This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: sRMOCy7LNueuKLs2KulmW7SONv5S6IVOaoRlJLpZN3I= Subject key identifier: 16:39:1C:67:6B:82:E1:8A:1D:A2:61:9E:52:B0:B2:28:68:AA:0B:2E Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 4E1BBE6B3A0748A0329493ABF9473D78F04F7F6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 0116 Signing time: Mon 19 Jan 2026 16:21:32 +0000 Manifest this update: Mon 19 Jan 2026 16:16:32 +0000 Manifest next update: Fri 23 Jan 2026 00:35:32 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: 9jmu51jVnosjYV6wAsNSwBWOpIkjNsE2GVGeGC115gw=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 00:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1b:be:6b:3a:07:48:a0:32:94:93:ab:f9:47:3d:78:f0:4f:7f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Jan 19 16:16:32 2026 GMT Not After : Jan 23 00:35:32 2026 GMT Subject: CN=16391C676B82E18A1DA2619E52B0B22868AA0B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:c1:05:07:4f:cb:e1:c3:d9:bd:23:77:a0: 21:e1:03:d5:84:63:be:7a:e6:76:e9:49:cf:45:d5: b9:9e:c1:f1:d1:a5:6e:74:fc:39:9f:e6:d9:f8:9d: cd:80:21:38:46:f7:01:0b:84:9c:e4:ac:69:95:fa: 14:d1:e9:03:5b:c9:13:13:a0:ee:68:0f:4d:8c:60: 8c:4c:d4:5e:97:36:94:54:f6:29:84:3a:64:37:2e: 79:46:1b:f7:b7:25:ac:52:dd:47:9d:7a:b1:ff:e4: 4a:20:a4:17:73:af:60:1c:fa:e0:f7:91:df:ab:3a: 4d:4d:e0:b0:7b:b8:5c:24:0e:78:c7:ad:06:56:ac: ec:88:69:97:11:7e:49:31:0c:59:1f:e4:36:c1:ba: a2:98:50:5f:53:63:94:61:d9:82:f7:21:28:e1:c8: 42:27:a7:ff:c6:b9:37:86:68:10:5c:d9:68:ee:b6: 44:63:fa:fb:71:d6:2d:3b:99:f8:ad:41:b7:d7:02: 09:44:c8:7b:73:e4:39:50:ce:da:eb:d7:df:52:2b: fb:5f:0b:b5:9b:75:c3:4d:df:f4:d0:de:b1:49:a3: 91:7f:55:cb:4a:78:66:24:cd:c7:f5:3b:8e:bd:6e: ab:19:9e:1d:77:b0:dd:fe:4e:aa:74:f5:ce:0a:fd: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:39:1C:67:6B:82:E1:8A:1D:A2:61:9E:52:B0:B2:28:68:AA:0B:2E X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f6:7d:ee:75:52:c5:80:f4:fa:7b:f6:4c:08:91:c3:f9:72: cb:9c:ad:83:09:de:b9:66:d8:52:35:45:d4:a4:b6:25:7b:54: 31:9d:f4:95:39:bb:dd:d9:1f:ca:3d:59:b4:96:62:e2:6d:65: f1:90:2e:00:2b:ff:01:c8:eb:53:51:89:44:05:3d:7e:84:62: 13:ea:14:6c:7d:5a:48:c6:75:f1:33:9b:72:8f:43:74:f6:31: d8:4b:4b:1a:81:c2:32:1c:81:e8:d2:02:11:48:c4:1b:b2:dc: 07:bf:3e:ae:a6:0c:da:bf:2d:f7:ed:9f:47:f3:b6:f2:fe:f6: d6:70:60:d3:8e:cf:2e:10:46:d8:15:e4:6b:74:0f:0f:3a:52: cb:1f:68:be:83:82:d8:d6:18:33:16:58:10:eb:f4:e7:70:ac: 15:ae:c3:ea:0d:68:af:45:49:37:5c:40:d2:c5:64:6f:aa:c3: 44:85:a9:b0:ad:a5:be:68:5b:2a:72:d1:ad:e4:f2:b1:a7:e7: aa:6c:15:8a:d6:e7:dd:e0:58:05:2c:c7:52:5a:52:44:64:6e: 54:da:e7:d0:32:6f:eb:3f:06:87:cd:4d:22:4a:51:d5:72:e8: c6:bd:5c:c9:b3:9e:c0:9d:35:6a:6b:9e:12:49:96:23:b9:51: 67:4f:ec:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThu+azoHSKAylJOr+Uc9ePBPf28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNjAxMTkxNjE2MzJaFw0yNjAxMjMwMDM1MzJaMDMxMTAvBgNV BAMTKDE2MzkxQzY3NkI4MkUxOEExREEyNjE5RTUyQjBCMjI4NjhBQTBCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdcEFB0/L4cPZvSN3oCHhA9WE Y7565nbpSc9F1bmewfHRpW50/Dmf5tn4nc2AIThG9wELhJzkrGmV+hTR6QNbyRMT oO5oD02MYIxM1F6XNpRU9imEOmQ3LnlGG/e3JaxS3UederH/5EogpBdzr2Ac+uD3 kd+rOk1N4LB7uFwkDnjHrQZWrOyIaZcRfkkxDFkf5DbBuqKYUF9TY5Rh2YL3ISjh yEInp//GuTeGaBBc2WjutkRj+vtx1i07mfitQbfXAglEyHtz5DlQztrr199SK/tf C7WbdcNN3/TQ3rFJo5F/VctKeGYkzcf1O469bqsZnh13sN3+Tqp09c4K/e6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjkcZ2uC4YodomGeUrCyKGiqCy4wHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn2fe51UsWA9Pp79kwIkcP5csucrYMJ3rlm 2FI1RdSktiV7VDGd9JU5u93ZH8o9WbSWYuJtZfGQLgAr/wHI61NRiUQFPX6EYhPq FGx9WkjGdfEzm3KPQ3T2MdhLSxqBwjIcgejSAhFIxBuy3Ae/Pq6mDNq/Lfftn0fz tvL+9tZwYNOOzy4QRtgV5Gt0Dw86UssfaL6DgtjWGDMWWBDr9OdwrBWuw+oNaK9F STdcQNLFZG+qw0SFqbCtpb5oWypy0a3k8rGn56psFYrW593gWAUsx1JaUkRkblTa 59Ayb+s/BofNTSJKUdVy6Ma9XMmznsCdNWprnhJJliO5UWdP7GY= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:22 2026 by rpki-client