This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: tKwEoxZXNoHw+iysd/BHrOCC/AAVdEprcjlnT6lp6y0= Subject key identifier: E9:7B:26:B2:52:52:33:58:2D:A6:AB:4B:7D:90:1F:12:0A:0F:21:BC Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 4A1F1A85B298195DD3043CB7A5FE7AA11300D467 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 03D1 Signing time: Fri 23 Jan 2026 19:30:44 +0000 Manifest this update: Fri 23 Jan 2026 19:25:44 +0000 Manifest next update: Tue 27 Jan 2026 02:07:44 +0000 Files and hashes: 1: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=) 2: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 804HXnC9WlBS21d4SfuHgFOcruO6kfwM3PJgXEA5PHA=) 3: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=) 4: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: mdPNBiUwNZEdQT/bDy03J0AialigUOaWLVxkwOx2CUs=) 5: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=) 6: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) 7: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1f:1a:85:b2:98:19:5d:d3:04:3c:b7:a5:fe:7a:a1:13:00:d4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Jan 23 19:25:44 2026 GMT Not After : Jan 27 02:07:44 2026 GMT Subject: CN=E97B26B2525233582DA6AB4B7D901F120A0F21BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:be:b9:e6:db:91:8b:93:d1:8c:f0:27:c5: 52:91:69:31:16:c8:2b:a4:8b:46:bc:ea:c7:00:28: 7e:b1:6e:82:bb:e0:2b:60:23:84:2d:0e:4f:9c:f3: d4:2a:0a:5f:f2:f5:84:98:b3:f0:7c:7f:be:5b:96: 2e:6c:85:ee:ab:8f:5f:0f:36:6e:ca:1d:55:a0:70: a2:f8:5d:14:0f:50:26:84:b6:58:72:d5:dc:17:e1: 77:04:79:88:81:9a:e0:08:50:77:d8:65:df:d2:b3: da:ea:2b:48:75:86:e6:fb:f8:7d:da:e0:e9:09:de: 5f:45:4f:46:7d:d5:f7:8e:e1:5a:38:aa:03:c3:2b: 00:06:87:22:d6:1a:02:ae:99:c7:78:31:14:ab:31: 36:33:7e:32:f0:15:40:9d:e8:4a:77:5b:e3:c3:69: d3:ce:6c:ea:59:c6:3e:1d:db:e1:9c:59:f0:94:0b: 4b:1c:f7:b0:d1:c0:00:e7:cc:3b:99:4b:23:e1:6f: b9:85:70:30:0f:cd:66:58:b1:69:59:8c:1a:87:fc: cc:0c:5e:72:47:17:dd:f3:f1:57:b3:d6:98:96:70: 2c:7f:75:6d:ea:cb:d8:d1:31:ca:37:c1:02:4a:3a: 3b:33:5a:b9:e9:18:cc:6b:e8:5f:03:59:16:c8:33: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7B:26:B2:52:52:33:58:2D:A6:AB:4B:7D:90:1F:12:0A:0F:21:BC X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:78:05:2b:79:9d:a4:7e:c8:81:02:b0:1e:d2:e3:70:28:d0: e3:97:14:5b:89:93:f5:cf:84:b3:71:99:00:c9:14:dd:e4:ba: 2a:6a:d0:37:77:66:ec:94:3b:40:db:27:34:72:c4:4f:ca:06: 35:ff:d5:14:98:b1:f4:4e:fb:84:b2:c3:58:8b:17:d4:b8:3f: 56:99:49:a7:0b:a8:0f:29:7f:82:85:28:97:49:14:e1:f0:ca: 11:9e:33:6e:5f:88:b7:89:93:33:84:f0:7f:1a:35:fe:4d:dc: 32:c9:17:59:fa:8c:8e:e6:ea:35:56:6c:09:c4:78:e8:59:4b: 66:69:b5:bc:ee:6e:84:62:df:d0:fe:70:7d:0b:e8:13:61:e8: 0b:f1:53:c1:8e:18:f9:6f:17:5a:f9:ed:1a:54:bc:f1:ea:6a: c9:22:c0:0f:d7:71:06:7b:ce:31:08:72:52:77:ce:a0:ed:16: a6:e5:df:ed:0f:0a:09:4f:bb:79:5d:3f:c2:84:37:d2:26:fc: 6b:61:b4:cc:ad:ab:99:30:25:d5:e2:4b:e4:e7:e8:82:75:e9: d3:e6:6a:98:2f:2c:92:d0:28:53:61:c0:b8:e6:1b:49:71:1f: a1:1f:96:a0:74:74:23:73:4d:89:07:1e:3d:14:f1:ec:5d:b1: ec:0f:ea:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSh8ahbKYGV3TBDy3pf56oRMA1GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNjAxMjMxOTI1NDRaFw0yNjAxMjcwMjA3NDRaMDMxMTAvBgNV BAMTKEU5N0IyNkIyNTI1MjMzNTgyREE2QUI0QjdEOTAxRjEyMEEwRjIxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x7655tuRi5PRjPAnxVKRaTEW yCuki0a86scAKH6xboK74CtgI4QtDk+c89QqCl/y9YSYs/B8f75bli5she6rj18P Nm7KHVWgcKL4XRQPUCaEtlhy1dwX4XcEeYiBmuAIUHfYZd/Ss9rqK0h1hub7+H3a 4OkJ3l9FT0Z91feO4Vo4qgPDKwAGhyLWGgKumcd4MRSrMTYzfjLwFUCd6Ep3W+PD adPObOpZxj4d2+GcWfCUC0sc97DRwADnzDuZSyPhb7mFcDAPzWZYsWlZjBqH/MwM XnJHF93z8Vez1piWcCx/dW3qy9jRMco3wQJKOjszWrnpGMxr6F8DWRbIMwAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XsmslJSM1gtpqtLfZAfEgoPIbwwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp4BSt5naR+yIECsB7S43Ao0OOXFFuJk/XP hLNxmQDJFN3kuipq0Dd3ZuyUO0DbJzRyxE/KBjX/1RSYsfRO+4Syw1iLF9S4P1aZ SacLqA8pf4KFKJdJFOHwyhGeM25fiLeJkzOE8H8aNf5N3DLJF1n6jI7m6jVWbAnE eOhZS2ZptbzuboRi39D+cH0L6BNh6AvxU8GOGPlvF1r57RpUvPHqaskiwA/XcQZ7 zjEIclJ3zqDtFqbl3+0PCglPu3ldP8KEN9Im/GthtMytq5kwJdXiS+Tn6IJ16dPm apgvLJLQKFNhwLjmG0lxH6EflqB0dCNzTYkHHj0U8exdsewP6nA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:41:56 2026 by rpki-client