This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: E20sKC/nmS5OTdIo3gOOdo/kz5lGcCTnK04Vx1GtyyE= Subject key identifier: D1:57:5E:8C:60:DC:23:9F:C7:EC:C5:A1:F1:E1:E2:FF:E2:35:F8:9E Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 1E3E079930E5AE8DC63D418B7393722F983DD7FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 04D7 Signing time: Mon 02 Feb 2026 05:31:12 +0000 Manifest this update: Mon 02 Feb 2026 05:26:12 +0000 Manifest next update: Thu 05 Feb 2026 16:11:12 +0000 Files and hashes: 1: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) 3: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: vePG3kS5hcpyKrV70VIR19W6WnmbcAF2kBrqhKoWB5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3e:07:99:30:e5:ae:8d:c6:3d:41:8b:73:93:72:2f:98:3d:d7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Feb 2 05:26:12 2026 GMT Not After : Feb 5 16:11:12 2026 GMT Subject: CN=D1575E8C60DC239FC7ECC5A1F1E1E2FFE235F89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9e:75:9e:b1:35:b8:47:46:0c:08:b7:61:6c: 82:84:89:5d:0c:ab:3d:70:a8:bf:0a:df:1e:44:b9: e7:ac:0a:26:4d:a2:a4:be:7e:17:e3:d7:31:ba:57: e3:4a:f5:87:aa:01:26:a7:7d:d2:79:82:d9:a8:51: ad:97:cc:d7:0f:06:2e:1a:8f:3a:08:96:b1:63:92: 8e:b7:c4:cc:c6:41:ea:2c:5d:0f:43:a1:2e:68:6a: 75:f0:8f:74:69:b0:60:1a:e8:c5:3c:69:96:67:61: a0:df:07:3e:bd:7e:60:59:67:8e:b2:9a:83:17:53: fc:b5:0b:e4:8f:6a:82:a5:e2:6b:f8:6a:6b:5c:38: 64:b2:39:d9:4b:a6:b7:9c:c5:96:d1:be:14:67:dc: 5e:d0:a2:ff:86:fc:ea:df:ea:73:90:47:0a:71:b5: f0:3a:9b:7e:d2:3f:31:94:26:10:4e:dd:3a:64:39: b6:cc:68:15:ec:da:dc:10:ff:73:e9:cf:9b:da:0f: 5c:76:4a:36:6a:0f:cb:e4:ea:76:df:3b:68:b0:1f: 16:9c:43:37:a0:90:77:74:cf:4e:6f:3e:61:1f:57: 79:1d:03:66:e6:1c:ab:66:2d:f3:07:7d:4e:ca:f3: ed:8d:e5:d7:13:f5:57:00:e1:64:1b:75:c7:f0:6f: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:5E:8C:60:DC:23:9F:C7:EC:C5:A1:F1:E1:E2:FF:E2:35:F8:9E X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:a0:ad:1f:45:35:9a:44:2b:64:1f:04:38:a0:0a:de:a1: 9d:48:c0:3e:d5:89:c5:50:12:fd:44:6f:79:97:32:69:26:ad: 67:17:12:7b:85:c5:75:1f:ad:cf:1c:24:62:9c:cc:f8:30:63: df:7f:47:fc:29:c8:5f:a1:f4:a5:ad:ce:9c:b5:76:8b:27:75: 80:65:27:7a:da:99:b5:a4:65:24:b3:a2:59:92:c0:3f:cd:0e: a8:ed:c3:26:92:ae:e3:ef:77:4c:4e:8f:31:21:70:55:b3:74: c7:5a:17:05:4f:e4:8b:70:d5:c1:6f:c2:01:fb:f6:72:5c:9d: 96:ef:58:8e:de:e5:47:a0:51:ce:d0:d9:ef:87:87:9b:43:e7: b2:52:43:81:07:71:d1:30:e1:77:52:8c:44:ee:1c:f5:83:0e: a6:54:59:c7:2b:a3:f4:1b:af:50:54:96:74:9a:03:09:f6:a5: 09:dd:51:0b:6e:a5:33:9d:2f:89:1e:44:a1:a9:6a:7b:29:9e: ff:30:05:93:45:bf:f3:f9:a9:b0:e3:51:60:78:38:8f:8d:09: f8:78:fa:46:69:3d:11:ec:99:c9:58:06:6c:df:ef:45:a7:2f: b3:ea:e7:97:c8:1f:c2:8b:ae:83:44:2f:ab:fd:6b:5a:0d:e7: d0:8b:60:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHj4HmTDlro3GPUGLc5NyL5g91/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNjAyMDIwNTI2MTJaFw0yNjAyMDUxNjExMTJaMDMxMTAvBgNV BAMTKEQxNTc1RThDNjBEQzIzOUZDN0VDQzVBMUYxRTFFMkZGRTIzNUY4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvnnWesTW4R0YMCLdhbIKEiV0M qz1wqL8K3x5EueesCiZNoqS+fhfj1zG6V+NK9YeqASanfdJ5gtmoUa2XzNcPBi4a jzoIlrFjko63xMzGQeosXQ9DoS5oanXwj3RpsGAa6MU8aZZnYaDfBz69fmBZZ46y moMXU/y1C+SPaoKl4mv4amtcOGSyOdlLprecxZbRvhRn3F7Qov+G/Orf6nOQRwpx tfA6m37SPzGUJhBO3TpkObbMaBXs2twQ/3Ppz5vaD1x2SjZqD8vk6nbfO2iwHxac QzegkHd0z05vPmEfV3kdA2bmHKtmLfMHfU7K8+2N5dcT9VcA4WQbdcfwb/DrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VdejGDcI5/H7MWh8eHi/+I1+J4wHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK2oK0fRTWaRCtkHwQ4oAreoZ1IwD7VicVQ Ev1Eb3mXMmkmrWcXEnuFxXUfrc8cJGKczPgwY99/R/wpyF+h9KWtzpy1dosndYBl J3rambWkZSSzolmSwD/NDqjtwyaSruPvd0xOjzEhcFWzdMdaFwVP5Itw1cFvwgH7 9nJcnZbvWI7e5UegUc7Q2e+Hh5tD57JSQ4EHcdEw4XdSjETuHPWDDqZUWccro/Qb r1BUlnSaAwn2pQndUQtupTOdL4keRKGpanspnv8wBZNFv/P5qbDjUWB4OI+NCfh4 +kZpPRHsmclYBmzf70WnL7Pq55fIH8KLroNEL6v9a1oN59CLYOM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:25 2026 by rpki-client