This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: BmoSOlbVyLwvyDiVkVBhgxblQ4ITXVkhNSFaIg6ee88= Subject key identifier: DB:F7:D2:B3:5F:D5:9B:7F:C4:C2:C9:94:64:DE:0F:35:92:4D:84:3F Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 0CCD99798AF1345BB3539EC1CF9F848FB415A5BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01FB Signing time: Fri 23 Jan 2026 08:11:33 +0000 Manifest this update: Fri 23 Jan 2026 08:06:33 +0000 Manifest next update: Mon 26 Jan 2026 12:41:33 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 2: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) 3: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) 4: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: T6hLryOvOW0tRnfg7rvJagFxWs9PgXXSHfSuQ1z1nwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cd:99:79:8a:f1:34:5b:b3:53:9e:c1:cf:9f:84:8f:b4:15:a5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Jan 23 08:06:33 2026 GMT Not After : Jan 26 12:41:33 2026 GMT Subject: CN=DBF7D2B35FD59B7FC4C2C99464DE0F35924D843F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bf:33:62:2c:e5:06:06:a8:59:7a:11:f9:9b: 6f:96:f1:56:38:ed:08:af:b1:20:30:d9:ec:ea:ab: 52:16:3a:9d:c3:d7:80:35:ba:ec:63:e4:3d:d4:9c: dc:8f:75:0a:11:cb:77:ae:ce:01:ae:cf:66:29:56: fd:70:e6:7b:07:4a:fc:5d:4c:a0:b3:9a:16:3f:69: 6e:d9:97:4e:20:b2:e1:82:c7:a4:a0:4d:86:9f:28: 22:b8:29:a1:08:53:56:dd:a1:92:b3:72:f6:4f:5f: 12:92:5c:16:f7:bc:e3:15:87:14:68:40:12:a8:ff: d0:ad:af:70:60:2d:ae:fb:02:a7:b1:4b:f6:eb:90: 17:d9:b2:53:da:09:ea:05:57:1a:7b:f4:3a:d9:bd: 0b:e3:44:a6:53:8d:ce:77:33:2a:ac:1c:e5:47:44: 6a:d5:cb:43:29:61:ee:d9:f3:6d:22:2b:b9:31:a9: 18:4c:cf:89:d3:7e:04:83:bf:e5:e7:f2:bf:43:1d: 20:12:d7:ca:ca:9c:67:ee:32:87:0f:c0:06:4c:5d: 9d:e1:fc:47:38:da:85:e7:b6:17:f6:44:8f:14:31: 6f:cf:60:a1:66:00:54:22:f3:f0:b9:88:9a:45:c9: d4:ea:6a:4c:98:93:25:c5:46:39:9d:de:b3:0b:95: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F7:D2:B3:5F:D5:9B:7F:C4:C2:C9:94:64:DE:0F:35:92:4D:84:3F X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:39:46:4c:51:f1:7f:f4:57:e9:74:d7:b2:6b:a5:73:6f:6a: fa:05:fd:31:e0:a9:fd:85:f6:65:8e:45:87:44:df:47:e7:67: d2:03:57:84:45:0b:76:15:a5:b1:e3:8a:28:d8:c5:12:fe:87: fd:1a:b7:fb:84:8b:88:00:f5:d1:43:42:52:72:a3:19:03:28: f4:7b:85:d5:1e:81:06:1f:31:e6:11:1e:bd:68:16:08:c5:36: 4c:11:a9:db:cc:2f:00:f2:bf:0a:28:e0:83:62:ae:6f:4e:75: bc:62:a3:95:4a:a2:a3:04:3e:cb:70:79:32:fc:a5:bb:5c:a2: c2:fa:f7:3f:22:53:7c:d6:38:9b:09:df:4c:0d:47:2d:e7:5f: 8e:1d:43:b6:1c:89:c3:8f:2a:28:b8:8c:bd:3b:aa:4a:fd:74: 0b:9e:9b:9b:a6:ff:05:4b:04:56:aa:ae:31:d6:7c:9a:3b:ab: 9a:6a:03:4f:39:e0:4a:be:ee:68:2a:e1:22:de:66:02:d7:4e: d3:bb:80:0b:bf:27:54:88:76:60:9f:02:78:b6:77:13:db:b6: 8a:2e:f0:7d:cf:d0:e1:05:2c:54:be:98:d8:77:46:4d:5c:ef: 4b:d4:dd:45:55:cc:4e:98:e9:23:b0:b7:8c:cc:74:b2:ad:f0: 72:c0:7c:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDM2ZeYrxNFuzU57Bz5+Ej7QVpb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjAxMjMwODA2MzNaFw0yNjAxMjYxMjQxMzNaMDMxMTAvBgNV BAMTKERCRjdEMkIzNUZENTlCN0ZDNEMyQzk5NDY0REUwRjM1OTI0RDg0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwvzNiLOUGBqhZehH5m2+W8VY4 7QivsSAw2ezqq1IWOp3D14A1uuxj5D3UnNyPdQoRy3euzgGuz2YpVv1w5nsHSvxd TKCzmhY/aW7Zl04gsuGCx6SgTYafKCK4KaEIU1bdoZKzcvZPXxKSXBb3vOMVhxRo QBKo/9Ctr3BgLa77AqexS/brkBfZslPaCeoFVxp79DrZvQvjRKZTjc53MyqsHOVH RGrVy0MpYe7Z820iK7kxqRhMz4nTfgSDv+Xn8r9DHSAS18rKnGfuMocPwAZMXZ3h /Ec42oXnthf2RI8UMW/PYKFmAFQi8/C5iJpFydTqakyYkyXFRjmd3rMLlckVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/fSs1/Vm3/EwsmUZN4PNZJNhD8wHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk5RkxR8X/0V+l017JrpXNvavoF/THgqf2F 9mWORYdE30fnZ9IDV4RFC3YVpbHjiijYxRL+h/0at/uEi4gA9dFDQlJyoxkDKPR7 hdUegQYfMeYRHr1oFgjFNkwRqdvMLwDyvwoo4INirm9Odbxio5VKoqMEPstweTL8 pbtcosL69z8iU3zWOJsJ30wNRy3nX44dQ7YcicOPKii4jL07qkr9dAuem5um/wVL BFaqrjHWfJo7q5pqA0854Eq+7mgq4SLeZgLXTtO7gAu/J1SIdmCfAni2dxPbtoou 8H3P0OEFLFS+mNh3Rk1c70vU3UVVzE6Y6SOwt4zMdLKt8HLAfG0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:38:43 2026 by rpki-client