This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: qBxgP0Tc06kEZUGUn5Qaf/pJM87Zr9oEXiGQk14NoXk= Subject key identifier: 58:8D:7F:A0:91:EA:34:4E:C3:D3:0D:F4:75:D7:60:32:90:A5:55:EE Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 4654E255824F4A36EAB5121D29717E6EF301A581 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: 0107 Signing time: Sat 31 Jan 2026 21:32:11 +0000 Manifest this update: Sat 31 Jan 2026 21:27:11 +0000 Manifest next update: Wed 04 Feb 2026 05:36:11 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: uHhBIb7TJ/Y1dX8SS7c1/MgmGWIa//lDpCpIbp8qLC0=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 05:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:54:e2:55:82:4f:4a:36:ea:b5:12:1d:29:71:7e:6e:f3:01:a5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Jan 31 21:27:11 2026 GMT Not After : Feb 4 05:36:11 2026 GMT Subject: CN=588D7FA091EA344EC3D30DF475D7603290A555EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:bd:40:7e:a0:f5:f9:16:e4:cc:5b:56:5c: 6c:e7:c8:8d:d3:78:57:39:f5:a1:f8:b7:60:9d:60: f6:27:60:db:ef:f3:a7:da:ce:e7:89:a1:da:48:e5: ff:76:15:04:21:bc:a4:ab:30:bc:9b:b9:bc:bb:73: 19:50:fa:cf:5f:bf:63:75:b8:32:d8:b1:83:d0:35: 1c:db:01:9d:9d:bb:ba:4a:e8:74:05:7e:6f:90:68: 34:55:1f:85:92:ab:da:19:ed:71:88:96:e9:86:db: cb:ec:83:cf:a1:bc:71:70:8f:ec:9c:08:7d:37:ca: 37:a6:cc:32:63:0a:ad:87:79:b1:ba:f8:ff:70:c4: 3e:46:2a:a6:19:c0:07:d4:35:3f:ae:47:b3:06:41: 3b:f0:5c:d5:bb:fa:64:22:51:45:bf:ac:e2:aa:78: f3:93:e5:e2:4d:15:58:b3:24:cb:21:69:eb:0e:0a: a2:86:aa:a9:58:0b:1d:21:aa:b8:44:5a:da:a4:06: 6c:ed:94:e3:cf:43:e9:07:d9:ab:45:57:a6:83:6a: fe:a7:40:a1:64:0c:6d:e0:95:75:8b:9f:45:88:ac: df:57:31:03:2e:33:35:c9:00:66:1f:31:8c:d0:2a: 13:c9:e1:c2:43:b4:d3:37:2b:fc:c1:aa:b7:ee:2a: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8D:7F:A0:91:EA:34:4E:C3:D3:0D:F4:75:D7:60:32:90:A5:55:EE X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a3:ea:7a:8e:9b:2d:b3:24:05:2c:e7:b8:74:14:e2:6c:dd: 18:3b:5f:dc:dd:07:92:4f:42:d6:a2:a3:21:69:fd:1e:4e:73: 1f:53:42:7c:3f:89:e7:3a:54:30:cb:a5:b1:be:dc:10:d4:be: 03:94:68:8b:2a:31:c4:e7:ee:93:cf:34:1a:1d:b9:92:d5:8c: 4a:a8:83:52:3d:a1:70:1f:ae:ae:7b:6c:1d:d0:28:16:0c:6c: f9:c9:ee:31:33:a0:d6:e6:7f:bd:95:5b:79:65:97:2f:60:da: 21:6c:85:55:62:4e:d0:2d:f1:1a:0b:82:f7:a9:8d:9e:7f:9c: 66:76:af:f9:77:d8:61:32:c8:07:47:68:9d:78:63:a7:e6:f3: 07:39:fe:00:fe:48:02:a7:31:22:94:4e:7f:80:f1:82:2e:24: 56:3b:df:1a:82:36:3d:c9:f3:aa:a2:b3:4b:c2:fc:cf:80:f6: 3a:c0:86:6e:36:28:7b:aa:b4:8f:9f:77:41:19:96:bc:d0:6d: 9b:49:5e:5f:09:2f:ef:0c:44:13:21:e7:f8:bd:3e:8f:d5:9e: b1:ea:e5:de:42:76:cb:54:d4:f4:71:96:4e:38:78:73:fb:b3: b1:78:d4:7b:dd:c4:70:4c:30:fd:5f:86:b9:c1:7c:5a:14:a8: 3f:f8:cb:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlTiVYJPSjbqtRIdKXF+bvMBpYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNjAxMzEyMTI3MTFaFw0yNjAyMDQwNTM2MTFaMDMxMTAvBgNV BAMTKDU4OEQ3RkEwOTFFQTM0NEVDM0QzMERGNDc1RDc2MDMyOTBBNTU1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaG71AfqD1+RbkzFtWXGznyI3T eFc59aH4t2CdYPYnYNvv86fazueJodpI5f92FQQhvKSrMLybuby7cxlQ+s9fv2N1 uDLYsYPQNRzbAZ2du7pK6HQFfm+QaDRVH4WSq9oZ7XGIlumG28vsg8+hvHFwj+yc CH03yjemzDJjCq2HebG6+P9wxD5GKqYZwAfUNT+uR7MGQTvwXNW7+mQiUUW/rOKq ePOT5eJNFVizJMshaesOCqKGqqlYCx0hqrhEWtqkBmztlOPPQ+kH2atFV6aDav6n QKFkDG3glXWLn0WIrN9XMQMuMzXJAGYfMYzQKhPJ4cJDtNM3K/zBqrfuKo2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWI1/oJHqNE7D0w30dddgMpClVe4wHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABej6nqOmy2zJAUs57h0FOJs3Rg7X9zdB5JP QtaioyFp/R5Ocx9TQnw/iec6VDDLpbG+3BDUvgOUaIsqMcTn7pPPNBoduZLVjEqo g1I9oXAfrq57bB3QKBYMbPnJ7jEzoNbmf72VW3llly9g2iFshVViTtAt8RoLgvep jZ5/nGZ2r/l32GEyyAdHaJ14Y6fm8wc5/gD+SAKnMSKUTn+A8YIuJFY73xqCNj3J 86qis0vC/M+A9jrAhm42KHuqtI+fd0EZlrzQbZtJXl8JL+8MRBMh5/i9Po/VnrHq 5d5CdstU1PRxlk44eHP7s7F41HvdxHBMMP1fhrnBfFoUqD/4y7Y= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:39 2026 by rpki-client