This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: r+sfVIP7hnKfGbm2E4qEZ6Szq4+2o873fx3p2+oBE3M= Subject key identifier: F5:91:21:35:6B:84:03:70:A4:F1:8F:A0:8A:BE:AE:F6:F3:49:B1:EE Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 65BDDBC2B49F3FFF49049EC79012E8A7BC62C623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: 0142 Signing time: Sun 01 Feb 2026 03:21:14 +0000 Manifest this update: Sun 01 Feb 2026 03:16:14 +0000 Manifest next update: Wed 04 Feb 2026 11:11:14 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: 4blY0KBpSzRUoyFaq35Eu1DEa3N9B3gRpwyZoNwNxRU=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: zHu+x2gGwUwgUlq5CctYUcopUHkJoC2ZyqysIaSRBBM=) 3: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: X9VsPU2+8KOAav1ZWI3QF04Jo24QnXM9m2ux0A7Cmok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 11:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:bd:db:c2:b4:9f:3f:ff:49:04:9e:c7:90:12:e8:a7:bc:62:c6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Feb 1 03:16:14 2026 GMT Not After : Feb 4 11:11:14 2026 GMT Subject: CN=F59121356B840370A4F18FA08ABEAEF6F349B1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:0b:2e:02:4c:da:4f:48:60:72:4e:14:f6: d1:b8:86:ee:59:26:67:e2:81:d4:d5:89:16:6f:e3: f6:80:46:ca:34:95:1e:53:82:43:d8:35:02:12:14: 55:63:9f:c7:ad:09:1b:db:cc:02:81:65:76:3c:f3: b4:27:58:51:13:7a:37:1f:ed:70:55:18:d8:d5:1a: 72:0e:dc:61:5d:24:18:7c:d2:94:21:cb:0d:9e:97: 24:ff:8d:cf:8a:f3:b6:8c:ff:9b:0d:0d:c0:da:cc: 9e:5b:23:9c:6c:46:4b:21:6d:35:25:e7:59:86:13: 70:0a:8c:bf:ee:16:1f:a1:d5:68:6c:33:4b:c1:a8: 05:8b:7f:79:fe:22:a3:39:b0:97:ff:de:c4:59:c3: 73:77:b6:ae:ce:de:32:b8:c8:10:ef:23:60:d7:05: ab:f8:45:d1:b5:53:28:48:73:79:e3:1d:d9:e7:c0: f8:c3:95:39:6d:5d:d8:01:1e:b1:4a:a6:d5:55:a3: 5d:2f:95:41:c3:35:0b:e4:70:95:8b:70:4f:b8:05: 61:23:9a:80:96:de:6a:1f:2e:31:ae:8c:cd:ae:27: e7:0a:a5:0e:12:ee:5b:c2:38:2e:5e:22:03:75:4d: de:84:0c:c1:cd:fb:c2:77:34:d7:81:57:5c:2e:59: 1c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:91:21:35:6B:84:03:70:A4:F1:8F:A0:8A:BE:AE:F6:F3:49:B1:EE X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:35:fc:b3:85:e3:6a:70:62:5a:24:fd:54:89:02:86:de:a7: c2:28:ec:a8:6e:a3:07:03:7e:c2:85:5b:46:8f:0c:6a:dd:a1: 18:3d:d7:b9:3a:bf:23:3c:dd:9e:af:a5:3b:4a:06:99:0b:2c: e7:ba:c2:70:39:a5:d8:23:7d:e0:60:39:c7:a8:12:43:b1:d9: aa:6f:36:21:19:b0:a9:74:21:dc:cd:2e:5d:35:19:b0:1d:7a: 08:80:35:73:9e:ac:de:d4:3e:31:0b:9f:8f:87:5e:25:ea:49: b1:38:2d:34:00:fa:29:28:2d:2f:0c:46:e0:49:79:df:e5:1e: 94:4b:64:ed:51:cd:3b:e8:0e:63:99:61:69:71:28:00:59:8d: ad:95:08:11:a4:e4:84:2f:ed:59:74:40:b3:63:68:10:3e:b2: e0:38:7f:bd:62:22:1f:5a:99:fd:5d:e7:e4:4d:64:e3:e3:08: fa:0d:6d:ba:5c:01:48:b2:8d:17:df:7b:dc:84:df:cd:c4:d0: 03:00:f1:2a:c2:bd:aa:95:c3:d2:de:6d:1c:44:72:59:3a:06: 11:6d:43:c2:b0:a6:67:ae:2c:f0:ec:94:4c:ed:e3:9c:2a:a8: 1f:53:d6:fa:0a:5b:7f:f6:c0:18:2d:f8:9e:b2:97:e0:d3:f1: d7:5f:ad:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZb3bwrSfP/9JBJ7HkBLop7xixiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNjAyMDEwMzE2MTRaFw0yNjAyMDQxMTExMTRaMDMxMTAvBgNV BAMTKEY1OTEyMTM1NkI4NDAzNzBBNEYxOEZBMDhBQkVBRUY2RjM0OUIxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XwsuAkzaT0hgck4U9tG4hu5Z JmfigdTViRZv4/aARso0lR5TgkPYNQISFFVjn8etCRvbzAKBZXY887QnWFETejcf 7XBVGNjVGnIO3GFdJBh80pQhyw2elyT/jc+K87aM/5sNDcDazJ5bI5xsRkshbTUl 51mGE3AKjL/uFh+h1WhsM0vBqAWLf3n+IqM5sJf/3sRZw3N3tq7O3jK4yBDvI2DX Bav4RdG1UyhIc3njHdnnwPjDlTltXdgBHrFKptVVo10vlUHDNQvkcJWLcE+4BWEj moCW3mofLjGujM2uJ+cKpQ4S7lvCOC5eIgN1Td6EDMHN+8J3NNeBV1wuWRyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ZEhNWuEA3Ck8Y+gir6u9vNJse4wHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw1/LOF42pwYlok/VSJAobep8Io7KhuowcD fsKFW0aPDGrdoRg917k6vyM83Z6vpTtKBpkLLOe6wnA5pdgjfeBgOceoEkOx2apv NiEZsKl0IdzNLl01GbAdegiANXOerN7UPjELn4+HXiXqSbE4LTQA+ikoLS8MRuBJ ed/lHpRLZO1RzTvoDmOZYWlxKABZja2VCBGk5IQv7Vl0QLNjaBA+suA4f71iIh9a mf1d5+RNZOPjCPoNbbpcAUiyjRffe9yE383E0AMA8SrCvaqVw9LebRxEclk6BhFt Q8KwpmeuLPDslEzt45wqqB9T1voKW3/2wBgt+J6yl+DT8ddfrRg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:44 2026 by rpki-client