This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: q+1gSJo3/slnVqYNdKi3Eq6cC2RMQCXbiepvnw4IyKc= Subject key identifier: 78:5E:BE:D2:9E:1F:EB:FE:20:46:E1:36:DF:47:2E:44:47:CF:0C:01 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 7C3AD979797B6FC2AC20165FFEDC22BA4576545B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 053E Signing time: Thu 08 Jan 2026 13:41:46 +0000 Manifest this update: Thu 08 Jan 2026 13:36:46 +0000 Manifest next update: Mon 12 Jan 2026 00:31:46 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 2: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 3: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: xFym0NM6CX7EOR0Hpw4in3CsQlqIZN1aPlhcNUMayQc=) 4: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 5: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 00:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3a:d9:79:79:7b:6f:c2:ac:20:16:5f:fe:dc:22:ba:45:76:54:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jan 8 13:36:46 2026 GMT Not After : Jan 12 00:31:46 2026 GMT Subject: CN=785EBED29E1FEBFE2046E136DF472E4447CF0C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:a6:e5:7d:45:8b:b4:a6:d0:3b:be:a2:fb: 1f:f8:50:92:68:f3:09:13:c9:16:86:d9:41:59:1b: 9f:35:0d:db:70:69:03:fe:dc:7e:12:0c:9a:c8:1e: ed:ab:9e:d1:a5:5b:28:c4:78:f3:7e:d0:0d:9a:1c: 15:33:37:a5:df:47:21:a2:bf:92:c8:e6:d3:8c:1a: 30:67:c9:01:91:e4:8b:e1:42:17:06:db:61:72:38: c1:a5:3d:15:77:d0:54:6a:91:76:ee:0a:cb:a0:a2: dc:c0:43:72:a9:ac:37:c9:da:91:0a:5c:61:45:59: 26:1b:c0:a1:2d:97:62:b5:3f:7e:dc:f3:37:cc:fd: 04:f7:b4:1e:2e:cc:d3:63:88:8f:ad:33:59:3b:b5: 56:fd:dc:16:63:b5:49:08:86:a0:ae:cf:09:40:69: 93:98:cb:d3:7d:d8:dc:16:fa:83:82:ab:96:37:47: fa:c5:f8:83:7d:2b:eb:dc:ed:2f:0f:71:c1:b3:98: 5d:78:db:ad:23:00:dc:79:0f:c0:27:40:1b:ce:25: aa:38:11:95:0e:e2:3a:0e:d9:b3:b8:34:31:5a:0a: 2d:44:ab:5d:32:76:63:1d:8d:ba:39:e9:fc:2a:e5: 10:a3:fe:6d:87:d3:84:92:30:84:a5:2a:4b:1e:46: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:BE:D2:9E:1F:EB:FE:20:46:E1:36:DF:47:2E:44:47:CF:0C:01 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5a:07:29:74:9a:ad:28:58:4a:b7:88:1e:8d:72:75:ef:54: 23:b8:70:81:3a:b4:72:c4:37:ce:f3:19:b0:f0:1e:de:5c:3e: c9:7d:1b:a3:89:61:f9:a0:8c:4d:99:c2:ce:bf:2a:57:b0:66: 11:6e:48:41:24:ef:8d:be:3b:f1:18:37:a4:a2:15:37:35:08: 89:2b:65:0b:0e:a9:4e:99:a5:08:2f:94:1c:a1:12:9a:e9:2d: 92:9c:37:77:dc:e4:b2:69:b9:1b:25:1d:4f:31:c9:1f:38:e5: 30:8f:e9:61:56:88:12:3e:cb:79:be:b0:0b:d4:66:db:8f:9d: c9:b2:9e:6a:6d:5f:5c:ad:a8:70:ec:8b:db:b6:92:ce:f5:ce: a7:2b:02:68:4e:51:1f:03:b7:a2:57:ee:ba:b3:35:a8:3f:b3: 7d:53:57:18:16:30:23:a3:c2:e9:ca:75:07:64:f6:e4:cc:ce: 4e:a0:84:ef:30:a6:4f:15:4f:9b:4f:a6:8d:21:03:e2:51:37: d4:a4:16:61:d7:69:19:f4:7f:a7:f1:f9:0b:d3:28:f9:67:0a: 02:0e:98:a1:31:b6:a8:d8:1d:f7:12:fb:f7:fc:8c:92:f9:bb: 14:61:73:a5:f0:b4:3d:e9:0e:cf:9c:5b:85:6a:e4:ee:0d:af: 07:b5:74:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDrZeXl7b8KsIBZf/twiukV2VFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNjAxMDgxMzM2NDZaFw0yNjAxMTIwMDMxNDZaMDMxMTAvBgNV BAMTKDc4NUVCRUQyOUUxRkVCRkUyMDQ2RTEzNkRGNDcyRTQ0NDdDRjBDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlo6blfUWLtKbQO76i+x/4UJJo 8wkTyRaG2UFZG581DdtwaQP+3H4SDJrIHu2rntGlWyjEePN+0A2aHBUzN6XfRyGi v5LI5tOMGjBnyQGR5IvhQhcG22FyOMGlPRV30FRqkXbuCsugotzAQ3KprDfJ2pEK XGFFWSYbwKEtl2K1P37c8zfM/QT3tB4uzNNjiI+tM1k7tVb93BZjtUkIhqCuzwlA aZOYy9N92NwW+oOCq5Y3R/rF+IN9K+vc7S8PccGzmF14260jANx5D8AnQBvOJao4 EZUO4joO2bO4NDFaCi1Eq10ydmMdjbo56fwq5RCj/m2H04SSMISlKkseRjrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeF6+0p4f6/4gRuE230cuREfPDAEwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFaByl0mq0oWEq3iB6NcnXvVCO4cIE6tHLE N87zGbDwHt5cPsl9G6OJYfmgjE2Zws6/KlewZhFuSEEk742+O/EYN6SiFTc1CIkr ZQsOqU6ZpQgvlByhEprpLZKcN3fc5LJpuRslHU8xyR845TCP6WFWiBI+y3m+sAvU ZtuPncmynmptX1ytqHDsi9u2ks71zqcrAmhOUR8Dt6JX7rqzNag/s31TVxgWMCOj wunKdQdk9uTMzk6ghO8wpk8VT5tPpo0hA+JRN9SkFmHXaRn0f6fx+QvTKPlnCgIO mKExtqjYHfcS+/f8jJL5uxRhc6XwtD3pDs+cW4Vq5O4Nrwe1dEY= -----END CERTIFICATE-----Generated at Sat Jan 10 01:08:21 2026 by rpki-client