This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: fzYAPltT+EpzJH0+RDyRbYiHNHj7xtjfuHf/cYB9H6A= Subject key identifier: 42:47:77:5C:6A:5F:10:02:53:78:09:D5:4E:69:D0:37:F5:D0:F6:E3 Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 044CA653C132CB39D5535D36925A80A74D69372E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: EF Signing time: Sat 31 Jan 2026 22:10:52 +0000 Manifest this update: Sat 31 Jan 2026 22:05:52 +0000 Manifest next update: Wed 04 Feb 2026 06:24:52 +0000 Files and hashes: 1: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: 1aiiU5ijDS7Wr3x140I86xaQrAr3ChAuzRtY10hpksg=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 06:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4c:a6:53:c1:32:cb:39:d5:53:5d:36:92:5a:80:a7:4d:69:37:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Jan 31 22:05:52 2026 GMT Not After : Feb 4 06:24:52 2026 GMT Subject: CN=4247775C6A5F1002537809D54E69D037F5D0F6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:a0:70:e4:b1:e0:c9:d0:1f:80:ae:ea:14: 1d:04:41:85:49:81:74:7a:75:05:35:02:06:08:81: ff:d1:f0:b2:5b:69:da:34:5e:ac:e9:a0:f5:e6:d1: 83:c8:cb:ff:8a:74:4d:75:11:11:ac:f7:e2:0f:6f: c4:69:e8:2c:27:76:70:de:83:98:be:e6:9f:c9:41: 92:c4:f5:94:27:d1:40:d6:fd:3c:2c:d2:a4:96:fe: ac:6b:ce:32:2c:b6:36:df:f4:73:53:f0:53:19:2c: c3:ed:39:6a:3f:0e:79:99:c3:cd:88:60:43:07:d7: dc:b1:ad:81:16:9a:a0:0b:b7:4f:d2:3a:df:c5:c1: 3d:ad:e3:76:0d:7a:b9:f5:4a:bf:34:5e:a0:01:68: b1:af:f0:ea:82:be:0c:67:b8:87:c9:ce:2a:10:cb: 38:f6:d6:94:9c:e2:f7:3f:31:2d:3b:b1:09:99:cb: 17:77:ed:5e:ee:11:ec:9f:89:ef:2a:bc:11:7e:c1: 9e:96:9b:9b:31:32:07:36:99:eb:d2:08:25:be:2b: c1:99:6b:ce:6f:5f:39:a4:cf:9b:d9:00:ee:77:d0: e7:e4:fc:71:48:ea:97:e8:65:59:0f:2b:16:bd:79: 61:c6:3a:cc:89:4a:d5:f6:d5:02:50:92:71:f8:55: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:47:77:5C:6A:5F:10:02:53:78:09:D5:4E:69:D0:37:F5:D0:F6:E3 X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:95:0e:4d:9f:94:b0:59:8f:50:66:9b:4c:38:8b:81:05:9b: d8:14:9c:41:71:fb:47:be:26:54:2c:0c:26:18:cb:bc:f6:ce: dc:db:61:e6:0c:87:67:8e:0c:e4:0e:04:6b:58:c4:57:b6:2d: ef:27:aa:fd:63:20:8a:c9:97:fc:76:19:95:bf:27:56:d1:f7: e6:bc:aa:67:e5:bd:62:b2:c7:40:ff:11:21:5b:1d:39:d5:9f: f7:e9:88:3f:c4:27:7b:77:54:dd:2e:39:b1:3d:e6:16:1e:60: 5e:13:89:c1:c6:06:73:a8:34:c7:10:1f:de:61:4f:91:89:83: 43:45:57:c6:45:0e:99:6b:83:ce:b1:d6:3a:07:de:66:be:65: f4:27:15:62:e3:b8:65:cb:9f:c5:88:69:f2:0c:65:f9:79:75: 31:a7:fc:16:e6:6f:5f:bf:d6:ca:9d:7e:7a:42:e0:6e:29:47: d8:9d:ae:ee:36:04:3c:ee:a5:93:61:31:4e:72:9a:64:16:b9: 96:31:db:bd:c4:4f:a2:1d:07:22:10:1e:05:8f:cf:ab:ed:95: 75:a0:10:f3:72:1e:7a:5a:92:03:81:12:9c:b1:dd:07:32:1e: ac:3c:25:1d:7c:5a:f9:f9:a5:49:f1:43:f5:f0:d4:59:50:38: d5:85:58:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEymU8EyyznVU102klqAp01pNy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNjAxMzEyMjA1NTJaFw0yNjAyMDQwNjI0NTJaMDMxMTAvBgNV BAMTKDQyNDc3NzVDNkE1RjEwMDI1Mzc4MDlENTRFNjlEMDM3RjVEMEY2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZaBw5LHgydAfgK7qFB0EQYVJ gXR6dQU1AgYIgf/R8LJbado0XqzpoPXm0YPIy/+KdE11ERGs9+IPb8Rp6CwndnDe g5i+5p/JQZLE9ZQn0UDW/Tws0qSW/qxrzjIstjbf9HNT8FMZLMPtOWo/DnmZw82I YEMH19yxrYEWmqALt0/SOt/FwT2t43YNern1Sr80XqABaLGv8OqCvgxnuIfJzioQ yzj21pSc4vc/MS07sQmZyxd37V7uEeyfie8qvBF+wZ6Wm5sxMgc2mevSCCW+K8GZ a85vXzmkz5vZAO530Ofk/HFI6pfoZVkPKxa9eWHGOsyJStX21QJQknH4VcYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkd3XGpfEAJTeAnVTmnQN/XQ9uMwHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+VDk2flLBZj1Bmm0w4i4EFm9gUnEFx+0e+ JlQsDCYYy7z2ztzbYeYMh2eODOQOBGtYxFe2Le8nqv1jIIrJl/x2GZW/J1bR9+a8 qmflvWKyx0D/ESFbHTnVn/fpiD/EJ3t3VN0uObE95hYeYF4TicHGBnOoNMcQH95h T5GJg0NFV8ZFDplrg86x1joH3ma+ZfQnFWLjuGXLn8WIafIMZfl5dTGn/Bbmb1+/ 1sqdfnpC4G4pR9idru42BDzupZNhMU5ymmQWuZYx273ET6IdByIQHgWPz6vtlXWg EPNyHnpakgOBEpyx3QcyHqw8JR18Wvn5pUnxQ/Xw1FlQONWFWDA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:08 2026 by rpki-client