This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json) Hash identifier: mhmyJCNVG01zF4s6oVe74H6laMkK1b8opvnUhfpMbqk= Subject key identifier: 7A:7F:BB:E4:56:BF:BF:1B:9B:1F:95:D8:C0:CF:B7:65:13:86:2A:FD Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Certificate serial: 0159F39C398CB895164694BD7C8F01CD5BD78A98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft Manifest number: BB Signing time: Sun 25 Jan 2026 12:21:01 +0000 Manifest this update: Sun 25 Jan 2026 12:16:01 +0000 Manifest next update: Wed 28 Jan 2026 21:47:01 +0000 Files and hashes: 1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: DVb7Aw6ebf1W6XnM4YI9EJyqSu7qGgTHlZzWOVCA63M=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:59:f3:9c:39:8c:b8:95:16:46:94:bd:7c:8f:01:cd:5b:d7:8a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Validity Not Before: Jan 25 12:16:01 2026 GMT Not After : Jan 28 21:47:01 2026 GMT Subject: CN=7A7FBBE456BFBF1B9B1F95D8C0CFB76513862AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:67:7a:f8:b5:a3:ee:5d:c0:6c:3b:6a:1d: 89:b1:82:1c:6c:71:9b:20:4e:c1:06:a1:a2:ec:52: 31:51:46:99:39:f1:4d:c7:08:4b:af:2e:33:93:e1: 58:6e:77:c4:1e:66:6b:97:54:9d:35:3a:6c:b1:0b: cd:02:71:68:f2:77:34:ff:d2:94:40:b6:75:eb:c5: c5:ad:d8:8a:1a:73:44:90:2b:d0:86:72:91:67:88: bb:f2:5a:5c:ef:48:69:d0:c4:7f:c5:58:39:92:90: e3:cc:21:dd:a6:3d:58:3f:36:97:cb:92:39:da:1b: 42:5f:9d:d9:20:31:29:02:39:b3:47:0d:f9:7d:55: 91:96:4c:9d:10:15:70:71:bb:8b:d5:78:42:a5:db: 65:0c:9a:8f:c4:f8:a4:2d:f1:3b:c3:a4:36:5e:f7: dc:92:ed:b1:68:f4:55:d6:2e:d1:63:97:00:58:54: 08:a2:a2:96:6e:0a:99:4f:97:47:3c:f6:1d:5c:05: 8c:31:3c:6c:17:f9:c9:f3:5b:a2:ae:db:a9:50:92: be:9c:f0:6b:06:59:a9:14:bf:f4:7f:3a:8d:8b:a5: 51:f7:45:56:dc:1e:0c:d1:44:bb:da:43:0d:9c:20: c8:97:6f:5d:d1:9a:09:8e:14:70:b0:9f:3d:08:39: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7F:BB:E4:56:BF:BF:1B:9B:1F:95:D8:C0:CF:B7:65:13:86:2A:FD X509v3 Authority Key Identifier: keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:e1:77:b7:99:f5:e3:05:2a:6f:aa:20:68:65:25:46:74:58: 98:c4:3d:1f:74:f0:8c:d2:20:be:70:de:90:d8:b1:ab:85:27: 32:4f:d7:d0:a3:c3:c4:7c:f0:a7:09:67:c5:e6:fa:13:ca:a7: b6:8c:e0:c8:f2:7c:3e:28:19:6a:4a:3f:66:c4:98:f0:97:25: 9f:19:9e:bf:d2:ab:59:94:c6:d6:67:7e:a5:2d:c3:35:f2:22: c2:47:02:29:67:43:c2:0a:d2:a1:bd:85:a2:d4:63:2b:24:ef: bb:c9:6b:d4:45:93:65:80:80:f7:4b:47:38:8d:05:ea:d9:53: c4:ce:70:8a:b4:bb:ce:0c:e4:33:e0:bf:25:76:1d:31:52:1a: 09:6c:f3:90:b0:c6:a6:3a:eb:95:33:2f:d6:bd:c1:5c:72:67: 3c:87:7f:45:84:29:9b:98:02:9f:0e:a3:94:cc:49:73:15:58: 28:07:a0:1a:fc:73:c6:e4:ac:6d:e8:44:a5:ed:38:a3:11:d4: b6:9a:a9:90:32:55:ac:aa:63:d4:d3:b8:22:ee:6a:72:88:31: cf:f5:79:a5:f6:5b:e6:61:59:2b:4f:ff:f4:79:f9:1a:c2:43: d4:6e:1d:a5:0a:dd:76:51:41:9c:2b:57:b7:cc:49:db:30:36: 39:9c:ac:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVnznDmMuJUWRpS9fI8BzVvXipgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5 NTk1M0ExRjAeFw0yNjAxMjUxMjE2MDFaFw0yNjAxMjgyMTQ3MDFaMDMxMTAvBgNV BAMTKDdBN0ZCQkU0NTZCRkJGMUI5QjFGOTVEOEMwQ0ZCNzY1MTM4NjJBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcGd6+LWj7l3AbDtqHYmxghxs cZsgTsEGoaLsUjFRRpk58U3HCEuvLjOT4Vhud8QeZmuXVJ01OmyxC80CcWjydzT/ 0pRAtnXrxcWt2Ioac0SQK9CGcpFniLvyWlzvSGnQxH/FWDmSkOPMId2mPVg/NpfL kjnaG0JfndkgMSkCObNHDfl9VZGWTJ0QFXBxu4vVeEKl22UMmo/E+KQt8TvDpDZe 99yS7bFo9FXWLtFjlwBYVAiiopZuCplPl0c89h1cBYwxPGwX+cnzW6Ku26lQkr6c 8GsGWakUv/R/Oo2LpVH3RVbcHgzRRLvaQw2cIMiXb13RmgmOFHCwnz0IOemNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUen+75Fa/vxubH5XYwM+3ZROGKv0wHwYDVR0j BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1 M0ExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3 OTQ5NTk1M0ExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPhd7eZ9eMFKm+qIGhlJUZ0WJjEPR908IzS IL5w3pDYsauFJzJP19Cjw8R88KcJZ8Xm+hPKp7aM4MjyfD4oGWpKP2bEmPCXJZ8Z nr/Sq1mUxtZnfqUtwzXyIsJHAilnQ8IK0qG9haLUYysk77vJa9RFk2WAgPdLRziN BerZU8TOcIq0u84M5DPgvyV2HTFSGgls85CwxqY665UzL9a9wVxyZzyHf0WEKZuY Ap8Oo5TMSXMVWCgHoBr8c8bkrG3oRKXtOKMR1LaaqZAyVayqY9TTuCLuanKIMc/1 eaX2W+ZhWStP//R5+RrCQ9RuHaUK3XZRQZwrV7fMSdswNjmcrM0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:11 2026 by rpki-client