This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: VGN4oyBnEig29KJJ1LPIt/E+IUeQv6pCner0bcfbX7s= Subject key identifier: A2:53:51:CB:43:86:E0:A3:60:CF:1F:80:0A:24:CE:11:F5:11:7B:0A Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 7EAD8B2B102298191F5D8042D3A9AB93F9CB482C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 022F Signing time: Sat 24 Jan 2026 19:40:58 +0000 Manifest this update: Sat 24 Jan 2026 19:35:58 +0000 Manifest next update: Wed 28 Jan 2026 00:04:58 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) 2: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) 3: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: VsE8NPTHWS8I5tHHeVMHYhzzVTK9tRhvd9yxIZxBaWQ=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ad:8b:2b:10:22:98:19:1f:5d:80:42:d3:a9:ab:93:f9:cb:48:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Jan 24 19:35:58 2026 GMT Not After : Jan 28 00:04:58 2026 GMT Subject: CN=A25351CB4386E0A360CF1F800A24CE11F5117B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:6e:fe:c9:5f:46:21:5a:6b:53:f1:67:b7: 16:d5:83:83:e4:5f:17:3f:5a:93:45:c6:2f:a3:1a: cf:72:dc:da:12:cc:bb:1b:53:95:4f:bf:98:51:32: 0d:a6:ec:e0:5c:af:d5:2e:de:53:f0:15:10:36:11: 13:81:07:29:36:f4:13:f8:69:f1:07:d0:3b:c8:38: 4d:28:6a:50:a8:53:6b:19:fa:32:c8:a4:c4:c9:08: 12:0e:58:f8:69:7e:a5:bb:d9:69:f2:93:35:e3:5b: 90:83:27:46:09:c4:30:65:cd:a3:78:ea:a1:38:0f: f6:a6:4e:e1:7c:54:ca:34:a4:60:f1:c9:4f:04:46: 1c:73:73:fe:15:ce:0e:a5:c1:2b:28:2b:f7:38:56: 93:04:46:ee:a1:d7:f2:8b:32:08:49:f4:bf:17:17: ce:21:90:c3:3c:d4:69:d6:49:54:09:50:12:79:5b: 6e:9c:ee:50:7a:cb:1b:cc:62:60:fb:97:61:ff:22: e3:8f:e8:0e:22:52:2d:48:a2:a2:fb:be:11:90:b8: fa:4f:e8:5d:af:cd:78:9f:ca:be:7e:61:d3:e0:cf: d4:97:fb:52:92:d5:ff:9c:4d:92:f9:97:91:a8:fa: b1:49:69:45:b3:22:03:f0:66:ef:88:7e:80:e2:aa: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:51:CB:43:86:E0:A3:60:CF:1F:80:0A:24:CE:11:F5:11:7B:0A X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3f:4f:fb:9b:1d:b0:f0:ef:e2:6f:4f:0b:c7:a2:4e:cc:7a: 7a:a3:c9:39:ee:9a:62:83:79:c1:85:ef:22:59:92:38:90:0f: 28:32:c2:da:ec:c4:38:eb:18:c6:48:b9:0d:99:62:9a:a2:a2: a6:0f:ad:f8:31:de:28:bc:45:79:f8:87:05:c5:d5:c0:f2:a6: 95:06:ce:0f:99:87:03:f4:3b:45:c2:b3:86:37:7f:58:15:60: f4:f3:60:8a:be:a6:1c:33:15:59:d1:cc:ff:6d:94:bf:44:dd: 42:04:14:46:32:2d:25:51:61:14:18:93:a4:cc:e5:12:1c:00: 54:ed:b1:1d:d6:dc:3d:41:15:b2:19:50:2f:1a:73:a8:51:8c: 1e:5e:6a:13:1d:6d:49:34:a5:6a:e5:06:a1:cf:1f:de:88:04: 9a:c8:66:f0:80:62:91:7d:5d:28:ff:56:8c:e9:3e:70:6c:95: b9:ca:5d:43:f1:4f:6b:b9:99:d0:f5:f8:14:3e:bd:61:32:61: 8e:4c:10:ef:0e:72:98:d9:07:e8:7c:1d:7b:95:fa:ef:ef:17: ed:7a:04:4d:94:f2:64:ea:12:2a:21:68:e3:1b:30:a2:10:52: ea:3a:c0:59:5f:a2:fc:62:a1:a0:00:f5:7a:39:e9:1f:b4:93: bd:22:34:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfq2LKxAimBkfXYBC06mrk/nLSCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNjAxMjQxOTM1NThaFw0yNjAxMjgwMDA0NThaMDMxMTAvBgNV BAMTKEEyNTM1MUNCNDM4NkUwQTM2MENGMUY4MDBBMjRDRTExRjUxMTdCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFW7+yV9GIVprU/FntxbVg4Pk Xxc/WpNFxi+jGs9y3NoSzLsbU5VPv5hRMg2m7OBcr9Uu3lPwFRA2EROBByk29BP4 afEH0DvIOE0oalCoU2sZ+jLIpMTJCBIOWPhpfqW72WnykzXjW5CDJ0YJxDBlzaN4 6qE4D/amTuF8VMo0pGDxyU8ERhxzc/4Vzg6lwSsoK/c4VpMERu6h1/KLMghJ9L8X F84hkMM81GnWSVQJUBJ5W26c7lB6yxvMYmD7l2H/IuOP6A4iUi1IoqL7vhGQuPpP 6F2vzXifyr5+YdPgz9SX+1KS1f+cTZL5l5Go+rFJaUWzIgPwZu+IfoDiqiT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolNRy0OG4KNgzx+ACiTOEfURewowHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM/T/ubHbDw7+JvTwvHok7MenqjyTnummKD ecGF7yJZkjiQDygywtrsxDjrGMZIuQ2ZYpqioqYPrfgx3ii8RXn4hwXF1cDyppUG zg+ZhwP0O0XCs4Y3f1gVYPTzYIq+phwzFVnRzP9tlL9E3UIEFEYyLSVRYRQYk6TM 5RIcAFTtsR3W3D1BFbIZUC8ac6hRjB5eahMdbUk0pWrlBqHPH96IBJrIZvCAYpF9 XSj/VozpPnBslbnKXUPxT2u5mdD1+BQ+vWEyYY5MEO8OcpjZB+h8HXuV+u/vF+16 BE2U8mTqEiohaOMbMKIQUuo6wFlfovxioaAA9Xo56R+0k70iNNk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:40 2026 by rpki-client