This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: tCY/6Z20oZGNxrPlDGVuK6SceURODzJTkz3/kImPCAk= Subject key identifier: 97:E9:5D:C4:E5:69:48:6B:90:4F:9A:B2:61:A9:62:21:5A:32:43:05 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 47F15155108FF0D75E311790038F95F3CDCA6F5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 012B Signing time: Sat 24 Jan 2026 19:11:57 +0000 Manifest this update: Sat 24 Jan 2026 19:06:57 +0000 Manifest next update: Tue 27 Jan 2026 20:58:57 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: l1uxm/RjkW+72lJl9lKYf/uFF06j2r3NRp9Hg1s2/6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f1:51:55:10:8f:f0:d7:5e:31:17:90:03:8f:95:f3:cd:ca:6f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Jan 24 19:06:57 2026 GMT Not After : Jan 27 20:58:57 2026 GMT Subject: CN=97E95DC4E569486B904F9AB261A962215A324305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:14:15:88:73:8c:21:69:86:7f:5d:b2:c4: d6:2d:2e:e6:36:e9:d6:35:be:7c:e2:4d:ba:f8:14: 52:ff:2c:39:15:a3:88:71:84:58:c0:89:c6:12:34: fd:25:ef:a0:b9:6d:98:cc:dd:cd:2f:7e:9d:87:9a: f1:27:c7:ce:38:83:e2:f3:7c:28:e5:d9:77:25:09: df:0c:d8:8d:2b:ed:2b:34:4e:34:0c:15:23:6f:33: be:b7:c6:af:cd:94:6c:b6:7b:38:dd:41:ac:a5:3c: cb:00:ec:26:1f:4c:96:62:b4:8c:03:70:be:07:66: 48:17:91:63:22:5d:1e:de:3b:60:48:eb:b0:cc:08: fc:32:08:d5:ca:e3:b1:4f:b5:4b:cd:61:c0:82:20: fb:b4:8c:fc:6f:5c:22:53:5a:0a:2b:cb:73:4e:0a: ab:ee:44:f1:6b:64:2f:f9:1d:9d:bb:3d:0d:3a:db: ed:d1:b6:67:de:79:36:5d:97:d0:22:7c:5e:00:ef: 49:3e:a2:9a:54:bc:ac:50:8d:41:aa:46:05:d8:49: 28:17:27:94:56:2c:1d:02:b3:17:b2:de:27:67:71: 27:86:ae:81:ff:d9:ec:42:89:0f:e9:b8:ed:7a:d8: 81:e2:72:d4:c0:16:b6:b7:90:a3:3d:d9:b0:e4:e6: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:5D:C4:E5:69:48:6B:90:4F:9A:B2:61:A9:62:21:5A:32:43:05 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:de:15:4e:82:11:bc:9b:33:ea:59:c7:e7:62:fa:12:51: 04:79:04:d4:4b:c6:3c:c1:a5:f3:07:7b:a5:ea:a3:2f:0a:10: 0e:18:8f:f6:e8:29:a1:9a:0a:1e:8e:a6:85:43:7d:a8:bd:9a: 08:b2:27:e4:71:ba:3b:0b:3f:37:c7:45:e6:8b:b0:55:7f:83: 3c:62:c1:e4:1b:dd:54:59:ae:3b:b0:ee:49:11:52:1b:02:01: 52:54:b5:cc:7e:c1:82:0f:d5:0a:3d:ba:27:b8:f9:b4:70:ae: 08:d8:b7:78:55:b1:24:69:5d:b9:c6:bb:22:9a:00:4c:5e:c7: e1:a1:d9:cd:64:18:76:fc:10:87:e2:5d:12:aa:fc:6e:d8:4b: 81:1f:42:a9:3c:ec:6e:cc:17:70:98:fd:b0:ba:0a:57:8e:e2: 97:9d:33:ad:0b:4f:2e:36:f8:16:f2:40:28:5b:7d:0d:41:f1: 8c:b1:86:3b:c4:63:ad:68:d5:1f:40:57:48:c9:61:46:79:3e: f8:64:48:c0:8c:63:b3:a0:a2:5d:47:17:3e:98:a6:e3:3c:4d: 19:1d:d4:5b:49:a7:f2:99:81:3b:99:1a:9d:19:40:d3:fe:03: 54:a4:84:d4:9e:d4:0d:2f:f7:95:fe:90:93:c3:fc:12:3f:0c: 0f:e1:b4:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/FRVRCP8NdeMReQA4+V883Kb10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNjAxMjQxOTA2NTdaFw0yNjAxMjcyMDU4NTdaMDMxMTAvBgNV BAMTKDk3RTk1REM0RTU2OTQ4NkI5MDRGOUFCMjYxQTk2MjIxNUEzMjQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNBQViHOMIWmGf12yxNYtLuY2 6dY1vnziTbr4FFL/LDkVo4hxhFjAicYSNP0l76C5bZjM3c0vfp2HmvEnx844g+Lz fCjl2XclCd8M2I0r7Ss0TjQMFSNvM763xq/NlGy2ezjdQaylPMsA7CYfTJZitIwD cL4HZkgXkWMiXR7eO2BI67DMCPwyCNXK47FPtUvNYcCCIPu0jPxvXCJTWgory3NO CqvuRPFrZC/5HZ27PQ062+3RtmfeeTZdl9AifF4A70k+oppUvKxQjUGqRgXYSSgX J5RWLB0Csxey3idncSeGroH/2exCiQ/puO162IHictTAFra3kKM92bDk5ii5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+ldxOVpSGuQT5qyYaliIVoyQwUwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2s3hVOghG8mzPqWcfnYvoSUQR5BNRLxjzB pfMHe6Xqoy8KEA4Yj/boKaGaCh6OpoVDfai9mgiyJ+RxujsLPzfHReaLsFV/gzxi weQb3VRZrjuw7kkRUhsCAVJUtcx+wYIP1Qo9uie4+bRwrgjYt3hVsSRpXbnGuyKa AExex+Gh2c1kGHb8EIfiXRKq/G7YS4EfQqk87G7MF3CY/bC6CleO4pedM60LTy42 +BbyQChbfQ1B8YyxhjvEY61o1R9AV0jJYUZ5PvhkSMCMY7Ogol1HFz6YpuM8TRkd 1FtJp/KZgTuZGp0ZQNP+A1SkhNSe1A0v95X+kJPD/BI/DA/htDg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:13 2026 by rpki-client