This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: QntQBcITacIhuBI3ab33xSZLNx3yMa8psxwXQCAoo6s= Subject key identifier: 71:79:A8:32:AA:9E:10:F4:91:58:B7:07:23:CA:DF:17:88:4E:A3:94 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 17A36FD67BAEBBD764172CEEE58FC4DE506791B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 037B Signing time: Sun 25 Jan 2026 02:30:58 +0000 Manifest this update: Sun 25 Jan 2026 02:25:58 +0000 Manifest next update: Wed 28 Jan 2026 07:07:58 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) 2: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: MmiZ3kEngvcjNq879lZZZaz8kiue55VKzezhzUyY2KE=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: hFHJ4kS9GUwE2b+g6TQ3uI/zzh5E5E9pR8UEKQtLf9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a3:6f:d6:7b:ae:bb:d7:64:17:2c:ee:e5:8f:c4:de:50:67:91:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Jan 25 02:25:58 2026 GMT Not After : Jan 28 07:07:58 2026 GMT Subject: CN=7179A832AA9E10F49158B70723CADF17884EA394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:a9:08:8c:a6:8d:42:54:a2:b8:87:c8:09: 70:0d:b1:4c:4d:c4:19:4b:50:7e:db:e7:4e:33:8f: 9c:bc:38:d1:6d:e2:f4:65:fc:c5:a9:5a:d4:b2:1a: 63:26:75:fa:72:78:88:67:b3:43:da:97:d7:bc:73: 29:50:3c:ef:39:55:35:62:f2:52:98:93:68:ee:ff: 41:d0:c6:a0:11:1d:03:06:c5:32:37:bd:df:1c:a5: b5:e5:88:57:d1:6c:bb:4e:aa:e2:62:2f:74:7e:cb: 75:ce:f4:18:db:88:cd:aa:c5:0e:1e:c3:36:0c:51: 58:76:41:b5:41:2d:13:84:bd:c1:a0:a1:97:c8:f4: 8a:d3:13:b2:4b:47:74:23:a0:53:27:e6:0b:ec:fe: fb:61:07:c7:d5:8f:ca:01:4a:ff:18:d9:d4:f8:e0: 61:fd:9a:cb:c3:7f:e1:7e:26:6f:00:8f:5f:05:9b: 50:40:89:21:f3:d9:f5:a5:30:dc:4d:60:3c:e4:76: db:83:0a:6a:40:62:b3:b7:31:c7:ee:da:b6:16:52: 6d:e0:ae:13:20:5c:48:a0:6f:9e:45:40:8b:2a:4f: 80:28:26:78:ef:a7:2d:31:e7:77:61:24:0f:5b:b3: 0a:59:39:0d:44:e0:7c:df:c9:8a:3b:cf:62:53:82: d3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:A8:32:AA:9E:10:F4:91:58:B7:07:23:CA:DF:17:88:4E:A3:94 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9a:85:37:cf:e9:33:72:fa:62:6e:9c:a3:ee:34:c9:a2:f5: 0c:b7:93:eb:c2:5a:d4:75:89:dc:24:ab:c8:47:df:ce:1b:07: 04:44:7d:30:db:10:90:93:93:10:04:49:17:8a:6b:e5:d7:02: 32:2d:7a:37:33:6c:2d:2c:fb:7d:92:ee:64:fa:b4:a6:ef:67: c0:98:d3:3f:42:2c:e5:57:05:67:65:88:60:18:72:f3:e6:d1: f4:e5:32:cd:f9:4c:b0:a9:54:4b:d0:24:93:7f:de:46:9f:d1: 7b:3f:24:72:6e:9c:b2:30:76:9b:5e:8a:16:ce:43:9e:51:2a: 52:a9:2d:d5:d4:50:e3:3b:b7:0f:03:11:4f:56:75:bb:a0:a4: 7c:90:73:f2:b2:a6:30:60:59:eb:b3:ea:3f:e1:b7:bc:cc:8a: b5:94:87:fc:ad:ce:50:83:1e:a9:00:c3:8f:d0:a4:33:82:59: 39:58:0d:3e:eb:e1:7f:75:1c:02:07:cc:2c:09:ab:ad:33:f0: b8:f0:5d:10:3b:c2:5d:6f:fe:5b:df:d6:10:1a:88:a5:56:85: d8:61:40:61:bd:5f:83:ac:0f:e1:86:e0:b5:1f:6d:cd:83:a0: 66:11:7d:9d:53:4f:f8:b7:a2:86:c7:b6:01:16:b9:a9:5d:e9: a7:a6:21:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6Nv1nuuu9dkFyzu5Y/E3lBnkbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNjAxMjUwMjI1NThaFw0yNjAxMjgwNzA3NThaMDMxMTAvBgNV BAMTKDcxNzlBODMyQUE5RTEwRjQ5MTU4QjcwNzIzQ0FERjE3ODg0RUEzOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DqkIjKaNQlSiuIfICXANsUxN xBlLUH7b504zj5y8ONFt4vRl/MWpWtSyGmMmdfpyeIhns0Pal9e8cylQPO85VTVi 8lKYk2ju/0HQxqARHQMGxTI3vd8cpbXliFfRbLtOquJiL3R+y3XO9BjbiM2qxQ4e wzYMUVh2QbVBLROEvcGgoZfI9IrTE7JLR3QjoFMn5gvs/vthB8fVj8oBSv8Y2dT4 4GH9msvDf+F+Jm8Aj18Fm1BAiSHz2fWlMNxNYDzkdtuDCmpAYrO3Mcfu2rYWUm3g rhMgXEigb55FQIsqT4AoJnjvpy0x53dhJA9bswpZOQ1E4HzfyYo7z2JTgtOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcXmoMqqeEPSRWLcHI8rfF4hOo5QwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOahTfP6TNy+mJunKPuNMmi9Qy3k+vCWtR1 idwkq8hH384bBwREfTDbEJCTkxAESReKa+XXAjItejczbC0s+32S7mT6tKbvZ8CY 0z9CLOVXBWdliGAYcvPm0fTlMs35TLCpVEvQJJN/3kaf0Xs/JHJunLIwdpteihbO Q55RKlKpLdXUUOM7tw8DEU9WdbugpHyQc/KypjBgWeuz6j/ht7zMirWUh/ytzlCD HqkAw4/QpDOCWTlYDT7r4X91HAIHzCwJq60z8LjwXRA7wl1v/lvf1hAaiKVWhdhh QGG9X4OsD+GG4LUfbc2DoGYRfZ1TT/i3oobHtgEWuald6aemIYg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:14 2026 by rpki-client