This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: 367wL7bAPWtO3lrrF8+/SWKoyphQuWjr9EYT0ByZT9o= Subject key identifier: B2:1B:88:7D:CB:86:15:19:4A:25:DD:DC:3B:8C:4A:5F:59:97:D9:81 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 2974813F6D4C011FB74B4736823329A9BD9E9AD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 01DA Signing time: Fri 23 Jan 2026 14:41:36 +0000 Manifest this update: Fri 23 Jan 2026 14:36:36 +0000 Manifest next update: Tue 27 Jan 2026 00:37:36 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: 1oB12Tzi6XxvEXW+Of63wsxHNOVSczSjy3q0JDOBizA=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: kq+NuC2L3vEb1GZ+wb9CoyHOvi8YFEOs7gaELxt5HT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:74:81:3f:6d:4c:01:1f:b7:4b:47:36:82:33:29:a9:bd:9e:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Jan 23 14:36:36 2026 GMT Not After : Jan 27 00:37:36 2026 GMT Subject: CN=B21B887DCB8615194A25DDDC3B8C4A5F5997D981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:86:33:75:40:51:ee:08:e9:21:89:71:85: a6:ed:04:7c:56:79:f7:7d:2e:b1:34:c0:75:41:0a: 52:7c:7e:b1:5d:82:7b:41:23:92:32:77:d1:77:15: 6f:9e:cb:53:73:8a:c5:92:0e:98:52:df:98:f1:5f: 35:b2:95:12:52:06:0f:8f:65:66:99:9b:f6:36:1c: 44:e6:58:86:1d:6d:4d:27:7a:af:77:ec:01:26:1c: ce:2c:f0:23:71:4b:75:78:9a:80:92:db:c3:c1:b8: 8c:b7:1b:55:d5:4b:3f:7a:5c:4d:7c:b1:07:bd:1e: 47:25:d8:f7:aa:7d:15:0b:a1:8d:1a:be:3b:3f:e7: 18:aa:4d:cc:1f:7f:07:40:8a:8e:26:6e:7e:ea:f9: 1f:02:e7:a9:fa:57:94:0b:25:cd:a2:43:8e:61:d8: 3d:9f:a8:29:67:6f:bf:0b:f9:d9:71:12:be:d3:0b: c4:6d:6c:37:ed:2b:3a:23:6b:1d:ac:94:9e:4a:75: ca:8c:21:14:2d:06:1d:2c:09:c9:db:d1:ab:2f:ae: f3:fb:86:94:f5:75:f3:14:4a:ea:e6:af:5c:c7:39: 88:4b:c9:19:ae:1c:2e:37:f3:b8:63:f5:35:6e:b0: 68:6f:b2:9f:91:24:cc:0c:4b:e6:96:99:54:c8:c4: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1B:88:7D:CB:86:15:19:4A:25:DD:DC:3B:8C:4A:5F:59:97:D9:81 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e7:90:b5:72:5f:78:75:15:0a:0d:83:d7:28:7d:aa:a6:f5: 08:95:72:55:c9:e2:ca:28:de:f6:4c:6c:92:6c:96:3e:83:c0: 79:60:d5:c9:60:aa:94:04:3b:80:15:ad:52:68:d9:e3:cf:50: 3a:cd:f9:94:11:f9:e5:43:2f:2c:d5:f9:a1:37:de:cb:1a:7b: bc:35:6f:35:1c:78:d1:12:03:e1:d4:71:80:5f:0e:6a:fa:f1: 46:87:a9:93:ab:81:be:e7:b6:11:65:eb:9d:2d:d6:62:ed:79: d9:f4:34:4c:6f:af:60:ff:d2:2c:2d:b8:f8:4b:4e:45:e4:b3: a9:8c:29:e5:6d:70:db:d7:97:d8:ea:26:68:ce:33:16:04:bd: 2d:72:3e:87:ba:25:52:5a:0c:aa:d6:d8:ca:72:02:21:30:39: 4a:bb:51:41:fb:70:c9:47:f8:ec:d2:2e:bb:fe:3c:b4:b4:73: e8:8b:3e:6b:a5:b0:2a:f1:b3:69:57:09:7c:6d:33:47:f5:ce: fc:e5:eb:fc:98:43:e5:d8:cb:5a:21:61:08:9d:65:50:74:59: c0:f8:ba:1d:15:d5:6b:60:e6:7c:09:61:f7:d4:f5:b0:18:a6: 5f:f3:80:12:ed:77:d2:0f:f9:41:ec:51:4c:45:bc:37:10:ef: e7:70:63:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXSBP21MAR+3S0c2gjMpqb2emtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNjAxMjMxNDM2MzZaFw0yNjAxMjcwMDM3MzZaMDMxMTAvBgNV BAMTKEIyMUI4ODdEQ0I4NjE1MTk0QTI1REREQzNCOEM0QTVGNTk5N0Q5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7aIYzdUBR7gjpIYlxhabtBHxW efd9LrE0wHVBClJ8frFdgntBI5Iyd9F3FW+ey1NzisWSDphS35jxXzWylRJSBg+P ZWaZm/Y2HETmWIYdbU0neq937AEmHM4s8CNxS3V4moCS28PBuIy3G1XVSz96XE18 sQe9Hkcl2PeqfRULoY0avjs/5xiqTcwffwdAio4mbn7q+R8C56n6V5QLJc2iQ45h 2D2fqClnb78L+dlxEr7TC8RtbDftKzojax2slJ5KdcqMIRQtBh0sCcnb0asvrvP7 hpT1dfMUSurmr1zHOYhLyRmuHC4387hj9TVusGhvsp+RJMwMS+aWmVTIxClzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUshuIfcuGFRlKJd3cO4xKX1mX2YEwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/nkLVyX3h1FQoNg9cofaqm9QiVclXJ4soo 3vZMbJJslj6DwHlg1clgqpQEO4AVrVJo2ePPUDrN+ZQR+eVDLyzV+aE33ssae7w1 bzUceNESA+HUcYBfDmr68UaHqZOrgb7nthFl650t1mLtedn0NExvr2D/0iwtuPhL TkXks6mMKeVtcNvXl9jqJmjOMxYEvS1yPoe6JVJaDKrW2MpyAiEwOUq7UUH7cMlH +OzSLrv+PLS0c+iLPmulsCrxs2lXCXxtM0f1zvzl6/yYQ+XYy1ohYQidZVB0WcD4 uh0V1Wtg5nwJYffU9bAYpl/zgBLtd9IP+UHsUUxFvDcQ7+dwY90= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:09 2026 by rpki-client