This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: NMtS1hiNpZpMw90El8CM5QrLGIGLYn9S573VlU1vtYA= Subject key identifier: 3B:20:DA:F5:3F:65:3A:72:06:B1:D8:D7:13:FA:21:27:AD:5A:5E:A0 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 1D97EB1DAA3C90231E47E8E3DB1459C6F788FC31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: F1 Signing time: Sat 24 Jan 2026 20:41:23 +0000 Manifest this update: Sat 24 Jan 2026 20:36:23 +0000 Manifest next update: Tue 27 Jan 2026 23:19:23 +0000 Files and hashes: 1: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=) 2: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: iWdIqppPAUkcuyE4NKtvKi1Lad0eqe5OhUwtWK4mnUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:97:eb:1d:aa:3c:90:23:1e:47:e8:e3:db:14:59:c6:f7:88:fc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Jan 24 20:36:23 2026 GMT Not After : Jan 27 23:19:23 2026 GMT Subject: CN=3B20DAF53F653A7206B1D8D713FA2127AD5A5EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:49:27:fc:ec:02:a0:52:a3:0b:d2:f8:37: 0a:71:39:e4:a0:eb:7d:7c:ed:2a:b3:23:6a:9f:f4: 2f:e7:3a:84:ba:40:4c:46:34:1b:55:aa:35:94:4e: 81:92:53:19:e0:33:15:37:9e:42:5e:58:b6:e8:92: 04:c7:ed:f8:a9:c7:c7:e0:29:67:06:b1:5b:62:71: d4:91:35:a4:f0:eb:62:eb:53:af:ef:f5:74:a4:c4: aa:07:ca:d8:b6:5c:96:81:59:ae:3f:ea:63:82:b3: e0:5e:53:d8:14:c6:d4:90:be:55:9c:71:4e:0f:86: af:42:bf:b4:52:33:1a:7b:ba:07:a8:f5:b0:8b:a8: b7:52:83:82:c1:2e:4e:8d:37:59:3a:74:d7:c2:84: b4:85:a6:d2:60:03:eb:a3:85:88:92:6a:24:98:fb: 40:6c:69:32:2b:a9:6e:81:1d:7a:b8:44:a0:cc:8a: c9:ce:45:60:21:9f:d9:4a:0a:2d:5b:00:c1:8b:52: 7f:5a:49:67:03:ba:43:8b:51:3a:ad:48:19:0c:36: 2f:c5:0d:d0:eb:de:21:03:f4:b6:d8:1a:5e:7e:81: ca:9a:db:93:9f:36:ea:2c:70:68:de:d6:23:28:27: 30:ba:f8:a5:a9:a2:44:e4:2f:a8:c3:85:ed:3f:e8: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:DA:F5:3F:65:3A:72:06:B1:D8:D7:13:FA:21:27:AD:5A:5E:A0 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:81:35:ff:12:3c:76:5c:e0:fe:ce:ec:ab:12:30:49:ab:39: 1b:de:dd:ac:dd:28:dd:01:bc:21:db:aa:8e:8d:f3:85:b3:aa: 4d:1f:f7:4a:11:e7:4d:91:0d:c1:31:cf:e8:04:95:df:5b:ea: 59:4a:f6:25:c1:da:6a:9c:04:c3:a3:a8:52:90:4e:66:bd:2f: f0:c5:2e:a4:00:6e:a3:73:1a:0c:01:56:f9:27:5a:e1:73:6f: ef:80:41:1b:67:10:80:d4:89:16:39:1f:4d:2e:71:a6:79:f6: da:32:b7:ff:1b:1c:6a:af:e7:44:17:23:73:5e:ad:c0:bf:cb: 11:29:48:67:39:90:09:a1:e8:18:f7:69:45:7b:19:ca:b1:64: 18:55:46:4d:18:90:4d:ad:1a:58:73:58:80:b2:19:69:67:cb: 59:66:6b:e9:1d:f7:d6:97:f9:51:c3:61:4c:b1:e1:fd:70:73: 44:19:71:df:98:6e:e3:45:28:5b:1c:d4:80:a3:cf:48:18:e9: 09:5e:46:38:da:eb:ac:2c:c0:2a:ce:c1:fe:87:84:3c:5e:bc: fa:e9:33:c5:5b:0b:7b:2f:eb:63:e6:6f:b9:86:d6:5c:01:d1: de:79:d5:09:85:e2:bf:7c:c2:e1:09:55:58:98:68:bc:dc:ed: 08:3d:4b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZfrHao8kCMeR+jj2xRZxveI/DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNjAxMjQyMDM2MjNaFw0yNjAxMjcyMzE5MjNaMDMxMTAvBgNV BAMTKDNCMjBEQUY1M0Y2NTNBNzIwNkIxRDhENzEzRkEyMTI3QUQ1QTVFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LUkn/OwCoFKjC9L4NwpxOeSg 63187SqzI2qf9C/nOoS6QExGNBtVqjWUToGSUxngMxU3nkJeWLbokgTH7fipx8fg KWcGsVticdSRNaTw62LrU6/v9XSkxKoHyti2XJaBWa4/6mOCs+BeU9gUxtSQvlWc cU4Phq9Cv7RSMxp7ugeo9bCLqLdSg4LBLk6NN1k6dNfChLSFptJgA+ujhYiSaiSY +0BsaTIrqW6BHXq4RKDMisnORWAhn9lKCi1bAMGLUn9aSWcDukOLUTqtSBkMNi/F DdDr3iED9LbYGl5+gcqa25OfNuoscGje1iMoJzC6+KWpokTkL6jDhe0/6PCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyDa9T9lOnIGsdjXE/ohJ61aXqAwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaBNf8SPHZc4P7O7KsSMEmrORve3azdKN0B vCHbqo6N84Wzqk0f90oR502RDcExz+gEld9b6llK9iXB2mqcBMOjqFKQTma9L/DF LqQAbqNzGgwBVvknWuFzb++AQRtnEIDUiRY5H00ucaZ59toyt/8bHGqv50QXI3Ne rcC/yxEpSGc5kAmh6Bj3aUV7GcqxZBhVRk0YkE2tGlhzWICyGWlny1lma+kd99aX +VHDYUyx4f1wc0QZcd+YbuNFKFsc1ICjz0gY6QleRjja66wswCrOwf6HhDxevPrp M8VbC3sv62Pmb7mG1lwB0d551QmF4r98wuEJVViYaLzc7Qg9S3Y= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:38 2026 by rpki-client