This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft File: EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json) Hash identifier: RJloIJP3J5+urwTviGSPXLnf/aIi0nKcYTzDtiBYTpw= Subject key identifier: CC:E8:C2:DB:DC:34:F1:15:64:9F:AD:16:E0:3D:B8:B4:C2:32:BD:18 Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Certificate serial: 57507645A5CB9605C831D266FF5F4C5D526DBB17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft Manifest number: 04CF Signing time: Sat 24 Jan 2026 05:22:06 +0000 Manifest this update: Sat 24 Jan 2026 05:17:06 +0000 Manifest next update: Tue 27 Jan 2026 11:21:06 +0000 Files and hashes: 1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: Xj6zSlnrSH2+7f+wJ4F8QtR0b9lkMZ84vkyHdg3jXUw=) 2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:50:76:45:a5:cb:96:05:c8:31:d2:66:ff:5f:4c:5d:52:6d:bb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Validity Not Before: Jan 24 05:17:06 2026 GMT Not After : Jan 27 11:21:06 2026 GMT Subject: CN=CCE8C2DBDC34F115649FAD16E03DB8B4C232BD18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:76:62:fe:e2:51:e4:01:fc:68:2c:b4:7b: da:f3:52:2b:5a:98:3b:29:aa:90:34:dc:e8:c7:75: 4c:28:53:d5:2f:4a:71:88:2a:7b:3e:20:21:d2:b1: 1d:76:97:e7:9e:f5:5c:10:75:a1:fa:2f:08:a1:a8: fa:ad:c0:09:91:9f:3c:0f:e6:a1:ec:5e:71:a3:8a: d3:4b:ab:ed:0b:47:9a:37:f1:45:20:8d:33:13:ff: e5:0e:77:03:d5:4d:e7:38:8d:c8:78:9a:bc:5b:5a: 07:3b:79:76:07:20:28:ec:26:6c:ef:6c:d0:51:f5: 30:e5:2c:88:3e:d0:50:de:f9:50:3d:d9:80:29:d6: 09:df:7b:ad:4c:c4:ab:f2:a7:4b:02:f0:f4:95:2c: dd:d7:cb:d8:1a:60:c6:2f:03:2a:e5:c5:08:3f:93: 55:b7:35:87:38:24:59:88:11:75:9b:98:42:4a:71: b4:68:ac:19:ff:14:2c:1d:26:1c:02:75:60:55:43: cd:45:64:90:36:d3:eb:80:d9:7b:74:54:63:53:49: 20:e6:93:d9:f1:4c:5e:2a:8d:fe:f2:d8:95:1b:35: 64:08:21:88:78:10:65:b5:9f:7f:45:05:9a:8a:06: 83:d3:09:0a:31:61:c7:1c:a2:49:a3:24:84:12:60: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E8:C2:DB:DC:34:F1:15:64:9F:AD:16:E0:3D:B8:B4:C2:32:BD:18 X509v3 Authority Key Identifier: keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ac:e1:c0:8d:3a:36:5c:bb:1b:97:af:92:12:df:63:f2:1d: 7b:3b:6a:39:29:65:b7:f3:2d:ec:46:7a:3e:7d:4b:7b:29:9d: e3:e5:e2:ce:41:df:92:73:48:27:a1:72:15:7f:46:b6:9a:fe: 8d:d6:74:ed:b2:87:5e:8d:08:19:a1:f5:0f:e6:34:2c:40:fa: 3b:a5:75:e0:91:9f:22:24:c0:8c:fd:11:8c:de:18:69:bb:40: be:dd:22:13:33:bb:66:e9:72:a8:ec:c2:a7:c9:04:4f:cc:a6: b6:ac:f1:9a:ee:4a:8a:c4:69:40:02:98:7f:c8:33:db:1a:6b: 3f:98:a5:4f:fe:bb:4c:c6:d6:17:e0:f4:91:33:d1:60:45:81: 24:1d:15:bb:01:ea:c5:b1:78:c6:08:be:f4:bf:4d:04:5b:3a: 9e:13:8a:26:50:01:27:d1:96:60:60:8b:34:b6:92:81:06:56: fb:3d:6b:ed:69:b8:4a:1e:03:ac:a5:ee:3e:42:e8:8f:67:a5: 6a:39:93:1b:33:f6:07:a6:1d:28:34:37:f0:17:59:ff:78:54: 60:56:1c:62:73:d0:c4:ce:df:7b:e5:98:26:ad:7d:98:5a:13: b9:0f:d1:89:42:a1:ed:b9:45:e9:df:6d:eb:44:73:8c:c9:bb: fd:3b:28:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1B2RaXLlgXIMdJm/19MXVJtuxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0 OTJFNjE1NzAeFw0yNjAxMjQwNTE3MDZaFw0yNjAxMjcxMTIxMDZaMDMxMTAvBgNV BAMTKENDRThDMkRCREMzNEYxMTU2NDlGQUQxNkUwM0RCOEI0QzIzMkJEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXA3Zi/uJR5AH8aCy0e9rzUita mDspqpA03OjHdUwoU9UvSnGIKns+ICHSsR12l+ee9VwQdaH6LwihqPqtwAmRnzwP 5qHsXnGjitNLq+0LR5o38UUgjTMT/+UOdwPVTec4jch4mrxbWgc7eXYHICjsJmzv bNBR9TDlLIg+0FDe+VA92YAp1gnfe61MxKvyp0sC8PSVLN3Xy9gaYMYvAyrlxQg/ k1W3NYc4JFmIEXWbmEJKcbRorBn/FCwdJhwCdWBVQ81FZJA20+uA2Xt0VGNTSSDm k9nxTF4qjf7y2JUbNWQIIYh4EGW1n39FBZqKBoPTCQoxYcccokmjJIQSYD9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOjC29w08RVkn60W4D24tMIyvRgwHwYDVR0j BBgwFoAU6h/yGDTOJUa5P/er16JCMUkuYVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjExOGYyYi05Zjk0LTQxOTktYTI0MS04ZmM1MWQxN2UwYzUvMC9FQTFGRjIxODM0 Q0UyNTQ2QjkzRkY3QUJEN0EyNDIzMTQ5MkU2MTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0OTJF NjE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQy MzE0OTJFNjE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWs4cCNOjZcuxuXr5IS32PyHXs7ajkpZbfz LexGej59S3spnePl4s5B35JzSCehchV/Rraa/o3WdO2yh16NCBmh9Q/mNCxA+jul deCRnyIkwIz9EYzeGGm7QL7dIhMzu2bpcqjswqfJBE/Mpras8ZruSorEaUACmH/I M9saaz+YpU/+u0zG1hfg9JEz0WBFgSQdFbsB6sWxeMYIvvS/TQRbOp4TiiZQASfR lmBgizS2koEGVvs9a+1puEoeA6yl7j5C6I9npWo5kxsz9gemHSg0N/AXWf94VGBW HGJz0MTO33vlmCatfZhaE7kP0YlCoe25RenfbetEc4zJu/07KFM= -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:11 2026 by rpki-client