This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: xna33yU2cNBImIVG3dz1DpfgADVzkLmLawvOPNu5ZXo= Subject key identifier: 78:80:D2:28:44:2C:AE:DE:9E:5F:76:14:B7:D8:6B:31:EA:DE:35:8A Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 14E931D191C88B5F3FB04A202DCB0526AE07062A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0394 Signing time: Sat 24 Jan 2026 19:52:02 +0000 Manifest this update: Sat 24 Jan 2026 19:47:02 +0000 Manifest next update: Wed 28 Jan 2026 00:51:02 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: TInKZX53oL3KmaAcg+TI1dz/jH2zb4ZPetXb+BSwjIA=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 3: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e9:31:d1:91:c8:8b:5f:3f:b0:4a:20:2d:cb:05:26:ae:07:06:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Jan 24 19:47:02 2026 GMT Not After : Jan 28 00:51:02 2026 GMT Subject: CN=7880D228442CAEDE9E5F7614B7D86B31EADE358A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:a9:eb:ab:28:ed:52:09:f0:94:55:8c:b3: e2:d9:1e:b7:ac:d7:fd:46:52:a2:43:69:13:1f:d7: 20:61:57:46:b6:da:e4:75:7f:59:95:9b:40:d9:2b: 2e:41:da:0f:31:e0:cd:35:b7:8f:90:be:13:0e:9a: 19:0c:39:8d:80:b2:be:eb:ee:f3:4a:2e:7c:2d:45: fd:84:08:8b:d5:41:f4:44:35:e0:07:3f:54:56:85: 14:82:6d:b1:53:ef:cd:4c:97:91:4f:a4:db:04:10: 50:9c:5e:4a:ca:82:bc:0f:d1:e3:3c:1e:d9:d1:0f: cf:e8:aa:44:79:49:9e:1e:b4:60:1b:10:3e:ed:fd: 61:40:3c:e7:dc:9f:e5:26:a4:11:07:0f:cd:14:8a: eb:b8:28:bf:05:c9:4d:16:2e:9f:97:2a:d8:77:ae: 40:cb:ec:34:6c:bd:83:68:9c:35:54:f8:8a:9c:98: 42:4e:58:9d:20:39:97:ad:16:a1:ec:8d:32:5f:dc: bc:7c:0e:f3:bc:40:c5:b0:4a:7a:cb:e8:f3:bd:6c: 35:e9:b0:1b:81:fd:00:6d:e1:f3:78:2f:56:90:75: 5a:75:8f:fe:73:fa:87:69:80:a2:ee:b6:25:a5:61: f6:c5:df:c6:12:a4:a0:ca:28:83:2e:31:a5:42:aa: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:80:D2:28:44:2C:AE:DE:9E:5F:76:14:B7:D8:6B:31:EA:DE:35:8A X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1c:18:d6:1c:ac:01:72:5a:dc:37:f1:5b:dd:6a:20:80:16: dd:ad:6a:22:01:79:5a:27:1c:19:86:c2:c6:42:b4:53:7f:fe: 7b:b1:77:db:2d:c9:81:36:b4:e2:ff:4b:81:57:46:e3:87:9a: c0:53:a8:87:6c:fa:62:90:c1:8e:ab:4d:1c:42:1f:db:1b:34: f5:b5:db:93:8d:49:d5:3e:6d:d6:49:68:61:98:df:a6:b4:c2: ef:b8:db:97:62:bb:f5:4d:5f:31:5f:e9:2e:50:7f:28:05:4c: c8:47:ec:69:4e:ce:47:db:5e:3a:37:bf:a3:e4:6e:51:47:eb: 56:b9:25:2e:39:05:c7:b6:9e:a7:40:08:62:7d:d5:4a:e8:6b: c1:d3:bb:d3:70:4c:91:0c:c9:b1:7f:5a:f0:da:e5:10:34:53: 86:3f:9f:22:07:11:a3:f7:21:55:49:58:bd:1e:5c:1f:de:0f: 31:c6:cd:8f:f7:f9:f4:d3:b9:c7:67:55:8d:d0:01:73:b7:0f: 72:dd:e4:b2:10:d3:f5:e1:94:e8:ec:ee:1e:4f:2c:c3:75:5a: 5a:65:3c:32:82:f9:4b:c4:85:52:65:e2:55:88:1e:50:c2:67: de:75:b7:01:24:e1:fe:af:7d:74:08:43:5f:f7:11:01:ce:4f: c1:d9:27:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOkx0ZHIi18/sEogLcsFJq4HBiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNjAxMjQxOTQ3MDJaFw0yNjAxMjgwMDUxMDJaMDMxMTAvBgNV BAMTKDc4ODBEMjI4NDQyQ0FFREU5RTVGNzYxNEI3RDg2QjMxRUFERTM1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIKnrqyjtUgnwlFWMs+LZHres 1/1GUqJDaRMf1yBhV0a22uR1f1mVm0DZKy5B2g8x4M01t4+QvhMOmhkMOY2Asr7r 7vNKLnwtRf2ECIvVQfRENeAHP1RWhRSCbbFT781Ml5FPpNsEEFCcXkrKgrwP0eM8 HtnRD8/oqkR5SZ4etGAbED7t/WFAPOfcn+UmpBEHD80Uiuu4KL8FyU0WLp+XKth3 rkDL7DRsvYNonDVU+IqcmEJOWJ0gOZetFqHsjTJf3Lx8DvO8QMWwSnrL6PO9bDXp sBuB/QBt4fN4L1aQdVp1j/5z+odpgKLutiWlYfbF38YSpKDKKIMuMaVCqnhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeIDSKEQsrt6eX3YUt9hrMereNYowHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkcGNYcrAFyWtw38VvdaiCAFt2taiIBeVon HBmGwsZCtFN//nuxd9styYE2tOL/S4FXRuOHmsBTqIds+mKQwY6rTRxCH9sbNPW1 25ONSdU+bdZJaGGY36a0wu+425diu/VNXzFf6S5QfygFTMhH7GlOzkfbXjo3v6Pk blFH61a5JS45Bce2nqdACGJ91Uroa8HTu9NwTJEMybF/WvDa5RA0U4Y/nyIHEaP3 IVVJWL0eXB/eDzHGzY/3+fTTucdnVY3QAXO3D3Ld5LIQ0/XhlOjs7h5PLMN1Wlpl PDKC+UvEhVJl4lWIHlDCZ951twEk4f6vfXQIQ1/3EQHOT8HZJ1U= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:49 2026 by rpki-client