This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: 7jpmX1TOtA7LN4GMlY90ma86816DLMyJl1Io0owdKV4= Subject key identifier: 78:9B:00:F8:1A:E7:D9:22:04:4B:EB:68:12:18:3F:FB:B2:83:96:53 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 56B2A1513FA2E955607858B2DFE4B09D16DD2397 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 0541 Signing time: Sat 24 Jan 2026 13:21:23 +0000 Manifest this update: Sat 24 Jan 2026 13:16:23 +0000 Manifest next update: Tue 27 Jan 2026 14:53:23 +0000 Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: 6DD7oz/n7p78ICEES+dUqA5DDGmPRdKJTF8fhzaICFk=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b2:a1:51:3f:a2:e9:55:60:78:58:b2:df:e4:b0:9d:16:dd:23:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Jan 24 13:16:23 2026 GMT Not After : Jan 27 14:53:23 2026 GMT Subject: CN=789B00F81AE7D922044BEB6812183FFBB2839653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:45:df:3b:3e:d4:95:7a:67:c8:74:9b:e0: fc:b1:0e:a8:09:c0:4d:86:40:68:7b:68:99:73:22: 64:2e:f8:62:9d:5e:71:40:63:0b:f4:51:6c:66:d4: 15:54:f3:77:c4:8f:8d:0d:d0:3a:85:72:dd:0c:61: 4b:2a:c9:53:b4:55:17:25:9b:19:d7:85:3c:2d:2c: 1f:45:dd:4b:d0:d5:d4:f6:c0:98:f8:25:37:88:ab: 3c:67:b3:e2:53:8f:32:b3:df:ca:36:53:23:90:2a: 30:88:05:9c:4a:07:05:d9:16:b9:40:f7:98:af:b6: 3c:16:4a:61:ff:e6:f0:0c:13:6d:78:04:2e:5c:ce: c3:90:4f:31:e9:a5:37:0e:6f:b3:f1:c4:a1:48:62: ce:ae:01:d2:cc:58:10:29:b0:23:df:53:7a:85:9e: 26:3a:5a:f5:0a:4d:19:1a:78:7a:13:f4:d0:d5:0c: 12:43:e2:78:66:e4:0e:e4:6a:4b:83:a8:14:48:b4: ab:08:cf:64:b4:28:32:ef:47:55:57:e8:fb:ee:b8: 99:13:48:96:41:7d:7a:d0:33:bc:b3:49:e3:a1:12: 28:f6:e4:fa:40:11:01:30:07:0f:9d:44:53:97:24: 11:00:50:a6:2b:78:2c:86:61:3a:61:66:4e:c1:89: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9B:00:F8:1A:E7:D9:22:04:4B:EB:68:12:18:3F:FB:B2:83:96:53 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:21:fe:97:71:77:48:93:67:87:49:97:7d:3f:0f:95:0d:2f: 8a:8f:de:19:e8:55:d4:86:fe:a2:c3:16:37:c0:8b:f5:c0:0a: bb:a6:40:91:ea:fd:d1:df:d0:07:d1:0a:f6:52:ea:ea:05:66: 19:3f:34:1f:38:be:37:05:4b:5a:c1:41:52:1b:84:f4:ce:f0: 11:b2:3d:bc:9d:d7:cf:8e:31:48:44:81:2d:ef:e9:a2:ef:78: 5a:97:79:4c:c1:51:e5:69:c7:e9:84:65:c5:b5:15:3d:a0:70: a7:c3:32:08:0f:47:77:bf:71:83:d0:5c:0d:51:06:03:46:0b: 85:f1:70:eb:5b:be:1f:63:56:54:6a:84:80:ed:d3:ff:ca:1e: 1e:33:1f:38:91:2c:73:b7:ff:b0:68:e9:a7:69:6a:2b:00:fb: 15:7f:79:41:43:0a:f3:80:e2:3d:a6:a9:af:08:76:50:ff:4b: 43:e0:a8:e1:89:70:69:d5:d9:99:44:41:70:a4:11:f7:a3:e2: 7b:bf:26:36:ae:c1:84:03:8d:50:a0:2f:6f:7f:20:5c:4b:5e: a4:64:7b:8d:a0:8c:9d:52:b8:55:98:80:47:05:e8:a3:df:61: 25:55:26:3c:05:22:58:d9:57:c6:68:77:08:62:79:ff:a1:6e: d3:01:bd:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrKhUT+i6VVgeFiy3+SwnRbdI5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNjAxMjQxMzE2MjNaFw0yNjAxMjcxNDUzMjNaMDMxMTAvBgNV BAMTKDc4OUIwMEY4MUFFN0Q5MjIwNDRCRUI2ODEyMTgzRkZCQjI4Mzk2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGUXfOz7UlXpnyHSb4PyxDqgJ wE2GQGh7aJlzImQu+GKdXnFAYwv0UWxm1BVU83fEj40N0DqFct0MYUsqyVO0VRcl mxnXhTwtLB9F3UvQ1dT2wJj4JTeIqzxns+JTjzKz38o2UyOQKjCIBZxKBwXZFrlA 95ivtjwWSmH/5vAME214BC5czsOQTzHppTcOb7PxxKFIYs6uAdLMWBApsCPfU3qF niY6WvUKTRkaeHoT9NDVDBJD4nhm5A7kakuDqBRItKsIz2S0KDLvR1VX6PvuuJkT SJZBfXrQM7yzSeOhEij25PpAEQEwBw+dRFOXJBEAUKYreCyGYTphZk7Bif9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJsA+Brn2SIES+toEhg/+7KDllMwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADch/pdxd0iTZ4dJl30/D5UNL4qP3hnoVdSG /qLDFjfAi/XACrumQJHq/dHf0AfRCvZS6uoFZhk/NB84vjcFS1rBQVIbhPTO8BGy Pbyd18+OMUhEgS3v6aLveFqXeUzBUeVpx+mEZcW1FT2gcKfDMggPR3e/cYPQXA1R BgNGC4XxcOtbvh9jVlRqhIDt0//KHh4zHziRLHO3/7Bo6adpaisA+xV/eUFDCvOA 4j2mqa8IdlD/S0PgqOGJcGnV2ZlEQXCkEfej4nu/JjauwYQDjVCgL29/IFxLXqRk e42gjJ1SuFWYgEcF6KPfYSVVJjwFIljZV8Zodwhief+hbtMBvY4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:19 2026 by rpki-client