This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: lrGjZ7NcziVXRaL6YfYZ8SxSqvZ8T1RC67rSvNsMvec= Subject key identifier: 03:26:91:04:CA:9E:72:D0:76:89:35:81:20:B8:F0:19:79:23:7A:F9 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 5615B43715EACF4E625343D35E2E516EB8F877E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0212 Signing time: Sun 25 Jan 2026 15:30:48 +0000 Manifest this update: Sun 25 Jan 2026 15:25:48 +0000 Manifest next update: Thu 29 Jan 2026 00:10:48 +0000 Files and hashes: 1: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) 4: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: ZLbLM8gl5te3SttzDK/ShADWMd8MX3+TqMj14qgT8tk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:15:b4:37:15:ea:cf:4e:62:53:43:d3:5e:2e:51:6e:b8:f8:77:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Jan 25 15:25:48 2026 GMT Not After : Jan 29 00:10:48 2026 GMT Subject: CN=03269104CA9E72D07689358120B8F01979237AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:5e:ba:31:b3:2a:fa:a5:0f:49:65:ed:1a: 9e:39:c0:e4:08:7e:b9:09:1b:6f:37:d4:e5:cc:b1: d5:63:11:65:ca:37:cf:67:43:4a:3c:5e:1d:06:6e: 38:41:f2:20:36:b1:3e:41:2b:28:81:a0:46:79:66: c5:c5:cc:a8:67:8d:87:6a:63:f5:93:e2:7c:42:b3: c7:36:13:9d:0a:9d:05:ec:6e:4c:98:51:94:a3:0a: e2:0c:89:ad:25:26:6f:77:71:9d:00:68:27:14:16: 8c:79:93:a7:b7:90:32:21:db:6d:93:60:9c:23:f8: f2:34:df:47:cc:e6:54:ec:f1:52:b9:37:b5:e0:22: 17:37:78:26:ca:a7:0d:2e:f6:ae:55:29:5a:8f:89: 86:f6:dc:21:9d:17:52:26:91:13:cc:2e:b4:4b:8d: 1c:80:cf:49:ba:b1:48:8c:95:e7:e3:cc:c2:ff:f2: 5b:c4:19:05:bd:41:80:44:6d:cc:11:79:3d:a0:aa: 46:9c:29:7c:41:1b:df:55:a6:2a:19:d8:15:ff:47: 77:ef:68:7d:29:01:eb:45:01:67:0d:65:3a:10:12: 00:df:17:2f:43:59:38:97:b9:3e:a4:cf:fc:50:e1: 2d:40:97:c1:57:04:c1:9f:8b:97:47:5c:45:e3:27: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:26:91:04:CA:9E:72:D0:76:89:35:81:20:B8:F0:19:79:23:7A:F9 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e5:a5:b4:76:c2:98:d5:49:0c:e4:cc:3b:25:dc:45:e9:80: a0:f6:7a:2a:d0:cb:a6:da:96:b3:f8:8a:6a:d8:fb:1d:17:e5: ae:1c:2a:4a:2f:76:d3:02:35:7a:3f:d7:2d:ec:7b:19:bc:3f: 06:93:d9:f2:1c:1c:12:f5:01:6a:13:d8:21:ed:f5:57:61:af: 76:aa:56:c1:d8:c5:fb:b2:ed:ac:86:b7:f1:29:a5:b8:19:ec: 8f:0d:d0:34:e6:eb:57:51:de:35:54:99:f3:e0:40:5d:fe:b2: 69:1d:0e:8b:b5:83:f5:53:11:f6:67:34:13:b2:5f:8c:0a:2e: d2:eb:cc:71:28:e4:d7:9f:9d:62:93:c3:72:d3:a3:6f:c2:d5: 92:ff:b9:0a:38:43:07:47:4a:b6:e9:66:50:dd:ca:49:b1:6e: 7e:25:d6:8d:09:4e:e0:0b:7b:65:73:68:72:3b:70:0d:ac:80: f3:63:42:ee:77:b2:ed:4f:fd:79:38:6e:74:05:a9:84:77:eb: a5:f7:3a:15:a4:6d:a8:a3:02:e1:58:44:df:17:f0:c8:3e:31: 4a:6c:ae:3a:d8:6a:67:f7:45:c8:e1:5a:92:5c:18:fb:d5:16: a7:11:32:50:21:d4:df:eb:2c:ed:9c:bf:d3:fb:51:fa:d3:a5: 91:01:5a:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhW0NxXqz05iU0PTXi5Rbrj4d+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNjAxMjUxNTI1NDhaFw0yNjAxMjkwMDEwNDhaMDMxMTAvBgNV BAMTKDAzMjY5MTA0Q0E5RTcyRDA3Njg5MzU4MTIwQjhGMDE5NzkyMzdBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOV66MbMq+qUPSWXtGp45wOQI frkJG2831OXMsdVjEWXKN89nQ0o8Xh0GbjhB8iA2sT5BKyiBoEZ5ZsXFzKhnjYdq Y/WT4nxCs8c2E50KnQXsbkyYUZSjCuIMia0lJm93cZ0AaCcUFox5k6e3kDIh222T YJwj+PI030fM5lTs8VK5N7XgIhc3eCbKpw0u9q5VKVqPiYb23CGdF1ImkRPMLrRL jRyAz0m6sUiMlefjzML/8lvEGQW9QYBEbcwReT2gqkacKXxBG99VpioZ2BX/R3fv aH0pAetFAWcNZToQEgDfFy9DWTiXuT6kz/xQ4S1Al8FXBMGfi5dHXEXjJ6OFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAyaRBMqectB2iTWBILjwGXkjevkwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHlpbR2wpjVSQzkzDsl3EXpgKD2eirQy6ba lrP4imrY+x0X5a4cKkovdtMCNXo/1y3sexm8PwaT2fIcHBL1AWoT2CHt9Vdhr3aq VsHYxfuy7ayGt/EppbgZ7I8N0DTm61dR3jVUmfPgQF3+smkdDou1g/VTEfZnNBOy X4wKLtLrzHEo5NefnWKTw3LTo2/C1ZL/uQo4QwdHSrbpZlDdykmxbn4l1o0JTuAL e2VzaHI7cA2sgPNjQu53su1P/Xk4bnQFqYR366X3OhWkbaijAuFYRN8X8Mg+MUps rjrYamf3RcjhWpJcGPvVFqcRMlAh1N/rLO2cv9P7UfrTpZEBWvE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:11 2026 by rpki-client