This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: xuk6+BD/gGNP7L4ZHqz9R3P2O3gqCg3oNuxnRECM9mU= Subject key identifier: A4:90:57:0E:E1:CF:B6:B0:07:D3:74:E3:F1:31:AB:19:5F:0F:69:1F Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 68AAE20126374402243F93E6B1BA872A50036096 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 016B Signing time: Sat 31 Jan 2026 04:11:40 +0000 Manifest this update: Sat 31 Jan 2026 04:06:40 +0000 Manifest next update: Tue 03 Feb 2026 13:05:40 +0000 Files and hashes: 1: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) 2: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: IEOzOCYDVCinmkVrZF15dc29t51kZ5yt46vnMl0Lhgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:aa:e2:01:26:37:44:02:24:3f:93:e6:b1:ba:87:2a:50:03:60:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Jan 31 04:06:40 2026 GMT Not After : Feb 3 13:05:40 2026 GMT Subject: CN=A490570EE1CFB6B007D374E3F131AB195F0F691F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:9d:9c:1d:cd:9d:48:ae:f5:d7:57:bb:47: 3e:c0:f9:8d:51:0a:13:f7:43:df:cb:3e:1b:e2:23: ae:26:6a:b7:82:ac:05:80:e5:1e:8e:f8:ef:5b:a8: 50:96:34:5d:39:62:f6:ea:3c:de:e9:0f:f1:07:73: 05:31:cd:c1:26:e8:49:46:e0:b8:d4:c0:e9:6c:bf: 57:3c:78:44:5b:ff:bf:8d:81:18:e3:f2:23:a8:05: 70:7d:40:0c:94:2f:05:12:c3:4f:21:ec:50:29:a1: bb:26:f9:7c:35:58:6e:df:88:02:1b:0b:26:ce:4a: 8b:d3:5c:bd:d3:b4:87:40:d7:ef:e1:3e:a5:42:0e: 0f:96:a3:5b:28:ef:bd:90:70:00:ea:04:37:fc:f5: 01:20:ed:96:b1:3a:ce:fd:f9:d9:37:df:4e:f9:c4: c4:e9:9e:e9:1c:f4:74:91:93:4a:64:fb:2b:4b:8c: 61:7f:df:32:b8:1d:b1:b3:18:4f:3b:c2:c8:04:b9: 82:de:94:15:51:52:df:a7:6d:db:87:87:5c:43:73: a6:b6:f1:a9:ec:6d:60:05:53:02:d2:56:d6:ca:12: f8:26:87:06:de:0c:27:bd:fa:3a:0e:3b:aa:27:32: 04:e4:38:fc:c4:92:bd:41:2e:85:8c:95:32:46:9d: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:90:57:0E:E1:CF:B6:B0:07:D3:74:E3:F1:31:AB:19:5F:0F:69:1F X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5a:01:81:44:7a:76:68:e0:ba:86:f1:88:29:4d:7a:86:ca: 8e:81:6a:dd:76:ab:e9:42:95:a0:b7:87:d5:b0:79:3c:6d:98: 3d:7d:13:5f:71:36:84:6c:a0:3e:e9:1b:ab:10:24:b6:78:3d: 43:d1:04:f2:82:63:c1:8b:ee:f8:ea:58:f9:94:0b:c3:f4:20: f7:98:e4:62:20:59:55:b3:d7:04:58:e4:80:42:55:7c:c5:dd: a8:29:64:22:50:b9:42:99:10:57:79:0c:f8:60:91:5c:d9:d7: 5a:32:7a:2b:e4:ad:a8:65:5b:7e:62:71:54:50:17:a4:19:ef: 67:98:70:d5:c6:3a:df:9f:c2:9a:2d:c1:8e:fa:d2:c3:d2:34: bd:fa:34:40:b6:6f:cd:38:fe:63:24:11:cb:16:5d:11:9c:a2: ce:62:40:d9:d3:35:37:6d:b3:f0:26:53:8e:80:ff:ec:b5:cc: bd:aa:16:81:11:96:5e:32:02:d5:17:1f:90:eb:e6:4c:af:57: 8a:45:9e:10:e7:aa:46:8e:3a:56:98:75:ad:5d:41:c9:4e:34: bb:2f:4e:1a:4e:d5:ab:fd:1c:84:1d:bc:e3:5c:dd:eb:52:0d: dc:92:47:a9:ca:04:8a:9b:4e:fd:40:dc:7f:b7:8e:8e:9d:a6: c2:03:fb:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKriASY3RAIkP5PmsbqHKlADYJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNjAxMzEwNDA2NDBaFw0yNjAyMDMxMzA1NDBaMDMxMTAvBgNV BAMTKEE0OTA1NzBFRTFDRkI2QjAwN0QzNzRFM0YxMzFBQjE5NUYwRjY5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HZ2cHc2dSK7111e7Rz7A+Y1R ChP3Q9/LPhviI64mareCrAWA5R6O+O9bqFCWNF05YvbqPN7pD/EHcwUxzcEm6ElG 4LjUwOlsv1c8eERb/7+NgRjj8iOoBXB9QAyULwUSw08h7FApobsm+Xw1WG7fiAIb CybOSovTXL3TtIdA1+/hPqVCDg+Wo1so772QcADqBDf89QEg7ZaxOs79+dk33075 xMTpnukc9HSRk0pk+ytLjGF/3zK4HbGzGE87wsgEuYLelBVRUt+nbduHh1xDc6a2 8ansbWAFUwLSVtbKEvgmhwbeDCe9+joOO6onMgTkOPzEkr1BLoWMlTJGnZIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJBXDuHPtrAH03Tj8TGrGV8PaR8wHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpaAYFEenZo4LqG8YgpTXqGyo6Bat12q+lC laC3h9WweTxtmD19E19xNoRsoD7pG6sQJLZ4PUPRBPKCY8GL7vjqWPmUC8P0IPeY 5GIgWVWz1wRY5IBCVXzF3agpZCJQuUKZEFd5DPhgkVzZ11oyeivkrahlW35icVRQ F6QZ72eYcNXGOt+fwpotwY760sPSNL36NEC2b804/mMkEcsWXRGcos5iQNnTNTdt s/AmU46A/+y1zL2qFoERll4yAtUXH5Dr5kyvV4pFnhDnqkaOOlaYda1dQclONLsv ThpO1av9HIQdvONc3etSDdySR6nKBIqbTv1A3H+3jo6dpsID+5E= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:00 2026 by rpki-client