This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: 7dXet4EZhi51GQs/SvJ/umTqVg9nWTpi4GaYElVE5n8= Subject key identifier: 06:5B:45:4D:23:26:DB:41:B3:AC:59:5A:E7:6B:64:9F:CE:F9:E7:54 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 280F46381FF54532A3775567FD03FA83B81E3B50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 01A4 Signing time: Fri 23 Jan 2026 17:00:45 +0000 Manifest this update: Fri 23 Jan 2026 16:55:45 +0000 Manifest next update: Mon 26 Jan 2026 21:05:45 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: Nxvnth0snyQFmW6DjVjZFtEw6FprgOO6zo0x2xWdPX4=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0f:46:38:1f:f5:45:32:a3:77:55:67:fd:03:fa:83:b8:1e:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Jan 23 16:55:45 2026 GMT Not After : Jan 26 21:05:45 2026 GMT Subject: CN=065B454D2326DB41B3AC595AE76B649FCEF9E754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:41:55:c4:ec:2e:1d:da:3d:ae:c1:d5:51: ca:c4:3f:bd:d9:26:a1:c2:03:12:b0:e2:70:a7:2e: 48:f2:18:8e:29:8e:d4:52:27:80:67:86:24:b0:f4: 8a:d7:d5:67:0f:83:8d:d5:23:ac:51:8c:29:d4:67: 7f:bc:6b:16:a3:c9:8f:c6:e3:21:da:ed:8e:b9:61: f4:bf:25:95:cb:ea:e6:cc:fd:44:5a:0e:b1:ca:ae: 5b:d1:aa:29:50:5f:11:bf:21:4e:63:58:a9:4e:6c: aa:da:bb:42:c5:c0:ed:b5:03:c7:6a:ca:7f:be:9b: e5:df:01:e4:e7:ff:5b:e0:90:2c:af:0e:d4:4a:6d: 55:68:fa:4d:db:c8:05:44:72:cc:99:90:ab:5a:8b: 33:21:e5:42:cc:c7:b5:30:0e:07:77:ae:e5:c0:70: 5b:f3:31:af:f8:fd:47:49:51:97:e3:0d:69:36:60: 08:90:aa:91:38:e2:8c:12:94:2f:93:de:f6:89:fc: 78:d3:8a:a3:ff:97:63:69:7e:90:c9:b0:0d:37:69: e4:bc:29:9a:54:02:95:05:ba:ca:a4:a1:57:fe:aa: 52:d1:1b:d7:53:ac:d7:f4:e6:a8:fd:89:02:d0:5e: 9b:ef:36:68:31:5e:8e:39:28:47:8b:e1:d9:5e:82: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:45:4D:23:26:DB:41:B3:AC:59:5A:E7:6B:64:9F:CE:F9:E7:54 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:05:63:72:af:e5:68:37:1a:a1:8e:25:1c:ef:b6:a0:c2: 6d:b6:e5:00:54:b8:46:ad:12:fc:c6:a5:73:cd:27:32:be:ee: 67:ea:f6:13:4b:37:9b:1d:da:a5:16:92:e1:8e:69:32:81:64: c3:33:c7:10:b1:64:d7:91:fa:fe:b6:dd:bb:fc:3e:5b:bc:ce: 34:1c:b6:89:7e:ef:53:c2:86:3b:6d:cc:e0:24:96:39:52:4f: 4c:cc:57:73:4f:52:d5:1b:78:61:ef:1e:4b:51:62:72:02:a7: 99:24:6d:fb:ca:6f:66:af:a1:b9:03:ac:74:23:d0:98:10:6c: fd:65:18:29:1f:df:d1:bb:77:9b:60:54:41:83:5c:8a:f4:64: 42:16:d0:c0:48:dd:89:38:a4:9c:0b:11:fa:f3:79:e6:c6:c6: 46:ec:f2:10:6d:14:4c:80:fa:b1:0f:70:4e:0b:33:29:b4:70: e8:dc:44:f4:36:00:18:f0:ab:62:0a:7a:2b:35:49:70:91:7f: 46:2d:a8:88:11:60:f0:98:fb:f7:fd:7a:f4:2e:f6:55:04:36: 9f:2c:b4:6c:5c:b6:19:ce:b2:0a:2a:12:cf:f4:1a:aa:ee:80: 03:c6:70:be:42:44:47:1b:b5:4e:2f:0e:b6:06:61:a3:15:87: 62:76:26:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKA9GOB/1RTKjd1Vn/QP6g7geO1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNjAxMjMxNjU1NDVaFw0yNjAxMjYyMTA1NDVaMDMxMTAvBgNV BAMTKDA2NUI0NTREMjMyNkRCNDFCM0FDNTk1QUU3NkI2NDlGQ0VGOUU3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0UFVxOwuHdo9rsHVUcrEP73Z JqHCAxKw4nCnLkjyGI4pjtRSJ4BnhiSw9IrX1WcPg43VI6xRjCnUZ3+8axajyY/G 4yHa7Y65YfS/JZXL6ubM/URaDrHKrlvRqilQXxG/IU5jWKlObKrau0LFwO21A8dq yn++m+XfAeTn/1vgkCyvDtRKbVVo+k3byAVEcsyZkKtaizMh5ULMx7UwDgd3ruXA cFvzMa/4/UdJUZfjDWk2YAiQqpE44owSlC+T3vaJ/HjTiqP/l2NpfpDJsA03aeS8 KZpUApUFusqkoVf+qlLRG9dTrNf05qj9iQLQXpvvNmgxXo45KEeL4dlegljpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBltFTSMm20GzrFla52tkn87551QwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA49BWNyr+VoNxqhjiUc77agwm225QBUuEat EvzGpXPNJzK+7mfq9hNLN5sd2qUWkuGOaTKBZMMzxxCxZNeR+v623bv8Plu8zjQc tol+71PChjttzOAkljlST0zMV3NPUtUbeGHvHktRYnICp5kkbfvKb2avobkDrHQj 0JgQbP1lGCkf39G7d5tgVEGDXIr0ZEIW0MBI3Yk4pJwLEfrzeebGxkbs8hBtFEyA +rEPcE4LMym0cOjcRPQ2ABjwq2IKeis1SXCRf0YtqIgRYPCY+/f9evQu9lUENp8s tGxcthnOsgoqEs/0GqrugAPGcL5CREcbtU4vDrYGYaMVh2J2Jtw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:47 2026 by rpki-client