This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: snlfWCuLB0rXJIoehkRhumW0C4kMN4BUZqzc3AuhNEE= Subject key identifier: 44:3C:9A:67:D7:A2:34:92:A6:42:1C:75:55:21:17:EE:3C:86:26:C2 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 372489959813B1113EEDC802C504EA06460FB71C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 0413 Signing time: Fri 16 Jan 2026 13:12:28 +0000 Manifest this update: Fri 16 Jan 2026 13:07:28 +0000 Manifest next update: Tue 20 Jan 2026 00:21:28 +0000 Files and hashes: 1: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: ekiTRUXlXGfIdpnyynvPIh11dLh8SkdkAtK+PUzrwAE=) 2: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: XKkzY9bFjLgyHEKLIOgvs6VAzjvL/cf6BwGfRjG65P4=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: 9yXHv0Fbnb6cNl5E2tTAxcdxeQ/hnVN9K365QaGnYvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 00:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:24:89:95:98:13:b1:11:3e:ed:c8:02:c5:04:ea:06:46:0f:b7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Jan 16 13:07:28 2026 GMT Not After : Jan 20 00:21:28 2026 GMT Subject: CN=443C9A67D7A23492A6421C75552117EE3C8626C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:29:09:78:65:d3:a1:9a:08:ab:a9:d4:ed: 1e:73:8d:12:7b:f5:44:13:93:b6:19:aa:64:e1:48: 8f:32:fd:b6:8e:1e:70:c3:84:8a:3b:3a:39:58:5a: 8e:44:52:f5:ce:79:4e:97:0e:87:e7:68:07:4d:0f: ae:9c:65:d8:c7:ad:e7:5f:ec:ca:dc:45:48:84:7a: a5:6c:a5:6c:c8:4f:8c:e8:ac:a3:e8:aa:9c:40:88: 80:69:28:03:d6:81:86:dd:11:18:3d:fb:42:4b:98: b0:bf:dc:ea:d0:6f:37:e6:71:29:69:e6:72:f4:d6: cd:b3:1f:37:38:39:d6:fd:32:40:08:ec:3e:9c:57: 39:f7:ca:a2:0a:ce:df:46:3a:94:bd:a2:4a:60:c8: 36:fa:57:15:c2:c1:fe:2e:a3:da:a2:b7:a1:67:5b: d6:8e:8a:0b:a5:56:d2:1b:d2:8e:23:3b:20:c5:f8: aa:f5:12:fc:e8:ca:6f:83:94:d3:35:5e:02:35:64: 0b:b2:ca:2c:8a:73:69:2e:54:d5:95:e4:b4:c2:5c: e4:7b:5c:8b:bd:53:41:55:4e:1a:08:bd:d9:99:e6: 49:9c:12:1b:8d:2b:44:be:d3:1f:9f:8b:c0:f8:af: 5b:48:c6:51:07:c7:f4:49:b0:64:cf:df:c3:50:95: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:9A:67:D7:A2:34:92:A6:42:1C:75:55:21:17:EE:3C:86:26:C2 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1d:de:0e:9b:87:95:55:43:3b:6a:d2:8a:a0:1e:e0:85:7a: 67:16:36:41:65:28:f4:b8:80:66:3f:08:dc:e3:24:5c:29:bb: e0:70:1c:c0:2a:72:7a:6e:c0:b7:5d:a6:df:65:83:f3:b6:ac: 4e:85:9e:b5:8f:ee:36:66:78:a4:3f:97:a1:3e:d0:c3:4a:19: 88:1f:d8:d5:11:98:8a:4d:c4:da:a6:1d:46:38:e5:ec:3d:96: f8:8d:25:8f:7a:9a:2e:ec:31:6d:1c:e4:1a:eb:0b:f0:f5:83: e2:22:e9:22:84:b3:8f:25:5d:10:df:03:20:6d:37:ef:65:fc: 6d:40:94:d2:d0:b5:64:4d:11:5b:98:ad:ef:61:0a:02:ce:c9: 2b:01:56:39:db:41:20:c3:41:99:ad:33:94:76:49:32:ef:34: 44:1f:2d:3b:03:51:a9:c7:e6:ae:75:5b:f9:b5:6d:c6:ba:36: 29:93:9c:37:75:c1:47:b6:49:60:1b:ae:af:54:d8:57:a2:4a: a8:ce:6e:4a:d0:93:d0:f4:8e:15:83:73:5d:02:3f:81:40:b3: da:8f:57:2f:66:39:d0:7b:07:7e:86:1c:49:be:6d:2e:d4:46: e7:8d:a9:57:4a:fb:ce:6c:c3:e9:a8:c0:e8:a1:52:ce:7e:72: 27:ee:0d:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNySJlZgTsRE+7cgCxQTqBkYPtxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNjAxMTYxMzA3MjhaFw0yNjAxMjAwMDIxMjhaMDMxMTAvBgNV BAMTKDQ0M0M5QTY3RDdBMjM0OTJBNjQyMUM3NTU1MjExN0VFM0M4NjI2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uykJeGXToZoIq6nU7R5zjRJ7 9UQTk7YZqmThSI8y/baOHnDDhIo7OjlYWo5EUvXOeU6XDofnaAdND66cZdjHredf 7MrcRUiEeqVspWzIT4zorKPoqpxAiIBpKAPWgYbdERg9+0JLmLC/3OrQbzfmcSlp 5nL01s2zHzc4Odb9MkAI7D6cVzn3yqIKzt9GOpS9okpgyDb6VxXCwf4uo9qit6Fn W9aOigulVtIb0o4jOyDF+Kr1Evzoym+DlNM1XgI1ZAuyyiyKc2kuVNWV5LTCXOR7 XIu9U0FVThoIvdmZ5kmcEhuNK0S+0x+fi8D4r1tIxlEHx/RJsGTP38NQleHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURDyaZ9eiNJKmQhx1VSEX7jyGJsIwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUd3g6bh5VVQztq0oqgHuCFemcWNkFlKPS4 gGY/CNzjJFwpu+BwHMAqcnpuwLddpt9lg/O2rE6FnrWP7jZmeKQ/l6E+0MNKGYgf 2NURmIpNxNqmHUY45ew9lviNJY96mi7sMW0c5BrrC/D1g+Ii6SKEs48lXRDfAyBt N+9l/G1AlNLQtWRNEVuYre9hCgLOySsBVjnbQSDDQZmtM5R2STLvNEQfLTsDUanH 5q51W/m1bca6NimTnDd1wUe2SWAbrq9U2FeiSqjObkrQk9D0jhWDc10CP4FAs9qP Vy9mOdB7B36GHEm+bS7URueNqVdK+85sw+mowOihUs5+cifuDTo= -----END CERTIFICATE-----Generated at Sun Jan 18 10:40:09 2026 by rpki-client