This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: C89xoldW2dssrx0Q9znxVM/Fm9NlVwSBk3OlI49PlYo= Subject key identifier: 80:FC:18:9F:8D:6F:39:5C:1F:B0:13:0C:AB:9C:59:D4:35:8C:B1:9A Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 3B66B08AE93F85FBC7A95957C94D5EFBE70EA706 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01F1 Signing time: Sat 31 Jan 2026 19:00:02 +0000 Manifest this update: Sat 31 Jan 2026 18:55:02 +0000 Manifest next update: Wed 04 Feb 2026 02:29:02 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) 2: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) 3: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: EmWa9YDvNbiCM7vcCObv6XkWDIySQmalR6Vyjx+fIQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:b0:8a:e9:3f:85:fb:c7:a9:59:57:c9:4d:5e:fb:e7:0e:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Jan 31 18:55:02 2026 GMT Not After : Feb 4 02:29:02 2026 GMT Subject: CN=80FC189F8D6F395C1FB0130CAB9C59D4358CB19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:82:81:dc:31:17:13:96:ff:fe:80:e5:92: 8e:af:70:e1:a0:ce:c8:04:7a:09:66:c4:94:2b:9f: 21:ec:13:82:4e:f6:a3:bc:91:42:ba:cd:e9:9c:ea: 0c:04:84:59:e5:77:c2:88:a3:0e:29:47:66:eb:84: 4d:69:18:1d:17:7a:68:0e:bb:54:9c:ef:31:93:e6: 42:fe:b4:21:1e:a6:24:52:1d:7d:54:39:06:d3:74: eb:a8:47:e0:43:b6:1c:60:5b:94:d5:50:4f:dd:74: d5:8f:db:71:24:0c:a2:5d:ee:d7:71:1a:aa:b5:70: 20:61:0c:57:85:15:1c:95:72:a1:0d:7c:cc:ba:43: e6:de:de:ba:b4:f4:54:e4:1e:33:74:84:6f:c4:9d: 44:bc:26:a7:0d:2f:c5:86:13:9b:f2:bf:8a:79:3c: 48:30:75:7e:fe:c0:e9:2b:56:14:4c:bb:fe:84:db: 25:89:96:89:15:a4:0e:cf:f7:55:2f:c7:1e:a0:98: c4:8f:dd:53:aa:96:85:1d:29:af:8a:34:af:e8:87: 7d:f0:6c:4a:34:5f:2e:be:8c:8e:13:cd:a9:d8:9b: ac:77:f8:c2:d3:a3:45:9b:3f:f4:d8:06:aa:05:e0: 89:2d:53:b8:7c:e7:34:d2:96:2b:e6:28:d5:d1:83: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:18:9F:8D:6F:39:5C:1F:B0:13:0C:AB:9C:59:D4:35:8C:B1:9A X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:91:b9:93:04:67:7c:eb:ef:df:c8:4d:1c:05:a8:28:48:96: 55:f7:e8:5f:47:74:08:ec:f4:d5:a3:a4:88:fd:27:49:9c:56: f6:6e:ab:c8:10:cb:dd:ec:63:1f:c1:b4:db:a3:de:91:75:97: 13:2f:85:a3:bb:a1:c1:51:e6:e5:9d:2a:f3:bc:8a:50:3a:25: bd:b0:05:13:fc:16:cb:2d:04:f2:44:7a:d0:a5:21:d9:e6:36: 02:84:6a:38:fb:b0:e2:41:c2:ab:54:40:72:97:d9:22:4e:d0: 6c:bc:69:d2:ab:5c:57:69:c4:33:4e:cc:0e:33:93:88:1f:25: f9:bd:d0:02:27:48:f8:f2:46:9c:1a:6a:6a:5e:a4:fb:58:25: c1:20:21:e7:9a:25:e0:3f:7c:fa:22:34:1f:f4:69:a9:0a:8f: 53:6c:51:22:5a:ca:44:f3:04:a0:85:9f:58:f5:f4:64:c4:97: 56:66:ff:08:8c:95:c7:34:49:a1:d4:bf:be:0c:ad:28:ca:75: be:3a:09:05:e5:aa:4b:e3:b7:5a:46:35:fd:61:43:61:25:f7: b4:c4:fa:dd:39:77:5f:b8:5b:12:47:1d:14:49:05:18:1b:44: 6e:ac:03:6d:b3:36:e3:72:f7:50:3b:4f:75:69:7f:1d:50:53: 3f:50:59:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2awiuk/hfvHqVlXyU1e++cOpwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNjAxMzExODU1MDJaFw0yNjAyMDQwMjI5MDJaMDMxMTAvBgNV BAMTKDgwRkMxODlGOEQ2RjM5NUMxRkIwMTMwQ0FCOUM1OUQ0MzU4Q0IxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DYKB3DEXE5b//oDlko6vcOGg zsgEeglmxJQrnyHsE4JO9qO8kUK6zemc6gwEhFnld8KIow4pR2brhE1pGB0XemgO u1Sc7zGT5kL+tCEepiRSHX1UOQbTdOuoR+BDthxgW5TVUE/ddNWP23EkDKJd7tdx Gqq1cCBhDFeFFRyVcqENfMy6Q+be3rq09FTkHjN0hG/EnUS8JqcNL8WGE5vyv4p5 PEgwdX7+wOkrVhRMu/6E2yWJlokVpA7P91Uvxx6gmMSP3VOqloUdKa+KNK/oh33w bEo0Xy6+jI4TzanYm6x3+MLTo0WbP/TYBqoF4IktU7h85zTSlivmKNXRg+klAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPwYn41vOVwfsBMMq5xZ1DWMsZowHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyRuZMEZ3zr79/ITRwFqChIllX36F9HdAjs 9NWjpIj9J0mcVvZuq8gQy93sYx/BtNuj3pF1lxMvhaO7ocFR5uWdKvO8ilA6Jb2w BRP8FsstBPJEetClIdnmNgKEajj7sOJBwqtUQHKX2SJO0Gy8adKrXFdpxDNOzA4z k4gfJfm90AInSPjyRpwaampepPtYJcEgIeeaJeA/fPoiNB/0aakKj1NsUSJaykTz BKCFn1j19GTEl1Zm/wiMlcc0SaHUv74MrSjKdb46CQXlqkvjt1pGNf1hQ2El97TE +t05d1+4WxJHHRRJBRgbRG6sA22zNuNy91A7T3Vpfx1QUz9QWeM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:57:09 2026 by rpki-client