This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 4KrJxBy0271+SI7TKvhX/iutdLqXWmyjIRrELfc0BAs= Subject key identifier: 4A:58:F7:06:40:EF:AF:64:C4:44:88:81:25:84:3D:C0:7B:95:6C:94 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 6A47BA7C2393DBFFADC6A3936840DBD5B76E1F74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 0168 Signing time: Sat 24 Jan 2026 15:33:18 +0000 Manifest this update: Sat 24 Jan 2026 15:28:18 +0000 Manifest next update: Tue 27 Jan 2026 19:19:18 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: jf26QErdEi0zU6+TNW08PTtd17wUzK8mBp3V16BJO50=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:47:ba:7c:23:93:db:ff:ad:c6:a3:93:68:40:db:d5:b7:6e:1f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Jan 24 15:28:18 2026 GMT Not After : Jan 27 19:19:18 2026 GMT Subject: CN=4A58F70640EFAF64C444888125843DC07B956C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e4:51:51:25:18:7b:52:66:cd:4e:30:14:35: 6a:6d:a7:28:d2:82:f2:c4:8e:a5:65:b8:84:8c:21: ba:0f:66:85:6c:ad:9c:67:23:e3:0c:7e:28:35:29: 3f:52:8e:e3:ba:74:92:85:21:cb:3f:85:2b:a6:30: ee:98:31:6a:c6:ae:93:a0:76:04:a5:f2:17:73:6b: 9f:ea:2c:d5:2e:af:1a:30:a1:39:6b:b6:74:20:05: f9:99:14:61:79:ad:27:ee:0f:ef:f6:68:a6:06:54: 0e:52:0a:6c:95:e0:8b:bd:90:f5:5e:34:f7:5e:36: 88:b7:ab:b5:5b:df:c3:cd:06:02:88:2b:35:f9:f2: 56:ba:db:1e:01:86:cd:52:e9:eb:c5:9d:c8:c8:fb: 6b:4d:1a:55:5e:6e:be:18:ee:f9:87:e4:63:c8:6d: ac:1e:3d:05:aa:24:9b:60:34:ef:6b:b1:54:8b:72: 2d:95:71:23:5f:7a:fe:82:69:21:90:43:0f:4c:b5: 82:dd:7b:5c:9f:02:40:64:39:2e:76:5a:f8:5f:b5: ed:89:2a:02:68:22:d3:88:0e:b2:5a:66:fd:1f:83: 1c:e8:62:30:dd:41:6b:97:d8:5a:6c:62:db:97:62: c8:49:23:47:cd:54:98:0f:be:c3:9e:6d:b5:22:40: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:F7:06:40:EF:AF:64:C4:44:88:81:25:84:3D:C0:7B:95:6C:94 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:bb:1c:d2:81:0b:e1:42:0b:26:5c:fb:3e:d8:f4:36:75:54: ea:9e:4a:f6:45:a3:9b:d0:71:30:e4:c7:7a:90:8f:6e:b2:87: 20:db:df:a6:a1:db:7a:25:66:c5:35:af:10:fe:94:49:68:41: c1:56:0f:a0:06:85:c8:33:5a:6e:24:fb:47:81:20:14:18:e0: f6:60:c1:08:e1:f4:63:d4:f9:a0:45:f4:d1:f8:9c:4d:69:13: e6:1b:16:e5:47:35:3c:a9:95:dc:40:ab:8a:52:1a:d5:b6:3d: c5:4a:4a:a5:a8:b1:bd:29:9f:40:57:86:55:a5:ca:fc:b2:a5: ab:67:0a:90:01:aa:de:f8:0c:4b:2a:ff:a7:fd:45:6c:87:24: 4d:c7:2f:15:3e:2e:5e:a5:99:09:a0:06:49:61:e2:f2:5e:8f: 94:f7:10:56:15:87:d5:67:81:b0:6e:5a:94:16:32:4b:b1:f2: eb:6b:78:39:36:45:f5:2d:67:b1:aa:3b:b2:c7:17:d3:eb:b2: 2f:1d:fc:01:4c:f7:dd:f2:45:8e:14:22:8c:55:29:a4:cd:ff: d0:68:6b:41:ff:3c:df:1d:f6:9e:08:4e:5e:0d:03:dd:a8:66: 1c:80:f0:8e:ef:0d:58:88:04:e3:d2:15:c9:e8:a5:7d:4b:a2: de:04:6a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUake6fCOT2/+txqOTaEDb1bduH3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNjAxMjQxNTI4MThaFw0yNjAxMjcxOTE5MThaMDMxMTAvBgNV BAMTKDRBNThGNzA2NDBFRkFGNjRDNDQ0ODg4MTI1ODQzREMwN0I5NTZDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5FFRJRh7UmbNTjAUNWptpyjS gvLEjqVluISMIboPZoVsrZxnI+MMfig1KT9SjuO6dJKFIcs/hSumMO6YMWrGrpOg dgSl8hdza5/qLNUurxowoTlrtnQgBfmZFGF5rSfuD+/2aKYGVA5SCmyV4Iu9kPVe NPdeNoi3q7Vb38PNBgKIKzX58la62x4Bhs1S6evFncjI+2tNGlVebr4Y7vmH5GPI bawePQWqJJtgNO9rsVSLci2VcSNfev6CaSGQQw9MtYLde1yfAkBkOS52Wvhfte2J KgJoItOIDrJaZv0fgxzoYjDdQWuX2FpsYtuXYshJI0fNVJgPvsOebbUiQBDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlj3BkDvr2TERIiBJYQ9wHuVbJQwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMO7HNKBC+FCCyZc+z7Y9DZ1VOqeSvZFo5vQ cTDkx3qQj26yhyDb36ah23olZsU1rxD+lEloQcFWD6AGhcgzWm4k+0eBIBQY4PZg wQjh9GPU+aBF9NH4nE1pE+YbFuVHNTypldxAq4pSGtW2PcVKSqWosb0pn0BXhlWl yvyypatnCpABqt74DEsq/6f9RWyHJE3HLxU+Ll6lmQmgBklh4vJej5T3EFYVh9Vn gbBuWpQWMkux8utreDk2RfUtZ7GqO7LHF9Prsi8d/AFM993yRY4UIoxVKaTN/9Bo a0H/PN8d9p4ITl4NA92oZhyA8I7vDViIBOPSFcnopX1Lot4EatY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:21:37 2026 by rpki-client