This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: XnSZrLRmB4LTeoohR94e2pcC2EYA+vWzbb66j7NKGrA= Subject key identifier: A6:21:62:AA:25:D0:E9:33:69:40:1F:2A:E2:F5:4B:8C:FB:B0:6E:2B Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 4DD910B4AF596D38EBC7C1FBDDA22CE8A63ACF4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 050D Signing time: Mon 02 Feb 2026 03:21:11 +0000 Manifest this update: Mon 02 Feb 2026 03:16:11 +0000 Manifest next update: Thu 05 Feb 2026 07:07:11 +0000 Files and hashes: 1: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) 2: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) 3: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: 6jEy3qzvathe578GKURwMoJqXdKFlbEQE4Yjq0GdFLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d9:10:b4:af:59:6d:38:eb:c7:c1:fb:dd:a2:2c:e8:a6:3a:cf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Feb 2 03:16:11 2026 GMT Not After : Feb 5 07:07:11 2026 GMT Subject: CN=A62162AA25D0E93369401F2AE2F54B8CFBB06E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:68:93:6a:07:f0:f1:26:8c:40:2a:13:9e: 5a:02:5b:5e:f7:b4:c4:aa:30:18:95:9e:a4:c4:86: 23:fa:f7:24:fb:2a:77:c1:c1:f2:9f:2b:af:0a:c0: bd:6e:ec:47:e9:3b:ed:48:c9:05:58:34:82:1b:bc: af:cc:cb:ba:98:7b:0d:b7:98:4d:0f:76:43:45:65: 0d:3a:ee:5a:89:86:af:db:80:d4:77:b1:3d:ff:8b: 27:0f:00:cf:ba:54:5b:4f:31:3d:a7:97:6c:34:e7: 2e:d4:ef:6d:61:cc:4e:5e:bb:9d:23:19:59:96:77: 73:ac:e5:d4:53:6a:cf:9b:30:dc:40:2c:d6:f9:6e: a2:49:53:43:db:ec:71:7f:38:52:c9:bf:e4:0b:fa: 66:7b:17:2a:ba:50:b4:98:58:21:25:cf:f1:85:4e: 26:6b:b9:ba:54:89:55:a9:2c:46:f7:a3:3c:36:d7: 06:69:2a:41:53:9e:c3:e5:7f:cf:92:fe:5a:be:e6: c0:38:80:60:83:0b:a9:15:3b:22:a8:39:4e:8c:e5: b7:62:ad:9f:79:13:86:53:9d:8b:dd:5a:fb:aa:89: f5:d5:df:70:ff:3b:f9:93:8b:26:52:b7:9a:ca:14: 1a:00:e8:4b:b4:5e:3e:3b:14:d5:1a:b0:77:fb:ba: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:62:AA:25:D0:E9:33:69:40:1F:2A:E2:F5:4B:8C:FB:B0:6E:2B X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d6:ca:00:41:23:3b:fe:c8:02:9f:06:81:49:18:11:e9:be: 5d:bb:e1:d4:ee:40:f4:f8:2d:23:2d:41:e4:fe:2c:85:cb:10: a4:56:af:df:96:f2:dc:02:58:01:6e:ef:b6:69:19:2f:45:58: 70:59:6e:f6:7b:88:69:e7:96:f3:ad:e5:5f:87:46:46:1b:cc: 18:0d:06:cd:14:52:a1:81:58:63:33:97:01:b6:1b:93:b0:b1: e3:83:ed:6c:b1:3c:2e:d7:31:4b:e7:e8:b0:09:e8:7d:f7:08: 7d:c3:73:58:ad:58:44:90:8d:44:2d:5e:fb:18:39:7d:91:03: c4:45:c1:06:af:1e:1a:b4:8a:b6:cf:08:24:63:f8:f6:3f:4c: 96:ed:1f:b2:b1:37:f3:61:e9:3a:38:ed:c9:2e:8e:3d:e9:08: 40:44:11:cd:a6:fd:d3:87:1f:1a:ea:a9:d8:03:18:e8:02:4e: ee:23:86:3e:64:1e:97:ba:f4:56:be:15:5b:bf:d5:6e:c3:b9: b0:f4:0d:1a:8c:91:24:c5:91:23:d8:bf:12:ab:72:e5:bf:e5: 7b:0d:1c:34:cb:ea:5d:08:b4:f7:c1:5f:1e:dc:63:ca:e2:f5: e0:fe:e4:27:9e:a0:84:4e:8a:90:0f:0f:fe:b8:7f:3b:00:aa: 00:7c:a8:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdkQtK9ZbTjrx8H73aIs6KY6z0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNjAyMDIwMzE2MTFaFw0yNjAyMDUwNzA3MTFaMDMxMTAvBgNV BAMTKEE2MjE2MkFBMjVEMEU5MzM2OTQwMUYyQUUyRjU0QjhDRkJCMDZFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww2iTagfw8SaMQCoTnloCW173 tMSqMBiVnqTEhiP69yT7KnfBwfKfK68KwL1u7EfpO+1IyQVYNIIbvK/My7qYew23 mE0PdkNFZQ067lqJhq/bgNR3sT3/iycPAM+6VFtPMT2nl2w05y7U721hzE5eu50j GVmWd3Os5dRTas+bMNxALNb5bqJJU0Pb7HF/OFLJv+QL+mZ7Fyq6ULSYWCElz/GF TiZrubpUiVWpLEb3ozw21wZpKkFTnsPlf8+S/lq+5sA4gGCDC6kVOyKoOU6M5bdi rZ95E4ZTnYvdWvuqifXV33D/O/mTiyZSt5rKFBoA6Eu0Xj47FNUasHf7uk0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpiFiqiXQ6TNpQB8q4vVLjPuwbiswHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3WygBBIzv+yAKfBoFJGBHpvl274dTuQPT4 LSMtQeT+LIXLEKRWr9+W8twCWAFu77ZpGS9FWHBZbvZ7iGnnlvOt5V+HRkYbzBgN Bs0UUqGBWGMzlwG2G5OwseOD7WyxPC7XMUvn6LAJ6H33CH3Dc1itWESQjUQtXvsY OX2RA8RFwQavHhq0irbPCCRj+PY/TJbtH7KxN/Nh6To47ckujj3pCEBEEc2m/dOH HxrqqdgDGOgCTu4jhj5kHpe69Fa+FVu/1W7DubD0DRqMkSTFkSPYvxKrcuW/5XsN HDTL6l0ItPfBXx7cY8ri9eD+5CeeoIROipAPD/64fzsAqgB8qJA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:57 2026 by rpki-client