This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft File: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft (raw, json) Hash identifier: mRcsuXUxHZjCVQ2urS+PwXDb14FN+OaRqkoyfqP/DFI= Subject key identifier: 32:FE:8D:DC:82:9B:F1:8B:1E:62:9A:B9:DA:98:32:A1:29:CB:22:CE Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 68242A394CC3AE3961B7EB7EB92D4415430DD735 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft Manifest number: 01A7 Signing time: Sat 31 Jan 2026 03:32:02 +0000 Manifest this update: Sat 31 Jan 2026 03:27:02 +0000 Manifest next update: Tue 03 Feb 2026 14:06:02 +0000 Files and hashes: 1: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: kRl6IfQghVcIhK14CpOe+4+3tl4P/DD5zma96SwY1Qw=) 2: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: cUGwrSXZUX2qOLkBWd7R0ACNVFWfbZ7/VTDRqT5KjoY=) 3: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl (hash: CcbTHvpWGkQB6bGHecrlY8TNNz+tcjQNNsoQQST2rUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:24:2a:39:4c:c3:ae:39:61:b7:eb:7e:b9:2d:44:15:43:0d:d7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Jan 31 03:27:02 2026 GMT Not After : Feb 3 14:06:02 2026 GMT Subject: CN=32FE8DDC829BF18B1E629AB9DA9832A129CB22CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:5d:99:9e:5c:7d:bb:ed:8d:29:62:5f:eb: 26:20:dc:c0:2c:3d:06:0d:f4:c0:9f:fe:89:94:59: 9f:02:7c:0e:48:97:ce:26:d7:47:2d:7d:9d:81:81: 58:a9:d7:1c:70:01:59:97:14:af:05:e9:e9:d2:34: ce:98:b0:71:4d:0d:a7:08:11:34:af:8b:a4:ae:32: 69:f6:a6:cf:fc:b9:23:52:54:b7:ed:fc:bd:ec:36: f6:7f:d8:37:97:a8:0a:7e:54:7f:23:99:7a:ba:76: 83:61:b6:5f:9b:64:c7:a7:a1:8e:f5:46:df:51:e3: a2:07:f9:31:f6:a2:1d:e9:db:c9:40:e8:88:0e:a2: d8:b1:b3:99:4c:05:12:f1:46:73:c6:75:8a:87:c3: c3:05:8b:78:c3:d7:3e:5e:35:aa:f5:e7:fc:3e:d8: 3f:dd:1c:11:49:87:14:a9:b1:8e:40:85:ec:ab:db: 7d:5d:1d:dd:ed:01:9d:0f:69:f8:0a:12:5f:55:98: 56:17:54:02:8f:70:45:ce:d2:4b:3f:69:f4:50:ce: ef:78:f6:90:cf:4c:fb:0a:37:f3:22:f5:ad:22:51: 58:50:18:6b:54:df:27:93:d8:e8:92:51:c3:da:d0: 84:cf:55:cf:5d:1a:a3:8d:72:4c:6a:6e:eb:29:7f: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FE:8D:DC:82:9B:F1:8B:1E:62:9A:B9:DA:98:32:A1:29:CB:22:CE X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4e:6f:15:6e:c5:fa:e0:cf:7e:9a:3e:a6:81:3d:88:f8:81: da:94:48:9a:01:ae:87:90:53:3e:52:ba:a5:15:ca:0c:16:c6: 38:d2:ac:e5:36:e2:6b:73:6b:44:f9:f6:8c:6a:f2:05:0e:0d: d7:6f:e4:34:dc:4a:49:f8:53:af:97:35:40:7a:66:da:ca:9a: 7c:5f:24:09:6f:74:39:68:93:17:0c:1e:31:be:56:49:ec:f2: 52:d6:49:fd:67:24:dc:7c:a9:e8:62:57:ae:2e:ba:f3:84:0b: 7e:77:59:71:0f:d2:56:47:58:52:c8:21:d4:9f:7d:2e:09:ce: 15:b2:da:f8:02:ba:3c:9b:2c:fe:c9:07:8e:5a:11:21:9d:ea: a8:d7:3b:63:f7:38:6a:ed:bc:ba:f6:f3:d5:cd:a1:32:24:46: cc:1a:4c:aa:2b:d0:6a:77:aa:59:e2:e9:93:94:e4:2c:1f:25: 58:81:76:d7:ea:56:a4:2b:0a:e3:c5:f1:93:8d:82:af:7f:aa: 7f:60:ba:19:12:f3:87:0a:13:ab:ac:5e:6e:79:cf:78:a0:c3: 43:b9:12:ef:0e:b6:45:43:fd:08:f3:74:81:9d:7c:39:7e:6a: 77:db:c3:63:9a:33:36:e9:1e:d0:35:b9:5d:f4:fa:76:51:b7: 4c:a6:59:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCQqOUzDrjlht+t+uS1EFUMN1zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNjAxMzEwMzI3MDJaFw0yNjAyMDMxNDA2MDJaMDMxMTAvBgNV BAMTKDMyRkU4RERDODI5QkYxOEIxRTYyOUFCOURBOTgzMkExMjlDQjIyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFV2Znlx9u+2NKWJf6yYg3MAs PQYN9MCf/omUWZ8CfA5Il84m10ctfZ2BgVip1xxwAVmXFK8F6enSNM6YsHFNDacI ETSvi6SuMmn2ps/8uSNSVLft/L3sNvZ/2DeXqAp+VH8jmXq6doNhtl+bZMenoY71 Rt9R46IH+TH2oh3p28lA6IgOotixs5lMBRLxRnPGdYqHw8MFi3jD1z5eNar15/w+ 2D/dHBFJhxSpsY5Aheyr231dHd3tAZ0PafgKEl9VmFYXVAKPcEXO0ks/afRQzu94 9pDPTPsKN/Mi9a0iUVhQGGtU3yeT2OiSUcPa0ITPVc9dGqONckxqbuspf3ezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMv6N3IKb8YseYpq52pgyoSnLIs4wHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhD RUY5MjdFQzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNObxVuxfrgz36aPqaBPYj4gdqUSJoBroeQ Uz5SuqUVygwWxjjSrOU24mtza0T59oxq8gUODddv5DTcSkn4U6+XNUB6ZtrKmnxf JAlvdDlokxcMHjG+Vkns8lLWSf1nJNx8qehiV64uuvOEC353WXEP0lZHWFLIIdSf fS4JzhWy2vgCujybLP7JB45aESGd6qjXO2P3OGrtvLr289XNoTIkRswaTKor0Gp3 qlni6ZOU5CwfJViBdtfqVqQrCuPF8ZONgq9/qn9guhkS84cKE6usXm55z3igw0O5 Eu8OtkVD/QjzdIGdfDl+anfbw2OaMzbpHtA1uV30+nZRt0ymWYg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:53 2026 by rpki-client