This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: f8cBibARVq+yuDoqSRJ7W4Mk0WH2ZpWIZzsVgIM6mAk= Subject key identifier: ED:BE:7A:D2:D7:87:96:E3:1B:A9:CB:0A:79:62:E0:64:F6:8E:DB:CB Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 7757F2FA8D3AFBF98BCCE2395F8FB132AD767177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 0110 Signing time: Mon 19 Jan 2026 13:30:44 +0000 Manifest this update: Mon 19 Jan 2026 13:25:44 +0000 Manifest next update: Thu 22 Jan 2026 15:23:44 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 3: 020EA2304929066809CA6F723574798639D77438.crl (hash: Hbyt0TGq0Cekey5C6zXjWenc3QZF59aQRcaNiykGwUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 15:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:57:f2:fa:8d:3a:fb:f9:8b:cc:e2:39:5f:8f:b1:32:ad:76:71:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Jan 19 13:25:44 2026 GMT Not After : Jan 22 15:23:44 2026 GMT Subject: CN=EDBE7AD2D78796E31BA9CB0A7962E064F68EDBCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:e1:8f:cf:88:d8:b6:34:9d:f5:da:eb:bf: ad:69:60:12:2c:ff:18:e8:0f:16:9a:c1:f7:16:03: 43:33:4f:0d:9a:23:bb:f9:a9:bb:9f:56:65:86:92: 1d:70:c1:87:d7:b4:fa:8c:9b:55:4b:d7:58:5a:32: ad:fc:bb:d9:bf:17:cf:ec:de:e2:fe:d9:43:c2:6e: 6c:b4:11:05:a9:53:27:4f:a6:98:0d:fd:60:36:62: 6e:be:20:a3:ce:4b:4e:63:fb:00:b6:ed:0c:85:d3: 34:3c:b8:78:21:40:be:68:15:6c:01:88:15:b2:c1: 1a:92:8d:4a:48:69:51:a7:5d:23:88:9f:b8:f4:47: 6e:c4:dc:33:73:17:47:b9:20:b2:5a:79:fb:b9:19: b5:c1:27:25:85:e7:a2:80:5c:31:7c:5f:37:1d:ed: 15:30:a7:86:a5:e7:ac:e5:a2:cb:72:c1:f0:4a:46: 0a:da:e2:ed:81:27:8d:46:04:8f:4f:ff:4a:dd:5e: 5a:27:0d:eb:2d:b9:16:41:0e:28:52:40:ca:01:12: 36:9d:fa:eb:c2:e8:06:37:36:91:c9:a0:1d:7b:36: 87:dc:f0:5a:3d:58:49:46:e4:d0:c0:df:74:4e:d8: 6b:f7:3c:67:7a:47:ea:6d:98:47:d5:f1:83:92:54: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BE:7A:D2:D7:87:96:E3:1B:A9:CB:0A:79:62:E0:64:F6:8E:DB:CB X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:34:3f:2e:b2:1f:88:53:5c:98:56:8e:9d:97:d5:09:aa:3b: a2:41:6e:22:0c:6e:80:fc:31:63:a9:79:80:19:34:25:d4:94: 74:d1:7b:22:59:5a:51:84:ff:1a:a0:c4:af:f3:25:8b:15:b1: 52:98:35:86:33:bc:dd:e7:3a:ea:91:57:7f:57:5a:1a:9f:6f: f5:02:a9:36:2c:0b:be:96:2a:33:f0:89:7a:1c:9d:26:93:4a: 77:5b:6d:b8:0c:29:89:72:00:96:54:b9:05:ae:0f:f4:3f:c9: 37:00:fe:8a:9c:52:21:57:9e:e2:ed:a8:a4:ca:ac:28:c1:2f: 14:43:f1:f6:a7:8d:6a:e7:ff:1d:1d:c5:62:59:fd:0b:ff:c3: f3:bd:e6:df:25:0f:68:eb:45:aa:81:9f:0d:5e:d7:ac:2d:6e: bd:2b:12:d1:68:4e:5c:68:30:4b:8d:9a:c8:de:88:4c:a0:ca: 82:c6:41:ae:af:6f:91:07:d8:b6:03:13:06:c8:ab:d3:32:d8: ad:16:21:f6:0e:64:3b:2b:14:d3:fc:ce:ce:18:94:74:f5:43: ec:a8:8e:14:4c:d1:d0:8a:5e:77:cb:af:5d:88:e8:b4:79:75: 15:5c:8c:39:39:76:ea:04:8a:5a:58:ab:c5:d6:66:54:e7:e9: 0e:30:a2:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1fy+o06+/mLzOI5X4+xMq12cXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNjAxMTkxMzI1NDRaFw0yNjAxMjIxNTIzNDRaMDMxMTAvBgNV BAMTKEVEQkU3QUQyRDc4Nzk2RTMxQkE5Q0IwQTc5NjJFMDY0RjY4RURCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIeGPz4jYtjSd9drrv61pYBIs /xjoDxaawfcWA0MzTw2aI7v5qbufVmWGkh1wwYfXtPqMm1VL11haMq38u9m/F8/s 3uL+2UPCbmy0EQWpUydPppgN/WA2Ym6+IKPOS05j+wC27QyF0zQ8uHghQL5oFWwB iBWywRqSjUpIaVGnXSOIn7j0R27E3DNzF0e5ILJaefu5GbXBJyWF56KAXDF8Xzcd 7RUwp4al56zlostywfBKRgra4u2BJ41GBI9P/0rdXlonDestuRZBDihSQMoBEjad +uvC6AY3NpHJoB17Nofc8Fo9WElG5NDA33RO2Gv3PGd6R+ptmEfV8YOSVJcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7b560teHluMbqcsKeWLgZPaO28swHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk0Py6yH4hTXJhWjp2X1QmqO6JBbiIMboD8 MWOpeYAZNCXUlHTReyJZWlGE/xqgxK/zJYsVsVKYNYYzvN3nOuqRV39XWhqfb/UC qTYsC76WKjPwiXocnSaTSndbbbgMKYlyAJZUuQWuD/Q/yTcA/oqcUiFXnuLtqKTK rCjBLxRD8fanjWrn/x0dxWJZ/Qv/w/O95t8lD2jrRaqBnw1e16wtbr0rEtFoTlxo MEuNmsjeiEygyoLGQa6vb5EH2LYDEwbIq9My2K0WIfYOZDsrFNP8zs4YlHT1Q+yo jhRM0dCKXnfLr12I6LR5dRVcjDk5duoEilpYq8XWZlTn6Q4woik= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:19 2026 by rpki-client