This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: jeWKUZzHwTOmoyWhTgXhJXAtn03iFtlsdRqp9tpOYjo= Subject key identifier: 71:28:FE:F1:DF:C2:93:3C:BA:6D:9D:A3:8C:06:B5:94:0B:77:62:A2 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 1D59A536166BEF7F93B3F314A22191E057840E03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 0204 Signing time: Sat 31 Jan 2026 06:21:08 +0000 Manifest this update: Sat 31 Jan 2026 06:16:08 +0000 Manifest next update: Tue 03 Feb 2026 15:43:08 +0000 Files and hashes: 1: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 3: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: YPdq3bnWtLaDdX19fVC+/Ne68somO+9T3noBAE1Waf4=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:59:a5:36:16:6b:ef:7f:93:b3:f3:14:a2:21:91:e0:57:84:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Jan 31 06:16:08 2026 GMT Not After : Feb 3 15:43:08 2026 GMT Subject: CN=7128FEF1DFC2933CBA6D9DA38C06B5940B7762A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:55:49:53:59:ea:ad:e7:6e:21:a9:50:65: de:0b:e6:c1:b3:55:d4:6f:b2:94:4c:8e:41:13:f3: f6:4f:40:02:13:e8:7a:1e:31:51:13:dc:ad:90:6b: 56:52:93:bc:f3:81:3f:88:7c:72:fd:52:96:41:72: 2b:06:ff:fe:e6:d6:7a:6d:d8:85:5f:fe:19:40:3d: a9:23:54:d7:2a:c5:38:41:26:10:f7:40:1f:62:21: 96:d9:d7:52:17:f4:34:fb:52:9d:07:ec:a1:4d:e7: f1:bc:8b:a9:45:53:b2:2f:58:ba:49:b3:a1:f5:fe: 1b:71:ce:88:83:29:1a:9f:9f:e7:c0:1d:30:ba:da: 17:b8:39:37:45:5c:01:1a:0e:8e:07:45:6f:6b:50: d4:a0:53:fa:89:ad:f1:cd:6b:cc:ba:7c:01:07:f5: 28:89:41:43:9a:4d:44:58:eb:2a:66:dd:53:f9:4d: 48:82:ee:29:b6:67:60:96:2b:03:45:2e:53:f5:87: 9d:03:80:7d:6e:fb:f6:0d:40:02:b0:a7:76:fc:8a: 0c:44:6f:8d:d2:51:ae:59:46:c2:d0:1c:5a:7f:8a: 55:7b:40:a0:98:80:50:c9:e5:98:05:27:e8:11:66: c7:20:d4:94:98:e2:4f:05:ce:31:4c:0d:f0:91:85: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:28:FE:F1:DF:C2:93:3C:BA:6D:9D:A3:8C:06:B5:94:0B:77:62:A2 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:81:25:44:24:b0:d5:49:17:e8:28:84:00:50:96:d4:48:36: db:fb:a5:09:3b:1f:81:ff:a3:e3:53:75:d8:64:7a:40:47:17: 0c:2a:9e:ef:a6:7a:3b:61:a8:44:3f:6b:34:c8:76:8c:cd:81: 7d:71:fb:ee:c0:c5:46:8d:93:6c:a6:6b:24:0d:f9:44:a0:36: ea:a8:e1:d1:cc:79:65:0f:98:23:fa:01:1d:a7:71:29:04:42: c0:47:75:58:f1:e7:49:4b:77:28:b0:26:fa:2d:30:90:e5:41: aa:f3:f3:d2:0c:6a:44:c6:03:db:d0:52:d8:e8:09:36:11:5e: 4f:8d:9b:b3:4a:36:a6:59:2a:11:6c:39:ad:c6:07:7e:70:c6: 28:68:46:bf:d1:38:ad:0c:4d:2c:4f:0f:27:e7:85:d6:13:59: 6e:55:fc:71:7b:2a:9a:fc:ea:60:20:71:16:7e:80:89:0c:19: 8d:58:5b:d8:ec:13:fa:5f:cd:ef:2c:49:a0:b8:5d:80:d4:f3: ed:1d:a0:d0:f0:24:96:91:e0:b3:63:83:60:e7:d0:05:cc:f4: 42:f1:5c:14:30:82:e3:85:b6:04:e0:8b:81:69:39:54:b6:df: 19:b5:8b:bb:e7:3f:77:61:27:d9:f7:ed:39:06:5c:21:97:f2: a9:87:59:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVmlNhZr73+Ts/MUoiGR4FeEDgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNjAxMzEwNjE2MDhaFw0yNjAyMDMxNTQzMDhaMDMxMTAvBgNV BAMTKDcxMjhGRUYxREZDMjkzM0NCQTZEOURBMzhDMDZCNTk0MEI3NzYyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxblVJU1nqreduIalQZd4L5sGz VdRvspRMjkET8/ZPQAIT6HoeMVET3K2Qa1ZSk7zzgT+IfHL9UpZBcisG//7m1npt 2IVf/hlAPakjVNcqxThBJhD3QB9iIZbZ11IX9DT7Up0H7KFN5/G8i6lFU7IvWLpJ s6H1/htxzoiDKRqfn+fAHTC62he4OTdFXAEaDo4HRW9rUNSgU/qJrfHNa8y6fAEH 9SiJQUOaTURY6ypm3VP5TUiC7im2Z2CWKwNFLlP1h50DgH1u+/YNQAKwp3b8igxE b43SUa5ZRsLQHFp/ilV7QKCYgFDJ5ZgFJ+gRZscg1JSY4k8FzjFMDfCRhRp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSj+8d/Ckzy6bZ2jjAa1lAt3YqIwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGBJUQksNVJF+gohABQltRINtv7pQk7H4H/ o+NTddhkekBHFwwqnu+mejthqEQ/azTIdozNgX1x++7AxUaNk2ymayQN+USgNuqo 4dHMeWUPmCP6AR2ncSkEQsBHdVjx50lLdyiwJvotMJDlQarz89IMakTGA9vQUtjo CTYRXk+Nm7NKNqZZKhFsOa3GB35wxihoRr/ROK0MTSxPDyfnhdYTWW5V/HF7Kpr8 6mAgcRZ+gIkMGY1YW9jsE/pfze8sSaC4XYDU8+0doNDwJJaR4LNjg2Dn0AXM9ELx XBQwguOFtgTgi4FpOVS23xm1i7vnP3dhJ9n37TkGXCGX8qmHWaQ= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:21 2026 by rpki-client