This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: LYxhEJXSwJUkvWiKdLCth+qgn+uUOSH2H2w4joYYPyY= Subject key identifier: 99:A4:88:58:A9:B6:89:7F:0A:6B:0C:95:87:F9:95:7D:AE:E3:FF:A3 Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 0C829235611AB04DCB638DB057BA3AB3EA624288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: 0117 Signing time: Sat 24 Jan 2026 17:02:01 +0000 Manifest this update: Sat 24 Jan 2026 16:57:01 +0000 Manifest next update: Tue 27 Jan 2026 21:08:01 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: Tjg8mZwjqPJx4zjRQUp2EMCGGvYzUXjslCQmHQzucYI=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: HKyeZGWabp6YfJUwjDFhsWbo0T55m8huqonU6rGdOys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:82:92:35:61:1a:b0:4d:cb:63:8d:b0:57:ba:3a:b3:ea:62:42:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Jan 24 16:57:01 2026 GMT Not After : Jan 27 21:08:01 2026 GMT Subject: CN=99A48858A9B6897F0A6B0C9587F9957DAEE3FFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:41:23:d1:59:45:76:cf:75:52:98:97:52: 1c:3f:55:79:36:b7:d7:93:27:83:dc:7e:60:5e:44: 2f:51:9c:35:c4:55:6c:88:48:bf:94:72:77:a1:7d: 79:44:60:91:09:21:eb:99:44:a0:fd:60:10:84:ce: c7:72:45:68:79:f3:e3:a3:9a:c3:89:2b:92:13:d0: 89:9e:9f:66:06:a7:11:6f:d4:d6:2b:20:76:71:41: 29:01:9d:82:9c:0f:4b:74:72:cb:68:af:97:19:69: 5f:6b:6e:4c:b2:6e:6e:da:02:fb:41:6d:1c:a5:6a: 9b:51:f2:11:25:fd:93:a8:ae:7d:17:91:e5:fd:b4: 87:3d:99:00:4c:b4:2f:e2:35:8a:50:3c:0d:14:5b: 84:e5:b9:2e:66:08:21:99:47:b3:0a:c2:38:4a:29: 94:d0:65:e1:a7:cd:86:e4:d0:55:86:a3:9a:45:1e: a8:de:e9:5a:09:c0:00:d5:09:7a:71:8d:60:3a:8e: ba:a3:62:7b:c1:9b:e1:4c:fd:04:de:7e:94:2f:2a: 6f:1c:17:13:7e:78:b3:96:54:b2:ae:7d:9b:cb:5d: de:6a:c2:6f:38:d8:77:c3:b9:3d:69:63:35:fe:ad: 37:4b:90:d1:54:3a:7d:5a:31:10:43:02:f5:e7:99: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:88:58:A9:B6:89:7F:0A:6B:0C:95:87:F9:95:7D:AE:E3:FF:A3 X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9b:e4:88:6e:52:70:09:e8:75:38:27:bc:4a:32:9c:fd:3e: 12:84:4d:4c:e3:d1:7e:70:da:b7:21:e3:16:08:41:09:39:fd: 4a:7f:7f:7b:4f:e6:0f:f9:8b:5b:d1:80:b9:f1:2f:d7:6b:2c: 10:68:10:74:fd:01:bf:7e:da:92:67:6c:32:d7:1d:b8:f4:7f: 08:1c:a7:35:48:5e:a6:81:ad:e6:83:67:12:ef:64:c3:09:42: 06:ff:52:65:0d:9c:0e:38:18:1d:92:2a:10:87:36:f5:b0:d3: 17:e0:c8:fb:ba:22:94:c3:67:4a:4b:9d:2c:76:ec:03:b2:12: 5a:20:38:0d:f5:c5:ef:f9:2f:4d:8f:61:48:d8:1d:29:8b:ee: 27:cd:2e:22:5a:91:a8:9d:a9:ec:bb:12:9f:44:58:a7:70:1c: 0c:ab:8b:27:7e:19:3f:7a:fb:4d:c0:43:fb:f9:70:56:f5:9f: 46:04:2a:5e:3f:a7:52:ef:0c:d3:6a:39:8a:65:e2:f4:b5:94: 2d:f7:a4:ce:d8:7b:21:ca:a5:7e:64:c2:99:8a:d5:ff:d0:22: 11:64:d5:92:a7:c6:30:61:fd:71:d6:44:dd:7c:80:cd:ab:00: cc:ea:71:48:b8:a2:c8:f9:75:8a:29:50:0a:e1:f6:b3:b5:02: fc:45:bf:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDIKSNWEasE3LY42wV7o6s+piQogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNjAxMjQxNjU3MDFaFw0yNjAxMjcyMTA4MDFaMDMxMTAvBgNV BAMTKDk5QTQ4ODU4QTlCNjg5N0YwQTZCMEM5NTg3Rjk5NTdEQUVFM0ZGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrD0Ej0VlFds91UpiXUhw/VXk2 t9eTJ4PcfmBeRC9RnDXEVWyISL+UcnehfXlEYJEJIeuZRKD9YBCEzsdyRWh58+Oj msOJK5IT0Imen2YGpxFv1NYrIHZxQSkBnYKcD0t0cstor5cZaV9rbkyybm7aAvtB bRylaptR8hEl/ZOorn0XkeX9tIc9mQBMtC/iNYpQPA0UW4TluS5mCCGZR7MKwjhK KZTQZeGnzYbk0FWGo5pFHqje6VoJwADVCXpxjWA6jrqjYnvBm+FM/QTefpQvKm8c FxN+eLOWVLKufZvLXd5qwm842HfDuT1pYzX+rTdLkNFUOn1aMRBDAvXnmXSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmaSIWKm2iX8KawyVh/mVfa7j/6MwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+b5IhuUnAJ6HU4J7xKMpz9PhKETUzj0X5w 2rch4xYIQQk5/Up/f3tP5g/5i1vRgLnxL9drLBBoEHT9Ab9+2pJnbDLXHbj0fwgc pzVIXqaBreaDZxLvZMMJQgb/UmUNnA44GB2SKhCHNvWw0xfgyPu6IpTDZ0pLnSx2 7AOyElogOA31xe/5L02PYUjYHSmL7ifNLiJakaidqey7Ep9EWKdwHAyriyd+GT96 +03AQ/v5cFb1n0YEKl4/p1LvDNNqOYpl4vS1lC33pM7YeyHKpX5kwpmK1f/QIhFk 1ZKnxjBh/XHWRN18gM2rAMzqcUi4osj5dYopUArh9rO1AvxFv0w= -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:17 2026 by rpki-client