This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: YspcKnMaTmOaIZ9mYU1n1wxgb9YJuiLQGnhNVjzSyrc= Subject key identifier: 29:69:E7:95:DB:12:1A:F3:04:23:4F:17:16:99:9A:00:1A:A0:17:59 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 4A8018D52AFF6939F21B0287D0B8E7BE33708B6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 01E8 Signing time: Sun 25 Jan 2026 09:30:52 +0000 Manifest this update: Sun 25 Jan 2026 09:25:52 +0000 Manifest next update: Wed 28 Jan 2026 14:27:52 +0000 Files and hashes: 1: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: fibpaoWLGLqVlSh+YVe38FiOvASMtn5m89vjXOwhkBg=) 2: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: X/+D0RUuf1hjurBgGtBGH8upSR342yMyGEZI3ghU+mk=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: VxYbMhqwlKJa8vovl6e5giv2nGRmCv5MIyRt8vp3qoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:80:18:d5:2a:ff:69:39:f2:1b:02:87:d0:b8:e7:be:33:70:8b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Jan 25 09:25:52 2026 GMT Not After : Jan 28 14:27:52 2026 GMT Subject: CN=2969E795DB121AF304234F1716999A001AA01759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:88:71:b4:5e:7b:a9:b8:fd:13:3e:7c:69: d9:58:4b:64:23:47:74:c0:26:76:bc:95:25:55:14: 19:fe:3a:ba:c6:70:cf:12:df:b6:2c:b2:6d:c0:ab: bc:b7:c9:d5:d5:6c:ef:15:0c:8f:35:f7:5f:57:43: a1:03:f4:34:25:d3:2d:fa:60:20:8c:33:70:f7:8c: 52:04:56:3c:70:d7:26:86:d1:a6:9f:ac:42:e7:98: 91:d0:31:d2:e5:ed:5e:13:01:98:00:db:c1:b9:38: 22:43:67:0e:7c:aa:7d:c6:ee:13:67:17:7f:52:13: 64:2f:e5:54:f3:4e:50:ae:90:08:7c:fd:22:83:f0: 3a:46:3d:3c:3c:94:41:a6:24:6d:3d:9f:87:cb:60: ee:d7:3c:1f:1e:a9:1f:e9:e9:f8:8e:bb:3b:82:8d: da:f3:38:ff:f4:95:d3:e4:42:5f:86:3a:ef:1a:5b: 05:de:1e:c8:d4:e5:2c:ed:3b:4d:82:1e:b2:0e:da: 37:1a:e7:dd:b1:b7:ca:d6:23:9e:87:54:54:6e:e0: c5:5c:a3:5d:85:3d:bd:e9:de:d9:79:9b:0e:8f:2a: 6b:d3:0c:c3:7e:c8:c5:7f:25:66:c9:f8:7e:66:ec: 70:0c:26:12:af:ce:bf:f8:9c:50:17:e3:27:50:f6: 3f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:69:E7:95:DB:12:1A:F3:04:23:4F:17:16:99:9A:00:1A:A0:17:59 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:50:06:7f:1e:32:f1:03:66:bd:7f:48:8a:a0:7e:d1:1e:45: 0e:20:19:15:c5:a9:63:03:e8:50:67:7b:b2:12:6f:c5:39:20: 7e:ed:8d:e3:72:01:d0:e2:a5:82:d4:0d:db:29:bd:8d:d4:3f: 08:4f:6e:58:18:fc:7c:5a:32:d8:2e:94:02:7a:f3:10:b6:cb: 7e:08:14:79:9a:83:95:fa:b2:be:9a:ee:da:94:3e:db:35:a4: 5e:08:4f:97:40:3a:b5:83:d9:38:16:f0:1f:04:4e:c8:4e:03: 48:39:98:f6:d3:56:17:40:0c:41:49:ea:7d:13:3c:3d:37:10: f2:96:82:45:cd:3d:5d:11:7d:05:70:7c:f2:e9:df:36:c5:fe: 28:2b:f4:0f:a4:df:5a:65:db:83:09:b8:bc:86:cc:83:d0:35: 6d:49:45:7f:db:34:d7:ee:9d:b9:9b:70:55:f7:c5:2b:f5:68: 3f:e0:49:ef:12:cb:ef:7d:52:a0:d3:bb:21:41:4c:5f:82:6c: 2a:cd:cb:0d:45:6f:1e:30:ec:19:89:38:52:8b:8f:df:6d:5a: 5a:42:07:61:95:26:43:b1:f5:42:f2:f5:dd:85:b4:f7:ce:15: 5f:17:39:43:de:23:41:e8:d2:d5:af:6a:02:95:c4:a5:96:b6: 29:20:48:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoAY1Sr/aTnyGwKH0LjnvjNwi24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNjAxMjUwOTI1NTJaFw0yNjAxMjgxNDI3NTJaMDMxMTAvBgNV BAMTKDI5NjlFNzk1REIxMjFBRjMwNDIzNEYxNzE2OTk5QTAwMUFBMDE3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKV4hxtF57qbj9Ez58adlYS2Qj R3TAJna8lSVVFBn+OrrGcM8S37Yssm3Aq7y3ydXVbO8VDI81919XQ6ED9DQl0y36 YCCMM3D3jFIEVjxw1yaG0aafrELnmJHQMdLl7V4TAZgA28G5OCJDZw58qn3G7hNn F39SE2Qv5VTzTlCukAh8/SKD8DpGPTw8lEGmJG09n4fLYO7XPB8eqR/p6fiOuzuC jdrzOP/0ldPkQl+GOu8aWwXeHsjU5SztO02CHrIO2jca592xt8rWI56HVFRu4MVc o12FPb3p3tl5mw6PKmvTDMN+yMV/JWbJ+H5m7HAMJhKvzr/4nFAX4ydQ9j9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWnnldsSGvMEI08XFpmaABqgF1kwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdQBn8eMvEDZr1/SIqgftEeRQ4gGRXFqWMD 6FBne7ISb8U5IH7tjeNyAdDipYLUDdspvY3UPwhPblgY/HxaMtgulAJ68xC2y34I FHmag5X6sr6a7tqUPts1pF4IT5dAOrWD2TgW8B8ETshOA0g5mPbTVhdADEFJ6n0T PD03EPKWgkXNPV0RfQVwfPLp3zbF/igr9A+k31pl24MJuLyGzIPQNW1JRX/bNNfu nbmbcFX3xSv1aD/gSe8Sy+99UqDTuyFBTF+CbCrNyw1Fbx4w7BmJOFKLj99tWlpC B2GVJkOx9ULy9d2FtPfOFV8XOUPeI0Ho0tWvagKVxKWWtikgSDk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:22 2026 by rpki-client