This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: cpQiVH/QGixyf4XDqFeUzb5rUFeBWjjYykfFJ4XarGA= Subject key identifier: 07:BF:60:D7:46:92:17:87:B3:EA:64:35:0C:DE:0A:2E:A1:05:3B:74 Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 6C0CAFA1F1DF2B21C1E414D0C82FF5786FFEC320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 021C Signing time: Sat 24 Jan 2026 12:21:23 +0000 Manifest this update: Sat 24 Jan 2026 12:16:23 +0000 Manifest next update: Tue 27 Jan 2026 14:48:23 +0000 Files and hashes: 1: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: Pv+3g58Ym0sonvzObRNWM55aOzOvbbWf+jYzoCHf2Wk=) 2: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: ajl2EFm0qBhjAXALIOJlI8I7dBianNhiyu03BfEHE4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0c:af:a1:f1:df:2b:21:c1:e4:14:d0:c8:2f:f5:78:6f:fe:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Jan 24 12:16:23 2026 GMT Not After : Jan 27 14:48:23 2026 GMT Subject: CN=07BF60D746921787B3EA64350CDE0A2EA1053B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:7d:ad:64:cb:29:56:73:94:f6:51:3b:9c: f0:43:fc:90:d9:b6:ab:c0:b5:f3:03:ae:7b:fe:8f: d8:a5:90:88:7c:c7:33:0f:a2:e2:b9:ba:2a:7f:b4: 7c:fd:f4:ba:64:01:97:b8:ac:ec:1e:08:51:42:c2: d0:33:2d:72:32:6e:d7:e6:97:bc:00:fe:5e:1c:d7: 70:88:d2:0c:6b:69:44:07:a1:b6:32:d4:50:f8:8d: 95:82:9d:93:0e:fa:22:7f:e0:a3:6a:df:e9:a8:5f: 9b:ab:48:a2:9f:ae:48:a7:aa:e8:0b:c4:4c:13:41: aa:fd:a5:ad:78:de:8b:77:ea:f8:31:58:3b:cb:3b: 5c:5c:d4:99:b9:21:ef:f1:0b:24:96:4c:10:ff:08: 6d:3f:01:b8:1b:0b:d9:15:2e:3b:46:97:4b:a8:96: a7:20:52:a0:02:25:2a:2f:08:b1:86:e0:63:64:6c: 69:50:6c:67:68:a4:19:b3:7a:f4:a4:c8:15:36:90: da:9d:25:cd:5a:82:de:21:92:c6:2c:93:c2:95:1f: 80:1d:f7:a8:cb:07:90:bc:24:10:d1:55:26:2f:92: 4c:c1:b5:86:c8:77:f4:46:bf:ba:f3:12:38:dc:e2: 7e:b4:a4:40:3c:78:0e:1b:75:d0:bf:50:47:ab:98: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BF:60:D7:46:92:17:87:B3:EA:64:35:0C:DE:0A:2E:A1:05:3B:74 X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:f4:5b:61:52:18:c1:49:b1:a6:08:c4:a7:5d:f0:ed:be: ec:07:d7:33:a2:83:5d:25:af:f8:d8:48:9a:c1:56:8f:08:bc: 48:fd:81:bb:93:36:58:75:a1:05:9e:fa:9b:76:51:7e:89:4f: b1:7a:8a:d5:fa:71:6d:49:c9:b5:2f:70:09:5f:68:14:f3:4e: 75:0d:9b:a4:42:6f:f8:13:73:59:6b:5f:14:83:b9:7c:fb:37: 13:a5:47:c1:8d:51:f7:39:3a:18:4d:ff:04:28:9a:92:7b:b4: 74:0b:35:94:70:79:b1:d0:27:59:80:55:e2:49:94:c4:11:07: 92:9a:9c:df:3b:1e:a2:3b:de:4b:8e:74:26:62:52:9f:0b:8a: bc:78:6f:36:83:13:23:66:22:8c:8c:4f:c3:4f:c4:59:b4:4e: c5:40:05:52:e5:70:6b:5e:ba:51:df:62:41:95:e3:79:f7:a2: 43:b1:2b:8c:f6:3c:fa:c2:0c:ed:4f:12:48:18:72:ef:5c:85: 55:ed:f5:ab:64:ff:a1:06:de:e5:34:61:67:fa:af:45:20:1e: 70:5c:fd:d0:73:1f:5a:12:b6:2d:ee:b4:81:0d:c9:97:62:9a: 1b:51:ef:29:86:76:fb:56:28:2c:24:ac:19:43:35:dc:5b:b3: ee:05:f2:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAyvofHfKyHB5BTQyC/1eG/+wyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNjAxMjQxMjE2MjNaFw0yNjAxMjcxNDQ4MjNaMDMxMTAvBgNV BAMTKDA3QkY2MEQ3NDY5MjE3ODdCM0VBNjQzNTBDREUwQTJFQTEwNTNCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuX2tZMspVnOU9lE7nPBD/JDZ tqvAtfMDrnv+j9ilkIh8xzMPouK5uip/tHz99LpkAZe4rOweCFFCwtAzLXIybtfm l7wA/l4c13CI0gxraUQHobYy1FD4jZWCnZMO+iJ/4KNq3+moX5urSKKfrkinqugL xEwTQar9pa143ot36vgxWDvLO1xc1Jm5Ie/xCySWTBD/CG0/AbgbC9kVLjtGl0uo lqcgUqACJSovCLGG4GNkbGlQbGdopBmzevSkyBU2kNqdJc1agt4hksYsk8KVH4Ad 96jLB5C8JBDRVSYvkkzBtYbId/RGv7rzEjjc4n60pEA8eA4bddC/UEermIV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB79g10aSF4ez6mQ1DN4KLqEFO3QwHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0P9FthUhjBSbGmCMSnXfDtvuwH1zOig10l r/jYSJrBVo8IvEj9gbuTNlh1oQWe+pt2UX6JT7F6itX6cW1JybUvcAlfaBTzTnUN m6RCb/gTc1lrXxSDuXz7NxOlR8GNUfc5OhhN/wQompJ7tHQLNZRwebHQJ1mAVeJJ lMQRB5KanN87HqI73kuOdCZiUp8Lirx4bzaDEyNmIoyMT8NPxFm0TsVABVLlcGte ulHfYkGV43n3okOxK4z2PPrCDO1PEkgYcu9chVXt9atk/6EG3uU0YWf6r0UgHnBc /dBzH1oSti3utIENyZdimhtR7ymGdvtWKCwkrBlDNdxbs+4F8ok= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:58 2026 by rpki-client