b3:de: 02:2b:6f:69:26:8c:13:9e:f6:0e:63:86:f3:9e:5b: bd:b9:bf:b5:87:f0:d0:4e:ea:6f:59:1f:0b:99:02: 1a:23:8d:5a:8c:8b:9b:ba:78:19:86:0e:02:40:05: 02:35:bf:31:27:1b:7c:4a:f2:78:6a:48:8e:1a:ae: 0e:3e:12:2b:9e:d0:ad:59:de:c4:dc:8e:84:39:3c: 76:d6:8a:08:c4:d0:8c:99:7e:90:1b:dc:e9:7f:98: f2:75:3e:ad:66:2c:c9:c8:2f:ee:29:87:4f:1a:1a: 5e:91:7a:9e:89:2c:c3:fb:26:ee:9d:c3:12:9e:02: 56:1d:10:fa:e1:2f:30:1e:d8:2a:c3:29:51:1f:15: 4c:76:08:ec:11:31:ce:9e:ab:91:dc:f5:45:06:5e: 04:eb:5f:67:d0:8d:3e:66:a5:01:97:e7:b3:1d:89: 65:7c:3b:0a:1a:44:82:36:9a:7b:ab:f7:36:9a:c7: da:7a:0e:e2:c8:22:b1:cc:a7:f5:79:0c:e0:35:4e: 18:86:83:89:18:ef:99:5f:b8:e1:60:2c:64:f1:1d: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:33:55:BC:BE:9B:18:55:8D:43:B7:13:A6:87:06:41:6B:7F:1B:AC X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:db:a5:5a:7f:34:90:f4:95:9a:41:2c:78:ce:b3:3f:d2:3f: 9a:be:36:ae:1d:0b:fd:fe:08:d9:a6:98:87:66:a3:12:61:9e: f7:ed:7a:d6:19:db:41:85:12:d5:ca:43:ea:c6:92:a1:ba:d9: fe:7c:01:fc:72:f5:d5:bf:2f:f0:cc:ee:b2:91:da:54:36:81: 60:1e:e0:23:a1:ff:e0:68:67:c6:85:e3:78:d7:aa:a2:69:14: 88:77:9e:3a:65:0c:f6:fc:05:19:88:3f:66:7e:4e:c1:8a:5e: bc:3e:f6:83:d6:f1:41:fd:48:7d:f2:a0:9c:45:d5:16:38:71: d0:6a:3a:f5:73:72:63:5d:9d:dd:36:a2:b7:58:7f:7a:7d:9b: 02:7f:d5:06:e7:d3:df:02:c5:87:e9:c1:22:e8:12:31:d4:6a: ff:18:5a:b9:50:03:0e:db:29:9e:7c:8d:60:da:3f:a2:d1:07: 12:97:cf:f8:c9:3c:8d:33:0f:0b:df:d3:be:a4:8f:68:75:01: df:0d:75:39:4b:ee:d0:50:fb:a9:6b:4c:6a:9c:1c:4c:72:41: ac:53:9f:54:a9:e8:44:1a:85:8f:1d:63:60:63:3a:41:38:f5: 3b:92:61:f9:0b:50:1c:71:c8:20:50:b1:da:31:a4:45:11:09: c6:a0:3f:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAy70TkKldKjpEi5xT7cX98Duc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNjAxMjQyMjI2NTdaFw0yNjAxMjgwMjMxNTdaMDMxMTAvBgNV BAMTKEMyMzM1NUJDQkU5QjE4NTU4RDQzQjcxM0E2ODcwNjQxNkI3RjFCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5klkg6iNhJ8ChyXBF1rXYRf1n 6QhoHfOHkf9PPpyAPtjlia2uMdDcaHiz3gIrb2kmjBOe9g5jhvOeW725v7WH8NBO 6m9ZHwuZAhojjVqMi5u6eBmGDgJABQI1vzEnG3xK8nhqSI4arg4+Eiue0K1Z3sTc joQ5PHbWigjE0IyZfpAb3Ol/mPJ1Pq1mLMnIL+4ph08aGl6Rep6JLMP7Ju6dwxKe AlYdEPrhLzAe2CrDKVEfFUx2COwRMc6eq5Hc9UUGXgTrX2fQjT5mpQGX57MdiWV8 OwoaRII2mnur9zaax9p6DuLIIrHMp/V5DOA1ThiGg4kY75lfuOFgLGTxHcefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjNVvL6bGFWNQ7cTpocGQWt/G6wwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTbpVp/NJD0lZpBLHjOsz/SP5q+Nq4dC/3+ CNmmmIdmoxJhnvftetYZ20GFEtXKQ+rGkqG62f58Afxy9dW/L/DM7rKR2lQ2gWAe 4COh/+BoZ8aF43jXqqJpFIh3njplDPb8BRmIP2Z+TsGKXrw+9oPW8UH9SH3yoJxF 1RY4cdBqOvVzcmNdnd02ordYf3p9mwJ/1Qbn098CxYfpwSLoEjHUav8YWrlQAw7b KZ58jWDaP6LRBxKXz/jJPI0zDwvf076kj2h1Ad8NdTlL7tBQ+6lrTGqcHExyQaxT n1Sp6EQahY8dY2BjOkE49TuSYfkLUBxxyCBQsdoxpEURCcagP8k= -----END CERTIFICATE-----Generated at Mon Jan 26 07:32:41 2026 by rpki-client