This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 7fH7bLb0EWjCtDfvBqYgJCQhC1qpc1J2kWC5hR1+qIo= Subject key identifier: 93:47:3C:DE:D7:16:D6:3C:82:FA:6E:10:A5:A0:B5:89:E8:AF:03:02 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 64D39A81C5F1F5834E4992DE6E7F42902F9A94DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 0128 Signing time: Sat 31 Jan 2026 11:31:56 +0000 Manifest this update: Sat 31 Jan 2026 11:26:56 +0000 Manifest next update: Tue 03 Feb 2026 18:53:56 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: 0T3kNsJj3OTAKOhj4ySSr/yIOlWgK6xqxD14ldDY0xY=) 2: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d3:9a:81:c5:f1:f5:83:4e:49:92:de:6e:7f:42:90:2f:9a:94:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Jan 31 11:26:56 2026 GMT Not After : Feb 3 18:53:56 2026 GMT Subject: CN=93473CDED716D63C82FA6E10A5A0B589E8AF0302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:65:4d:f6:3e:13:8e:b8:93:6e:32:cc:1b:ed: 77:5a:a7:50:6e:16:6e:4f:c3:5d:d6:15:b0:15:ce: e7:e7:bb:d4:41:1b:68:d7:a7:44:b5:cf:f0:db:47: 33:40:da:50:dc:8c:1f:00:78:28:57:8d:20:33:2a: 6c:e2:4c:67:95:59:52:8f:9c:43:c0:fb:87:ac:38: 68:6a:1f:0f:da:0d:bc:b4:da:f9:9a:51:ca:d8:a8: db:3f:ad:9f:c4:ed:77:73:3a:45:40:9b:de:49:02: 5a:31:af:c2:be:a2:a0:b2:a6:70:83:6a:32:e3:f1: 32:91:87:c9:54:70:da:9a:00:c1:54:6f:87:7e:7c: 36:c2:f7:49:8e:28:e9:4f:d6:d5:59:c5:2c:f9:5e: ee:72:fc:74:ef:e0:93:0f:2c:a9:5b:4d:fa:c1:20: 7e:61:9d:56:29:12:8f:c0:9d:02:40:6b:81:ae:02: ce:c6:94:b8:4c:c6:76:37:47:cc:39:60:78:1f:ec: 55:d4:7f:e2:c8:cf:67:9d:b0:5c:96:f0:a1:cb:cb: ae:13:c5:2e:f8:52:26:42:8c:7a:a5:08:d3:37:13: 7b:63:50:8d:ce:58:03:13:33:60:5d:e7:90:e2:11: fa:50:59:70:8a:eb:9a:8d:eb:6b:8d:5d:76:b5:43: db:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:47:3C:DE:D7:16:D6:3C:82:FA:6E:10:A5:A0:B5:89:E8:AF:03:02 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:19:2e:8b:2a:be:00:dd:1e:80:09:7f:35:c5:5b:0c:49:e9: ba:86:67:c4:c0:61:70:aa:9f:35:d8:05:67:6e:84:de:55:1a: 4b:aa:b2:b5:4f:ef:a4:e8:aa:44:ab:79:61:89:b4:77:9c:77: d2:f1:e4:64:80:20:89:07:29:65:5c:31:9b:e4:64:bc:74:b7: 03:7a:f9:4f:78:f9:de:c1:98:72:de:e1:22:f7:94:62:b7:fa: 17:e8:64:5e:dd:c7:c4:71:5b:50:20:19:47:57:ad:3d:f6:ac: 0c:21:cf:fe:f6:41:ad:fa:3c:57:e1:7f:97:77:5a:0f:dd:38: 55:fd:f6:3c:7d:12:41:f6:7a:6b:2c:38:d6:cd:c7:9f:80:a5: c8:19:89:2f:f6:df:a0:60:73:52:d6:37:1d:91:7b:22:a9:36: 5e:a1:0a:fe:26:b0:f8:59:de:fd:d8:f3:47:41:85:24:90:81: 62:15:2b:05:41:0d:92:90:7b:58:98:0a:44:46:fb:9c:80:0f: df:84:9a:ed:7b:b6:93:97:07:73:db:75:d4:e6:d0:e2:e9:f2: 51:6b:1f:2e:69:51:f8:f7:77:95:31:fe:d2:57:5d:19:a3:65: 59:0a:5c:90:e7:d5:c7:cb:a0:37:5d:f0:a5:e8:88:7f:6d:eb: af:8b:81:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNOagcXx9YNOSZLebn9CkC+alNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNjAxMzExMTI2NTZaFw0yNjAyMDMxODUzNTZaMDMxMTAvBgNV BAMTKDkzNDczQ0RFRDcxNkQ2M0M4MkZBNkUxMEE1QTBCNTg5RThBRjAzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvZU32PhOOuJNuMswb7Xdap1Bu Fm5Pw13WFbAVzufnu9RBG2jXp0S1z/DbRzNA2lDcjB8AeChXjSAzKmziTGeVWVKP nEPA+4esOGhqHw/aDby02vmaUcrYqNs/rZ/E7XdzOkVAm95JAloxr8K+oqCypnCD ajLj8TKRh8lUcNqaAMFUb4d+fDbC90mOKOlP1tVZxSz5Xu5y/HTv4JMPLKlbTfrB IH5hnVYpEo/AnQJAa4GuAs7GlLhMxnY3R8w5YHgf7FXUf+LIz2edsFyW8KHLy64T xS74UiZCjHqlCNM3E3tjUI3OWAMTM2Bd55DiEfpQWXCK65qN62uNXXa1Q9tXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk0c83tcW1jyC+m4QpaC1ieivAwIwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkZLosqvgDdHoAJfzXFWwxJ6bqGZ8TAYXCq nzXYBWduhN5VGkuqsrVP76ToqkSreWGJtHecd9Lx5GSAIIkHKWVcMZvkZLx0twN6 +U94+d7BmHLe4SL3lGK3+hfoZF7dx8RxW1AgGUdXrT32rAwhz/72Qa36PFfhf5d3 Wg/dOFX99jx9EkH2emssONbNx5+ApcgZiS/236Bgc1LWNx2ReyKpNl6hCv4msPhZ 3v3Y80dBhSSQgWIVKwVBDZKQe1iYCkRG+5yAD9+Emu17tpOXB3PbddTm0OLp8lFr Hy5pUfj3d5Ux/tJXXRmjZVkKXJDn1cfLoDdd8KXoiH9t66+Lgbc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:36 2026 by rpki-client