This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: IS9jgenkE7iz7f7fJ15w36jct8GyezdzEsqQF3gopbI= Subject key identifier: 05:62:6B:FA:3C:E1:7D:9A:23:2A:2C:1C:9F:47:12:66:B0:11:CE:60 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 7E6D96DA87422EA603F42E98B2809EE3B8FEBAA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 054A Signing time: Sat 24 Jan 2026 03:30:05 +0000 Manifest this update: Sat 24 Jan 2026 03:25:05 +0000 Manifest next update: Tue 27 Jan 2026 14:11:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: mH6dVYd1P1i+moo1G4FhmipLlOdHtJYUc6yKm+jNA1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6d:96:da:87:42:2e:a6:03:f4:2e:98:b2:80:9e:e3:b8:fe:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Jan 24 03:25:05 2026 GMT Not After : Jan 27 14:11:05 2026 GMT Subject: CN=05626BFA3CE17D9A232A2C1C9F471266B011CE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:a7:bb:c3:3f:de:c2:aa:3d:78:b2:d5:35: 8a:3a:20:d6:ad:77:cf:76:41:1e:fb:7c:c8:d8:f6: f1:2a:3c:65:c2:b9:f2:14:be:04:01:2f:72:54:9d: f3:3f:6a:e5:0d:94:78:08:28:f7:02:74:c1:31:e4: b3:c2:92:5c:a4:42:37:36:d3:44:14:37:2b:b7:08: 48:18:59:7e:cb:2a:26:ac:85:c7:79:03:4d:2a:76: 92:ef:93:4f:8c:32:72:16:cc:f9:cf:e6:6d:ca:af: e7:24:31:3c:b3:b2:42:fd:02:26:65:47:61:9f:40: 7e:ec:b2:12:b8:39:7e:0f:e9:44:93:12:8d:fc:c6: 0a:32:cb:97:cd:29:c0:5e:a1:f1:13:3d:cc:43:78: 23:16:ee:6e:8b:72:f5:14:78:12:4e:0d:19:21:64: 19:a8:ef:f2:b2:82:57:46:cf:bd:22:a1:0c:1e:ee: 95:cc:04:aa:0e:d1:f1:aa:c6:09:1a:2e:fc:04:ee: 28:a5:bd:fa:b9:45:55:6c:ac:88:bd:44:0e:51:27: 4e:3f:d5:f3:56:fd:5c:af:f1:cf:88:04:7f:86:f0: a9:37:29:b8:99:da:ed:d7:de:1e:93:c7:5f:93:7b: b6:8c:e2:99:50:e7:c5:62:c8:87:9b:64:72:a6:3c: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:6B:FA:3C:E1:7D:9A:23:2A:2C:1C:9F:47:12:66:B0:11:CE:60 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:be:ed:06:90:0c:65:f5:59:12:1e:65:fe:af:bd:0c:c0:9e: 12:35:7c:73:3c:74:f5:be:69:d5:68:5f:c0:34:d8:57:ee:fe: 9b:9a:7b:65:8b:3a:70:7b:a8:c3:7b:3e:18:f9:a2:6e:39:49: 5a:5c:0c:03:55:ad:7e:65:d4:d8:50:bf:10:0e:4a:0f:4a:c6: 99:68:aa:94:16:42:d1:88:fb:34:e5:f8:db:c1:6a:22:18:5a: 03:4f:ef:fe:59:33:31:55:0b:6d:af:42:40:b1:be:d8:42:46: 7a:ac:ff:11:f6:32:96:2f:b7:5d:93:5c:d0:3a:44:b1:a9:4b: 4d:f4:94:80:0f:c4:b2:77:e0:10:93:a5:76:80:d5:42:99:1c: f3:28:81:d5:f0:40:11:3e:ee:bb:c3:fa:75:7e:de:fb:a5:11: fa:4b:4e:af:f8:c0:97:06:9b:f9:63:ad:d2:a8:e2:c5:4a:0c: 1f:64:6d:e1:a3:e8:e1:1a:df:4d:00:68:5a:54:dd:e9:83:45: 0b:85:a2:3e:9a:17:e6:2b:dd:19:87:4e:ad:d2:ae:75:4d:1e: 56:37:02:d8:bc:7c:44:d6:4a:4a:db:a6:f4:0c:6c:3c:ce:7e: 85:90:02:50:51:82:61:4d:a6:f0:86:9d:6b:50:6c:b8:08:99: cb:a7:8f:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfm2W2odCLqYD9C6YsoCe47j+uqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNjAxMjQwMzI1MDVaFw0yNjAxMjcxNDExMDVaMDMxMTAvBgNV BAMTKDA1NjI2QkZBM0NFMTdEOUEyMzJBMkMxQzlGNDcxMjY2QjAxMUNFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hqe7wz/ewqo9eLLVNYo6INat d892QR77fMjY9vEqPGXCufIUvgQBL3JUnfM/auUNlHgIKPcCdMEx5LPCklykQjc2 00QUNyu3CEgYWX7LKiashcd5A00qdpLvk0+MMnIWzPnP5m3Kr+ckMTyzskL9AiZl R2GfQH7sshK4OX4P6USTEo38xgoyy5fNKcBeofETPcxDeCMW7m6LcvUUeBJODRkh ZBmo7/KygldGz70ioQwe7pXMBKoO0fGqxgkaLvwE7iilvfq5RVVsrIi9RA5RJ04/ 1fNW/Vyv8c+IBH+G8Kk3KbiZ2u3X3h6Tx1+Te7aM4plQ58ViyIebZHKmPKAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWJr+jzhfZojKiwcn0cSZrARzmAwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMu+7QaQDGX1WRIeZf6vvQzAnhI1fHM8dPW+ adVoX8A02Ffu/puae2WLOnB7qMN7Phj5om45SVpcDANVrX5l1NhQvxAOSg9Kxplo qpQWQtGI+zTl+NvBaiIYWgNP7/5ZMzFVC22vQkCxvthCRnqs/xH2MpYvt12TXNA6 RLGpS030lIAPxLJ34BCTpXaA1UKZHPMogdXwQBE+7rvD+nV+3vulEfpLTq/4wJcG m/ljrdKo4sVKDB9kbeGj6OEa300AaFpU3emDRQuFoj6aF+Yr3RmHTq3SrnVNHlY3 Ati8fETWSkrbpvQMbDzOfoWQAlBRgmFNpvCGnWtQbLgImcunj0Q= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:41 2026 by rpki-client