This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: 0ZNRiyRC9EXtbzsKdqtatQSVwJMFRiaJI+rkdJoMcFE= Subject key identifier: 93:26:A6:3F:9B:1D:81:92:51:BC:B5:30:54:8F:BA:38:41:AE:07:C8 Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 5F996AB3E7AF3643CA1BC5BBF57D389F85825A7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 34 Signing time: Sat 24 Jan 2026 23:42:33 +0000 Manifest this update: Sat 24 Jan 2026 23:37:33 +0000 Manifest next update: Wed 28 Jan 2026 00:39:33 +0000 Files and hashes: 1: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: fqw/C6y5KSYbsrGD275rj32reyoSV4GMUOkBB+qkTMc=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:99:6a:b3:e7:af:36:43:ca:1b:c5:bb:f5:7d:38:9f:85:82:5a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Jan 24 23:37:33 2026 GMT Not After : Jan 28 00:39:33 2026 GMT Subject: CN=9326A63F9B1D819251BCB530548FBA3841AE07C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:30:24:0a:46:82:94:dd:a0:a2:f5:76:9c: 00:bb:78:37:45:ec:b0:0a:c0:fe:e8:11:4a:c3:c7: 1a:a4:28:97:ec:88:c9:e0:07:f1:7f:ec:ee:e5:bd: ea:91:68:86:5b:f8:5f:79:49:ad:c8:a9:91:52:6d: b0:4b:ef:84:de:b1:40:4c:b9:45:95:16:fe:4e:03: 7b:f2:96:db:60:04:b7:12:09:27:ac:af:8d:d0:6e: 9b:cf:71:7e:fa:e2:1f:01:88:87:aa:f2:a6:ab:e6: 0c:59:5e:ea:b7:84:a7:a1:e2:e5:52:52:a2:1c:16: 88:85:ad:9c:6a:fa:40:30:b8:96:c3:8f:64:d1:af: dd:c6:57:f7:18:24:ae:fa:f7:fc:18:4e:27:8c:11: f6:28:b5:1d:74:79:96:2d:5f:89:6a:6d:cf:f2:85: 02:a9:6c:1a:54:24:e3:5f:c1:22:0a:bb:0f:95:11: 93:68:e1:0c:56:1f:b2:04:ba:52:6d:27:43:de:e0: 36:3a:c6:ca:da:14:0b:a9:91:4c:e3:30:60:b1:39: 9b:82:0c:dc:53:41:d7:07:4e:52:19:e3:af:9b:e7: 8d:93:1d:99:9a:d9:d2:f2:eb:63:7e:0a:bf:c7:d7: 12:30:44:91:42:59:53:d4:77:74:1c:bd:d8:e0:5a: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:26:A6:3F:9B:1D:81:92:51:BC:B5:30:54:8F:BA:38:41:AE:07:C8 X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:48:cf:bd:2e:40:7e:64:50:ed:ad:b5:35:38:26:6b:fb:47: da:95:57:39:c6:0f:40:cb:d3:7e:9c:8d:3f:91:5d:f3:d9:0f: 06:fb:fe:0a:3f:95:e3:b1:a8:33:c7:0b:3e:c5:27:8b:df:4f: c2:53:ec:b9:3a:94:64:8c:51:1e:6d:e7:4c:ed:87:19:d4:76: 91:7f:1c:0c:95:80:39:13:75:4b:3a:96:29:6e:0c:9c:bc:10: 6c:ed:55:9e:7c:58:eb:1b:4c:97:03:bf:d5:90:df:1c:8a:15: f3:84:e5:fa:d9:c4:1b:f3:af:d7:e4:d3:db:05:b7:ae:ef:bb: c6:c0:a8:b8:38:91:bf:12:99:4f:15:65:49:e4:72:62:b4:1b: 82:3e:4e:de:12:6d:27:ed:28:56:c8:ea:b3:87:e0:c6:ff:18: ef:08:a2:9f:12:cd:22:22:9c:a3:7c:20:f2:00:a1:2e:e5:4b: 62:13:d0:52:1a:c8:4f:e5:34:dd:6f:46:fb:12:78:a9:00:69: a7:f4:b7:51:0e:fe:20:48:e8:bb:5a:9d:56:f1:9d:e4:ac:4c: 7b:29:97:65:8c:70:2a:8d:24:16:82:14:90:b1:d8:80:1b:d6: f2:5b:d0:2e:f0:8f:3e:88:66:16:f1:78:46:9e:3d:d8:ef:46: 71:1f:dd:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5lqs+evNkPKG8W79X04n4WCWnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNjAxMjQyMzM3MzNaFw0yNjAxMjgwMDM5MzNaMDMxMTAvBgNV BAMTKDkzMjZBNjNGOUIxRDgxOTI1MUJDQjUzMDU0OEZCQTM4NDFBRTA3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACjAkCkaClN2govV2nAC7eDdF 7LAKwP7oEUrDxxqkKJfsiMngB/F/7O7lveqRaIZb+F95Sa3IqZFSbbBL74TesUBM uUWVFv5OA3vylttgBLcSCSesr43QbpvPcX764h8BiIeq8qar5gxZXuq3hKeh4uVS UqIcFoiFrZxq+kAwuJbDj2TRr93GV/cYJK769/wYTieMEfYotR10eZYtX4lqbc/y hQKpbBpUJONfwSIKuw+VEZNo4QxWH7IEulJtJ0Pe4DY6xsraFAupkUzjMGCxOZuC DNxTQdcHTlIZ46+b542THZma2dLy62N+Cr/H1xIwRJFCWVPUd3QcvdjgWmdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkyamP5sdgZJRvLUwVI+6OEGuB8gwHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRIz70uQH5kUO2ttTU4Jmv7R9qVVznGD0DL 036cjT+RXfPZDwb7/go/leOxqDPHCz7FJ4vfT8JT7Lk6lGSMUR5t50zthxnUdpF/ HAyVgDkTdUs6liluDJy8EGztVZ58WOsbTJcDv9WQ3xyKFfOE5frZxBvzr9fk09sF t67vu8bAqLg4kb8SmU8VZUnkcmK0G4I+Tt4SbSftKFbI6rOH4Mb/GO8Iop8SzSIi nKN8IPIAoS7lS2IT0FIayE/lNN1vRvsSeKkAaaf0t1EO/iBI6LtanVbxneSsTHsp l2WMcCqNJBaCFJCx2IAb1vJb0C7wjz6IZhbxeEaePdjvRnEf3V4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:59 2026 by rpki-client