This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: +TOCHF5/CptjFnNA8+/wvWW4DSvWOpwtHmwLbc8GLiU= Subject key identifier: 89:69:9C:7E:8F:FB:53:F2:A0:F0:1C:49:C3:5B:83:A3:81:FA:DA:89 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 2C407AAE2E7959223296148B46108916BD2F276C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 0227 Signing time: Sat 24 Jan 2026 09:31:36 +0000 Manifest this update: Sat 24 Jan 2026 09:26:36 +0000 Manifest next update: Tue 27 Jan 2026 18:20:36 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: etltE8oEw9yfgqvoq9iVxQqq3rGyhrC0hzHAHfP9u7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:40:7a:ae:2e:79:59:22:32:96:14:8b:46:10:89:16:bd:2f:27:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Jan 24 09:26:36 2026 GMT Not After : Jan 27 18:20:36 2026 GMT Subject: CN=89699C7E8FFB53F2A0F01C49C35B83A381FADA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d9:46:01:e6:9b:bb:a5:d4:4a:43:4d:60:bb: 70:ac:66:15:5a:40:fe:16:18:fc:53:37:10:12:c5: 50:4d:73:06:9b:d7:b0:8e:e4:2b:14:18:8a:cf:40: 7d:72:68:7c:b3:2c:b5:a2:57:ee:66:58:fe:24:72: 25:d9:67:bd:e6:7e:a7:e0:0b:a6:4e:6c:b8:9a:b6: ed:87:54:22:e6:49:7e:df:cf:0e:16:49:f2:f7:75: 2a:b3:a1:9a:84:84:09:ad:ca:27:c5:53:2b:2b:cc: e7:2e:de:48:6e:80:6c:f6:b8:3b:2d:21:ee:cb:cf: b2:87:de:84:bf:a6:92:59:17:21:7a:c6:9d:60:9b: 57:aa:44:f4:0d:d5:cd:1c:2c:3f:5b:0b:b4:41:ef: 5d:d5:0e:fa:95:06:f5:90:ca:db:b2:54:c2:62:5e: d5:81:79:88:00:80:3d:10:23:85:69:40:73:24:d3: c0:4c:85:30:3e:04:2e:0a:a7:10:7f:23:5d:88:64: d6:31:65:b7:53:79:32:11:d7:fc:73:f7:5c:c1:2b: 06:44:19:de:b0:e2:ac:97:3e:5f:1c:83:ce:45:73: a7:42:f3:99:7b:c4:f3:30:4a:2f:fe:94:f7:e1:3f: bd:f4:3c:ee:f2:5a:2b:16:5c:da:11:c1:45:7e:52: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:9C:7E:8F:FB:53:F2:A0:F0:1C:49:C3:5B:83:A3:81:FA:DA:89 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1e:6c:dc:48:90:91:f0:e1:94:92:94:9e:dc:9e:48:a6:f9: 2b:98:af:e6:f4:ca:fb:df:6b:15:70:8e:ab:7d:08:11:50:f3: 7f:fb:8a:f7:4e:59:8d:63:3e:8e:08:88:39:ec:34:ae:eb:9b: 1d:40:26:0a:65:c0:a3:76:5c:e0:92:1c:7c:65:1e:53:a2:e8: 32:bb:9b:ff:c1:03:70:18:5e:25:be:4a:88:5c:18:d3:5b:07: c9:3e:49:e1:64:c0:13:75:44:db:12:08:f7:c7:dd:69:0c:1c: 97:1a:cc:ea:bd:a0:b6:c8:11:c0:e3:d4:60:66:a7:2b:a2:4b: ce:59:76:fb:d8:87:72:d1:fa:1f:43:68:6b:1e:18:c6:5c:7b: 7b:8e:c2:d4:c0:0c:6a:c2:b2:64:97:a5:4b:a5:cb:56:5c:46: 8c:b3:60:d2:22:a5:be:c7:c0:66:95:09:f2:82:35:95:c6:cb: 83:cf:1f:26:c3:bb:75:37:07:61:33:91:35:a1:c4:5b:85:cb: 31:f5:09:8e:6b:c2:43:52:3f:62:6f:03:12:0c:e6:65:34:3e: 15:dc:32:95:64:3a:82:71:f7:61:4c:d5:69:0f:a6:82:c5:ee: 85:ec:0c:5c:4b:65:7e:91:bc:6e:31:92:0d:66:76:bb:8e:04: c4:0e:97:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEB6ri55WSIylhSLRhCJFr0vJ2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNjAxMjQwOTI2MzZaFw0yNjAxMjcxODIwMzZaMDMxMTAvBgNV BAMTKDg5Njk5QzdFOEZGQjUzRjJBMEYwMUM0OUMzNUI4M0EzODFGQURBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr2UYB5pu7pdRKQ01gu3CsZhVa QP4WGPxTNxASxVBNcwab17CO5CsUGIrPQH1yaHyzLLWiV+5mWP4kciXZZ73mfqfg C6ZObLiatu2HVCLmSX7fzw4WSfL3dSqzoZqEhAmtyifFUysrzOcu3khugGz2uDst Ie7Lz7KH3oS/ppJZFyF6xp1gm1eqRPQN1c0cLD9bC7RB713VDvqVBvWQytuyVMJi XtWBeYgAgD0QI4VpQHMk08BMhTA+BC4KpxB/I12IZNYxZbdTeTIR1/xz91zBKwZE Gd6w4qyXPl8cg85Fc6dC85l7xPMwSi/+lPfhP730PO7yWisWXNoRwUV+UhPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWmcfo/7U/Kg8BxJw1uDo4H62okwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEebNxIkJHw4ZSSlJ7cnkim+SuYr+b0yvvf axVwjqt9CBFQ83/7ivdOWY1jPo4IiDnsNK7rmx1AJgplwKN2XOCSHHxlHlOi6DK7 m//BA3AYXiW+SohcGNNbB8k+SeFkwBN1RNsSCPfH3WkMHJcazOq9oLbIEcDj1GBm pyuiS85ZdvvYh3LR+h9DaGseGMZce3uOwtTADGrCsmSXpUuly1ZcRoyzYNIipb7H wGaVCfKCNZXGy4PPHybDu3U3B2EzkTWhxFuFyzH1CY5rwkNSP2JvAxIM5mU0PhXc MpVkOoJx92FM1WkPpoLF7oXsDFxLZX6RvG4xkg1mdruOBMQOl00= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:25 2026 by rpki-client