This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: pV33sR3pCa6Umxhh30ej09QPtJqUVyZky9Xeu+IZS7k= Subject key identifier: F7:B0:A4:18:BD:8F:FE:5B:65:67:66:C4:F1:2D:15:17:27:4D:D0:BA Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 10808BF161053B26686A928F9D10AC6835D1C4D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 01C3 Signing time: Sun 25 Jan 2026 15:51:44 +0000 Manifest this update: Sun 25 Jan 2026 15:46:44 +0000 Manifest next update: Thu 29 Jan 2026 01:33:44 +0000 Files and hashes: 1: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: wkq1kyS/BFb5+q0SFpWB/Fz02H90CYliZjeDu9Z3eUE=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:80:8b:f1:61:05:3b:26:68:6a:92:8f:9d:10:ac:68:35:d1:c4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Jan 25 15:46:44 2026 GMT Not After : Jan 29 01:33:44 2026 GMT Subject: CN=F7B0A418BD8FFE5B656766C4F12D1517274DD0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:29:07:36:f7:82:50:67:ef:13:4c:f4:ae: cb:5c:1e:72:20:17:e8:77:21:ef:75:fb:9c:b7:b5: c6:66:e3:3c:6c:a7:1a:84:b2:8e:ed:ed:74:50:80: 30:65:33:22:3e:fd:77:4a:d7:64:7c:4f:d0:19:f2: 6c:4f:fc:8d:f0:be:ee:19:0e:6a:9c:4d:9e:0f:a1: 8b:73:69:c8:41:11:68:cd:1a:cc:9c:df:dd:26:e1: 06:b9:04:98:d3:f1:8e:57:43:33:4b:a1:f2:9c:1f: a2:c4:ca:4a:25:e7:e2:f5:81:e8:e4:a1:57:fe:9a: bd:de:e8:77:48:0e:f0:02:cf:b2:c1:49:b3:a3:ef: 87:eb:2d:b3:95:04:5b:11:4d:03:c4:c7:59:bd:f1: 27:1d:9e:14:ab:51:ed:29:13:e0:14:41:9c:6d:a1: 58:fa:3f:ce:0e:e4:eb:e0:55:96:13:d9:bd:24:d0: db:c1:61:91:b5:d9:1b:7f:69:f7:b9:66:f7:11:77: bd:d3:f0:ad:3b:25:21:6e:a8:f8:7a:45:08:f3:87: 9c:56:d3:3f:76:e4:fc:43:b0:c1:07:64:b0:11:a8: 9d:80:31:9b:50:a4:48:9e:5e:67:23:bf:f7:0c:36: 89:4e:0a:d4:67:3b:17:bd:15:c7:3f:d2:0a:be:28: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:A4:18:BD:8F:FE:5B:65:67:66:C4:F1:2D:15:17:27:4D:D0:BA X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:dd:70:d8:66:ff:69:84:0c:fb:09:a2:2a:26:c7:b4:ad:8a: af:47:71:a3:00:71:07:69:43:08:0b:61:5b:df:25:3f:ba:10: 19:02:b0:0c:e5:21:81:9b:92:19:af:2a:35:8c:f1:d6:c7:41: d3:ad:f4:74:2a:33:14:a6:3e:20:cb:69:99:8a:fa:f0:e0:4b: 7c:5e:79:43:85:03:a1:e8:4f:4b:43:df:4c:ba:85:c5:bf:27: ef:74:78:8c:67:2f:ac:5b:cd:fd:cd:1d:7e:ce:6f:74:54:1f: 4b:c9:e5:c5:03:39:54:8e:55:e5:2a:31:ce:2a:91:57:9b:45: 92:20:16:e1:95:b0:a9:26:2d:a6:48:da:e2:32:ff:39:52:72: af:6d:ac:64:07:1d:2b:53:34:f5:ff:01:1e:50:87:ad:f9:01: 16:87:a2:b4:e1:ff:3d:89:18:77:9f:82:a3:2e:81:9f:21:43: bb:c4:2d:a0:5e:38:7d:71:ad:a0:f1:54:ce:01:d7:05:19:e0: a3:13:fe:1d:48:d5:ff:72:3b:06:31:57:c2:86:3f:07:63:94: d3:7c:79:65:34:f6:d3:16:d0:14:02:bf:7f:5c:e9:f4:41:5f: 0b:89:a6:52:33:af:b7:c2:ad:ba:f2:76:66:02:9c:91:55:40: 91:c8:49:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEICL8WEFOyZoapKPnRCsaDXRxNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNjAxMjUxNTQ2NDRaFw0yNjAxMjkwMTMzNDRaMDMxMTAvBgNV BAMTKEY3QjBBNDE4QkQ4RkZFNUI2NTY3NjZDNEYxMkQxNTE3Mjc0REQwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoSkHNveCUGfvE0z0rstcHnIg F+h3Ie91+5y3tcZm4zxspxqEso7t7XRQgDBlMyI+/XdK12R8T9AZ8mxP/I3wvu4Z DmqcTZ4PoYtzachBEWjNGsyc390m4Qa5BJjT8Y5XQzNLofKcH6LEykol5+L1gejk oVf+mr3e6HdIDvACz7LBSbOj74frLbOVBFsRTQPEx1m98ScdnhSrUe0pE+AUQZxt oVj6P84O5OvgVZYT2b0k0NvBYZG12Rt/afe5ZvcRd73T8K07JSFuqPh6RQjzh5xW 0z925PxDsMEHZLARqJ2AMZtQpEieXmcjv/cMNolOCtRnOxe9Fcc/0gq+KKGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97CkGL2P/ltlZ2bE8S0VFydN0LowHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrdcNhm/2mEDPsJoiomx7Stiq9HcaMAcQdp QwgLYVvfJT+6EBkCsAzlIYGbkhmvKjWM8dbHQdOt9HQqMxSmPiDLaZmK+vDgS3xe eUOFA6HoT0tD30y6hcW/J+90eIxnL6xbzf3NHX7Ob3RUH0vJ5cUDOVSOVeUqMc4q kVebRZIgFuGVsKkmLaZI2uIy/zlScq9trGQHHStTNPX/AR5Qh635ARaHorTh/z2J GHefgqMugZ8hQ7vELaBeOH1xraDxVM4B1wUZ4KMT/h1I1f9yOwYxV8KGPwdjlNN8 eWU09tMW0BQCv39c6fRBXwuJplIzr7fCrbrydmYCnJFVQJHISVw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:38:35 2026 by rpki-client