This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: 1rE1zYk2Mu1oby2g82QB2nB7FiAPxg26T7nnGgkdh/0= Subject key identifier: E8:13:D6:4A:68:8F:B2:66:9A:DA:D4:95:E4:89:E0:B8:86:2B:36:14 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 4952C311B160344C1ABDE62FC9A3A77E40FEADAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01CB Signing time: Sat 24 Jan 2026 14:02:19 +0000 Manifest this update: Sat 24 Jan 2026 13:57:19 +0000 Manifest next update: Tue 27 Jan 2026 20:41:19 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: cizwm9r1ACI/uk5AL5Hbjz+yj3YsHCWDctXifidINvg=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: B5yJ9xoVUUkBKOWIFFCAU70s3XFhUz96BtRULEmOrv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:52:c3:11:b1:60:34:4c:1a:bd:e6:2f:c9:a3:a7:7e:40:fe:ad:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Jan 24 13:57:19 2026 GMT Not After : Jan 27 20:41:19 2026 GMT Subject: CN=E813D64A688FB2669ADAD495E489E0B8862B3614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:63:f3:4c:27:b5:4e:93:c6:7f:39:ee:8b: dc:20:df:ce:a1:1c:98:1f:73:35:41:59:b7:b6:23: 5a:53:67:5a:58:d9:f9:83:16:e6:95:b7:3e:c1:47: f9:2b:cd:07:b6:b6:c2:4c:2f:de:0d:13:12:5a:19: d4:f1:87:5a:01:8d:8d:1b:c1:e1:8e:c9:b6:41:b0: cc:9d:76:e6:09:ef:13:bb:1c:9e:47:b0:93:57:c1: 51:08:ca:81:f1:fb:bb:85:3d:6d:ed:0c:3d:11:a5: 1c:03:ad:94:f4:01:ce:79:cb:39:02:fd:70:4e:fe: fb:a2:29:4d:73:30:42:79:09:53:27:14:93:9f:d8: a7:44:1b:57:c9:fc:25:1d:6f:9c:f7:7f:f8:01:8d: 1a:ba:27:be:3f:c7:72:98:82:45:72:15:02:16:7f: 9b:5c:e8:e4:26:d0:5f:22:5d:07:ee:4a:6b:25:b2: e7:bb:e3:b6:fc:2d:1d:2d:ae:b9:38:6f:19:fd:7e: 0c:63:cb:29:7d:8d:d9:ba:33:6c:25:ba:53:ce:80: 35:4e:3f:5e:8d:06:be:44:41:7e:e4:7f:a2:02:19: ed:19:17:d3:93:43:09:ce:5e:63:28:58:a4:0a:d8: 8a:3e:a5:6c:07:db:1a:c1:85:45:32:45:2b:e3:49: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:13:D6:4A:68:8F:B2:66:9A:DA:D4:95:E4:89:E0:B8:86:2B:36:14 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:5d:27:59:af:50:a8:b1:6f:e2:0b:40:b3:d3:30:e5:54:32: c1:2f:19:08:fe:ad:e0:0c:ea:4c:10:be:de:bc:7d:f0:9a:64: 5f:58:85:2f:aa:b6:03:a3:30:d7:91:fe:cf:94:11:20:1c:c9: f1:75:78:65:a8:82:b1:68:20:ed:9a:84:97:c9:dc:c8:ee:35: 0c:e2:62:8b:12:ba:93:2b:81:8f:d7:c8:c9:b0:41:65:13:91: bb:5b:48:e7:d2:ee:23:cf:86:f2:ac:22:a8:66:4c:f0:cc:34: 1c:b7:8a:7c:b9:40:54:f5:14:35:47:ab:46:2d:93:a4:29:6f: 54:ca:9e:39:d3:e8:ee:ee:66:d6:73:68:0c:dd:97:74:1e:fb: 46:43:32:bb:b9:70:9d:57:96:58:38:62:4f:21:21:46:3d:60: b2:23:32:76:54:2b:c6:30:48:c2:f4:bb:99:b1:b9:ab:e6:12: af:11:ed:2f:46:ae:4f:6b:e4:d9:90:1d:d2:66:25:34:85:ef: 00:92:66:84:fb:26:47:95:ea:80:a0:95:4f:ec:bf:0d:71:52: 93:7f:63:62:46:ae:38:ea:34:9b:54:38:be:35:b5:1e:e7:94: da:eb:de:c9:8f:3a:3c:75:49:d0:1c:e4:16:11:61:15:e2:0e: 58:0e:21:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVLDEbFgNEwaveYvyaOnfkD+raswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNjAxMjQxMzU3MTlaFw0yNjAxMjcyMDQxMTlaMDMxMTAvBgNV BAMTKEU4MTNENjRBNjg4RkIyNjY5QURBRDQ5NUU0ODlFMEI4ODYyQjM2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3B2PzTCe1TpPGfznui9wg386h HJgfczVBWbe2I1pTZ1pY2fmDFuaVtz7BR/krzQe2tsJML94NExJaGdTxh1oBjY0b weGOybZBsMydduYJ7xO7HJ5HsJNXwVEIyoHx+7uFPW3tDD0RpRwDrZT0Ac55yzkC /XBO/vuiKU1zMEJ5CVMnFJOf2KdEG1fJ/CUdb5z3f/gBjRq6J74/x3KYgkVyFQIW f5tc6OQm0F8iXQfuSmslsue747b8LR0trrk4bxn9fgxjyyl9jdm6M2wlulPOgDVO P16NBr5EQX7kf6ICGe0ZF9OTQwnOXmMoWKQK2Io+pWwH2xrBhUUyRSvjSQdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6BPWSmiPsmaa2tSV5InguIYrNhQwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOJdJ1mvUKixb+ILQLPTMOVUMsEvGQj+reAM 6kwQvt68ffCaZF9YhS+qtgOjMNeR/s+UESAcyfF1eGWogrFoIO2ahJfJ3MjuNQzi YosSupMrgY/XyMmwQWUTkbtbSOfS7iPPhvKsIqhmTPDMNBy3iny5QFT1FDVHq0Yt k6Qpb1TKnjnT6O7uZtZzaAzdl3Qe+0ZDMru5cJ1Xllg4Yk8hIUY9YLIjMnZUK8Yw SML0u5mxuavmEq8R7S9Grk9r5NmQHdJmJTSF7wCSZoT7JkeV6oCglU/svw1xUpN/ Y2JGrjjqNJtUOL41tR7nlNrr3smPOjx1SdAc5BYRYRXiDlgOIV4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:28:43 2026 by rpki-client