This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: gl9dsVxAdw2CLioNhi1/gKvTs0yQTtuHspV15aXzvyU= Subject key identifier: F4:56:EF:FD:74:0D:AC:C0:F3:7E:25:84:F4:D4:47:77:24:30:CB:BF Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 5840D1CE25C72606B2EB8263ED7A694F4BC0A85B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01FC Signing time: Sun 25 Jan 2026 12:51:33 +0000 Manifest this update: Sun 25 Jan 2026 12:46:33 +0000 Manifest next update: Wed 28 Jan 2026 13:24:33 +0000 Files and hashes: 1: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: NXheesM5WHz04gYW7qA1iRnY3eQNZsrES6UGjzu9REA=) 2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 3: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:40:d1:ce:25:c7:26:06:b2:eb:82:63:ed:7a:69:4f:4b:c0:a8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Jan 25 12:46:33 2026 GMT Not After : Jan 28 13:24:33 2026 GMT Subject: CN=F456EFFD740DACC0F37E2584F4D447772430CBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:d1:91:6b:75:60:1d:13:7b:a3:61:9d:2b: 32:3f:89:53:16:77:22:23:d3:da:ba:52:2e:13:21: 90:b7:1c:f8:9c:29:99:a3:c5:46:36:46:18:e6:40: 74:cd:63:6a:9d:8f:9b:52:04:12:eb:79:b0:a9:89: dc:ac:fb:98:ff:ad:a4:f9:37:87:97:e4:05:a9:38: c6:41:4b:eb:ec:00:2d:1a:77:7c:9a:08:a8:00:6c: 1b:2f:f1:ce:53:8b:83:f5:cb:d0:17:7c:31:ee:ff: 59:66:58:bb:e3:5c:fa:af:c3:a6:cb:40:c7:c1:90: a0:64:78:8e:4c:18:a7:7f:79:fb:07:9e:38:49:72: bc:42:07:7d:d0:ff:e9:3d:3f:f1:68:33:4b:53:08: b9:c1:00:93:53:93:a4:b9:df:f0:59:c5:ed:f0:cf: a6:ae:2c:de:a1:21:cd:d2:04:a7:67:f3:43:a1:0e: 21:d6:9d:8b:e7:d8:e7:ca:d5:b6:ac:34:06:60:67: 88:49:9d:08:44:0e:d9:85:67:6f:15:5a:00:eb:ca: 9e:79:f7:df:35:93:98:89:44:ce:fb:af:20:31:3f: 18:b9:83:9d:ec:c6:14:aa:b1:83:f3:c3:b3:6a:bd: 14:a0:bf:e1:aa:34:fb:f0:45:ad:c8:90:b7:55:5a: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:56:EF:FD:74:0D:AC:C0:F3:7E:25:84:F4:D4:47:77:24:30:CB:BF X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:88:3b:d3:12:a4:b7:f1:1b:26:ed:ba:2d:b0:ec:aa:10:19: 63:48:ce:22:75:f7:af:41:59:e7:b0:9f:bd:c7:97:16:cd:99: 51:c9:b0:b8:06:e9:7e:b4:ec:09:91:20:74:57:36:b0:50:09: f8:c7:67:2f:14:ac:39:50:8b:70:28:56:28:d3:cd:9e:93:81: 32:10:2e:31:f9:21:b1:f7:bf:8f:6a:c5:7a:53:61:f1:87:80: 9a:77:0f:ea:25:32:d1:bc:d7:50:70:5d:3a:ca:f0:54:b2:d4: 7d:5b:25:b9:7e:02:a4:74:b5:c2:a9:1b:92:df:df:65:33:5b: 44:75:a6:77:77:35:d4:e3:8d:28:a7:0e:2b:41:60:bd:9a:4d: 72:d1:c6:ef:47:00:7f:4a:b7:51:4b:4a:3c:3d:54:e1:84:9a: 9f:83:47:c4:a4:10:bc:bc:18:f8:88:07:aa:82:0f:aa:1c:f5: 18:f3:ea:df:09:1c:38:f8:b6:58:ff:b9:23:97:04:89:47:73: 12:bd:75:cb:c1:75:09:1c:3d:ef:7b:9e:1a:63:8e:4c:e3:22: 9f:fc:6c:4c:2d:a7:b1:5d:8c:d6:61:30:53:ba:f9:68:e8:87: 2e:6f:1e:78:e8:21:54:bd:57:1b:f6:8f:f3:c4:39:63:07:e1: 91:bc:7a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEDRziXHJgay64Jj7XppT0vAqFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjAxMjUxMjQ2MzNaFw0yNjAxMjgxMzI0MzNaMDMxMTAvBgNV BAMTKEY0NTZFRkZENzQwREFDQzBGMzdFMjU4NEY0RDQ0Nzc3MjQzMENCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcNGRa3VgHRN7o2GdKzI/iVMW dyIj09q6Ui4TIZC3HPicKZmjxUY2RhjmQHTNY2qdj5tSBBLrebCpidys+5j/raT5 N4eX5AWpOMZBS+vsAC0ad3yaCKgAbBsv8c5Ti4P1y9AXfDHu/1lmWLvjXPqvw6bL QMfBkKBkeI5MGKd/efsHnjhJcrxCB33Q/+k9P/FoM0tTCLnBAJNTk6S53/BZxe3w z6auLN6hIc3SBKdn80OhDiHWnYvn2OfK1basNAZgZ4hJnQhEDtmFZ28VWgDryp55 9981k5iJRM77ryAxPxi5g53sxhSqsYPzw7NqvRSgv+GqNPvwRa3IkLdVWuAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Fbv/XQNrMDzfiWE9NRHdyQwy78wHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuIO9MSpLfxGybtui2w7KoQGWNIziJ1969B Weewn73HlxbNmVHJsLgG6X607AmRIHRXNrBQCfjHZy8UrDlQi3AoVijTzZ6TgTIQ LjH5IbH3v49qxXpTYfGHgJp3D+olMtG811BwXTrK8FSy1H1bJbl+AqR0tcKpG5Lf 32UzW0R1pnd3NdTjjSinDitBYL2aTXLRxu9HAH9Kt1FLSjw9VOGEmp+DR8SkELy8 GPiIB6qCD6oc9Rjz6t8JHDj4tlj/uSOXBIlHcxK9dcvBdQkcPe97nhpjjkzjIp/8 bEwtp7FdjNZhMFO6+Wjohy5vHnjoIVS9Vxv2j/PEOWMH4ZG8el4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:40 2026 by rpki-client