This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: HztTZkDLCdfWp0ldBfeAftUL6CbYHbLW7CtTM9JKNyE= Subject key identifier: 99:7B:0E:80:22:BE:12:57:DA:89:9F:F6:CC:69:4D:C5:7A:44:49:D2 Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 1BB0CD15E7ECDA5C28A8F3340CA827306AAD5548 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01F7 Signing time: Fri 23 Jan 2026 11:41:33 +0000 Manifest this update: Fri 23 Jan 2026 11:36:33 +0000 Manifest next update: Mon 26 Jan 2026 23:13:33 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: 89CcldOr78R1o6UkIZIlrMPSKNOve/uB0NJiCl+wwaA=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b0:cd:15:e7:ec:da:5c:28:a8:f3:34:0c:a8:27:30:6a:ad:55:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Jan 23 11:36:33 2026 GMT Not After : Jan 26 23:13:33 2026 GMT Subject: CN=997B0E8022BE1257DA899FF6CC694DC57A4449D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:02:15:06:83:ad:41:b8:73:7d:f9:a2:dd: 90:d8:8a:52:19:28:77:d4:b8:7f:9b:70:80:05:23: 61:a9:aa:1d:18:8b:37:16:e1:49:e3:26:ef:72:9a: b0:02:31:71:23:c4:a5:36:b4:20:0d:a1:83:b2:3f: 6d:15:1a:2b:89:ae:02:95:4d:d0:12:21:35:ea:f5: 53:c1:60:5e:4b:c7:d7:42:d3:07:c3:dd:4c:a0:31: 85:be:4f:a3:85:05:0f:39:ac:27:1b:1c:e5:91:0a: b2:51:d5:4e:44:b1:f6:45:b8:39:04:d4:c6:94:6f: 2a:15:8b:fe:7e:c6:69:9c:12:a9:72:12:d8:56:8f: 39:e4:3c:5b:fc:ac:73:89:ba:0d:74:52:30:3e:b0: 22:ae:cc:66:90:29:f2:c9:9f:6e:29:62:49:84:2c: 23:58:34:3d:9f:fd:49:8d:fe:9e:9b:82:32:1b:12: f3:71:48:c0:74:25:fc:d2:de:16:04:e9:30:81:40: 25:95:3e:c6:e2:32:98:3a:d9:06:06:8c:47:15:1d: 3c:bf:b1:85:04:9a:87:5b:a1:36:b1:d1:97:aa:07: d4:ad:7d:7c:49:0e:2f:31:6c:ff:f9:cc:11:f1:5d: 55:e0:9c:07:a4:31:53:97:3b:ee:3d:5e:e9:49:3b: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7B:0E:80:22:BE:12:57:DA:89:9F:F6:CC:69:4D:C5:7A:44:49:D2 X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d9:c7:af:c0:7b:03:86:80:5f:e2:96:19:7c:66:fb:ba:a1: d1:06:cc:a6:4d:41:4c:17:f5:16:92:41:1c:ae:fa:c2:e9:6e: fc:32:a2:65:6b:25:da:f4:ea:52:6f:6f:20:1e:91:f6:80:ee: a2:0e:06:3a:39:f6:cd:55:f5:16:bb:84:76:88:4d:9a:27:69: 02:3a:03:9b:04:dd:08:98:f0:43:eb:26:b1:a4:2b:7f:9c:bf: b1:7a:c2:4f:3c:43:32:c4:71:db:dd:2d:e4:e5:7c:cc:bd:3e: db:42:ac:43:a2:37:5c:2d:4a:66:fa:b1:2b:dd:03:a0:80:f3: 5e:5b:d6:ec:0f:b3:81:60:3e:82:21:f4:d2:20:a6:34:7d:11: ac:a0:ef:81:94:bd:07:fa:b3:53:b1:b0:3d:00:d1:84:5f:05: ac:9c:f5:2a:18:e6:e7:9c:9b:df:f9:7f:ce:61:88:e6:56:ea: 16:2e:d9:94:50:64:56:5d:30:9d:64:6e:9e:49:26:ac:00:e0: 41:35:ef:5f:5a:b4:1b:5c:32:fa:d2:85:d6:22:ab:b2:d9:53: 91:95:8b:3c:7d:38:39:fa:1c:2f:14:7a:9a:ee:a6:1a:33:be: 19:23:0e:c9:b5:a2:25:19:5c:64:fc:f1:5a:f5:f0:ab:a2:57: 34:2a:3a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7DNFefs2lwoqPM0DKgnMGqtVUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNjAxMjMxMTM2MzNaFw0yNjAxMjYyMzEzMzNaMDMxMTAvBgNV BAMTKDk5N0IwRTgwMjJCRTEyNTdEQTg5OUZGNkNDNjk0REM1N0E0NDQ5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9QIVBoOtQbhzffmi3ZDYilIZ KHfUuH+bcIAFI2Gpqh0YizcW4UnjJu9ymrACMXEjxKU2tCANoYOyP20VGiuJrgKV TdASITXq9VPBYF5Lx9dC0wfD3UygMYW+T6OFBQ85rCcbHOWRCrJR1U5EsfZFuDkE 1MaUbyoVi/5+xmmcEqlyEthWjznkPFv8rHOJug10UjA+sCKuzGaQKfLJn24pYkmE LCNYND2f/UmN/p6bgjIbEvNxSMB0JfzS3hYE6TCBQCWVPsbiMpg62QYGjEcVHTy/ sYUEmodboTax0ZeqB9StfXxJDi8xbP/5zBHxXVXgnAekMVOXO+49XulJO7j5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXsOgCK+ElfaiZ/2zGlNxXpESdIwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnZx6/AewOGgF/ilhl8Zvu6odEGzKZNQUwX 9RaSQRyu+sLpbvwyomVrJdr06lJvbyAekfaA7qIOBjo59s1V9Ra7hHaITZonaQI6 A5sE3QiY8EPrJrGkK3+cv7F6wk88QzLEcdvdLeTlfMy9PttCrEOiN1wtSmb6sSvd A6CA815b1uwPs4FgPoIh9NIgpjR9Eayg74GUvQf6s1OxsD0A0YRfBayc9SoY5uec m9/5f85hiOZW6hYu2ZRQZFZdMJ1kbp5JJqwA4EE1719atBtcMvrShdYiq7LZU5GV izx9ODn6HC8UepruphozvhkjDsm1oiUZXGT88Vr18KuiVzQqOi0= -----END CERTIFICATE-----Generated at Sun Jan 25 11:30:49 2026 by rpki-client