This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: saJQ1kp1PwuPla96Y12UdKOkxcXl5LGEdQm9/36cPmY= Subject key identifier: 0C:BA:A2:17:22:B2:88:C5:E9:9B:73:CF:3A:57:FC:4C:73:2A:8C:46 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 78C4B10332E6CF9580EF7E175294B8BA5592D181 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 0120 Signing time: Sat 24 Jan 2026 11:12:19 +0000 Manifest this update: Sat 24 Jan 2026 11:07:19 +0000 Manifest next update: Tue 27 Jan 2026 19:26:19 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 3: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 4: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: bQQKltjoc+ptGxcBmMMZAd2un6qsfBFhBB8t2viwYPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c4:b1:03:32:e6:cf:95:80:ef:7e:17:52:94:b8:ba:55:92:d1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Jan 24 11:07:19 2026 GMT Not After : Jan 27 19:26:19 2026 GMT Subject: CN=0CBAA21722B288C5E99B73CF3A57FC4C732A8C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:27:d7:c3:e1:7b:7e:ea:c2:1b:e1:9f:5e: 58:85:d1:50:ab:58:cb:c4:bb:df:76:64:20:25:7e: f3:0f:9b:73:ca:ba:80:ce:5b:c9:33:d4:96:f7:b5: d2:bc:5b:7d:c7:b0:d8:9b:cb:d2:0f:19:75:e2:3d: 9e:e6:ee:fd:77:b6:e2:a4:fe:0b:66:d9:13:20:3d: 8b:58:ac:b2:a6:e1:cb:4f:0a:64:78:4b:2f:fd:81: 39:cd:e7:5f:21:e5:68:53:10:1c:a5:7e:9f:86:18: 33:dd:5e:85:b8:5a:8d:d8:c7:ef:0e:70:64:2f:85: f5:8d:13:ba:c6:1c:8b:a7:f8:dd:9e:0e:3d:fb:ef: 3a:99:0c:f7:c0:ae:39:39:7b:bd:c7:fc:9f:41:f2: fc:21:87:9b:3d:a8:93:b3:70:6d:5b:55:63:43:5d: 49:1b:ed:78:cb:00:58:ab:50:df:be:7e:be:fa:cd: 1d:d6:9a:46:36:bb:43:d4:5f:d0:70:67:b9:72:58: 04:a9:2b:cb:77:d1:22:41:5f:6e:bc:ba:cf:48:96: 4e:02:fc:29:51:70:82:8f:3a:2f:3d:23:5b:e4:8e: 33:05:52:80:43:b3:5e:58:20:59:ca:13:7f:6b:52: db:f4:dd:2e:cd:15:db:6d:74:62:75:b0:93:65:d1: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:A2:17:22:B2:88:C5:E9:9B:73:CF:3A:57:FC:4C:73:2A:8C:46 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b7:01:5e:4a:5f:92:75:e3:59:ba:57:fd:06:e7:df:3c:da: db:c7:84:8b:bb:81:ff:37:0c:e9:92:4c:df:9d:5b:20:a3:40: 97:0b:05:85:05:06:40:62:f7:1a:0a:30:5f:66:92:93:5a:11: 56:47:cf:ef:02:a0:65:1c:ab:3e:b1:d9:81:e5:45:4f:dc:9c: 65:72:53:17:50:4f:c2:64:24:49:d9:fe:88:54:0c:8e:8c:24: 7b:65:39:34:bc:ca:10:e5:d6:17:f0:fa:6b:23:26:3e:bd:35: de:83:46:03:eb:95:90:f3:b1:97:69:05:88:22:27:b6:85:a6: d2:3b:56:59:f1:43:1f:26:9e:80:5a:ba:25:3b:eb:07:31:e4: f8:a2:b8:4d:ea:5f:68:42:4d:04:37:06:20:3e:c5:94:06:d4: 52:5a:07:5b:a6:b7:90:9c:ff:76:bc:c6:f6:ae:19:78:bf:71: ef:6e:53:27:56:cf:19:45:94:40:a4:8c:0a:66:12:5e:09:3d: 7f:03:d2:75:29:df:e9:f5:e4:5e:85:da:ba:3b:de:00:94:e9: 75:04:99:15:37:8b:64:73:25:d3:15:a2:05:d4:b7:9e:65:57: 63:e8:d2:ca:a2:1e:71:b8:f1:ca:d8:69:15:a1:ae:a8:91:7d: 7e:ec:e0:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMSxAzLmz5WA734XUpS4ulWS0YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNjAxMjQxMTA3MTlaFw0yNjAxMjcxOTI2MTlaMDMxMTAvBgNV BAMTKDBDQkFBMjE3MjJCMjg4QzVFOTlCNzNDRjNBNTdGQzRDNzMyQThDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5ifXw+F7furCG+GfXliF0VCr WMvEu992ZCAlfvMPm3PKuoDOW8kz1Jb3tdK8W33HsNiby9IPGXXiPZ7m7v13tuKk /gtm2RMgPYtYrLKm4ctPCmR4Sy/9gTnN518h5WhTEBylfp+GGDPdXoW4Wo3Yx+8O cGQvhfWNE7rGHIun+N2eDj377zqZDPfArjk5e73H/J9B8vwhh5s9qJOzcG1bVWND XUkb7XjLAFirUN++fr76zR3WmkY2u0PUX9BwZ7lyWASpK8t30SJBX268us9Ilk4C /ClRcIKPOi89I1vkjjMFUoBDs15YIFnKE39rUtv03S7NFdttdGJ1sJNl0ZipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDLqiFyKyiMXpm3PPOlf8THMqjEYwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALW3AV5KX5J141m6V/0G59882tvHhIu7gf83 DOmSTN+dWyCjQJcLBYUFBkBi9xoKMF9mkpNaEVZHz+8CoGUcqz6x2YHlRU/cnGVy UxdQT8JkJEnZ/ohUDI6MJHtlOTS8yhDl1hfw+msjJj69Nd6DRgPrlZDzsZdpBYgi J7aFptI7VlnxQx8mnoBauiU76wcx5PiiuE3qX2hCTQQ3BiA+xZQG1FJaB1umt5Cc /3a8xvauGXi/ce9uUydWzxlFlECkjApmEl4JPX8D0nUp3+n15F6F2ro73gCU6XUE mRU3i2RzJdMVogXUt55lV2Po0sqiHnG48crYaRWhrqiRfX7s4Fg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:21:02 2026 by rpki-client