This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: 5BkvkbkHwgDfFc31Kmgev3AGu5JzwbVp3SP9Dq9IMFg= Subject key identifier: B5:32:1C:7D:7D:5A:9B:AE:38:DC:17:55:48:E6:6B:90:66:58:B4:7E Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 51B5A1575FFE005F7CAC1F635EA47D6B0B0E593A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0545 Signing time: Sat 24 Jan 2026 05:51:45 +0000 Manifest this update: Sat 24 Jan 2026 05:46:45 +0000 Manifest next update: Tue 27 Jan 2026 16:47:45 +0000 Files and hashes: 1: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: MDrQclWT7lcrX5RsMvxLCKqt+VAtoyeIeAxPYEJ8G0I=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 4: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 5: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b5:a1:57:5f:fe:00:5f:7c:ac:1f:63:5e:a4:7d:6b:0b:0e:59:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jan 24 05:46:45 2026 GMT Not After : Jan 27 16:47:45 2026 GMT Subject: CN=B5321C7D7D5A9BAE38DC175548E66B906658B47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:50:8d:e8:6f:cb:57:98:18:1f:09:67:11: 90:a3:cf:7f:90:6d:37:a0:68:b2:01:eb:b9:98:56: 85:11:df:18:96:db:68:7d:20:23:fc:d1:0a:a1:46: e9:ac:0f:3b:16:ec:3b:e9:3d:be:17:35:12:8e:b8: 6d:83:96:df:4e:7e:96:35:53:ef:63:8a:b0:21:e4: a0:74:10:72:14:09:c8:85:0b:5b:6a:b6:78:ee:a9: 01:3f:f7:52:fa:df:0b:63:bc:ae:8b:49:02:cf:69: 8d:bc:e6:c3:45:b7:94:b3:dc:92:c8:43:92:ee:5f: ca:46:44:0f:77:68:3e:a1:a1:11:2d:c0:43:94:31: 35:3e:7f:ae:6e:a4:2b:21:60:2a:a9:84:2b:98:26: 75:e5:d3:af:c8:0a:ed:9b:58:36:37:4f:6f:be:68: d5:f8:fc:47:67:fa:23:ea:86:8e:61:61:67:e3:fa: f9:4b:1f:5b:42:81:3b:6c:19:f6:c8:8f:70:81:35: df:c6:0d:91:db:8a:fc:d2:49:14:77:a9:ee:31:c8: b7:c8:ff:52:70:22:d5:a1:99:a8:e1:5b:57:30:2f: 37:20:72:3a:8f:e8:b0:0b:f2:7b:c7:5f:0e:44:27: b0:a9:b0:e6:ab:bc:d0:e1:02:75:b0:b5:95:9f:53: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:1C:7D:7D:5A:9B:AE:38:DC:17:55:48:E6:6B:90:66:58:B4:7E X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b7:5b:7b:5e:9d:b6:44:c8:7d:59:b2:85:c4:76:30:1d:27: 79:ad:74:0d:ae:ac:13:75:8c:8c:a9:eb:82:9d:b9:18:62:ed: cb:2c:3d:2f:ff:1a:39:52:78:8e:f4:5f:a5:79:0a:36:e0:ea: f8:f9:96:20:67:47:c2:10:e8:06:11:d1:e4:26:d0:19:8b:9b: c1:2f:ed:ce:ae:ff:f5:5c:8c:fd:62:9a:91:00:24:c9:e2:eb: 5a:30:83:94:6a:c7:59:56:ac:72:3b:bb:da:87:88:a1:79:14: 5e:0c:22:58:12:d1:e6:6e:95:6e:36:e7:b1:95:60:52:f9:54: 36:5f:77:62:bd:4d:ff:96:66:54:aa:4e:40:5d:66:81:b2:aa: 0a:2f:8a:86:4b:df:a3:62:ce:35:02:74:a8:bc:26:63:4a:b0: ac:df:bf:28:c0:f6:2b:f6:a6:e5:96:26:e3:e9:20:74:cd:37: 81:b9:02:7b:9b:e3:01:4b:98:62:06:2a:5a:42:a9:3b:49:96: 50:0d:45:32:a0:16:02:8a:e1:78:83:b8:06:7c:ae:ce:a7:3c: d1:81:27:19:3a:d3:30:1b:a7:7d:02:8b:c4:39:18:48:34:2d: 56:36:63:60:30:29:fe:21:2d:b6:a3:45:d0:f5:17:57:86:9d: 02:06:4b:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbWhV1/+AF98rB9jXqR9awsOWTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNjAxMjQwNTQ2NDVaFw0yNjAxMjcxNjQ3NDVaMDMxMTAvBgNV BAMTKEI1MzIxQzdEN0Q1QTlCQUUzOERDMTc1NTQ4RTY2QjkwNjY1OEI0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvlCN6G/LV5gYHwlnEZCjz3+Q bTegaLIB67mYVoUR3xiW22h9ICP80QqhRumsDzsW7DvpPb4XNRKOuG2Dlt9OfpY1 U+9jirAh5KB0EHIUCciFC1tqtnjuqQE/91L63wtjvK6LSQLPaY285sNFt5Sz3JLI Q5LuX8pGRA93aD6hoREtwEOUMTU+f65upCshYCqphCuYJnXl06/ICu2bWDY3T2++ aNX4/Edn+iPqho5hYWfj+vlLH1tCgTtsGfbIj3CBNd/GDZHbivzSSRR3qe4xyLfI /1JwItWhmajhW1cwLzcgcjqP6LAL8nvHXw5EJ7CpsOarvNDhAnWwtZWfU5RBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTIcfX1am6443BdVSOZrkGZYtH4wHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAES3W3tenbZEyH1ZsoXEdjAdJ3mtdA2urBN1 jIyp64KduRhi7cssPS//GjlSeI70X6V5Cjbg6vj5liBnR8IQ6AYR0eQm0BmLm8Ev 7c6u//VcjP1impEAJMni61owg5Rqx1lWrHI7u9qHiKF5FF4MIlgS0eZulW4257GV YFL5VDZfd2K9Tf+WZlSqTkBdZoGyqgovioZL36NizjUCdKi8JmNKsKzfvyjA9iv2 puWWJuPpIHTNN4G5Anub4wFLmGIGKlpCqTtJllANRTKgFgKK4XiDuAZ8rs6nPNGB Jxk60zAbp30Ci8Q5GEg0LVY2Y2AwKf4hLbajRdD1F1eGnQIGS3A= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:35 2026 by rpki-client