This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: VeijKleHi1M5Apg8TalLbwxGqNtpEE0CzdxjOnj1CRI= Subject key identifier: 4E:DA:08:8F:C7:95:E8:3A:87:E4:F4:B3:16:24:65:AE:7B:68:8E:52 Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 0C50796AF78A748843DC25945971BCC6BFE97A7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 0508 Signing time: Fri 23 Jan 2026 17:41:39 +0000 Manifest this update: Fri 23 Jan 2026 17:36:39 +0000 Manifest next update: Mon 26 Jan 2026 21:58:39 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 2: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: 4u4NH6NCyHgH8frnMsi+q1aYkQqk57yvgEnNQdzftSo=) 3: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:50:79:6a:f7:8a:74:88:43:dc:25:94:59:71:bc:c6:bf:e9:7a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Jan 23 17:36:39 2026 GMT Not After : Jan 26 21:58:39 2026 GMT Subject: CN=4EDA088FC795E83A87E4F4B3162465AE7B688E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:69:29:58:7f:c8:01:20:40:30:23:6d:a8: 11:17:6a:5a:2b:e2:e1:14:44:9c:80:0d:4a:df:a2: 0b:85:d9:5b:b7:10:e4:ed:c0:3c:a4:a1:1a:a5:aa: f6:de:21:1d:ba:f3:e2:c2:d3:b6:0d:18:db:c5:7e: dd:3d:c3:43:31:b2:4d:ff:3b:df:ea:f9:cb:fa:cb: 20:6e:ef:ad:7f:db:8a:3d:67:47:60:81:8a:54:8e: d9:d9:aa:53:56:50:af:e6:50:89:c2:a0:9b:a6:71: 76:69:72:68:55:38:af:3c:22:25:b6:3f:ab:20:b1: 5a:4f:ed:b4:44:32:e9:50:3f:73:af:39:c0:f9:b9: c8:14:13:2a:ca:35:54:65:7f:ec:74:c4:e3:ec:5f: 22:23:71:29:1c:e9:0f:cf:da:da:2b:0f:73:14:46: 28:b9:b9:5d:d6:4d:28:d9:b2:ec:23:4c:5a:48:0d: b1:f6:7c:7a:b6:8e:33:17:67:bb:30:aa:4f:d5:12: 2f:38:34:bc:6a:4e:78:07:5b:5a:29:02:ad:37:be: 0d:40:18:d7:df:f0:24:90:07:06:ea:8c:dd:fb:8a: 9d:d7:7e:42:85:a7:15:79:1d:f0:3a:c9:5b:93:c0: 80:e4:45:67:b2:21:ce:f3:e0:17:d6:eb:69:a9:3d: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DA:08:8F:C7:95:E8:3A:87:E4:F4:B3:16:24:65:AE:7B:68:8E:52 X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d9:1c:a9:be:ff:12:5f:3e:aa:bc:be:a8:c3:7c:9d:6a:85: fc:22:8e:03:22:21:1f:5c:55:00:12:f4:d3:5e:6b:33:a6:88: bc:fe:eb:2e:0e:66:ec:ae:3f:58:c1:ed:b2:ab:7d:28:ce:ca: 03:f7:97:dc:da:d3:54:73:af:88:7d:c8:6c:13:b7:e9:c1:ba: ce:6e:61:05:ee:d8:03:6f:9a:57:38:27:ce:6d:b7:28:3d:f0: 57:c2:4d:63:9f:7e:f1:87:29:36:37:12:0f:bc:3d:2f:2a:e6: e3:aa:7d:bf:84:3a:5f:dd:85:7c:4f:0d:7f:f5:6f:e2:1d:c1: 34:d1:4f:48:fd:2a:cf:af:bf:e1:83:ac:34:89:a9:8c:dd:17: 78:82:5b:24:12:f8:ca:63:25:e6:77:8a:80:a2:7d:2c:d9:28: b6:3e:bc:45:42:ef:6e:15:52:d5:ad:be:fe:64:96:88:9b:6a: 02:14:89:8e:1e:c6:79:c1:70:9a:c6:49:8e:b7:de:11:8f:02: 9f:ff:a3:da:9f:2a:31:7b:58:84:aa:07:a1:8e:28:61:85:76: 0b:53:cb:6f:20:bf:bc:d7:38:e9:7f:f8:5c:da:fa:fe:05:ac: 13:c6:31:ac:00:ee:d1:30:7a:24:70:86:2d:45:40:f7:5f:93: e3:8c:dd:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFB5aveKdIhD3CWUWXG8xr/pen8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNjAxMjMxNzM2MzlaFw0yNjAxMjYyMTU4MzlaMDMxMTAvBgNV BAMTKDRFREEwODhGQzc5NUU4M0E4N0U0RjRCMzE2MjQ2NUFFN0I2ODhFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSTmkpWH/IASBAMCNtqBEXalor 4uEURJyADUrfoguF2Vu3EOTtwDykoRqlqvbeIR268+LC07YNGNvFft09w0Mxsk3/ O9/q+cv6yyBu761/24o9Z0dggYpUjtnZqlNWUK/mUInCoJumcXZpcmhVOK88IiW2 P6sgsVpP7bREMulQP3OvOcD5ucgUEyrKNVRlf+x0xOPsXyIjcSkc6Q/P2torD3MU Rii5uV3WTSjZsuwjTFpIDbH2fHq2jjMXZ7swqk/VEi84NLxqTngHW1opAq03vg1A GNff8CSQBwbqjN37ip3XfkKFpxV5HfA6yVuTwIDkRWeyIc7z4BfW62mpPQeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtoIj8eV6DqH5PSzFiRlrntojlIwHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPZHKm+/xJfPqq8vqjDfJ1qhfwijgMiIR9c VQAS9NNeazOmiLz+6y4OZuyuP1jB7bKrfSjOygP3l9za01Rzr4h9yGwTt+nBus5u YQXu2ANvmlc4J85ttyg98FfCTWOffvGHKTY3Eg+8PS8q5uOqfb+EOl/dhXxPDX/1 b+IdwTTRT0j9Ks+vv+GDrDSJqYzdF3iCWyQS+MpjJeZ3ioCifSzZKLY+vEVC724V UtWtvv5kloibagIUiY4exnnBcJrGSY633hGPAp//o9qfKjF7WISqB6GOKGGFdgtT y28gv7zXOOl/+Fza+v4FrBPGMawA7tEweiRwhi1FQPdfk+OM3eQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:18 2026 by rpki-client