This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: B0+NEkiIsfyvaaeSvMhXc8IRuHmdnv+npygqtway+/Y= Subject key identifier: 5A:21:D8:BE:E8:45:AA:5C:CA:0E:D7:B2:0C:03:26:32:26:87:D2:76 Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 67194F627D7702CC092291C8F3D140005326C293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 03:50:40 +0000 Manifest this update: Sat 24 Jan 2026 03:45:40 +0000 Manifest next update: Tue 27 Jan 2026 11:44:40 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: CeoQdiqEA+E+FcW37l9+ThK+0F35e4VoGVxVzDbilVg=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:19:4f:62:7d:77:02:cc:09:22:91:c8:f3:d1:40:00:53:26:c2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Jan 24 03:45:40 2026 GMT Not After : Jan 27 11:44:40 2026 GMT Subject: CN=5A21D8BEE845AA5CCA0ED7B20C0326322687D276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:2c:c4:51:06:1a:e5:60:14:4c:90:85:ef: 0e:f7:df:7e:db:75:9d:2b:ec:f9:20:80:f7:bd:b0: 7b:5b:e2:39:37:72:bc:ac:59:a7:02:a7:9c:f1:1d: 5d:2e:9e:e9:37:9c:0a:5b:ce:e5:dc:dc:4d:67:88: 68:28:07:b7:b3:df:0c:35:a4:13:51:cc:92:78:5b: 0d:0f:eb:80:72:d6:7c:a0:48:23:ba:16:ec:ee:ae: 0d:de:b5:2d:d3:1a:5b:f8:04:ba:90:5b:c8:68:7c: 82:28:0d:a4:5c:cd:0b:dd:e0:66:5e:82:71:a5:bd: f1:4b:a6:0e:a7:0e:71:7a:19:42:23:7f:bb:15:42: 6e:55:27:be:dc:45:fa:ff:c9:38:d5:da:1b:a1:8e: 98:d5:f9:2b:18:5b:5a:96:db:1c:5e:b4:61:55:ba: 9f:ec:47:bc:d5:c0:70:a9:8a:3c:8a:2c:86:dc:eb: e7:e6:7a:9e:98:bf:66:42:fe:b1:06:c1:9b:89:f3: 2a:eb:8e:11:ca:00:4c:6f:2f:58:dc:f6:d2:70:b6: d7:5d:b3:18:95:8e:98:86:20:97:72:f9:dc:62:6b: a2:45:7e:00:e9:9a:d6:d2:f5:a6:4e:fc:d7:d7:3e: df:6e:de:1f:b2:b9:df:2c:54:9c:0e:26:f5:aa:16: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:21:D8:BE:E8:45:AA:5C:CA:0E:D7:B2:0C:03:26:32:26:87:D2:76 X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cd:44:6e:70:e6:bc:99:08:dd:99:a8:30:39:9b:ec:53:ee: 60:d0:14:09:86:c9:e0:5a:73:49:52:c8:b0:c9:ab:19:fa:ce: e4:c8:2e:b3:2d:5b:c4:ab:30:dd:c0:cb:56:b0:28:35:59:44: cc:28:be:88:53:c3:39:c5:18:f2:c7:cb:9d:c9:aa:48:0e:77: 04:0c:f1:ed:a6:7e:16:b0:6c:14:29:23:c7:b8:37:c9:d8:bf: 38:0c:42:fe:5d:1f:1f:35:25:2f:23:a3:48:45:68:08:c1:8a: cb:f0:ba:e6:5d:88:aa:6f:97:1f:32:1c:65:ff:2f:7a:b4:7f: 1b:b1:90:00:46:77:93:ae:e6:8b:b1:f5:10:f2:26:ea:79:6f: ea:9b:c7:c4:14:27:13:eb:47:d9:5c:d5:c3:54:d3:f7:aa:b1: ca:a7:86:d3:c0:b3:c7:19:34:e0:53:95:10:07:07:89:d3:c1: 25:80:36:f8:a2:6c:e5:c0:42:dc:79:ed:f2:0e:c1:20:17:bb: 7a:e1:6d:8d:c7:8d:ce:ba:26:a6:d5:b2:ea:64:6a:18:75:12: fc:f0:98:1b:87:dc:4d:02:43:db:25:10:82:81:d4:1c:be:b3: ef:7a:87:40:2f:da:7f:8c:a8:3e:ff:13:19:4a:47:ef:01:9b: 2b:25:28:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxlPYn13AswJIpHI89FAAFMmwpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNjAxMjQwMzQ1NDBaFw0yNjAxMjcxMTQ0NDBaMDMxMTAvBgNV BAMTKDVBMjFEOEJFRTg0NUFBNUNDQTBFRDdCMjBDMDMyNjMyMjY4N0QyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnSizEUQYa5WAUTJCF7w73337b dZ0r7PkggPe9sHtb4jk3crysWacCp5zxHV0unuk3nApbzuXc3E1niGgoB7ez3ww1 pBNRzJJ4Ww0P64By1nygSCO6Fuzurg3etS3TGlv4BLqQW8hofIIoDaRczQvd4GZe gnGlvfFLpg6nDnF6GUIjf7sVQm5VJ77cRfr/yTjV2huhjpjV+SsYW1qW2xxetGFV up/sR7zVwHCpijyKLIbc6+fmep6Yv2ZC/rEGwZuJ8yrrjhHKAExvL1jc9tJwttdd sxiVjpiGIJdy+dxia6JFfgDpmtbS9aZO/NfXPt9u3h+yud8sVJwOJvWqFoDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiHYvuhFqlzKDteyDAMmMiaH0nYwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfNRG5w5ryZCN2ZqDA5m+xT7mDQFAmGyeBa c0lSyLDJqxn6zuTILrMtW8SrMN3Ay1awKDVZRMwovohTwznFGPLHy53JqkgOdwQM 8e2mfhawbBQpI8e4N8nYvzgMQv5dHx81JS8jo0hFaAjBisvwuuZdiKpvlx8yHGX/ L3q0fxuxkABGd5Ou5oux9RDyJup5b+qbx8QUJxPrR9lc1cNU0/eqscqnhtPAs8cZ NOBTlRAHB4nTwSWANviibOXAQtx57fIOwSAXu3rhbY3Hjc66JqbVsupkahh1Evzw mBuH3E0CQ9slEIKB1By+s+96h0Av2n+MqD7/ExlKR+8BmyslKDQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:27 2026 by rpki-client