This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft (raw, json) Hash identifier: 4UbDWLWYw1J0fO7yDy4fihzZ3dhdTZic25tDxxtt9s0= Subject key identifier: EF:55:4B:7E:AF:F9:F5:18:55:0B:5B:3D:4D:35:DF:A0:76:11:DF:CC Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Certificate serial: 09ABE3FB3AB9E9745DAD82181AA62C32C6DD7271 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft Manifest number: 0172 Signing time: Fri 23 Jan 2026 23:52:00 +0000 Manifest this update: Fri 23 Jan 2026 23:47:00 +0000 Manifest next update: Tue 27 Jan 2026 08:45:00 +0000 Files and hashes: 1: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: fDXMTAj/S8oQs6LhTEcvx+m4yd6GabWyid1nJ3v2IOc=) 2: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: f+ikvw3lFJQBhoG9P7rO8nWG3RR5gcK3OF+btbUSD1M=) 3: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl (hash: dUqjB98mMOc/hgwJZISwvUNhlP24ob/9YouKIT/oM7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ab:e3:fb:3a:b9:e9:74:5d:ad:82:18:1a:a6:2c:32:c6:dd:72:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Validity Not Before: Jan 23 23:47:00 2026 GMT Not After : Jan 27 08:45:00 2026 GMT Subject: CN=EF554B7EAFF9F518550B5B3D4D35DFA07611DFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:3c:f0:50:2a:06:4b:ea:9f:31:9d:cd:2e: 51:3c:77:40:44:95:f9:5a:87:46:0e:fa:ad:df:3a: c7:df:b3:a5:63:72:58:4d:e9:12:ea:d2:5d:52:01: 0a:de:41:b8:0c:a0:ee:9d:e9:da:24:31:ef:81:ed: 38:4b:1f:a6:9e:6c:84:e4:c6:3a:fd:cd:fb:e7:cf: 7b:c8:df:88:5a:57:7e:d2:e9:d5:17:02:de:1f:18: 71:41:4a:31:6e:b4:b8:fd:59:54:27:a4:21:96:38: d7:f8:24:aa:19:45:a1:f2:ac:22:58:c3:bd:ee:8c: 90:a2:a8:f7:d7:0d:f7:58:3f:9c:0a:df:4a:23:3e: 8d:df:70:ba:7e:b4:64:30:33:60:35:fc:da:0d:c3: 30:ed:05:1f:79:d1:2c:d3:78:8a:01:4d:7e:9d:07: 56:f6:a5:29:8c:54:09:d5:40:36:2a:22:7f:9d:8f: 20:fe:ed:ef:89:10:d6:f8:79:e7:cd:2a:91:ae:f7: 40:d9:13:53:f1:82:5c:3e:a0:0c:34:e0:87:53:a7: c2:b6:3d:94:9a:37:a1:57:a6:75:d1:7b:87:2a:8b: 8c:ec:d5:29:7e:aa:d1:d6:82:f7:aa:02:29:a1:a6: 27:57:0d:bb:49:bc:e3:92:a2:21:25:bf:3b:78:2e: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:55:4B:7E:AF:F9:F5:18:55:0B:5B:3D:4D:35:DF:A0:76:11:DF:CC X509v3 Authority Key Identifier: keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fe:df:0d:df:72:47:a6:e6:b7:14:d6:d0:00:53:88:b6:7c: 75:33:c6:36:37:ba:14:e8:50:60:97:d9:86:df:80:a4:b7:6b: 1e:4c:7c:5a:f2:00:72:cd:18:79:cd:4f:80:22:f1:5b:4b:3e: d2:92:7d:42:32:32:6e:61:51:e6:fc:f1:21:c5:26:ee:fb:a9: d4:ec:e0:b1:b1:23:6f:fa:24:a3:df:84:4f:74:6c:b3:55:fe: a6:a6:ef:e8:67:de:af:f7:28:50:a7:da:51:06:33:ea:d3:65: 09:14:d8:aa:40:92:7d:36:d0:97:34:65:6d:cb:78:4c:ac:00: 94:d6:22:74:62:5a:ef:11:10:30:c2:ca:dd:ed:a5:46:ff:53: dc:09:75:9b:13:b4:bb:d2:73:18:67:f3:bf:91:25:25:e9:82: be:57:8d:1c:91:e4:14:89:b2:35:04:c9:e3:06:d9:f1:95:88: 4c:bd:d3:80:95:33:1c:e2:7f:ab:b2:88:0a:3e:49:41:39:3b: d1:22:a2:8f:4b:8d:8e:50:2b:9e:b0:c9:87:ba:8e:06:0c:9f: bd:e1:5e:65:7b:38:7b:b6:b2:14:46:1d:b6:65:3f:2e:5c:f0: 7e:bd:8e:d7:25:7a:69:ba:1a:e2:72:58:90:2f:8b:4f:cd:9a: a5:da:64:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCavj+zq56XRdrYIYGqYsMsbdcnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG NDJBOTQ0QjAeFw0yNjAxMjMyMzQ3MDBaFw0yNjAxMjcwODQ1MDBaMDMxMTAvBgNV BAMTKEVGNTU0QjdFQUZGOUY1MTg1NTBCNUIzRDREMzVERkEwNzYxMURGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsDzwUCoGS+qfMZ3NLlE8d0BE lflah0YO+q3fOsffs6VjclhN6RLq0l1SAQreQbgMoO6d6dokMe+B7ThLH6aebITk xjr9zfvnz3vI34haV37S6dUXAt4fGHFBSjFutLj9WVQnpCGWONf4JKoZRaHyrCJY w73ujJCiqPfXDfdYP5wK30ojPo3fcLp+tGQwM2A1/NoNwzDtBR950SzTeIoBTX6d B1b2pSmMVAnVQDYqIn+djyD+7e+JENb4eefNKpGu90DZE1Pxglw+oAw04IdTp8K2 PZSaN6FXpnXRe4cqi4zs1Sl+qtHWgveqAimhpidXDbtJvOOSoiElvzt4LlWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU71VLfq/59RhVC1s9TTXfoHYR38wwHwYDVR0j BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB OTQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlF QUZGNDJBOTQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX+3w3fckem5rcU1tAAU4i2fHUzxjY3uhTo UGCX2YbfgKS3ax5MfFryAHLNGHnNT4Ai8VtLPtKSfUIyMm5hUeb88SHFJu77qdTs 4LGxI2/6JKPfhE90bLNV/qam7+hn3q/3KFCn2lEGM+rTZQkU2KpAkn020Jc0ZW3L eEysAJTWInRiWu8REDDCyt3tpUb/U9wJdZsTtLvScxhn87+RJSXpgr5XjRyR5BSJ sjUEyeMG2fGViEy904CVMxzif6uyiAo+SUE5O9Eioo9LjY5QK56wyYe6jgYMn73h XmV7OHu2shRGHbZlPy5c8H69jtclemm6GuJyWJAvi0/NmqXaZFI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:27:55 2026 by rpki-client