This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: C3e+x3NB5H1XSKKfZi3J4P6E5cWcC18cgREbqqlH6X4= Subject key identifier: E9:E9:99:33:CF:A5:F6:36:2E:D2:2D:E7:F1:22:4B:D9:D5:17:46:E5 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 46C9EACF0CF643B885CDC17C26263AEF41D712AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 0509 Signing time: Sat 24 Jan 2026 07:41:11 +0000 Manifest this update: Sat 24 Jan 2026 07:36:11 +0000 Manifest next update: Tue 27 Jan 2026 13:55:11 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) 2: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: kZrCKXbqjWHNww2kYiDdb+0cEitFnzANkBwfum2ZhH8=) 3: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c9:ea:cf:0c:f6:43:b8:85:cd:c1:7c:26:26:3a:ef:41:d7:12:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Jan 24 07:36:11 2026 GMT Not After : Jan 27 13:55:11 2026 GMT Subject: CN=E9E99933CFA5F6362ED22DE7F1224BD9D51746E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:46:34:85:21:76:6f:1e:c8:52:30:bc:4f:8f: 83:ce:84:89:61:87:a3:53:c8:ee:97:72:9d:37:56: f9:a0:fb:ad:ee:18:94:00:f7:56:e2:00:47:5d:65: 97:57:95:1a:bd:01:09:c1:f4:d3:0a:19:04:ae:9f: 7c:8f:16:a5:43:e9:3d:eb:a9:fa:3a:72:af:88:ff: 3a:4d:d3:1a:26:11:1e:7a:3d:52:04:d7:57:71:32: 79:97:f7:d5:f1:73:a7:e7:4e:b0:7c:b2:81:c5:26: 60:00:d2:c9:5f:c4:4b:56:b2:ef:1d:35:a0:d3:ff: 68:9a:b1:a9:57:ed:4b:7c:d6:cc:c3:96:5e:23:80: 1e:21:4f:21:f7:18:7a:5e:d8:2f:5a:26:3f:f9:d5: 37:cd:57:8e:d6:b4:59:ba:77:4a:40:64:2b:30:33: ca:97:49:7d:ab:4d:f3:0e:52:6f:e0:9b:9c:9b:f5: 60:b2:cb:2e:74:94:d2:22:03:26:d9:89:be:11:f9: 2f:46:02:a3:b3:1c:d9:23:3b:27:b3:9d:15:e4:a5: aa:30:26:53:e3:e6:b8:5a:5b:43:d1:43:e5:02:9a: 5a:f2:89:f7:c0:cd:59:2f:34:5f:0a:bf:b8:03:e8: 7a:19:7e:2f:32:4b:01:76:0f:dd:13:cd:87:3a:32: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:99:33:CF:A5:F6:36:2E:D2:2D:E7:F1:22:4B:D9:D5:17:46:E5 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:26:a9:36:4e:12:99:f3:4e:44:95:7a:df:50:0a:ac:89:61: 4a:ac:6b:4c:f9:b9:3e:13:79:10:81:d4:1d:a9:e1:5c:23:82: 80:1f:58:ca:2a:6d:9f:e6:b5:43:e9:e5:0d:2f:d2:e0:4a:f0: 2f:1f:99:b7:4f:59:06:17:9b:53:aa:e8:28:65:c6:94:9e:0c: c6:c1:a4:1e:35:af:2e:5d:1e:94:25:9b:20:a4:ab:d3:4b:50: 84:4a:60:78:23:8a:61:82:fe:7b:3b:22:6d:8e:c9:71:37:bd: 70:12:0b:6a:83:8a:02:89:83:09:c6:1f:46:3f:a8:d8:65:13: 56:a0:ff:47:58:27:e4:87:da:b3:01:50:2d:88:c9:cb:98:95: df:75:01:2b:60:9c:37:ea:b0:96:38:b3:b0:a3:09:dc:4c:f1: 18:4f:c2:69:f1:07:ea:a8:20:e7:3c:0e:9f:b7:fb:05:62:2e: ea:61:93:b6:b6:33:a9:b4:51:08:0f:cb:4d:ad:ad:6f:4e:63: 36:0e:38:ee:a7:6b:29:b7:9e:1e:61:35:b7:05:af:93:7a:dc: ba:8c:f2:33:14:af:b8:97:87:85:4c:4a:e8:e0:42:97:a2:a4: 2e:72:f2:f0:77:19:fd:0c:b4:0a:b7:8a:d9:b1:d8:19:cb:af: 7f:e8:da:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsnqzwz2Q7iFzcF8JiY670HXEqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNjAxMjQwNzM2MTFaFw0yNjAxMjcxMzU1MTFaMDMxMTAvBgNV BAMTKEU5RTk5OTMzQ0ZBNUY2MzYyRUQyMkRFN0YxMjI0QkQ5RDUxNzQ2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxRjSFIXZvHshSMLxPj4POhIlh h6NTyO6Xcp03Vvmg+63uGJQA91biAEddZZdXlRq9AQnB9NMKGQSun3yPFqVD6T3r qfo6cq+I/zpN0xomER56PVIE11dxMnmX99Xxc6fnTrB8soHFJmAA0slfxEtWsu8d NaDT/2iasalX7Ut81szDll4jgB4hTyH3GHpe2C9aJj/51TfNV47WtFm6d0pAZCsw M8qXSX2rTfMOUm/gm5yb9WCyyy50lNIiAybZib4R+S9GAqOzHNkjOyeznRXkpaow JlPj5rhaW0PRQ+UCmlryiffAzVkvNF8Kv7gD6HoZfi8ySwF2D90TzYc6MnPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6emZM8+l9jYu0i3n8SJL2dUXRuUwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM4mqTZOEpnzTkSVet9QCqyJYUqsa0z5uT4T eRCB1B2p4VwjgoAfWMoqbZ/mtUPp5Q0v0uBK8C8fmbdPWQYXm1Oq6ChlxpSeDMbB pB41ry5dHpQlmyCkq9NLUIRKYHgjimGC/ns7Im2OyXE3vXASC2qDigKJgwnGH0Y/ qNhlE1ag/0dYJ+SH2rMBUC2IycuYld91AStgnDfqsJY4s7CjCdxM8RhPwmnxB+qo IOc8Dp+3+wViLuphk7a2M6m0UQgPy02trW9OYzYOOO6naym3nh5hNbcFr5N63LqM 8jMUr7iXh4VMSujgQpeipC5y8vB3Gf0MtAq3itmx2BnLr3/o2g4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:47 2026 by rpki-client