This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: BzmzPLtbWGkLoZwIsKS981qypHHXqXxCU43WnHwsgbE= Subject key identifier: 9A:DA:95:B5:CA:C6:06:0D:B1:9C:E9:90:84:CC:5F:03:86:ED:53:E1 Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 465FEC058C756659D64AF2C22FEBC086058E73BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: F0 Signing time: Tue 20 Jan 2026 22:01:29 +0000 Manifest this update: Tue 20 Jan 2026 21:56:29 +0000 Manifest next update: Sat 24 Jan 2026 01:17:29 +0000 Files and hashes: 1: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) 3: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: 1RfFEZuyildv5PpMugsEUAgWkBNbeJqVlNjgZEB6cqE=) 4: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 01:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5f:ec:05:8c:75:66:59:d6:4a:f2:c2:2f:eb:c0:86:05:8e:73:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Jan 20 21:56:29 2026 GMT Not After : Jan 24 01:17:29 2026 GMT Subject: CN=9ADA95B5CAC6060DB19CE99084CC5F0386ED53E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:5a:19:58:6a:82:af:22:d2:ea:46:38:9f: 0f:f4:d7:4d:92:81:7a:ae:90:e5:9d:9a:f1:3f:c6: 19:9a:18:c2:d0:b0:60:97:fe:02:58:60:40:ee:bd: da:24:9e:5b:20:fd:36:2d:03:bd:6b:6a:7e:2f:a8: f6:91:bd:f5:ab:41:18:ea:6c:76:c3:a0:79:ba:00: 3d:91:e1:aa:91:db:b2:3e:fc:54:62:e1:dc:40:1b: b8:48:e7:ea:42:7d:b1:20:39:bf:df:33:e3:8f:4c: d4:11:65:8c:4e:ce:b3:d7:61:55:9d:aa:2e:47:ec: 16:33:80:0f:04:5e:e2:75:06:5e:24:61:54:2d:9c: 18:b5:63:7c:95:65:13:7e:56:43:28:27:8b:92:a9: 45:f5:be:85:68:21:9f:ac:fc:2a:ac:02:1f:80:6a: 05:49:69:4d:0b:42:c3:61:6e:e5:d0:85:2d:4a:59: fc:ed:2b:e7:c9:eb:07:76:f7:fd:e0:56:d3:bf:e3: 2e:a5:cc:b8:5b:b6:e2:a6:98:a7:43:50:45:ac:cb: 9c:e6:1c:a2:c1:21:05:32:30:ba:ae:00:a7:1e:8a: 30:ba:c3:ad:f1:60:51:94:33:29:a2:e4:d5:48:8e: 35:02:aa:af:a9:30:b2:ef:b8:52:c2:09:68:8a:f6: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DA:95:B5:CA:C6:06:0D:B1:9C:E9:90:84:CC:5F:03:86:ED:53:E1 X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a0:6f:37:51:b9:8c:39:6c:b5:f9:db:e3:2a:ab:6e:80:85: 23:02:d2:df:2c:0e:af:9c:78:1c:fd:75:79:f0:52:35:d8:9a: 50:f0:17:42:fc:c8:b0:c4:d5:2b:21:18:86:8c:37:0b:c2:e4: 23:dc:9a:2b:f0:bb:08:e7:29:05:eb:15:70:45:0b:c9:eb:87: 40:d5:1e:a1:ff:cd:1f:b2:17:aa:e5:86:0e:7b:51:f3:1a:c3: e5:0f:97:43:29:bd:e6:62:c7:da:72:1f:51:38:77:cc:cb:0c: 82:cc:bd:d9:0f:aa:7e:67:b9:07:af:e4:7d:6f:c1:ce:a4:55: 4f:7f:9a:a2:05:17:56:bb:21:1d:89:ad:40:8a:c6:0e:36:1d: ca:ca:e2:cf:6c:20:77:95:ca:21:be:2a:50:51:ad:88:0f:4e: 21:7a:b3:e6:e1:4e:e9:38:9e:d6:58:40:a6:ba:95:f1:96:51: fc:6e:1e:6c:f9:89:b9:ba:9c:ef:77:fb:f0:f4:cc:63:38:bb: 2b:7d:1d:b7:4c:46:02:c7:63:e0:9c:25:ba:64:d2:91:0a:96: 96:11:79:90:c3:b0:95:57:4d:21:4f:75:a2:d8:dd:0e:2d:8a: 3c:a9:10:de:79:8b:1e:3e:2b:76:2e:e9:83:4a:0d:ef:a6:42: a7:8f:d8:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURl/sBYx1ZlnWSvLCL+vAhgWOc7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNjAxMjAyMTU2MjlaFw0yNjAxMjQwMTE3MjlaMDMxMTAvBgNV BAMTKDlBREE5NUI1Q0FDNjA2MERCMTlDRTk5MDg0Q0M1RjAzODZFRDUzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FVoZWGqCryLS6kY4nw/0102S gXqukOWdmvE/xhmaGMLQsGCX/gJYYEDuvdoknlsg/TYtA71ran4vqPaRvfWrQRjq bHbDoHm6AD2R4aqR27I+/FRi4dxAG7hI5+pCfbEgOb/fM+OPTNQRZYxOzrPXYVWd qi5H7BYzgA8EXuJ1Bl4kYVQtnBi1Y3yVZRN+VkMoJ4uSqUX1voVoIZ+s/CqsAh+A agVJaU0LQsNhbuXQhS1KWfztK+fJ6wd29/3gVtO/4y6lzLhbtuKmmKdDUEWsy5zm HKLBIQUyMLquAKceijC6w63xYFGUMymi5NVIjjUCqq+pMLLvuFLCCWiK9j9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtqVtcrGBg2xnOmQhMxfA4btU+EwHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADegbzdRuYw5bLX52+Mqq26AhSMC0t8sDq+c eBz9dXnwUjXYmlDwF0L8yLDE1SshGIaMNwvC5CPcmivwuwjnKQXrFXBFC8nrh0DV HqH/zR+yF6rlhg57UfMaw+UPl0MpveZix9pyH1E4d8zLDILMvdkPqn5nuQev5H1v wc6kVU9/mqIFF1a7IR2JrUCKxg42HcrK4s9sIHeVyiG+KlBRrYgPTiF6s+bhTuk4 ntZYQKa6lfGWUfxuHmz5ibm6nO93+/D0zGM4uyt9HbdMRgLHY+CcJbpk0pEKlpYR eZDDsJVXTSFPdaLY3Q4tijypEN55ix4+K3Yu6YNKDe+mQqeP2Ms= -----END CERTIFICATE-----Generated at Wed Jan 21 12:16:58 2026 by rpki-client