This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: Xry6rk5uZ8JJpxpK2KAvZg4bUwI6q7JVsZ9tWEWWcFQ= Subject key identifier: FA:57:04:50:D4:D3:40:A9:BE:E6:FA:C0:33:0E:06:04:BB:FB:7E:48 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 2E903B4525A1BEBDF32065E25A84527895C5D0F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 048E Signing time: Fri 23 Jan 2026 09:30:46 +0000 Manifest this update: Fri 23 Jan 2026 09:25:46 +0000 Manifest next update: Mon 26 Jan 2026 18:16:46 +0000 Files and hashes: 1: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: 4c5e3nBDOZp3enhaRayEofRENBtVCrwPlJA8LQK01vM=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:90:3b:45:25:a1:be:bd:f3:20:65:e2:5a:84:52:78:95:c5:d0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Jan 23 09:25:46 2026 GMT Not After : Jan 26 18:16:46 2026 GMT Subject: CN=FA570450D4D340A9BEE6FAC0330E0604BBFB7E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:0d:3d:e7:35:8c:66:7a:35:ef:6b:2e:c4: f3:82:49:17:1e:1f:13:04:f5:85:ce:34:67:34:9b: 35:6a:37:96:4d:c5:3a:c5:5e:c2:47:0b:39:aa:c1: 87:d1:1f:f9:c0:56:f0:6c:b2:d5:55:49:5a:c4:56: 3a:98:ac:44:72:3f:b3:d2:58:9e:7a:f6:85:26:c2: 57:0b:d9:43:3a:ca:94:76:c1:47:b7:56:a3:89:cf: a9:7b:f5:d7:94:7c:ba:55:3b:34:58:c4:87:2d:cd: 00:08:eb:d0:47:a4:49:ee:7a:59:31:ec:c1:62:b6: 8c:97:5a:0c:ba:63:d2:3c:d1:b8:09:ed:1a:bb:83: 20:7c:62:e3:d0:df:99:30:bc:3b:4d:eb:11:c7:15: 4c:d2:72:cb:bb:2b:7a:ab:7a:82:b1:50:a5:88:60: 95:ea:bb:4d:54:44:dd:98:59:42:d2:65:fd:b0:b1: 1a:0c:c3:20:7c:95:7d:0b:e8:52:85:14:27:b6:4c: 4f:11:d1:c8:a7:39:2e:75:10:9c:46:59:9d:f1:3f: 2b:42:00:53:01:d8:33:88:82:fe:19:18:28:fe:58: b2:98:69:b6:15:f0:51:dd:dc:f1:1a:a7:47:bc:66: bb:75:37:dc:a0:93:ff:e8:56:b0:9e:3f:62:c7:51: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:57:04:50:D4:D3:40:A9:BE:E6:FA:C0:33:0E:06:04:BB:FB:7E:48 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:de:4a:72:da:d9:ff:c1:a4:8c:20:74:c7:1c:4d:48:20:00: 58:4b:fc:69:ec:29:3a:5d:c6:90:55:a1:02:6c:81:69:f1:ad: 41:53:d8:38:9c:b6:73:30:33:0f:40:d1:fe:1a:c3:8e:27:5e: 73:38:e2:80:58:b2:05:09:18:96:92:e9:2c:06:7e:f2:4d:c5: 44:a9:18:d0:e3:33:58:c2:ed:5f:a9:8b:46:4c:ef:33:7e:0d: 5d:a0:20:6b:6f:52:36:80:d5:7f:ce:23:01:16:fb:8e:d2:9d: d1:1f:24:b1:bf:39:0d:01:f5:42:7f:a2:20:a6:fb:64:b8:5d: 2a:71:b9:a4:86:a3:7b:44:6d:10:95:f9:25:60:6a:b3:e9:ba: 70:c9:6f:87:79:95:17:62:de:f9:c5:07:01:7c:c9:2c:aa:10: ab:23:b1:9d:9e:d0:f9:b6:35:88:71:a6:39:e5:f4:f4:e1:20: 2d:97:87:d1:59:02:6f:76:73:3f:ff:f1:df:df:2c:a4:08:3a: c0:bf:b6:dd:96:67:76:a5:af:92:62:73:a1:7f:71:9d:b0:00: dc:71:b6:59:8c:cf:e6:84:b3:40:8e:1d:03:8f:b8:ee:9b:75: 0a:ab:8c:42:88:bf:a0:5a:76:85:74:4f:75:01:c7:ff:41:9b: af:0e:96:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpA7RSWhvr3zIGXiWoRSeJXF0PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNjAxMjMwOTI1NDZaFw0yNjAxMjYxODE2NDZaMDMxMTAvBgNV BAMTKEZBNTcwNDUwRDREMzQwQTlCRUU2RkFDMDMzMEUwNjA0QkJGQjdFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMw095zWMZno172suxPOCSRce HxME9YXONGc0mzVqN5ZNxTrFXsJHCzmqwYfRH/nAVvBsstVVSVrEVjqYrERyP7PS WJ569oUmwlcL2UM6ypR2wUe3VqOJz6l79deUfLpVOzRYxIctzQAI69BHpEnuelkx 7MFitoyXWgy6Y9I80bgJ7Rq7gyB8YuPQ35kwvDtN6xHHFUzScsu7K3qreoKxUKWI YJXqu01URN2YWULSZf2wsRoMwyB8lX0L6FKFFCe2TE8R0cinOS51EJxGWZ3xPytC AFMB2DOIgv4ZGCj+WLKYabYV8FHd3PEap0e8Zrt1N9ygk//oVrCeP2LHUbIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lcEUNTTQKm+5vrAMw4GBLv7fkgwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLeSnLa2f/BpIwgdMccTUggAFhL/GnsKTpd xpBVoQJsgWnxrUFT2DictnMwMw9A0f4aw44nXnM44oBYsgUJGJaS6SwGfvJNxUSp GNDjM1jC7V+pi0ZM7zN+DV2gIGtvUjaA1X/OIwEW+47SndEfJLG/OQ0B9UJ/oiCm +2S4XSpxuaSGo3tEbRCV+SVgarPpunDJb4d5lRdi3vnFBwF8ySyqEKsjsZ2e0Pm2 NYhxpjnl9PThIC2Xh9FZAm92cz//8d/fLKQIOsC/tt2WZ3alr5Jic6F/cZ2wANxx tlmMz+aEs0COHQOPuO6bdQqrjEKIv6BadoV0T3UBx/9Bm68OlhQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:45 2026 by rpki-client