This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json)
Hash identifier: 7L5MlVONAB873mNVfd07TVCx/xvv3Nf5Qnr/2q/uHDA=
Subject key identifier: 34:75:E3:73:AA:EE:13:CD:88:D6:1F:05:26:B5:FD:C4:4B:28:01:25
Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Certificate serial: 267400333576851D82A823E37B5AAF4F1F54D28A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
Manifest number: F9
Signing time: Wed 21 Jan 2026 07:12:19 +0000
Manifest this update: Wed 21 Jan 2026 07:07:19 +0000
Manifest next update: Sat 24 Jan 2026 07:17:19 +0000
Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: YFaoCT3xwyBQi7KaVSmlRmVNN+Iax++xKdHkbTCz/+0=)
2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:74:00:33:35:76:85:1d:82:a8:23:e3:7b:5a:af:4f:1f:54:d2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Validity
Not Before: Jan 21 07:07:19 2026 GMT
Not After : Jan 24 07:17:19 2026 GMT
Subject: CN=3475E373AAEE13CD88D61F0526B5FDC44B280125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:00:e3:08:2d:7c:99:9b:3b:ac:c1:7c:f3:
28:39:f3:1b:8b:e2:8c:f9:94:d0:9f:1b:df:55:16:
41:60:f6:cd:4d:10:3a:f4:c8:d2:53:08:2c:1d:31:
8c:e7:e5:b1:ad:0f:9c:5b:e4:02:f7:4d:a8:69:3b:
13:75:5e:30:22:bc:1c:36:1e:15:4c:d9:55:9d:04:
99:20:bf:a1:7e:0a:66:47:29:2f:39:04:66:41:1f:
9d:9d:e1:17:5e:ba:7a:4b:61:a1:0f:79:b9:c9:e0:
38:84:9b:f3:bb:30:69:59:7c:f5:ca:51:ab:46:46:
b7:4c:3a:70:3e:b3:58:17:c4:4b:a3:75:cc:2a:59:
73:ce:af:3a:2f:3d:16:a2:2c:ee:6b:18:f6:0e:66:
7b:b3:d6:27:db:21:90:79:45:12:45:19:40:ce:d7:
43:d7:d7:3f:d3:8b:ac:45:d8:8c:1e:6a:fa:42:65:
ba:1c:a5:cf:fb:e2:e2:7a:15:f5:7a:a4:73:02:58:
3a:50:1d:72:81:ee:12:bb:0f:ff:cf:75:a7:69:cf:
cc:2e:2a:37:df:52:4c:b9:9a:bb:88:e2:17:12:4b:
cc:3f:88:94:84:9e:3c:26:46:82:b9:49:a0:81:90:
cd:52:94:cb:13:a5:7a:c9:8e:bb:bd:4f:88:5e:fc:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:E3:73:AA:EE:13:CD:88:D6:1F:05:26:B5:FD:C4:4B:28:01:25
X509v3 Authority Key Identifier:
keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1a:90:c7:62:99:f8:46:88:e1:6a:bf:f1:a9:52:5d:1e:c2:
13:11:1f:11:b0:79:18:24:8e:c7:b0:78:c4:f5:c0:16:ae:f3:
ed:0f:82:45:3e:db:79:e1:36:fd:f5:25:87:ed:8d:fd:9a:ce:
20:cc:35:37:71:11:f8:4c:fa:95:18:7f:00:97:4d:21:b7:89:
db:ef:9b:e3:e8:94:db:f2:1d:33:8c:ad:e5:58:d8:40:91:4e:
5f:08:3f:03:e5:41:4f:a9:0a:31:ea:40:78:1e:9e:93:32:69:
84:53:b3:f4:dd:e1:5b:c4:8d:a5:15:c4:df:4c:14:c2:d0:a2:
16:e7:0a:03:07:59:4d:22:15:2b:89:80:81:37:71:6b:c8:d3:
6e:0a:27:02:a6:96:dd:fc:1b:7c:d8:ef:59:1f:86:23:36:4e:
bb:78:4f:79:87:76:65:e8:4d:b3:24:94:87:d5:3a:8e:7a:62:
3f:89:3e:94:4e:ba:82:d1:70:92:e1:a0:9b:34:a2:03:f1:43:
26:86:cf:a5:c9:07:36:a7:fb:f7:44:7e:d6:ec:b0:98:c4:3d:
2a:85:f5:a0:d0:a8:14:b9:84:0d:6a:4e:e6:69:e5:45:50:2f:
19:04:f1:e3:7b:ef:71:19:b3:cb:a3:95:87:9e:be:25:9e:83:
3a:db:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:22 2026 by rpki-client