This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json)
Hash identifier: vib9dOn+jSeDv/m/zD3HmTfMLF3PL+xAFWtrFlVLXfM=
Subject key identifier: 67:82:BB:E2:FD:DE:19:C3:EF:D1:09:C0:87:13:FD:09:F1:AC:D0:BC
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial: 420A21A62CE57D974EFF80D432A1772F120B5BCA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
Manifest number: 01D3
Signing time: Wed 21 Jan 2026 03:42:33 +0000
Manifest this update: Wed 21 Jan 2026 03:37:33 +0000
Manifest next update: Sat 24 Jan 2026 07:48:33 +0000
Files and hashes: 1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: 2zfFRFwk/C19Fo4LWjVGEDAydcqPi8NpYbWAmcFYAik=)
2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: yJ2mdhvkVkKfrufE8P3wmUoE6LpyUpPdWaoL/jWjnzs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0a:21:a6:2c:e5:7d:97:4e:ff:80:d4:32:a1:77:2f:12:0b:5b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Validity
Not Before: Jan 21 03:37:33 2026 GMT
Not After : Jan 24 07:48:33 2026 GMT
Subject: CN=6782BBE2FDDE19C3EFD109C08713FD09F1ACD0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:00:96:97:14:b7:e2:d0:bb:08:37:ac:0e:
3f:8d:1e:1e:ce:49:ae:14:5d:ca:c8:3e:d3:b5:4d:
7e:06:29:e5:de:05:09:99:56:5b:9a:86:6e:51:4a:
a4:86:4f:b2:bb:e9:bb:90:74:0d:29:4b:60:42:2a:
4a:2d:aa:f8:a9:b7:09:97:95:4a:6f:ca:b4:5f:0d:
d9:5b:fb:2e:89:97:a1:07:3b:a7:37:04:5c:11:a7:
0f:03:4f:5b:62:e8:83:a8:05:c6:79:0c:0e:32:1e:
db:e4:fe:ce:b9:f6:38:64:5c:20:74:fc:a5:e9:12:
64:c0:1e:82:d9:32:5b:de:15:43:2c:24:34:8c:41:
17:c4:48:9e:99:d4:cd:c2:d0:6f:13:5e:db:87:45:
cb:3c:16:f2:33:b0:1d:f5:a3:8f:86:8d:06:11:4f:
94:2d:90:27:16:59:fd:b2:86:93:1b:a1:df:af:37:
4b:59:fe:d9:52:4f:8b:b0:da:db:d6:41:ec:be:be:
d0:9f:52:5c:49:15:94:70:d1:6f:1b:3e:38:97:5f:
46:b4:40:55:14:56:49:16:5d:31:ab:d9:fd:9c:76:
08:8c:f6:85:71:ad:1e:92:0b:f4:ce:29:03:87:de:
a3:8e:56:69:6c:d8:2d:20:50:c8:9d:00:52:b5:e4:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:BB:E2:FD:DE:19:C3:EF:D1:09:C0:87:13:FD:09:F1:AC:D0:BC
X509v3 Authority Key Identifier:
keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:11:1c:02:60:6c:0a:28:a9:b6:93:7f:7b:5e:26:e6:0b:1b:
50:64:6c:df:55:89:b4:80:a7:0d:05:32:5f:93:72:19:0a:07:
7e:78:23:a2:87:88:54:29:f8:7b:5f:4b:17:a9:90:85:92:bf:
43:3c:a0:20:55:1c:82:55:1f:20:22:41:d9:70:bc:cb:bf:6b:
bb:8c:51:c7:6f:1c:83:72:52:b6:be:8a:c8:f1:d0:0c:f3:cb:
9a:f2:bb:99:c1:83:34:57:30:9b:32:48:ce:39:c3:65:a9:6e:
a6:31:26:80:05:83:36:67:27:c4:35:5a:5a:01:e8:84:9a:d5:
1a:21:0c:4a:18:87:11:8e:8d:42:30:17:a6:0a:58:b8:6d:9c:
13:b9:19:76:76:29:1e:9a:3b:23:bd:8a:59:53:82:c8:d6:2b:
2e:82:6c:0b:0f:0f:c7:77:7a:27:f8:12:ad:50:18:e2:f2:fd:
fb:c3:18:ab:38:8c:f9:b0:24:cc:29:12:23:30:e9:aa:5c:ec:
2e:4c:8a:f5:32:b3:db:f6:f9:23:26:77:ea:72:8a:fb:de:a4:
d0:09:8a:8e:24:2f:b8:7b:cd:b0:13:0f:1e:23:2a:c5:f4:8c:
5e:b2:9d:e6:76:f4:a7:52:99:06:5a:f1:14:90:05:5b:b2:e7:
f4:74:e6:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQgohpizlfZdO/4DUMqF3LxILW8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0
NTI4QUJENTAeFw0yNjAxMjEwMzM3MzNaFw0yNjAxMjQwNzQ4MzNaMDMxMTAvBgNV
BAMTKDY3ODJCQkUyRkRERTE5QzNFRkQxMDlDMDg3MTNGRDA5RjFBQ0QwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBwCWlxS34tC7CDesDj+NHh7O
Sa4UXcrIPtO1TX4GKeXeBQmZVluahm5RSqSGT7K76buQdA0pS2BCKkotqviptwmX
lUpvyrRfDdlb+y6Jl6EHO6c3BFwRpw8DT1ti6IOoBcZ5DA4yHtvk/s659jhkXCB0
/KXpEmTAHoLZMlveFUMsJDSMQRfESJ6Z1M3C0G8TXtuHRcs8FvIzsB31o4+GjQYR
T5QtkCcWWf2yhpMbod+vN0tZ/tlST4uw2tvWQey+vtCfUlxJFZRw0W8bPjiXX0a0
QFUUVkkWXTGr2f2cdgiM9oVxrR6SC/TOKQOH3qOOVmls2C0gUMidAFK15FVvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZ4K74v3eGcPv0QnAhxP9CfGs0LwwHwYDVR0j
BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0
MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4
QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5
ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1
MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALsRHAJgbAooqbaTf3teJuYLG1BkbN9VibSA
pw0FMl+TchkKB354I6KHiFQp+HtfSxepkIWSv0M8oCBVHIJVHyAiQdlwvMu/a7uM
UcdvHINyUra+isjx0Azzy5ryu5nBgzRXMJsySM45w2WpbqYxJoAFgzZnJ8Q1WloB
6ISa1RohDEoYhxGOjUIwF6YKWLhtnBO5GXZ2KR6aOyO9illTgsjWKy6CbAsPD8d3
eif4Eq1QGOLy/fvDGKs4jPmwJMwpEiMw6apc7C5MivUys9v2+SMmd+pyivvepNAJ
io4kL7h7zbATDx4jKsX0jF6yneZ29KdSmQZa8RSQBVuy5/R05mg=
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:33 2026 by rpki-client