This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: 6X2X7KdL02IvHXi19TrbTCJ002oybtybZclrhc7M0ao= Subject key identifier: 34:A8:94:D8:7A:8D:7B:40:BE:3A:0D:96:E0:95:00:E6:F8:D0:BD:A7 Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 4883399F87CF2E63FB0611C9D7D3F526EC66F74C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 0322 Signing time: Sun 25 Jan 2026 00:11:45 +0000 Manifest this update: Sun 25 Jan 2026 00:06:45 +0000 Manifest next update: Wed 28 Jan 2026 03:52:45 +0000 Files and hashes: 1: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) 2: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: hpXlhEje4fUw8l7e+lxOhYP9ebiu6U1IsmeLEKV5PPs=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) 4: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:83:39:9f:87:cf:2e:63:fb:06:11:c9:d7:d3:f5:26:ec:66:f7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Jan 25 00:06:45 2026 GMT Not After : Jan 28 03:52:45 2026 GMT Subject: CN=34A894D87A8D7B40BE3A0D96E09500E6F8D0BDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:89:3a:5b:91:8a:d3:73:a7:d8:1d:41:0b: b9:c8:b5:7f:e0:ae:2f:11:cf:d9:e0:58:5a:f0:ce: 50:4b:04:d1:f1:5c:d0:f3:b7:1f:6a:cc:6f:23:79: 80:01:8b:e2:ec:32:c6:07:e7:8c:92:7f:37:ea:58: 49:a2:51:bd:f1:9a:fc:0d:9c:80:f4:12:ae:b0:4e: d1:35:cf:0a:b6:78:c9:e9:d6:13:ea:76:b0:e0:8c: 3a:26:42:d9:c8:56:7d:1f:cb:e8:eb:0e:41:26:1d: dc:c3:ef:4c:d9:c3:35:92:ed:f4:a6:49:ea:02:bb: 0b:c0:01:01:3d:79:5c:de:b4:4f:96:5b:6f:2b:47: 98:e1:48:1c:cd:b6:e3:34:8e:ae:fa:4d:e4:7c:fd: 9b:0c:64:75:1e:4d:a4:cb:50:5b:08:73:01:66:aa: 29:f5:cb:a2:97:31:4a:f8:23:7c:85:e5:4a:dd:24: 3b:c2:09:b5:c2:aa:c8:7e:a3:84:ee:06:43:ea:0d: b2:57:26:df:76:4b:7b:04:af:87:9a:b4:65:f7:e0: d9:c1:ca:6b:a6:6d:c3:6d:a5:a0:7a:f3:bf:76:df: 65:b5:ba:76:f0:4f:73:46:de:48:24:99:9a:54:94: d0:a8:2b:5d:a8:f2:2b:da:f9:2a:38:c3:53:a4:a5: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:94:D8:7A:8D:7B:40:BE:3A:0D:96:E0:95:00:E6:F8:D0:BD:A7 X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b6:17:ac:3f:e2:d9:1e:38:ae:14:24:79:a6:4f:aa:13:55: 72:15:80:0f:69:ec:e6:a1:10:7a:0c:a1:4c:b2:bc:57:1e:3f: f6:03:31:a4:df:71:a0:73:e6:46:ee:8c:05:8a:1e:54:c8:7b: 2d:69:2c:ab:33:8e:c0:7b:bd:4b:42:34:f4:13:2c:cd:db:1b: a8:21:2f:37:55:c5:ca:a5:13:4c:58:33:25:4d:3b:c8:df:81: f2:80:81:cc:a8:e6:03:d5:ef:79:15:01:25:e4:2c:0f:14:a7: ab:ba:71:4a:1a:14:55:cf:95:ad:55:ff:2a:a8:af:af:17:66: 92:63:76:59:71:a8:cc:68:e1:cf:5c:36:90:72:b8:d2:26:78: be:05:5d:cc:a5:71:0a:aa:a9:2e:84:df:76:60:fb:e8:a1:df: 4a:06:94:83:92:96:b4:06:d9:ec:08:53:c4:64:39:ed:24:15: cd:29:48:ec:54:dd:91:bb:a9:6a:2f:5c:0e:5c:93:e0:8b:68: ba:07:3e:90:9f:92:ca:07:fc:8b:a4:2c:b8:bb:bd:ec:6b:90: 40:6b:b6:28:87:dc:f3:36:bc:96:a9:fe:33:ec:6f:60:e8:9f: 74:d4:8b:78:fd:99:66:9a:6b:f8:d5:1a:56:34:94:89:24:56: ff:58:a4:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIM5n4fPLmP7BhHJ19P1Juxm90wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNjAxMjUwMDA2NDVaFw0yNjAxMjgwMzUyNDVaMDMxMTAvBgNV BAMTKDM0QTg5NEQ4N0E4RDdCNDBCRTNBMEQ5NkUwOTUwMEU2RjhEMEJEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUYk6W5GK03On2B1BC7nItX/g ri8Rz9ngWFrwzlBLBNHxXNDztx9qzG8jeYABi+LsMsYH54ySfzfqWEmiUb3xmvwN nID0Eq6wTtE1zwq2eMnp1hPqdrDgjDomQtnIVn0fy+jrDkEmHdzD70zZwzWS7fSm SeoCuwvAAQE9eVzetE+WW28rR5jhSBzNtuM0jq76TeR8/ZsMZHUeTaTLUFsIcwFm qin1y6KXMUr4I3yF5UrdJDvCCbXCqsh+o4TuBkPqDbJXJt92S3sEr4eatGX34NnB ymumbcNtpaB6879232W1unbwT3NG3kgkmZpUlNCoK12o8iva+So4w1OkpWsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNKiU2HqNe0C+Og2W4JUA5vjQvacwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa2F6w/4tkeOK4UJHmmT6oTVXIVgA9p7Oah EHoMoUyyvFceP/YDMaTfcaBz5kbujAWKHlTIey1pLKszjsB7vUtCNPQTLM3bG6gh LzdVxcqlE0xYMyVNO8jfgfKAgcyo5gPV73kVASXkLA8Up6u6cUoaFFXPla1V/yqo r68XZpJjdllxqMxo4c9cNpByuNImeL4FXcylcQqqqS6E33Zg++ih30oGlIOSlrQG 2ewIU8RkOe0kFc0pSOxU3ZG7qWovXA5ck+CLaLoHPpCfksoH/IukLLi7vexrkEBr tiiH3PM2vJap/jPsb2Don3TUi3j9mWaaa/jVGlY0lIkkVv9YpL4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:36 2026 by rpki-client