This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: P+irj9E/I0KLkyxLwlom/mtELc75mETaBci+1eCbcR4= Subject key identifier: 4E:30:20:60:3B:37:6E:E3:24:82:90:36:05:90:E5:FE:04:A1:BD:BA Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 4E5AB08EA81A1859B1B3335E2B6AD66750C08401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01EE Signing time: Sat 24 Jan 2026 16:40:02 +0000 Manifest this update: Sat 24 Jan 2026 16:35:02 +0000 Manifest next update: Tue 27 Jan 2026 20:47:02 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) 2: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: An7ugYzZrSacTuvbrzXUmBhpn7RqJkObRXGdltdg/NQ=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5a:b0:8e:a8:1a:18:59:b1:b3:33:5e:2b:6a:d6:67:50:c0:84:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Jan 24 16:35:02 2026 GMT Not After : Jan 27 20:47:02 2026 GMT Subject: CN=4E3020603B376EE3248290360590E5FE04A1BDBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:bb:59:c7:d0:8f:a0:1e:02:b4:48:c7:fc: 68:50:3e:f2:26:13:35:2e:0c:61:22:8c:11:ca:e7: 9a:f2:f0:0c:1c:b7:9d:b3:a9:c7:78:fd:4e:3b:db: cb:96:68:45:a8:50:40:a6:85:60:8d:9c:e2:c6:60: 84:83:ef:49:fc:ca:9d:71:0c:5b:0b:14:db:bd:01: e2:2e:80:08:57:1d:20:c1:40:bd:47:69:99:61:22: eb:b2:8b:0c:e1:9a:c9:fc:fe:80:3b:81:56:99:75: 01:d7:19:86:18:cb:19:ef:11:a4:51:ef:3c:b3:dd: 8a:3e:79:3d:22:07:b7:ba:57:2f:36:36:6a:5c:7e: 65:4e:a6:5b:78:8f:8c:b4:96:44:45:27:d4:d1:dc: e8:31:0c:e1:36:9c:11:6a:ea:8d:36:6a:08:a2:65: 3f:0c:ba:d3:24:aa:a0:94:23:39:f7:27:4b:3d:92: 68:e7:5c:ad:7d:54:63:8d:86:86:38:43:df:93:9e: ea:8a:84:a0:6c:d4:46:82:72:14:24:0e:28:07:75: 05:48:db:35:f7:99:9a:fc:45:d5:f8:63:bb:d5:a5: b7:1e:d9:62:e9:8a:87:d8:84:88:a8:df:8c:07:5a: 46:07:16:88:27:ce:22:77:79:bd:18:09:16:7d:e5: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:20:60:3B:37:6E:E3:24:82:90:36:05:90:E5:FE:04:A1:BD:BA X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:14:90:d5:d9:b6:3a:77:99:ac:48:64:99:8b:cf:bf:de:67: 52:0e:4f:77:1b:7b:2d:ff:1c:e8:cb:27:0a:c2:15:c8:c9:39: 67:c4:32:ef:13:24:9b:5d:26:22:13:2d:5d:30:49:ec:59:44: 8c:b1:c1:be:aa:60:8f:72:83:53:40:6c:d1:62:36:dc:73:55: 54:df:5a:eb:9b:ac:6b:d5:2a:3e:77:d1:68:4e:a3:50:cc:c3: 0a:8a:42:f3:f3:89:fc:8e:fd:d8:1a:21:01:3b:40:cc:a8:f3: 99:47:76:e9:0e:9c:5a:43:66:bc:af:4b:9f:d9:37:c9:30:26: f9:24:94:1a:f5:b4:3d:37:97:32:be:b0:e0:fc:4d:bc:5a:5b: 9e:af:1d:c4:e6:c7:f0:a9:c3:e8:b1:00:de:f4:17:a5:a6:b8: ae:9a:b6:92:2a:fd:b8:69:d8:92:38:a9:9a:5c:ca:94:be:43: f0:0a:bf:d2:2c:27:76:5a:bb:5c:cf:af:86:b5:26:40:42:cd: c1:ea:8c:b4:f5:80:93:8d:db:81:7d:4f:37:03:8d:be:26:f6: a2:91:ee:2a:6f:41:a9:c6:5c:ee:a4:c1:a6:c6:38:9d:e7:07: 1d:45:07:eb:6e:ae:fd:3b:ec:1f:fe:1f:27:e6:54:86:32:2e: 98:d4:fc:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlqwjqgaGFmxszNeK2rWZ1DAhAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNjAxMjQxNjM1MDJaFw0yNjAxMjcyMDQ3MDJaMDMxMTAvBgNV BAMTKDRFMzAyMDYwM0IzNzZFRTMyNDgyOTAzNjA1OTBFNUZFMDRBMUJEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdbtZx9CPoB4CtEjH/GhQPvIm EzUuDGEijBHK55ry8Awct52zqcd4/U4728uWaEWoUECmhWCNnOLGYISD70n8yp1x DFsLFNu9AeIugAhXHSDBQL1HaZlhIuuyiwzhmsn8/oA7gVaZdQHXGYYYyxnvEaRR 7zyz3Yo+eT0iB7e6Vy82NmpcfmVOplt4j4y0lkRFJ9TR3OgxDOE2nBFq6o02agii ZT8MutMkqqCUIzn3J0s9kmjnXK19VGONhoY4Q9+TnuqKhKBs1EaCchQkDigHdQVI 2zX3mZr8RdX4Y7vVpbce2WLpiofYhIio34wHWkYHFognziJ3eb0YCRZ95b7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTjAgYDs3buMkgpA2BZDl/gShvbowHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMUkNXZtjp3maxIZJmLz7/eZ1IOT3cbey3/ HOjLJwrCFcjJOWfEMu8TJJtdJiITLV0wSexZRIyxwb6qYI9yg1NAbNFiNtxzVVTf WuubrGvVKj530WhOo1DMwwqKQvPzifyO/dgaIQE7QMyo85lHdukOnFpDZryvS5/Z N8kwJvkklBr1tD03lzK+sOD8TbxaW56vHcTmx/Cpw+ixAN70F6WmuK6atpIq/bhp 2JI4qZpcypS+Q/AKv9IsJ3Zau1zPr4a1JkBCzcHqjLT1gJON24F9TzcDjb4m9qKR 7ipvQanGXO6kwabGOJ3nBx1FB+turv077B/+HyfmVIYyLpjU/OA= -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:39 2026 by rpki-client