This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: R827kMJJnpdfoW1VcU17Xp0GXV166fevyTo4mS1W2lI= Subject key identifier: 81:3B:92:B3:51:9D:7A:98:D5:E8:EB:4D:8A:F9:57:AB:E6:40:7D:C6 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 2C98F09668D6AF51C9D3BA3868DF5D202D57505B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 01B8 Signing time: Sat 24 Jan 2026 19:01:26 +0000 Manifest this update: Sat 24 Jan 2026 18:56:26 +0000 Manifest next update: Tue 27 Jan 2026 23:48:26 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) 2: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: LvkX8jtilglp+2S844M3be4FA1khoQpXkodvwZHA2Fk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:98:f0:96:68:d6:af:51:c9:d3:ba:38:68:df:5d:20:2d:57:50:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Jan 24 18:56:26 2026 GMT Not After : Jan 27 23:48:26 2026 GMT Subject: CN=813B92B3519D7A98D5E8EB4D8AF957ABE6407DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:5a:a0:f6:42:30:0d:5c:dd:a7:74:c2:e1: b4:e8:18:6f:cd:ca:f1:2f:dd:17:22:b3:43:c5:ae: d5:ac:49:a1:95:7f:9d:67:04:35:00:7b:65:9c:43: 93:78:b5:d9:c1:86:6b:38:33:9e:2a:b0:64:ff:b8: 48:5c:71:54:40:37:18:69:2e:7a:4b:1a:03:30:5a: 6d:ed:ef:1f:8a:21:ca:49:45:85:fc:46:7b:28:91: 38:b1:02:ec:00:23:fb:10:2a:f3:ad:5e:ad:a3:1c: 69:cf:2f:1a:66:a0:7f:90:59:4f:bd:9d:a5:78:69: 64:32:22:55:6d:70:67:46:ba:6a:de:90:c4:39:31: 2a:41:51:3f:2f:d8:98:34:29:db:ef:89:2e:0a:67: 96:e2:ce:6e:29:05:be:0f:41:73:60:82:29:9e:ee: 1c:d2:0c:ef:8c:01:b8:99:ac:23:25:26:02:1b:0d: e5:63:34:0a:99:86:d1:51:a2:1b:a5:91:7a:63:ed: 89:65:4e:b2:80:e8:81:79:75:6e:2d:42:92:d3:08: 76:94:7f:1c:8d:87:d9:b2:e7:4d:cd:72:0a:eb:24: 8a:ec:a1:ce:6a:19:11:6e:f7:46:fc:af:a7:28:25: 79:71:ff:15:af:8c:aa:1b:b4:fc:90:13:4d:41:48: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:92:B3:51:9D:7A:98:D5:E8:EB:4D:8A:F9:57:AB:E6:40:7D:C6 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ef:94:be:74:bf:ae:3d:f4:e1:bc:63:0b:ac:2b:d9:68:ff: 7a:13:18:4b:60:6b:eb:fb:9e:8f:a1:82:60:d8:b7:ca:63:0f: f7:69:91:74:95:cd:6b:1b:3a:79:06:60:42:e8:84:ab:50:02: 83:cb:ea:69:54:ea:40:c9:d8:f4:98:ae:7f:f3:8a:7c:8b:f0: b9:dd:18:aa:85:13:34:e6:5c:2a:2b:33:45:0c:88:c0:e6:6a: 76:54:1b:5e:ac:c6:21:ee:3a:d3:f7:05:ab:43:d7:5c:5e:64: 33:97:50:da:ad:d0:66:4c:39:0c:80:33:62:ac:1b:e3:68:8f: 5f:c2:16:83:f1:fb:c9:24:6d:ac:3b:be:78:56:34:45:5f:6f: 89:e9:7e:ed:78:e9:ea:45:c7:0c:d9:bd:d5:fb:15:17:5f:97: 32:56:a7:b9:d3:85:9a:7d:ab:9d:88:b4:ee:b2:e5:05:e0:79: 4f:0f:e4:2b:88:b9:49:bb:af:89:91:80:57:1d:02:43:ff:aa: ba:11:03:45:b4:93:62:ae:2f:81:50:87:4c:6f:bc:1a:24:1a: 4f:ac:8b:1a:a3:ba:78:ca:a4:78:1d:83:1c:f6:75:53:4e:ac: 25:73:af:3e:d1:08:a1:b3:f1:9b:08:45:fb:0d:7b:8a:3a:1d: 07:b3:15:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJjwlmjWr1HJ07o4aN9dIC1XUFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNjAxMjQxODU2MjZaFw0yNjAxMjcyMzQ4MjZaMDMxMTAvBgNV BAMTKDgxM0I5MkIzNTE5RDdBOThENUU4RUI0RDhBRjk1N0FCRTY0MDdEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TFqg9kIwDVzdp3TC4bToGG/N yvEv3Rcis0PFrtWsSaGVf51nBDUAe2WcQ5N4tdnBhms4M54qsGT/uEhccVRANxhp LnpLGgMwWm3t7x+KIcpJRYX8RnsokTixAuwAI/sQKvOtXq2jHGnPLxpmoH+QWU+9 naV4aWQyIlVtcGdGumrekMQ5MSpBUT8v2Jg0KdvviS4KZ5bizm4pBb4PQXNggime 7hzSDO+MAbiZrCMlJgIbDeVjNAqZhtFRohulkXpj7YllTrKA6IF5dW4tQpLTCHaU fxyNh9my503NcgrrJIrsoc5qGRFu90b8r6coJXlx/xWvjKobtPyQE01BSPhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTuSs1GdepjV6OtNivlXq+ZAfcYwHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrvlL50v6499OG8YwusK9lo/3oTGEtga+v7 no+hgmDYt8pjD/dpkXSVzWsbOnkGYELohKtQAoPL6mlU6kDJ2PSYrn/zinyL8Lnd GKqFEzTmXCorM0UMiMDmanZUG16sxiHuOtP3BatD11xeZDOXUNqt0GZMOQyAM2Ks G+Noj1/CFoPx+8kkbaw7vnhWNEVfb4npfu146epFxwzZvdX7FRdflzJWp7nThZp9 q52ItO6y5QXgeU8P5CuIuUm7r4mRgFcdAkP/qroRA0W0k2KuL4FQh0xvvBokGk+s ixqjunjKpHgdgxz2dVNOrCVzrz7RCKGz8ZsIRfsNe4o6HQezFag= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:09 2026 by rpki-client