This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: 5AZ11wp8S+htfgquuzi/cRkwHvAl9/iD3+l5IBL33p8= Subject key identifier: 3E:A6:83:9C:3A:7F:EE:36:0A:9B:2D:2D:0B:1C:6C:AA:4D:09:69:62 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 1694D692DA851B5FA383A1721A013472BE9AB3F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01E3 Signing time: Sat 24 Jan 2026 08:51:36 +0000 Manifest this update: Sat 24 Jan 2026 08:46:36 +0000 Manifest next update: Tue 27 Jan 2026 12:40:36 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: 5pKDFuve3lIpQZuFaAbjwxzuGFFZtd22AczmlXYN5f0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:94:d6:92:da:85:1b:5f:a3:83:a1:72:1a:01:34:72:be:9a:b3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Jan 24 08:46:36 2026 GMT Not After : Jan 27 12:40:36 2026 GMT Subject: CN=3EA6839C3A7FEE360A9B2D2D0B1C6CAA4D096962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:ca:ce:28:78:ee:f8:81:6f:9d:9b:78:28: 56:4b:56:9e:39:6d:74:e8:cf:71:44:ee:c0:31:a9: 3f:33:72:94:b7:e1:26:de:eb:7d:f1:1b:64:26:42: d9:dd:9c:79:5f:54:77:e9:b5:0c:9a:38:9e:6c:1b: 3d:b0:cf:3a:ef:9b:b4:21:4a:87:87:d0:49:af:0d: c2:f0:2a:31:92:85:a8:c4:98:4a:a2:be:df:5c:83: d5:e0:fe:17:4b:83:8f:ed:35:6c:f4:32:29:9b:71: 2e:cc:8d:88:d5:70:8a:37:e7:cf:9a:b5:44:c9:58: ee:b7:66:0c:d4:f1:1c:7b:32:3b:ae:78:58:17:f4: 65:b1:b4:75:a1:46:83:6a:d3:56:8f:6a:74:dc:eb: 9f:ee:11:54:50:0f:fa:84:e8:07:4f:e8:01:60:f0: ee:ed:96:d5:5d:79:1d:d8:3a:2c:cb:f2:b1:7c:6e: a3:52:d1:60:4c:6b:84:b1:ab:e9:96:0e:9f:6c:0e: 40:21:39:ae:06:a7:73:81:96:9a:d8:36:39:a6:78: d4:ac:67:30:dc:60:16:b3:74:2e:03:14:b7:74:89: 83:13:5e:a8:cf:cf:41:cb:a2:d5:8b:fc:a1:14:0f: b0:b3:2e:88:39:d1:32:a4:0c:92:4b:a4:69:7d:f6: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:83:9C:3A:7F:EE:36:0A:9B:2D:2D:0B:1C:6C:AA:4D:09:69:62 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b5:4a:39:82:d1:33:bc:31:63:b5:fd:c8:68:48:42:5c:39: e0:0b:a2:5e:5f:ed:f7:89:95:2c:a6:cb:e7:a8:35:0c:32:38: cb:0a:22:f6:dd:29:c8:3f:85:55:45:37:59:9b:42:1e:4b:d1: 75:83:a9:4a:fb:b0:1e:e7:c2:59:32:91:c8:08:9a:0f:c9:9d: c5:87:f3:ae:19:18:31:a5:19:32:fd:39:b3:3b:7f:55:b4:0e: 86:ff:f4:51:b8:a2:6c:01:46:ee:18:39:80:a5:21:3d:0d:e8: 63:8a:3e:6a:50:9f:57:a9:41:9d:c0:9f:9e:98:52:2f:af:6e: dd:18:7c:a3:37:2d:ef:6a:b8:13:a1:07:d0:87:4a:da:bf:97: 32:4e:95:c4:14:ad:a2:b0:2b:15:71:86:fa:4b:a1:cd:13:4a: 0a:2c:01:89:3a:f7:96:c6:ed:24:a0:63:79:6f:76:c2:2f:46: 13:46:a2:3c:cb:2c:36:7e:68:b5:80:c5:71:c2:61:91:ac:d0: d5:f6:9b:44:0a:c9:44:f6:da:7a:78:48:d3:f0:a0:68:fc:4e: 2f:17:23:d6:6b:2a:8f:65:2c:a5:7c:5f:57:c7:51:f2:0b:0d: 03:00:61:1e:22:ab:09:0b:37:b6:6a:63:d8:38:1d:4a:73:dc: 81:51:77:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpTWktqFG1+jg6FyGgE0cr6as/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNjAxMjQwODQ2MzZaFw0yNjAxMjcxMjQwMzZaMDMxMTAvBgNV BAMTKDNFQTY4MzlDM0E3RkVFMzYwQTlCMkQyRDBCMUM2Q0FBNEQwOTY5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBs8rOKHju+IFvnZt4KFZLVp45 bXToz3FE7sAxqT8zcpS34Sbe633xG2QmQtndnHlfVHfptQyaOJ5sGz2wzzrvm7Qh SoeH0EmvDcLwKjGShajEmEqivt9cg9Xg/hdLg4/tNWz0MimbcS7MjYjVcIo358+a tUTJWO63ZgzU8Rx7MjuueFgX9GWxtHWhRoNq01aPanTc65/uEVRQD/qE6AdP6AFg 8O7tltVdeR3YOizL8rF8bqNS0WBMa4Sxq+mWDp9sDkAhOa4Gp3OBlprYNjmmeNSs ZzDcYBazdC4DFLd0iYMTXqjPz0HLotWL/KEUD7CzLog50TKkDJJLpGl99nL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPqaDnDp/7jYKmy0tCxxsqk0JaWIwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy1SjmC0TO8MWO1/choSEJcOeALol5f7feJ lSymy+eoNQwyOMsKIvbdKcg/hVVFN1mbQh5L0XWDqUr7sB7nwlkykcgImg/JncWH 864ZGDGlGTL9ObM7f1W0Dob/9FG4omwBRu4YOYClIT0N6GOKPmpQn1epQZ3An56Y Ui+vbt0YfKM3Le9quBOhB9CHStq/lzJOlcQUraKwKxVxhvpLoc0TSgosAYk695bG 7SSgY3lvdsIvRhNGojzLLDZ+aLWAxXHCYZGs0NX2m0QKyUT22np4SNPwoGj8Ti8X I9ZrKo9lLKV8X1fHUfILDQMAYR4iqwkLN7ZqY9g4HUpz3IFRd+Y= -----END CERTIFICATE-----Generated at Sun Jan 25 18:56:36 2026 by rpki-client