This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: Jv1Tp/VTLHFVgwghNVvrvDotEZI/YWiGP4G90UmRPFw= Subject key identifier: ED:A9:13:A4:91:4C:DE:BA:F6:3C:57:3D:5E:F5:FC:EA:1F:1B:51:65 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 31D79018721D18BD735BB9FBEF7A2FF8730D81B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: F4 Signing time: Tue 20 Jan 2026 07:50:47 +0000 Manifest this update: Tue 20 Jan 2026 07:45:47 +0000 Manifest next update: Fri 23 Jan 2026 10:59:47 +0000 Files and hashes: 1: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: aNxgEj2PC+5k5erRMhQ7fM34z+43OrQXeS+ZzIWqkio=) 2: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 10:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d7:90:18:72:1d:18:bd:73:5b:b9:fb:ef:7a:2f:f8:73:0d:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Jan 20 07:45:47 2026 GMT Not After : Jan 23 10:59:47 2026 GMT Subject: CN=EDA913A4914CDEBAF63C573D5EF5FCEA1F1B5165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:c4:4c:88:fc:57:e2:e0:a7:3d:42:dc:4d: 79:b4:7c:77:2a:c7:9c:e7:c5:a0:92:4e:e3:9b:cc: 2b:c6:82:a6:6b:75:fb:3f:36:14:b7:60:c7:10:ed: 76:53:dd:b1:8d:11:94:4b:d2:75:c5:14:87:17:36: f3:8b:9f:96:7b:fe:35:5d:6b:62:31:09:2d:e4:dc: 4c:42:8e:2c:57:be:bb:d7:6d:f2:fe:ac:af:f8:0e: d7:22:ac:2a:5a:00:28:83:fa:80:0a:73:63:12:f4: d7:7e:99:62:3e:ff:5f:0b:7b:aa:74:0a:36:65:e1: 89:e3:0f:05:55:db:b0:df:9f:06:66:ec:94:73:40: 14:a1:06:01:be:ad:fb:04:ec:66:25:eb:74:55:00: 73:5d:e8:6d:25:ea:02:15:37:da:c6:93:84:00:f1: 9b:81:38:c3:a4:3c:2f:7e:de:c9:1c:ee:54:b0:4e: d6:22:d7:dd:3f:b1:60:bc:ee:40:74:a6:eb:8a:bb: a6:3b:5a:d1:a1:05:e4:5a:9b:bd:5f:1c:56:bb:77: 6e:cb:ab:1b:52:37:33:cb:67:3f:b1:a2:e3:a9:6e: a4:20:2b:c0:3e:4b:27:5c:aa:36:23:c8:f4:3d:02: 25:c1:1f:d9:ca:4a:70:20:e3:f7:57:6a:79:9e:cf: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A9:13:A4:91:4C:DE:BA:F6:3C:57:3D:5E:F5:FC:EA:1F:1B:51:65 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:38:1e:74:98:f9:45:df:bc:72:fd:d1:ba:1a:e8:85:b7:e5: b2:b8:1b:a8:c1:2a:c3:31:56:b5:ec:d3:66:6d:3a:82:ce:ab: 33:79:d3:a4:64:e3:ee:5a:64:10:76:dd:2c:f3:f6:e2:34:dc: aa:5b:f1:0e:97:31:a8:01:36:2e:9e:dc:2b:6a:3a:8b:37:c6: 47:9b:81:cd:6d:2f:c7:ad:bd:9c:01:2e:01:f2:46:20:a9:45: 1c:59:85:5d:9e:3b:c2:13:c7:27:de:83:1e:fd:95:30:0a:f9: 09:82:a0:2d:79:d0:2e:98:4d:17:e1:0b:e7:1f:15:0e:12:90: a6:37:43:8c:47:02:a5:87:9b:c7:e3:cc:7e:98:df:7e:df:b6: fc:78:e5:f5:35:ee:6f:4e:77:3b:d3:0f:be:f6:ed:b6:65:fa: 93:07:93:8b:e4:61:a6:04:c4:91:a4:9a:0a:93:1f:8d:04:04: 96:42:f4:0a:b0:71:35:8d:f5:cb:96:a8:2c:2c:b5:59:e7:d5: 68:01:bc:13:21:d0:4f:4f:bd:97:38:e3:3f:04:a0:c4:0f:dc: 12:11:3f:dd:c8:13:df:61:bf:52:b0:90:84:34:95:5c:66:42: 79:55:81:16:f8:a1:79:0b:56:32:0a:54:52:5d:57:08:17:24: 99:48:1e:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdeQGHIdGL1zW7n773ov+HMNgbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNjAxMjAwNzQ1NDdaFw0yNjAxMjMxMDU5NDdaMDMxMTAvBgNV BAMTKEVEQTkxM0E0OTE0Q0RFQkFGNjNDNTczRDVFRjVGQ0VBMUYxQjUxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CsRMiPxX4uCnPULcTXm0fHcq x5znxaCSTuObzCvGgqZrdfs/NhS3YMcQ7XZT3bGNEZRL0nXFFIcXNvOLn5Z7/jVd a2IxCS3k3ExCjixXvrvXbfL+rK/4DtcirCpaACiD+oAKc2MS9Nd+mWI+/18Le6p0 CjZl4YnjDwVV27DfnwZm7JRzQBShBgG+rfsE7GYl63RVAHNd6G0l6gIVN9rGk4QA 8ZuBOMOkPC9+3skc7lSwTtYi190/sWC87kB0puuKu6Y7WtGhBeRam71fHFa7d27L qxtSNzPLZz+xouOpbqQgK8A+SydcqjYjyPQ9AiXBH9nKSnAg4/dXanmez5+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7akTpJFM3rr2PFc9XvX86h8bUWUwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHU4HnSY+UXfvHL90boa6IW35bK4G6jBKsMx VrXs02ZtOoLOqzN506Rk4+5aZBB23Szz9uI03Kpb8Q6XMagBNi6e3CtqOos3xkeb gc1tL8etvZwBLgHyRiCpRRxZhV2eO8ITxyfegx79lTAK+QmCoC150C6YTRfhC+cf FQ4SkKY3Q4xHAqWHm8fjzH6Y337ftvx45fU17m9OdzvTD7727bZl+pMHk4vkYaYE xJGkmgqTH40EBJZC9AqwcTWN9cuWqCwstVnn1WgBvBMh0E9PvZc44z8EoMQP3BIR P93IE99hv1KwkIQ0lVxmQnlVgRb4oXkLVjIKVFJdVwgXJJlIHnU= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:21 2026 by rpki-client