This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: kkIszBBrUVIdKzrK4Eryvq0UIWbDClkXHGHeJOUXw48= Subject key identifier: AE:BF:D4:0C:8A:E3:19:34:F7:D5:70:39:DD:92:D4:DE:92:D2:EA:11 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 236B721D26D8C1761E8DB62A0E75005ECDB17690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: D0 Signing time: Sun 25 Jan 2026 18:30:47 +0000 Manifest this update: Sun 25 Jan 2026 18:25:47 +0000 Manifest next update: Thu 29 Jan 2026 04:05:47 +0000 Files and hashes: 1: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: WXQWW4Wi6xrEbWBjUR+QMjICoHgwf/HhAfAnKsJzlws=) 2: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: fM8nT3+TQ+SmWEGquqTTUPrQdO4UK+pJTm7SwTsFzmI=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: xdI7HWpC7S6F3YsdhXQZOI+Bb5mAqBVyTqf6Y1GJCkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 04:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6b:72:1d:26:d8:c1:76:1e:8d:b6:2a:0e:75:00:5e:cd:b1:76:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Jan 25 18:25:47 2026 GMT Not After : Jan 29 04:05:47 2026 GMT Subject: CN=AEBFD40C8AE31934F7D57039DD92D4DE92D2EA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:43:83:ce:a9:eb:97:37:5b:9f:3a:52:78: 5c:55:ce:a6:24:87:22:a3:e5:c9:9c:3f:30:7b:65: a5:4d:78:89:40:ee:73:c5:6d:60:44:e7:4e:a5:91: c9:b4:ce:8a:37:f7:18:d7:d7:b7:81:2a:19:98:a7: 90:58:5b:c5:37:91:90:01:5c:19:0b:f6:e4:6a:c7: 72:b2:9e:09:5a:43:63:9a:cc:c3:18:78:c2:9e:2d: ce:36:00:f0:98:da:e1:ac:5a:39:a4:92:de:33:f8: 7f:ac:4c:b6:e0:e2:cb:93:0d:6d:41:a8:a8:f8:3e: 77:d4:c7:f5:88:1a:0d:c6:a2:76:db:75:d7:c9:a3: 77:b1:ae:df:0b:9d:ed:02:33:c2:06:2b:35:f4:f1: 82:df:14:d6:f9:63:0f:ef:28:57:93:cc:73:f5:f1: 4b:45:56:d1:4b:71:f1:60:4f:ae:65:93:55:04:cc: d0:41:c6:0c:26:f1:34:64:7f:32:8a:23:a7:f1:78: e7:8e:16:a7:57:97:8a:cc:dd:3d:ec:a6:bd:f8:05: 65:b1:44:3a:f2:68:66:3a:fa:e0:04:ac:84:e3:6d: c2:e3:e3:7a:74:ae:53:b5:aa:3f:3e:3c:04:a4:60: 3b:5d:84:bd:98:34:ed:7a:6f:6f:c0:4f:19:79:7d: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:D4:0C:8A:E3:19:34:F7:D5:70:39:DD:92:D4:DE:92:D2:EA:11 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ae:21:44:25:04:2b:42:36:b5:d9:79:05:b9:93:17:e3:8a: 64:d6:75:ea:58:2b:b5:4a:bc:e6:ef:5c:a1:93:18:6f:56:76: fd:cc:66:62:71:cd:13:f7:5e:b9:f9:f8:d4:09:a2:e5:42:9b: 9b:ae:a3:c7:0c:11:38:cc:40:82:a0:d9:34:41:e6:c2:22:cd: 30:69:34:e1:c0:f2:82:5b:ed:f7:24:e5:cd:d2:4a:25:01:44: 38:cf:80:49:d7:80:12:de:a4:0c:21:c8:9d:df:4f:85:3d:0d: 38:4b:2b:10:1c:7a:dc:8f:bf:53:58:01:e5:93:79:51:c4:82: 1a:6b:62:b1:c0:27:fd:c5:25:d6:ee:29:64:7f:43:26:c0:93: c6:a5:d8:76:59:df:63:b1:ab:4c:aa:0d:1e:ad:82:9f:c2:4f: 10:39:fb:91:ff:9c:40:a6:c5:00:86:4f:e2:95:e8:64:a9:d7: 92:c8:cf:99:00:dc:f2:e9:59:88:98:74:55:20:e0:cb:aa:5b: 96:78:3a:fb:13:0e:09:4c:76:fe:45:88:9a:d6:32:8e:46:ba: b6:64:9b:49:f6:90:a1:62:7f:49:03:39:ab:c6:cc:18:e8:be: ac:23:35:16:15:81:c8:c0:77:8f:8d:51:06:1e:ee:f2:bf:ad: e3:54:c3:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2tyHSbYwXYejbYqDnUAXs2xdpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNjAxMjUxODI1NDdaFw0yNjAxMjkwNDA1NDdaMDMxMTAvBgNV BAMTKEFFQkZENDBDOEFFMzE5MzRGN0Q1NzAzOUREOTJENERFOTJEMkVBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC610ODzqnrlzdbnzpSeFxVzqYk hyKj5cmcPzB7ZaVNeIlA7nPFbWBE506lkcm0zoo39xjX17eBKhmYp5BYW8U3kZAB XBkL9uRqx3KynglaQ2OazMMYeMKeLc42APCY2uGsWjmkkt4z+H+sTLbg4suTDW1B qKj4PnfUx/WIGg3GonbbddfJo3exrt8Lne0CM8IGKzX08YLfFNb5Yw/vKFeTzHP1 8UtFVtFLcfFgT65lk1UEzNBBxgwm8TRkfzKKI6fxeOeOFqdXl4rM3T3spr34BWWx RDryaGY6+uAErITjbcLj43p0rlO1qj8+PASkYDtdhL2YNO16b2/ATxl5fTVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrr/UDIrjGTT31XA53ZLU3pLS6hEwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6uIUQlBCtCNrXZeQW5kxfjimTWdepYK7VK vObvXKGTGG9Wdv3MZmJxzRP3Xrn5+NQJouVCm5uuo8cMETjMQIKg2TRB5sIizTBp NOHA8oJb7fck5c3SSiUBRDjPgEnXgBLepAwhyJ3fT4U9DThLKxAcetyPv1NYAeWT eVHEghprYrHAJ/3FJdbuKWR/QybAk8al2HZZ32Oxq0yqDR6tgp/CTxA5+5H/nECm xQCGT+KV6GSp15LIz5kA3PLpWYiYdFUg4MuqW5Z4OvsTDglMdv5FiJrWMo5GurZk m0n2kKFif0kDOavGzBjovqwjNRYVgcjAd4+NUQYe7vK/reNUw3c= -----END CERTIFICATE-----Generated at Mon Jan 26 08:01:55 2026 by rpki-client