This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: QUzAFil5PLB26xVB/puh/oKoDzymXC3mv4LBiqXeocQ= Subject key identifier: BB:C1:47:7B:B0:11:CD:F9:19:20:C9:C2:CA:CB:5E:A0:45:35:3B:AB Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 7E99938F1FA6D0E4912C78E156992234B3C303EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 013E Signing time: Fri 23 Jan 2026 10:51:12 +0000 Manifest this update: Fri 23 Jan 2026 10:46:12 +0000 Manifest next update: Mon 26 Jan 2026 18:10:12 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: 4blY0KBpSzRUoyFaq35Eu1DEa3N9B3gRpwyZoNwNxRU=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: zHu+x2gGwUwgUlq5CctYUcopUHkJoC2ZyqysIaSRBBM=) 3: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: trEJGolLTqeU0USYPKC6zAxLj/0jirEtgTzebYohSsc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:99:93:8f:1f:a6:d0:e4:91:2c:78:e1:56:99:22:34:b3:c3:03:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Jan 23 10:46:12 2026 GMT Not After : Jan 26 18:10:12 2026 GMT Subject: CN=BBC1477BB011CDF91920C9C2CACB5EA045353BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:0e:cc:f9:3b:eb:f7:ad:e6:18:04:ad:7b: e5:6d:c2:b6:2b:d9:19:92:6e:b7:0e:4f:73:68:e9: f2:88:a2:c0:7b:8b:a7:ba:0f:f0:0c:34:f8:7a:05: ce:90:ab:1e:f2:ab:08:7a:b8:74:0e:af:46:41:59: 97:e3:4b:d0:c4:06:cb:b7:b2:d9:ab:23:cd:e5:8e: f3:ee:45:53:c0:69:f1:8e:eb:1b:eb:4f:20:14:94: ce:1a:4f:15:ee:1b:10:4c:e9:af:38:a5:76:f1:ae: 0f:2f:16:7e:4f:e7:43:90:6a:4c:7c:23:ad:41:b0: ed:50:ef:40:e4:54:83:2a:90:91:1e:5a:83:2e:ee: 75:71:7c:d1:3e:bd:28:a1:6d:26:6c:84:16:50:6d: 44:8b:93:5c:1d:a0:3b:15:b0:d0:c2:ec:27:f6:b8: 0f:a8:77:dc:23:2f:e7:4e:1a:20:84:b1:f1:eb:1e: a9:fa:3d:20:09:68:fc:6a:9a:44:1b:c8:89:57:1c: ee:9e:ce:67:95:42:9d:5e:8d:fe:42:d9:60:d2:25: 8a:52:c3:b7:47:06:30:ac:44:ee:53:34:dc:4a:db: 28:26:c6:b4:56:2f:d2:17:87:11:e9:a4:a4:5b:4a: ad:1a:92:eb:c5:1e:25:dd:2b:64:3d:9c:b5:c4:1c: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C1:47:7B:B0:11:CD:F9:19:20:C9:C2:CA:CB:5E:A0:45:35:3B:AB X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:7e:e5:9b:42:e7:63:cd:ad:3a:ac:e2:55:b6:f0:9b:17:73: 0d:e9:42:a2:58:84:37:ea:59:fe:ef:a4:40:7a:c2:d7:68:79: f7:c9:38:cb:48:47:0a:2c:3a:f8:37:a6:ce:0a:31:28:a3:41: 8e:fe:7a:b5:9f:db:81:be:3d:47:cf:e3:a8:01:7c:fc:5e:34: 44:83:6d:aa:dc:57:99:a3:59:62:b6:04:52:ee:05:47:c1:c5: e7:bc:65:84:7d:67:79:45:e6:4f:84:b6:a4:61:1e:7a:ba:03: 0b:8c:58:a0:d3:5d:24:fa:5e:4f:16:ca:11:7c:b7:c5:c3:3e: 2a:c9:bd:a8:f4:90:d8:a8:4e:d8:49:2d:28:e0:84:1c:bd:e0: ac:0d:7d:ae:bd:06:25:19:33:9a:82:b0:f1:3c:1c:a4:86:dc: 95:cb:0d:0f:08:d3:68:2a:49:cc:7e:12:cc:ee:43:f7:64:a0: 8f:99:f3:3c:31:fe:73:62:07:02:9c:25:1e:29:4b:78:fc:40: 34:95:1b:eb:e2:6c:01:99:a9:e5:d2:51:fe:23:bb:1f:f9:de: 0d:ca:5f:45:2b:d3:1b:9e:4b:54:4a:c2:83:41:a3:75:cd:a2: 97:68:b6:b6:d7:7f:7f:a8:14:3f:c7:92:ce:4e:35:aa:ff:81: 09:8e:e3:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpmTjx+m0OSRLHjhVpkiNLPDA+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNjAxMjMxMDQ2MTJaFw0yNjAxMjYxODEwMTJaMDMxMTAvBgNV BAMTKEJCQzE0NzdCQjAxMUNERjkxOTIwQzlDMkNBQ0I1RUEwNDUzNTNCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9Q7M+Tvr963mGASte+VtwrYr 2RmSbrcOT3No6fKIosB7i6e6D/AMNPh6Bc6Qqx7yqwh6uHQOr0ZBWZfjS9DEBsu3 stmrI83ljvPuRVPAafGO6xvrTyAUlM4aTxXuGxBM6a84pXbxrg8vFn5P50OQakx8 I61BsO1Q70DkVIMqkJEeWoMu7nVxfNE+vSihbSZshBZQbUSLk1wdoDsVsNDC7Cf2 uA+od9wjL+dOGiCEsfHrHqn6PSAJaPxqmkQbyIlXHO6ezmeVQp1ejf5C2WDSJYpS w7dHBjCsRO5TNNxK2ygmxrRWL9IXhxHppKRbSq0akuvFHiXdK2Q9nLXEHHBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8FHe7ARzfkZIMnCysteoEU1O6swHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANp+5ZtC52PNrTqs4lW28JsXcw3pQqJYhDfq Wf7vpEB6wtdoeffJOMtIRwosOvg3ps4KMSijQY7+erWf24G+PUfP46gBfPxeNESD barcV5mjWWK2BFLuBUfBxee8ZYR9Z3lF5k+EtqRhHnq6AwuMWKDTXST6Xk8WyhF8 t8XDPirJvaj0kNioTthJLSjghBy94KwNfa69BiUZM5qCsPE8HKSG3JXLDQ8I02gq Scx+EszuQ/dkoI+Z8zwx/nNiBwKcJR4pS3j8QDSVG+vibAGZqeXSUf4jux/53g3K X0Ur0xueS1RKwoNBo3XNopdotrbXf3+oFD/Hks5ONar/gQmO44o= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:21 2026 by rpki-client