This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: 4bAS/FC4he7Kreqr1ao0gffthFIUXZnBZ517lhRR6q0= Subject key identifier: 17:0B:8C:A5:C2:A0:9C:05:AD:F4:7B:FA:AE:63:85:1D:AB:D9:B9:D6 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 1653FB1932939FCC730F19B25E82D947BFD832B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0174 Signing time: Sat 24 Jan 2026 06:21:45 +0000 Manifest this update: Sat 24 Jan 2026 06:16:45 +0000 Manifest next update: Tue 27 Jan 2026 13:55:45 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=) 3: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: 5CczlQrRh3jNLASJotfSoqTOfvSObAjdmE9Mhs2b1b0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:53:fb:19:32:93:9f:cc:73:0f:19:b2:5e:82:d9:47:bf:d8:32:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Jan 24 06:16:45 2026 GMT Not After : Jan 27 13:55:45 2026 GMT Subject: CN=170B8CA5C2A09C05ADF47BFAAE63851DABD9B9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:54:4c:ce:0f:34:4f:8b:96:f3:6b:66:57: af:85:1c:fa:06:1f:98:8f:8c:19:c8:cb:7c:fa:95: 11:01:68:2d:ed:24:3d:3d:bd:86:98:d7:16:77:53: 97:57:76:23:e9:e8:27:aa:e4:6a:0f:24:55:fb:93: 2c:f4:2b:3b:cd:03:1a:1e:9e:f3:ea:e2:5b:a9:1e: ab:3a:cf:86:c1:a8:e1:c7:3f:d2:22:a9:06:f9:62: a9:d8:50:18:45:9f:5b:d5:c7:e1:bf:c2:da:5b:5e: 33:d3:ba:7a:cb:e7:21:b7:b5:3a:da:7b:c9:5d:6e: fd:e4:8a:69:7a:9a:f3:b0:da:e1:e0:82:05:62:01: 5c:ac:53:8c:51:68:cc:7c:77:ea:40:fc:d3:2f:0c: cb:e9:66:46:58:31:3f:65:ed:cf:86:d4:9a:92:8b: f8:e5:e3:63:47:f3:d6:9a:e3:a2:c8:37:03:7a:54: ad:40:c6:9e:84:1c:25:b3:1c:12:f7:47:ad:ee:ec: 19:e9:c1:fb:c0:4b:a8:f6:9d:d6:36:0e:6d:62:87: 5c:42:0b:7a:db:f7:23:b6:16:e0:69:b7:95:20:8a: 83:f7:91:0f:00:2f:0b:b1:38:ba:1b:0a:a6:9d:9e: fc:0d:d1:a9:85:4c:1a:78:8e:d8:3e:91:39:17:e8: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:8C:A5:C2:A0:9C:05:AD:F4:7B:FA:AE:63:85:1D:AB:D9:B9:D6 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:28:c5:cd:33:bf:86:17:dc:4b:34:67:9b:28:d0:73:28:c8: af:23:de:11:34:8b:a2:f0:18:e7:88:e3:b9:ba:ce:65:65:26: f5:f7:d5:e4:b0:d4:5f:ae:5f:77:b4:f1:1a:a8:70:4f:e2:5c: d0:60:bf:3c:59:8e:46:05:e2:e0:f3:7a:d6:b8:67:6c:c4:b7: df:cd:ed:e9:46:de:27:2a:fb:cf:f1:67:be:50:c5:77:80:1a: a1:88:f2:d3:1e:b5:78:76:23:6f:81:3d:d8:57:14:9f:6c:0e: 31:75:9a:df:0b:8a:53:5c:c8:13:b9:0d:a8:b6:68:0b:f0:ed: 48:b4:bb:dc:7d:63:98:9e:b1:5b:c6:ce:27:77:9a:7c:69:57: 7f:b3:e8:d4:cb:4c:46:6f:78:f5:77:26:96:a6:95:8b:60:e2: 1f:3e:9b:2b:f1:21:b8:02:b7:56:a4:1c:0f:07:5a:cf:fd:a3: 47:1c:25:44:ec:56:f9:fc:37:cf:30:09:78:42:8c:35:b6:4d: 8a:4f:a8:94:ec:54:e7:7d:53:7f:a6:63:e6:13:27:ff:c6:9b: 10:3d:ed:a3:bd:e6:ee:c5:17:d6:39:ed:8d:88:6a:df:f3:69: b2:32:32:81:6e:85:ba:6a:0e:29:bb:59:55:50:26:4c:98:0a: 2c:1f:af:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlP7GTKTn8xzDxmyXoLZR7/YMrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNjAxMjQwNjE2NDVaFw0yNjAxMjcxMzU1NDVaMDMxMTAvBgNV BAMTKDE3MEI4Q0E1QzJBMDlDMDVBREY0N0JGQUFFNjM4NTFEQUJEOUI5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8VRMzg80T4uW82tmV6+FHPoG H5iPjBnIy3z6lREBaC3tJD09vYaY1xZ3U5dXdiPp6Ceq5GoPJFX7kyz0KzvNAxoe nvPq4lupHqs6z4bBqOHHP9IiqQb5YqnYUBhFn1vVx+G/wtpbXjPTunrL5yG3tTra e8ldbv3kiml6mvOw2uHgggViAVysU4xRaMx8d+pA/NMvDMvpZkZYMT9l7c+G1JqS i/jl42NH89aa46LINwN6VK1Axp6EHCWzHBL3R63u7BnpwfvAS6j2ndY2Dm1ih1xC C3rb9yO2FuBpt5UgioP3kQ8ALwuxOLobCqadnvwN0amFTBp4jtg+kTkX6IT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwuMpcKgnAWt9Hv6rmOFHavZudYwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0oxc0zv4YX3Es0Z5so0HMoyK8j3hE0i6Lw GOeI47m6zmVlJvX31eSw1F+uX3e08RqocE/iXNBgvzxZjkYF4uDzeta4Z2zEt9/N 7elG3icq+8/xZ75QxXeAGqGI8tMetXh2I2+BPdhXFJ9sDjF1mt8LilNcyBO5Dai2 aAvw7Ui0u9x9Y5iesVvGzid3mnxpV3+z6NTLTEZvePV3JpamlYtg4h8+myvxIbgC t1akHA8HWs/9o0ccJUTsVvn8N88wCXhCjDW2TYpPqJTsVOd9U3+mY+YTJ//GmxA9 7aO95u7FF9Y57Y2Iat/zabIyMoFuhbpqDim7WVVQJkyYCiwfr9Q= -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:49 2026 by rpki-client