This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: VcwOE6JQmurMV49aENna5MMKNbY7f8H77fFM4Ban3Eg= Subject key identifier: 70:43:12:7F:A1:0C:CF:60:18:E2:C5:BE:7C:44:8F:5F:7A:B1:E9:73 Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 0CDEC35C33ECA6F259DF1CFF7331AA21A3E0CE3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 01DE Signing time: Sat 24 Jan 2026 21:31:03 +0000 Manifest this update: Sat 24 Jan 2026 21:26:03 +0000 Manifest next update: Wed 28 Jan 2026 00:07:03 +0000 Files and hashes: 1: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: lkSfYrODyHMpEekQgH4/krwxQF80Ua2eqSFXhHKZbPA=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: KnPDrY7Tqy+sU3wNCKUDVoZ9WQhkJdY8RVjgQku10bc=) 3: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: pwU5MbHe48bMxeaUOCCgQ2JE8E2GuHkkkmp8qsWU6hU=) 4: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: sAxyAacrSqW6mHWffMKLhhk3JgkihWYb7S14LaFMATc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:de:c3:5c:33:ec:a6:f2:59:df:1c:ff:73:31:aa:21:a3:e0:ce:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Jan 24 21:26:03 2026 GMT Not After : Jan 28 00:07:03 2026 GMT Subject: CN=7043127FA10CCF6018E2C5BE7C448F5F7AB1E973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:b2:6a:06:f0:17:91:bc:13:92:b9:1a:0d: ab:15:a4:f8:d2:4c:9c:73:11:28:96:a0:8e:69:25: df:59:b5:6a:75:7b:fe:b3:93:a3:19:16:fc:25:e7: 25:cf:10:c3:7a:f1:0d:8c:cd:08:5b:bf:69:4b:16: 0b:c9:35:e3:bb:82:5d:42:f1:13:ae:52:10:e5:6b: 62:58:84:3b:8f:d2:62:b1:39:ff:0f:b6:53:44:1b: f0:09:c0:7b:05:4a:81:70:31:6a:1f:27:c0:bb:fa: 8f:0a:cc:b0:d3:1e:57:ce:7c:26:7c:4d:09:48:03: d4:d3:34:f5:da:4a:f8:27:ed:42:e9:6d:9a:a4:9e: 51:69:61:b8:fc:20:c4:43:c8:b9:a0:e3:a7:41:4b: 44:c6:6e:a1:4c:39:d1:88:ef:c4:45:a0:50:7a:f1: 2f:e9:8f:f5:87:62:cd:1d:69:11:91:e6:86:24:7f: 8e:14:74:c9:44:b4:24:2d:90:71:56:22:46:46:5e: c0:7c:45:5c:a2:34:0f:69:ae:bf:b1:12:c1:ca:5c: ab:32:74:e4:44:ec:56:33:bd:57:bc:a7:84:22:70: 9d:0b:8f:f0:b6:d3:e2:0f:c1:b2:03:84:9a:f2:2d: d4:2a:70:c7:50:75:f6:df:0e:7e:44:08:7b:3f:1c: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:43:12:7F:A1:0C:CF:60:18:E2:C5:BE:7C:44:8F:5F:7A:B1:E9:73 X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:31:c2:3f:a5:ce:57:71:f3:0d:e8:50:6d:32:19:8e:96:52: 8b:37:f7:af:db:a9:ce:8c:0b:85:c1:02:bf:11:57:f2:5f:82: d8:9c:83:a6:17:47:55:3b:db:2e:55:cf:b4:f3:4a:98:ac:53: 3a:d1:d7:26:88:91:ad:bf:40:60:67:be:a2:17:29:c4:88:5a: 82:67:51:83:bd:9e:05:06:d6:35:64:5c:be:5b:4d:af:eb:29: 6b:c6:c2:ce:c1:e9:40:96:8d:76:c2:2a:10:a3:3e:20:87:dd: 1f:85:80:ae:d2:1b:96:9b:df:60:86:f4:74:95:10:24:41:6f: 7b:fd:99:da:ea:14:ad:1c:5b:de:83:2a:0a:b5:b9:a9:22:96: ee:2f:84:83:bc:35:44:64:6f:43:cf:9a:ec:64:d5:81:db:2f: 77:65:08:af:da:53:06:1e:61:b1:c6:b8:66:ee:c2:d3:24:38: 2f:e6:72:1e:20:7e:2b:0c:39:80:61:2f:20:31:b3:95:03:28: 64:37:f6:d0:52:a5:cf:ba:4d:06:2b:62:20:93:50:c6:eb:d8: 2c:3a:15:0a:16:2e:4a:68:a1:61:30:4c:1e:91:55:38:96:d8: 5b:41:ff:45:b1:1b:0f:83:54:be:44:13:08:1b:fd:ca:1e:3b: 77:82:71:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDN7DXDPspvJZ3xz/czGqIaPgzjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNjAxMjQyMTI2MDNaFw0yNjAxMjgwMDA3MDNaMDMxMTAvBgNV BAMTKDcwNDMxMjdGQTEwQ0NGNjAxOEUyQzVCRTdDNDQ4RjVGN0FCMUU5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cbJqBvAXkbwTkrkaDasVpPjS TJxzESiWoI5pJd9ZtWp1e/6zk6MZFvwl5yXPEMN68Q2MzQhbv2lLFgvJNeO7gl1C 8ROuUhDla2JYhDuP0mKxOf8PtlNEG/AJwHsFSoFwMWofJ8C7+o8KzLDTHlfOfCZ8 TQlIA9TTNPXaSvgn7ULpbZqknlFpYbj8IMRDyLmg46dBS0TGbqFMOdGI78RFoFB6 8S/pj/WHYs0daRGR5oYkf44UdMlEtCQtkHFWIkZGXsB8RVyiNA9prr+xEsHKXKsy dORE7FYzvVe8p4QicJ0Lj/C20+IPwbIDhJryLdQqcMdQdfbfDn5ECHs/HFI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcEMSf6EMz2AY4sW+fESPX3qx6XMwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYxwj+lzldx8w3oUG0yGY6WUos396/bqc6M C4XBAr8RV/Jfgticg6YXR1U72y5Vz7TzSpisUzrR1yaIka2/QGBnvqIXKcSIWoJn UYO9ngUG1jVkXL5bTa/rKWvGws7B6UCWjXbCKhCjPiCH3R+FgK7SG5ab32CG9HSV ECRBb3v9mdrqFK0cW96DKgq1uakilu4vhIO8NURkb0PPmuxk1YHbL3dlCK/aUwYe YbHGuGbuwtMkOC/mch4gfisMOYBhLyAxs5UDKGQ39tBSpc+6TQYrYiCTUMbr2Cw6 FQoWLkpooWEwTB6RVTiW2FtB/0WxGw+DVL5EEwgb/coeO3eCcYw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:46 2026 by rpki-client