This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: aThnresFMqM+ocI6KHRRdOhd7NSbbvRfpVNOlahqFC8= Subject key identifier: 80:F8:F8:33:4A:21:6A:87:30:A1:52:E8:A9:2A:58:FB:DA:7B:43:6A Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 265EAF8601F73A7BF9F4DE25E6DD64F4AB1B67B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 0125 Signing time: Sat 24 Jan 2026 12:51:57 +0000 Manifest this update: Sat 24 Jan 2026 12:46:57 +0000 Manifest next update: Tue 27 Jan 2026 22:47:57 +0000 Files and hashes: 1: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 2: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: W5/fYexOyZDUO5MsGn5F0Zl6dJNcbKWVmVJsZZ72WVM=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5e:af:86:01:f7:3a:7b:f9:f4:de:25:e6:dd:64:f4:ab:1b:67:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Jan 24 12:46:57 2026 GMT Not After : Jan 27 22:47:57 2026 GMT Subject: CN=80F8F8334A216A8730A152E8A92A58FBDA7B436A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:68:4f:77:6c:0a:1b:bb:d9:7c:b6:12:27: 1e:4e:51:07:d9:b2:32:19:da:cf:e4:1f:fa:8f:b6: 10:04:05:46:96:af:d4:9c:d3:df:08:42:2e:ff:c1: ef:5e:e7:42:09:78:62:ad:1b:be:56:46:b3:0a:41: 4e:3d:9c:75:27:da:09:e8:16:83:53:fb:94:0f:16: e7:b5:77:ad:82:7f:c4:f0:b1:f7:0e:6e:d3:85:70: 3b:7b:08:b6:5a:14:75:53:28:08:d2:3b:85:db:ed: 73:08:0a:c3:5a:dd:ae:7b:90:10:ab:6a:91:bd:98: 47:41:59:fa:10:77:b8:8d:d7:43:10:80:9c:32:b6: 77:f6:1b:84:ee:c7:b2:8d:d3:c7:7d:35:6c:50:76: 10:95:10:84:6e:3e:dc:a2:29:62:77:be:69:77:67: 5d:48:a1:4f:e7:e9:7d:df:7f:2b:34:aa:68:da:79: 7c:0b:de:a4:59:92:19:6d:62:d3:9a:4e:80:cc:2e: 38:ba:f7:95:cd:c2:12:f3:93:5d:3c:88:6f:20:9e: 4e:62:bb:5d:f8:84:fb:05:3a:a1:3f:bb:b9:07:be: cd:a0:6c:9c:e7:59:9d:1d:57:e2:15:c0:2a:d1:f1: 72:31:aa:20:a6:20:5d:32:ff:2d:44:d0:e2:18:07: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F8:F8:33:4A:21:6A:87:30:A1:52:E8:A9:2A:58:FB:DA:7B:43:6A X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1a:ad:61:6a:39:ff:9e:18:b8:52:19:e1:2b:70:9c:24:90: d7:ae:d0:d9:1c:e3:f5:ec:b6:1e:60:4e:e4:34:49:a3:d9:21: d1:a2:62:68:ae:57:e2:25:0c:ee:1b:7f:76:db:18:f3:a3:5e: 50:cb:15:e6:cf:69:ba:e7:90:c1:b5:b7:fc:eb:9f:70:f1:1c: ea:7b:ee:3a:be:0b:ec:d1:ea:be:0c:1a:01:18:c2:c4:ef:52: f2:3c:54:74:19:b4:5d:e2:2c:9a:48:bf:fc:ec:be:06:c2:c6: b7:ce:ce:84:2e:a9:04:da:be:f3:08:df:a2:77:49:58:c8:15: f7:45:22:0f:c9:85:52:ae:a3:ee:a0:d8:16:ed:d4:a0:1c:3c: b2:80:2d:ed:a9:86:af:d2:68:ca:f9:ca:4c:1e:e3:b6:de:3c: 8e:20:6f:59:d0:5f:c8:05:7a:06:cf:4f:47:7f:a1:4e:84:5d: 07:45:d1:1b:14:c7:3b:90:69:fd:e9:b5:b8:82:53:42:17:91: 54:52:d6:ac:4c:1d:2a:0d:95:96:94:95:4e:be:9e:22:f7:af: 00:5c:25:01:48:c8:b2:b9:9d:de:ec:be:7c:1a:10:ec:77:91: 3f:db:e8:40:01:51:68:1f:ca:08:09:d4:b6:7d:c9:9f:b4:91: 68:76:18:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJl6vhgH3Onv59N4l5t1k9KsbZ7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNjAxMjQxMjQ2NTdaFw0yNjAxMjcyMjQ3NTdaMDMxMTAvBgNV BAMTKDgwRjhGODMzNEEyMTZBODczMEExNTJFOEE5MkE1OEZCREE3QjQzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXGhPd2wKG7vZfLYSJx5OUQfZ sjIZ2s/kH/qPthAEBUaWr9Sc098IQi7/we9e50IJeGKtG75WRrMKQU49nHUn2gno FoNT+5QPFue1d62Cf8TwsfcObtOFcDt7CLZaFHVTKAjSO4Xb7XMICsNa3a57kBCr apG9mEdBWfoQd7iN10MQgJwytnf2G4Tux7KN08d9NWxQdhCVEIRuPtyiKWJ3vml3 Z11IoU/n6X3ffys0qmjaeXwL3qRZkhltYtOaToDMLji695XNwhLzk108iG8gnk5i u134hPsFOqE/u7kHvs2gbJznWZ0dV+IVwCrR8XIxqiCmIF0y/y1E0OIYB/4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPj4M0ohaocwoVLoqSpY+9p7Q2owHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQarWFqOf+eGLhSGeErcJwkkNeu0Nkc4/Xs th5gTuQ0SaPZIdGiYmiuV+IlDO4bf3bbGPOjXlDLFebPabrnkMG1t/zrn3DxHOp7 7jq+C+zR6r4MGgEYwsTvUvI8VHQZtF3iLJpIv/zsvgbCxrfOzoQuqQTavvMI36J3 SVjIFfdFIg/JhVKuo+6g2Bbt1KAcPLKALe2phq/SaMr5ykwe47bePI4gb1nQX8gF egbPT0d/oU6EXQdF0RsUxzuQaf3ptbiCU0IXkVRS1qxMHSoNlZaUlU6+niL3rwBc JQFIyLK5nd7svnwaEOx3kT/b6EABUWgfyggJ1LZ9yZ+0kWh2GA4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:11:09 2026 by rpki-client