This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: Y6p/7RSHOOCqH1/Flprz0dlYCxFy48+UeM1fYLyRJjI= Subject key identifier: 64:95:28:0A:C8:65:3F:0D:28:39:AC:9B:AB:9D:99:E5:66:EA:0E:5D Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 6294F852B75162B3FA09163826FFC60D6651731C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: F8 Signing time: Sat 24 Jan 2026 00:32:26 +0000 Manifest this update: Sat 24 Jan 2026 00:27:26 +0000 Manifest next update: Tue 27 Jan 2026 10:39:26 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) 2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: tJrzub9phv12glymLxq9rmH7+Qnp0NgbWT1zVFR6T68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:94:f8:52:b7:51:62:b3:fa:09:16:38:26:ff:c6:0d:66:51:73:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Jan 24 00:27:26 2026 GMT Not After : Jan 27 10:39:26 2026 GMT Subject: CN=6495280AC8653F0D2839AC9BAB9D99E566EA0E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:06:2b:fd:26:4f:b4:6b:7d:ba:61:1c:d5: 2b:8c:1d:c8:d0:f4:11:e6:64:45:16:b0:d3:e6:7c: 8a:73:27:1b:14:25:8b:e6:2b:80:d5:19:10:c9:23: d9:ea:45:4b:14:da:dc:70:e4:ec:9a:0d:f2:a1:e4: 0b:db:ae:5c:6b:47:da:45:8b:5b:ab:55:97:1e:95: 33:01:53:0d:b4:4e:4d:a2:22:19:33:2a:48:8e:e0: 82:d4:e3:2d:ca:28:cb:9d:4f:6a:6f:89:5b:f1:0f: 09:c0:4b:22:ac:6b:ca:29:03:6d:01:28:7b:d0:51: fd:dd:0a:a9:25:e3:59:d5:39:8a:07:6c:ba:9e:ee: d3:f7:97:20:ec:9f:b8:a8:e6:ac:96:60:76:49:dd: 58:bc:67:66:91:e2:8c:0a:dd:af:6e:e2:47:d6:af: 09:7b:e3:cd:86:26:05:2d:93:92:a6:d8:90:18:6f: 32:42:75:8c:b2:82:dc:ac:0f:86:b4:df:df:ad:88: ad:f4:66:3c:ab:8a:9a:fd:18:ba:b5:2e:c2:13:7a: c6:e5:d6:92:e5:5d:d6:77:84:8a:11:04:27:46:28: 86:f1:1f:e3:ca:ab:82:32:a9:fd:88:59:01:4a:c6: bc:f8:12:ec:d0:60:95:1e:fa:90:c2:29:50:e1:26: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:28:0A:C8:65:3F:0D:28:39:AC:9B:AB:9D:99:E5:66:EA:0E:5D X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:18:83:4d:02:ff:27:7f:14:da:93:bf:16:33:17:dc:b8:22: 25:93:2e:55:4f:bc:0e:e2:ab:41:bc:8b:6b:fa:6b:e8:44:2e: 26:98:4b:48:77:f4:b6:cd:21:9c:b1:53:73:c3:4c:00:79:6a: 32:39:b8:3a:dc:e3:45:78:6a:36:d7:ea:43:fb:bf:ca:0d:fb: bc:c8:16:4b:06:5d:78:da:ed:8d:cf:a1:a9:3a:5b:60:cb:81: d1:6c:61:d9:aa:5b:64:8a:5b:d9:ef:32:4d:e9:b0:45:ee:f6: 1e:bf:77:50:82:42:f1:85:d2:71:23:93:34:a1:67:e1:e0:50: d9:58:83:e1:dd:ca:f6:a5:51:16:fc:9a:5e:0c:87:11:56:86: 11:d4:1e:03:2a:44:ae:0d:d5:65:b3:7b:4d:c9:25:fc:cb:24: ec:9e:7f:d6:e7:6e:a2:2a:34:19:ed:20:28:93:88:d5:13:73: ba:df:a7:12:a7:58:ba:24:b2:39:d3:61:71:76:8f:58:7e:a6: 63:4b:db:99:7b:9a:c3:4d:80:55:28:cc:a7:f0:96:24:f4:7f: 00:43:bc:cb:0d:89:48:f6:fa:99:5f:09:df:16:22:00:d3:48: 32:d5:28:f3:10:f3:93:f3:e6:d4:4a:db:47:f9:7d:bb:47:2b: bc:02:d3:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpT4UrdRYrP6CRY4Jv/GDWZRcxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNjAxMjQwMDI3MjZaFw0yNjAxMjcxMDM5MjZaMDMxMTAvBgNV BAMTKDY0OTUyODBBQzg2NTNGMEQyODM5QUM5QkFCOUQ5OUU1NjZFQTBFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEwYr/SZPtGt9umEc1SuMHcjQ 9BHmZEUWsNPmfIpzJxsUJYvmK4DVGRDJI9nqRUsU2txw5OyaDfKh5AvbrlxrR9pF i1urVZcelTMBUw20Tk2iIhkzKkiO4ILU4y3KKMudT2pviVvxDwnASyKsa8opA20B KHvQUf3dCqkl41nVOYoHbLqe7tP3lyDsn7io5qyWYHZJ3Vi8Z2aR4owK3a9u4kfW rwl7482GJgUtk5Km2JAYbzJCdYyygtysD4a039+tiK30Zjyripr9GLq1LsITesbl 1pLlXdZ3hIoRBCdGKIbxH+PKq4Iyqf2IWQFKxrz4EuzQYJUe+pDCKVDhJsbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJUoCshlPw0oOaybq52Z5WbqDl0wHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwYg00C/yd/FNqTvxYzF9y4IiWTLlVPvA7i q0G8i2v6a+hELiaYS0h39LbNIZyxU3PDTAB5ajI5uDrc40V4ajbX6kP7v8oN+7zI FksGXXja7Y3Poak6W2DLgdFsYdmqW2SKW9nvMk3psEXu9h6/d1CCQvGF0nEjkzSh Z+HgUNlYg+HdyvalURb8ml4MhxFWhhHUHgMqRK4N1WWze03JJfzLJOyef9bnbqIq NBntICiTiNUTc7rfpxKnWLoksjnTYXF2j1h+pmNL25l7msNNgFUozKfwliT0fwBD vMsNiUj2+plfCd8WIgDTSDLVKPMQ85Pz5tRK20f5fbtHK7wC09w= -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:11 2026 by rpki-client