This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: njSfTaHGJC5Ha0EY0IxkeIHGJePKc2wOMGpvlYYCwpM= Subject key identifier: F9:A1:50:F5:DC:8E:5E:EC:BE:98:CE:1B:97:2B:1C:7B:E4:63:9F:D4 Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 488A6516A34162BE68337DC223B8DA442385C180 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 02A4 Signing time: Fri 23 Jan 2026 19:41:16 +0000 Manifest this update: Fri 23 Jan 2026 19:36:16 +0000 Manifest next update: Tue 27 Jan 2026 05:04:16 +0000 Files and hashes: 1: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: ym37SSdo2iVsDC1Dln3Pafguv+BU6JfKF0m5JjGwHHs=) 2: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: +vb6hVf+iueQG1juyqwgRVa2XN8obd3EQdkAvXqhpiw=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: MmuXAKKjfDSx5uMJ92RoI47O3gaQ+ApBdube+8uCMpY=) 4: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: T9YXzECK/+yPsc0MjXlDkJh+Di90dnJO766syYdRfEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8a:65:16:a3:41:62:be:68:33:7d:c2:23:b8:da:44:23:85:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Jan 23 19:36:16 2026 GMT Not After : Jan 27 05:04:16 2026 GMT Subject: CN=F9A150F5DC8E5EECBE98CE1B972B1C7BE4639FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:4f:9c:cc:a5:28:ae:62:97:f7:e8:63:3d: c7:d2:05:15:df:9d:1d:d1:0f:3a:ce:7b:87:79:93: 63:6a:f8:e8:6b:4d:1b:89:5a:c6:7d:2d:70:13:4c: d9:a1:16:14:2e:e4:59:95:0e:ad:11:9d:11:af:15: 79:5c:3f:ab:37:91:01:51:85:fd:fd:16:64:e5:ae: b7:c8:6d:a7:b0:55:e7:8e:ff:20:28:c6:93:b9:3a: 3b:89:e2:45:07:cc:ba:68:cb:68:9e:a7:93:50:60: cb:47:c7:d2:e2:54:ac:b9:d9:cf:5a:38:fb:dc:5b: 45:a6:5c:5b:39:48:9e:b8:d7:42:39:cf:e3:62:ce: 82:8f:e8:62:b9:db:d9:07:bb:52:80:73:ff:5c:86: 3a:11:c9:13:39:47:28:e9:92:f9:54:57:27:d1:ad: e4:bc:58:16:e2:83:22:00:ae:01:82:d1:64:2c:1b: 35:2b:59:93:01:b9:d4:dd:23:c9:39:90:79:2a:60: fd:ff:bb:07:75:ef:36:af:90:1e:ea:f7:96:bc:6c: 90:cc:fb:67:89:6b:13:48:d7:65:0c:68:9d:12:a6: 09:b8:be:de:4e:b7:f7:db:aa:75:e7:e6:fd:26:f2: e0:44:1c:11:64:b1:1e:75:4c:81:a6:71:dc:b5:dd: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A1:50:F5:DC:8E:5E:EC:BE:98:CE:1B:97:2B:1C:7B:E4:63:9F:D4 X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:78:4e:0b:5d:32:f4:01:d2:00:de:75:7f:b3:e1:96:27:91: d9:61:30:61:3a:3a:70:90:0d:78:46:4e:72:a3:91:85:ac:61: 3e:40:81:39:d9:2c:bf:a1:33:70:d8:0e:6a:93:ea:6a:43:86: 64:00:93:dd:82:b1:8b:b8:28:de:02:50:22:17:30:a8:ce:cf: d2:2f:55:1d:40:b3:a3:24:61:09:44:9c:b7:ef:8d:2d:92:6b: cb:66:14:5e:cd:51:e5:34:b3:de:5f:de:97:45:c4:46:4c:87: 32:45:b9:40:06:7a:fb:58:44:c1:f1:66:27:4e:20:7c:4e:c3: 1b:58:33:74:67:c7:a3:a8:91:06:4b:3d:5e:c9:5a:03:ce:eb: 3e:8c:22:11:36:25:a6:20:66:51:1c:06:35:72:35:a3:eb:d9: e2:a5:c4:a9:d9:4a:86:fb:e6:98:84:c2:f3:2b:d4:0a:7e:c4: 4e:e0:e4:10:11:6b:96:e7:bc:00:b4:c5:cf:16:39:11:d6:a1: a3:d7:42:c3:d3:a5:e7:84:76:e6:32:40:b2:63:5d:74:96:e1: 5a:ef:eb:c3:a3:fb:cb:87:ca:48:dc:52:3a:61:7d:d7:d0:61: b4:44:c1:b1:de:dc:23:25:b7:52:c8:19:16:aa:54:e1:ef:50: 46:a5:37:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIplFqNBYr5oM33CI7jaRCOFwYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNjAxMjMxOTM2MTZaFw0yNjAxMjcwNTA0MTZaMDMxMTAvBgNV BAMTKEY5QTE1MEY1REM4RTVFRUNCRTk4Q0UxQjk3MkIxQzdCRTQ2MzlGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFk+czKUormKX9+hjPcfSBRXf nR3RDzrOe4d5k2Nq+OhrTRuJWsZ9LXATTNmhFhQu5FmVDq0RnRGvFXlcP6s3kQFR hf39FmTlrrfIbaewVeeO/yAoxpO5OjuJ4kUHzLpoy2iep5NQYMtHx9LiVKy52c9a OPvcW0WmXFs5SJ6410I5z+NizoKP6GK529kHu1KAc/9chjoRyRM5RyjpkvlUVyfR reS8WBbigyIArgGC0WQsGzUrWZMBudTdI8k5kHkqYP3/uwd17zavkB7q95a8bJDM +2eJaxNI12UMaJ0Spgm4vt5Ot/fbqnXn5v0m8uBEHBFksR51TIGmcdy13YENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+aFQ9dyOXuy+mM4blysce+Rjn9QwHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKN4TgtdMvQB0gDedX+z4ZYnkdlhMGE6OnCQ DXhGTnKjkYWsYT5AgTnZLL+hM3DYDmqT6mpDhmQAk92CsYu4KN4CUCIXMKjOz9Iv VR1As6MkYQlEnLfvjS2Sa8tmFF7NUeU0s95f3pdFxEZMhzJFuUAGevtYRMHxZidO IHxOwxtYM3Rnx6OokQZLPV7JWgPO6z6MIhE2JaYgZlEcBjVyNaPr2eKlxKnZSob7 5piEwvMr1Ap+xE7g5BARa5bnvAC0xc8WORHWoaPXQsPTpeeEduYyQLJjXXSW4Vrv 68Oj+8uHykjcUjphfdfQYbREwbHe3CMlt1LIGRaqVOHvUEalNzk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:01 2026 by rpki-client