This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: P3ONvswgihv2n2RtGHidtNGYKxOUqM18+kVoEw+H0HU= Subject key identifier: 4F:03:E9:BD:52:0E:66:D6:AC:58:12:EA:54:40:06:51:F3:5E:93:AB Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 5392C7991D62BF6FEA399A3E961008DD89C03A2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 0215 Signing time: Sun 01 Feb 2026 17:40:49 +0000 Manifest this update: Sun 01 Feb 2026 17:35:49 +0000 Manifest next update: Wed 04 Feb 2026 17:41:49 +0000 Files and hashes: 1: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: ua8I2iG72HNqFnixSDXPTwa0WUgrcc4e8uysbVK8EEs=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 17:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:92:c7:99:1d:62:bf:6f:ea:39:9a:3e:96:10:08:dd:89:c0:3a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Feb 1 17:35:49 2026 GMT Not After : Feb 4 17:41:49 2026 GMT Subject: CN=4F03E9BD520E66D6AC5812EA54400651F35E93AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:bd:04:4a:ac:d4:e7:67:02:07:14:60:63: d1:23:bb:dc:10:0a:07:23:73:6a:f2:31:3c:ab:e3: 00:bd:97:7f:d0:fe:ce:57:f9:8f:22:26:91:5f:96: d5:c4:b4:96:67:08:89:2b:7d:d7:0d:0f:b1:a5:e1: f7:08:42:25:c6:ee:38:70:9c:11:e2:4e:e3:e6:8e: a0:2e:97:e2:b1:78:b8:da:a7:19:9b:17:ab:a2:2a: 36:5f:86:06:cb:4b:8c:e0:6a:52:74:14:45:f7:ad: ab:81:22:c0:21:78:2e:03:6c:e0:d1:4d:ae:cd:7b: 06:9c:d6:c3:15:5f:a0:8e:31:f9:85:82:6c:b5:26: 4d:05:aa:38:ad:bb:3a:f2:6d:3c:44:36:a0:cd:da: f4:37:c9:38:9d:e1:a3:8b:2d:b9:35:15:26:c4:aa: 6e:92:d3:69:33:ba:2d:47:39:95:a0:6a:d1:3f:99: ba:ec:a7:cc:bd:30:f0:7d:6e:57:3a:ed:32:96:4d: 18:93:b0:00:57:40:22:d8:d3:f8:86:57:7c:72:07: 00:67:b1:23:bd:9e:cc:de:4e:53:7b:9a:ed:7d:e5: f3:20:1b:89:e7:66:79:1b:c6:f1:58:7c:ca:1d:a2: 84:83:74:22:b2:9b:c3:fd:11:3b:9d:af:9b:93:d9: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:03:E9:BD:52:0E:66:D6:AC:58:12:EA:54:40:06:51:F3:5E:93:AB X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:eb:2c:f2:db:06:af:73:71:19:51:97:ad:c1:40:2f:68:f3: 9d:16:e0:87:81:4b:b5:40:5d:95:5a:e6:8f:43:97:5e:c4:f6: 11:ef:dd:cb:d4:7b:4f:bf:45:7c:1f:95:cc:cc:70:ee:c0:3a: c8:f6:13:1a:88:e3:3e:f7:14:a1:4f:0b:63:16:27:8d:59:09: 5b:28:03:8f:f3:3b:65:6c:a7:cd:e2:2a:5f:10:4b:a2:c2:46: 7d:92:71:b9:84:3a:7b:cc:1c:77:3a:c5:f8:94:93:a8:0d:99: 85:a9:c7:11:e6:87:f0:b5:2b:4d:f8:35:c3:d4:06:33:a7:a5: d3:1f:77:34:e8:3c:08:f6:cc:3a:1c:34:20:d9:2a:a0:ce:16: 4c:cf:16:20:e8:4c:4c:73:af:08:e2:d2:71:c5:57:9c:3f:ef: f0:41:45:41:2e:c8:40:3f:ff:8c:92:9a:bf:b6:7a:83:da:80: b8:0c:90:85:f8:82:93:71:f9:23:dd:b8:3a:1b:73:ab:da:c2: c5:41:1e:5b:31:a2:65:46:57:6e:a9:f7:73:f8:70:17:d0:05: 98:82:26:fd:82:3f:65:c6:70:3b:56:df:b7:34:d2:fe:c3:bb: 64:f3:b8:87:2d:bb:43:f4:17:d5:6b:6a:c7:4a:fe:3f:9c:c2: 6d:0a:42:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5LHmR1iv2/qOZo+lhAI3YnAOiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNjAyMDExNzM1NDlaFw0yNjAyMDQxNzQxNDlaMDMxMTAvBgNV BAMTKDRGMDNFOUJENTIwRTY2RDZBQzU4MTJFQTU0NDAwNjUxRjM1RTkzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosr0ESqzU52cCBxRgY9Eju9wQ Cgcjc2ryMTyr4wC9l3/Q/s5X+Y8iJpFfltXEtJZnCIkrfdcND7Gl4fcIQiXG7jhw nBHiTuPmjqAul+KxeLjapxmbF6uiKjZfhgbLS4zgalJ0FEX3rauBIsAheC4DbODR Ta7Newac1sMVX6COMfmFgmy1Jk0FqjituzrybTxENqDN2vQ3yTid4aOLLbk1FSbE qm6S02kzui1HOZWgatE/mbrsp8y9MPB9blc67TKWTRiTsABXQCLY0/iGV3xyBwBn sSO9nszeTlN7mu195fMgG4nnZnkbxvFYfModooSDdCKym8P9ETudr5uT2f2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwPpvVIOZtasWBLqVEAGUfNek6swHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzrLPLbBq9zcRlRl63BQC9o850W4IeBS7VA XZVa5o9Dl17E9hHv3cvUe0+/RXwflczMcO7AOsj2ExqI4z73FKFPC2MWJ41ZCVso A4/zO2Vsp83iKl8QS6LCRn2ScbmEOnvMHHc6xfiUk6gNmYWpxxHmh/C1K034NcPU BjOnpdMfdzToPAj2zDocNCDZKqDOFkzPFiDoTExzrwji0nHFV5w/7/BBRUEuyEA/ /4ySmr+2eoPagLgMkIX4gpNx+SPduDobc6vawsVBHlsxomVGV26p93P4cBfQBZiC Jv2CP2XGcDtW37c00v7Du2TzuIctu0P0F9VrasdK/j+cwm0KQso= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:09 2026 by rpki-client