This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: 49u2L22VpGVPmQImO1nFUq879e1OmoLsoeEGT6yvtt8= Subject key identifier: B7:61:59:AF:F6:A7:97:7B:BE:62:CB:CB:89:C4:5F:8B:81:E6:56:D5 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 082B5F6611AB26E0513674AC6859869323BA7E8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 0543 Signing time: Fri 23 Jan 2026 22:12:00 +0000 Manifest this update: Fri 23 Jan 2026 22:07:00 +0000 Manifest next update: Tue 27 Jan 2026 09:45:00 +0000 Files and hashes: 1: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 2: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: N+vc96LUfyAxoiRPo1EIpSDynq1FnqfHVxok5po/Fr0=) 3: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 4: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 5: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 6: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2b:5f:66:11:ab:26:e0:51:36:74:ac:68:59:86:93:23:ba:7e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Jan 23 22:07:00 2026 GMT Not After : Jan 27 09:45:00 2026 GMT Subject: CN=B76159AFF6A7977BBE62CBCB89C45F8B81E656D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:db:a4:9d:fc:a1:33:97:0b:df:5a:63:30: 03:2a:5d:5d:c1:89:ee:8c:09:ea:da:6e:8f:02:85: 75:c7:cd:c3:ba:12:80:f9:36:be:d9:0d:32:e6:29: 0c:1c:b1:ba:2c:cc:bd:ff:9e:6e:e7:66:cf:9c:43: 1c:13:b8:89:3f:b9:40:dc:d9:b4:59:fe:3a:b1:94: 65:86:e4:c5:90:40:19:84:e2:ba:29:3a:5a:14:57: 90:0a:40:34:9d:79:9d:57:3e:ef:c9:b0:2c:54:cf: 61:59:c8:5d:26:bc:50:c3:73:df:8d:8e:82:0a:c0: 6b:6a:b2:e3:a4:69:a5:38:66:11:c0:3a:8f:56:60: 07:44:c9:94:b2:f5:c8:cc:d8:ed:e7:46:2b:89:b1: d7:e2:37:e5:15:5b:fb:89:21:28:bc:56:b4:68:0f: 7a:b0:a5:1e:76:01:52:eb:1c:02:90:0c:6f:92:e6: a6:dc:1b:15:5c:65:f5:61:04:1c:a6:70:86:6f:b7: e3:5d:92:64:01:aa:79:36:a0:a8:af:98:27:f4:2a: 3a:91:a3:02:df:7c:95:5e:de:cd:4b:76:5c:e3:ee: f5:e8:1d:d8:95:ee:68:55:19:64:f6:de:f7:7e:4d: f0:d9:8a:38:cc:0f:95:1a:e6:0e:5b:85:c9:49:ef: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:59:AF:F6:A7:97:7B:BE:62:CB:CB:89:C4:5F:8B:81:E6:56:D5 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fb:1d:f7:6d:6a:1d:09:0b:00:d2:78:f0:03:48:de:90:27: fb:40:be:8f:c8:9f:07:12:2f:a6:54:90:4c:cb:62:f9:8b:d0: 2b:4b:7c:c8:51:26:a6:5c:45:02:8b:27:f1:10:1b:e7:10:d5: 6f:11:07:6a:2d:37:37:05:05:85:23:46:b4:10:3c:81:bc:b2: 1f:19:34:c9:4e:49:17:da:da:0c:92:fe:0f:a5:0e:fb:dc:b7: 66:d7:8f:5f:a7:61:b4:8f:2d:9b:5f:fe:5b:04:2d:45:c1:f0: 47:50:94:41:e5:0d:5c:f7:cf:45:11:99:0b:57:85:c7:a8:ec: 2d:cd:ab:a4:ca:38:bb:83:0c:8b:21:55:67:90:a3:6a:9a:a1: d5:9e:50:6e:d0:30:0d:94:c3:f8:30:dc:17:0e:3d:e2:a6:2e: 5f:6a:00:a4:04:54:a2:6b:9a:8d:80:a8:31:de:34:a3:42:c4: 47:bb:c5:3e:6b:31:87:96:f7:64:57:a1:52:3c:b9:48:5a:cf: 58:a4:63:6c:21:eb:a1:25:8a:48:d9:a9:6f:75:e7:d8:7d:3d: 81:b3:18:1e:15:46:07:aa:5c:08:58:d1:4e:dc:d0:33:a0:22: d5:d3:f2:50:3f:13:d6:4e:41:9c:b1:81:2f:85:e5:8f:23:80: 9c:98:13:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCtfZhGrJuBRNnSsaFmGkyO6fo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNjAxMjMyMjA3MDBaFw0yNjAxMjcwOTQ1MDBaMDMxMTAvBgNV BAMTKEI3NjE1OUFGRjZBNzk3N0JCRTYyQ0JDQjg5QzQ1RjhCODFFNjU2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4duknfyhM5cL31pjMAMqXV3B ie6MCerabo8ChXXHzcO6EoD5Nr7ZDTLmKQwcsboszL3/nm7nZs+cQxwTuIk/uUDc 2bRZ/jqxlGWG5MWQQBmE4ropOloUV5AKQDSdeZ1XPu/JsCxUz2FZyF0mvFDDc9+N joIKwGtqsuOkaaU4ZhHAOo9WYAdEyZSy9cjM2O3nRiuJsdfiN+UVW/uJISi8VrRo D3qwpR52AVLrHAKQDG+S5qbcGxVcZfVhBBymcIZvt+NdkmQBqnk2oKivmCf0KjqR owLffJVe3s1Ldlzj7vXoHdiV7mhVGWT23vd+TfDZijjMD5Ua5g5bhclJ71pjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2FZr/anl3u+YsvLicRfi4HmVtUwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj7Hfdtah0JCwDSePADSN6QJ/tAvo/InwcS L6ZUkEzLYvmL0CtLfMhRJqZcRQKLJ/EQG+cQ1W8RB2otNzcFBYUjRrQQPIG8sh8Z NMlOSRfa2gyS/g+lDvvct2bXj1+nYbSPLZtf/lsELUXB8EdQlEHlDVz3z0URmQtX hceo7C3Nq6TKOLuDDIshVWeQo2qaodWeUG7QMA2Uw/gw3BcOPeKmLl9qAKQEVKJr mo2AqDHeNKNCxEe7xT5rMYeW92RXoVI8uUhaz1ikY2wh66ElikjZqW9159h9PYGz GB4VRgeqXAhY0U7c0DOgItXT8lA/E9ZOQZyxgS+F5Y8jgJyYE3s= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:37 2026 by rpki-client