This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: twUS5SAokrAbd6Wn5wUx5Zd4qLriuCP4pbJb+540lbo= Subject key identifier: 9E:30:4F:13:B9:86:FD:FF:E7:0B:48:95:02:E2:C3:B4:0B:45:30:47 Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 3D3D78E83C12F15FF4AFE0DDD39281A036A1E23D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 0541 Signing time: Sun 25 Jan 2026 15:31:16 +0000 Manifest this update: Sun 25 Jan 2026 15:26:16 +0000 Manifest next update: Wed 28 Jan 2026 16:02:16 +0000 Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: SIy7LcKIWxTFuyzhcf/HSqyw9N5aWgHE9cCsAAZ3i0g=) 2: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 4: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3d:78:e8:3c:12:f1:5f:f4:af:e0:dd:d3:92:81:a0:36:a1:e2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Jan 25 15:26:16 2026 GMT Not After : Jan 28 16:02:16 2026 GMT Subject: CN=9E304F13B986FDFFE70B489502E2C3B40B453047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:7d:86:8d:cb:6e:aa:e6:b7:a5:40:1a:5b: a9:02:84:cd:8c:44:1a:05:ba:ff:e1:79:a3:72:60: e3:41:9e:3f:5e:e1:ec:e6:1a:46:1f:93:d6:db:1a: 66:dc:27:b0:54:58:9d:5d:16:59:c3:07:fa:1c:5d: 5e:d6:5f:e7:d1:f0:0e:fa:e5:d7:68:96:63:8b:e1: d6:ab:ff:11:3c:f0:f7:fd:b0:c8:1a:7f:a9:f3:3a: 47:f7:2b:1c:90:63:72:4c:08:ce:65:b9:9b:08:fe: 8c:b5:37:5a:b9:93:8b:27:a9:9a:13:a0:3e:9b:82: a4:07:85:e9:47:91:ef:02:80:a6:8b:3e:57:1e:ef: de:50:20:4b:cc:62:51:c0:1a:1d:55:dc:cd:08:1e: 00:02:07:66:09:63:96:c0:22:c1:e7:7c:07:2f:b6: 80:68:95:bc:39:d7:31:18:5a:f0:a7:d5:86:59:e7: db:bb:54:2f:fb:56:07:1a:0a:ea:19:b0:61:47:f4: 31:20:80:b5:cc:a9:b3:b0:4a:fa:44:22:18:2c:22: 6a:a6:aa:94:f0:c8:61:91:ce:f9:05:ee:c1:08:16: c2:e7:51:31:b3:90:19:1c:f5:d0:5a:bb:06:f9:fd: 15:54:e9:8f:4e:ba:b1:f2:97:a5:ee:16:01:e3:52: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:30:4F:13:B9:86:FD:FF:E7:0B:48:95:02:E2:C3:B4:0B:45:30:47 X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2e:1f:f2:ef:0f:6d:90:cd:28:d2:83:cd:f6:7f:db:34:ae: fb:81:ea:da:b5:0b:b6:f6:1a:46:91:a1:94:87:d0:58:03:e8: 00:d6:e8:2e:e9:a0:b8:3f:66:bf:53:24:20:47:3a:df:84:38: 8f:49:cc:11:55:32:50:f0:94:0c:9e:37:ef:28:2d:9b:77:f5: b7:0b:4a:9e:5d:32:8e:55:44:5c:41:32:15:05:a4:06:46:3b: e5:08:c0:97:f5:36:3b:35:e4:c9:df:f3:4b:0b:ce:09:e4:d8: ed:6c:c4:00:80:ee:f9:e6:05:46:e4:15:db:10:fb:87:78:05: 80:b0:ca:6b:f6:d2:01:73:10:cc:28:8e:07:4f:39:ee:71:9e: 57:9d:ae:d7:78:9d:ca:07:28:ce:78:4e:89:6d:a0:4a:87:8f: 5f:02:f8:95:ae:a2:51:42:94:4d:05:70:a0:70:d7:d7:3d:74: 09:57:e0:35:30:40:21:38:92:0f:9d:be:09:bf:e5:b6:c7:21: c7:31:eb:c4:74:90:e9:51:e5:fe:0d:e1:b4:8c:e6:b3:26:2d: f7:b1:1e:c3:e7:7a:91:f9:2b:d6:1f:86:ad:19:92:86:0a:20: 35:81:18:c0:5a:51:af:1e:86:69:35:0b:6e:36:f3:08:dd:b3: e4:53:b7:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPT146DwS8V/0r+Dd05KBoDah4j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNjAxMjUxNTI2MTZaFw0yNjAxMjgxNjAyMTZaMDMxMTAvBgNV BAMTKDlFMzA0RjEzQjk4NkZERkZFNzBCNDg5NTAyRTJDM0I0MEI0NTMwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5H2Gjctuqua3pUAaW6kChM2M RBoFuv/heaNyYONBnj9e4ezmGkYfk9bbGmbcJ7BUWJ1dFlnDB/ocXV7WX+fR8A76 5ddolmOL4dar/xE88Pf9sMgaf6nzOkf3KxyQY3JMCM5luZsI/oy1N1q5k4snqZoT oD6bgqQHhelHke8CgKaLPlce795QIEvMYlHAGh1V3M0IHgACB2YJY5bAIsHnfAcv toBolbw51zEYWvCn1YZZ59u7VC/7VgcaCuoZsGFH9DEggLXMqbOwSvpEIhgsImqm qpTwyGGRzvkF7sEIFsLnUTGzkBkc9dBauwb5/RVU6Y9OurHyl6XuFgHjUgSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjBPE7mG/f/nC0iVAuLDtAtFMEcwHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0uH/LvD22QzSjSg832f9s0rvuB6tq1C7b2 GkaRoZSH0FgD6ADW6C7poLg/Zr9TJCBHOt+EOI9JzBFVMlDwlAyeN+8oLZt39bcL Sp5dMo5VRFxBMhUFpAZGO+UIwJf1Njs15Mnf80sLzgnk2O1sxACA7vnmBUbkFdsQ +4d4BYCwymv20gFzEMwojgdPOe5xnledrtd4ncoHKM54ToltoEqHj18C+JWuolFC lE0FcKBw19c9dAlX4DUwQCE4kg+dvgm/5bbHIccx68R0kOlR5f4N4bSM5rMmLfex HsPnepH5K9Yfhq0ZkoYKIDWBGMBaUa8ehmk1C2428wjds+RTt1U= -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:20 2026 by rpki-client