This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: 6VIZPV0QWA+pClVI4/VPg0E7eOIJgKyj/82NxHx9rX8= Subject key identifier: D6:70:A7:5C:1D:B9:A2:48:42:B7:E7:D8:A4:96:13:6B:60:18:9B:61 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 5A32AE0022A8B4FE8FBA4007659D099A96DD764E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0160 Signing time: Sat 24 Jan 2026 14:20:52 +0000 Manifest this update: Sat 24 Jan 2026 14:15:52 +0000 Manifest next update: Tue 27 Jan 2026 21:03:52 +0000 Files and hashes: 1: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: g6fj1/Jkt5kUiuj/pBHMDgiqOjeMvoHa37aNz3YlHKs=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313336383733.roa (hash: 1jCIPPNfT/T8k/fJrq5+Jf9eonsynWVEQRnRTw0zmaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:32:ae:00:22:a8:b4:fe:8f:ba:40:07:65:9d:09:9a:96:dd:76:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Jan 24 14:15:52 2026 GMT Not After : Jan 27 21:03:52 2026 GMT Subject: CN=D670A75C1DB9A24842B7E7D8A496136B60189B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:51:fb:a5:76:90:3b:25:84:66:84:7e:28:24: 30:fd:08:67:0f:75:0b:a7:6b:09:65:93:37:78:58: c7:fd:41:c3:a6:94:af:82:d2:0a:2c:01:5a:38:95: d5:f7:aa:16:f3:74:7a:c7:60:94:04:c2:9d:b3:60: e1:79:2f:7a:5f:95:94:2e:c4:ad:0e:a4:2e:aa:f8: 6d:5a:92:67:0b:4d:46:bc:a6:55:7f:8b:dd:df:1c: d3:4a:b9:05:e8:dd:99:f4:c6:8e:f2:39:25:5c:1a: 68:56:40:8d:ef:a8:73:f8:0f:c8:e4:e6:f3:f0:e5: c5:7c:ed:29:39:ea:f2:82:b6:21:80:e8:56:8f:4c: 2b:5b:54:2c:3f:a5:a4:79:2f:bb:35:00:f8:00:f3: 30:09:9c:dc:48:16:dc:b8:1d:01:f5:aa:56:6e:27: cb:32:ae:d7:f2:10:2e:30:5e:59:a3:f4:47:34:5c: 40:c2:ad:fa:fa:24:73:a9:a8:d1:7c:6d:d2:3b:16: 25:59:48:fc:5f:92:af:31:15:f0:0a:aa:71:2f:ae: 74:05:c2:0f:a5:31:4f:a0:93:52:d9:f9:f9:19:07: 8e:01:6f:ee:51:fe:6e:9e:62:6a:8e:0c:78:84:39: d9:cf:79:ad:6e:29:ef:61:97:99:16:8d:88:64:5e: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:A7:5C:1D:B9:A2:48:42:B7:E7:D8:A4:96:13:6B:60:18:9B:61 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bd:b3:f4:50:16:f7:da:60:85:ac:c4:8e:a8:9d:4e:73:73: a2:ed:ae:ac:13:14:fa:35:5e:fc:17:c5:92:d4:27:43:3b:fa: fa:07:32:20:96:9f:08:70:92:2f:23:7e:01:d8:84:3e:88:88: ad:92:1d:d2:24:73:f2:fc:1e:6e:14:e1:5b:ca:5f:12:49:8c: 9f:a5:51:5b:c8:bb:8b:83:c4:af:a0:82:cc:dc:b7:4b:04:df: c6:bd:eb:40:f2:2f:50:e6:3a:f1:64:aa:7c:d9:d5:51:2e:79: f8:4c:0d:e2:eb:b7:8d:f8:2b:78:ed:a5:85:bd:b3:fd:34:aa: eb:89:36:4f:4e:25:03:6c:e7:b6:7d:7d:cd:1f:b5:40:90:4f: 6d:a3:77:ad:05:94:e3:7e:5e:c4:e0:e6:a0:45:85:82:2c:c8: f5:df:01:21:2f:9a:d6:78:d8:69:68:25:46:23:3c:ce:d6:51: b7:bc:6f:f8:27:33:a2:c8:e3:e3:5a:ad:c5:69:f4:02:79:9c: a2:83:8b:3e:58:e8:38:bc:6a:0f:cc:83:58:73:f3:a1:b8:ea: e3:ef:dd:93:dd:73:8b:7d:db:63:55:d6:50:c1:bf:11:98:7b: 68:6a:bc:42:87:9e:7d:f6:08:59:1d:69:f7:bb:ad:8c:cc:da: 91:73:d7:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjKuACKotP6PukAHZZ0Jmpbddk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNjAxMjQxNDE1NTJaFw0yNjAxMjcyMTAzNTJaMDMxMTAvBgNV BAMTKEQ2NzBBNzVDMURCOUEyNDg0MkI3RTdEOEE0OTYxMzZCNjAxODlCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+UfuldpA7JYRmhH4oJDD9CGcP dQunawllkzd4WMf9QcOmlK+C0gosAVo4ldX3qhbzdHrHYJQEwp2zYOF5L3pflZQu xK0OpC6q+G1akmcLTUa8plV/i93fHNNKuQXo3Zn0xo7yOSVcGmhWQI3vqHP4D8jk 5vPw5cV87Sk56vKCtiGA6FaPTCtbVCw/paR5L7s1APgA8zAJnNxIFty4HQH1qlZu J8syrtfyEC4wXlmj9Ec0XEDCrfr6JHOpqNF8bdI7FiVZSPxfkq8xFfAKqnEvrnQF wg+lMU+gk1LZ+fkZB44Bb+5R/m6eYmqODHiEOdnPea1uKe9hl5kWjYhkXih/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nCnXB25okhCt+fYpJYTa2AYm2EwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe9s/RQFvfaYIWsxI6onU5zc6LtrqwTFPo1 XvwXxZLUJ0M7+voHMiCWnwhwki8jfgHYhD6IiK2SHdIkc/L8Hm4U4VvKXxJJjJ+l UVvIu4uDxK+ggszct0sE38a960DyL1DmOvFkqnzZ1VEuefhMDeLrt434K3jtpYW9 s/00quuJNk9OJQNs57Z9fc0ftUCQT22jd60FlON+XsTg5qBFhYIsyPXfASEvmtZ4 2GloJUYjPM7WUbe8b/gnM6LI4+NarcVp9AJ5nKKDiz5Y6Di8ag/Mg1hz86G46uPv 3ZPdc4t922NV1lDBvxGYe2hqvEKHnn32CFkdafe7rYzM2pFz160= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:09 2026 by rpki-client