This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json)
Hash identifier: C3END0TTZtooBwkxDLatfGheJ0LI8nXDjdRGHD4UyK4=
Subject key identifier: 9D:E7:68:AD:0A:D1:C8:17:49:A0:BA:EA:93:CC:B3:3A:B9:00:4A:F7
Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Certificate serial: 573985D252A825980DC35EB5B60C210BB914A620
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
Manifest number: 054E
Signing time: Mon 02 Feb 2026 07:40:06 +0000
Manifest this update: Mon 02 Feb 2026 07:35:06 +0000
Manifest next update: Thu 05 Feb 2026 11:53:06 +0000
Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=)
2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: 88H2LvooTw/mt5XlSgdc5428K8BvROIYQ5bH5EeaJNk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:39:85:d2:52:a8:25:98:0d:c3:5e:b5:b6:0c:21:0b:b9:14:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Validity
Not Before: Feb 2 07:35:06 2026 GMT
Not After : Feb 5 11:53:06 2026 GMT
Subject: CN=9DE768AD0AD1C81749A0BAEA93CCB33AB9004AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:29:2f:42:59:45:f8:6a:20:ec:5d:65:06:
26:a9:a8:76:47:cf:fd:2c:51:06:bd:8d:cd:6e:15:
64:fb:17:e8:31:e8:86:d0:2e:6b:da:9d:db:ab:be:
1c:fc:b0:6a:9c:73:1e:09:d3:88:ac:e9:be:00:f8:
ec:e5:a0:d0:0e:97:a4:79:66:51:69:62:e7:cd:39:
01:e6:e2:5f:5a:05:40:20:57:d4:0b:ec:c0:c8:1e:
16:90:80:23:12:9d:6a:a3:b9:8f:c8:b1:99:c6:33:
4d:bd:13:84:57:48:49:73:b2:a4:f9:bd:bb:f0:a3:
f8:1d:37:4f:f4:75:bc:c9:3d:c3:0c:3e:ce:0f:32:
68:20:bd:62:48:b1:e1:50:3b:7d:bd:6d:c2:82:70:
2b:82:0c:e2:09:44:2f:c4:83:d1:4c:63:0a:d0:dc:
04:fd:3e:57:af:55:31:ad:e3:06:ee:23:eb:28:08:
d8:b4:0b:d8:a9:2b:ca:a1:90:e9:4c:b3:2e:f1:cc:
02:d2:8c:0c:1b:0a:dd:fb:aa:c9:4d:6e:3e:eb:1f:
23:53:7f:b9:36:23:4a:d4:0b:5d:3c:3e:82:b4:be:
d3:36:12:ff:2d:36:90:c4:f4:64:e8:92:b9:2f:9d:
b3:2a:47:1a:b1:82:0e:8d:38:7b:72:c6:9f:8f:b3:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:68:AD:0A:D1:C8:17:49:A0:BA:EA:93:CC:B3:3A:B9:00:4A:F7
X509v3 Authority Key Identifier:
keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:ec:5a:10:59:63:94:e0:4f:0c:2b:d2:5b:df:b8:ef:ac:
93:6e:1f:16:ff:3b:00:5d:28:13:63:37:53:92:5e:51:69:e6:
dc:55:b5:8b:42:52:87:47:35:ab:66:ea:0b:51:66:27:4a:5c:
72:1e:2f:f9:76:c1:37:f2:7d:6c:81:80:34:22:a6:94:a0:01:
b2:b7:5d:d4:d7:a5:4b:8c:4e:4e:0c:1b:09:2c:16:0f:f2:85:
dc:64:43:18:ab:08:bd:64:98:d2:38:14:c9:f0:c2:8e:e1:91:
92:f1:be:c4:b5:69:6c:b3:64:80:28:e3:3f:5b:a0:b1:d7:ab:
bf:b5:52:f8:9d:96:d5:59:d7:fd:d4:1e:6a:ab:0c:f0:6b:33:
df:a0:69:8e:d7:87:b9:99:9f:18:f0:c4:08:3b:e3:0b:ce:6a:
85:cc:6b:60:84:1a:1f:88:a3:0a:9e:7b:42:e3:35:c6:e1:de:
df:83:cb:a3:3d:9f:f5:d3:5f:ba:ce:b7:96:3f:1c:aa:6b:08:
c3:3d:45:3b:80:3f:d3:24:7f:dc:95:66:18:01:71:bd:4e:19:
6a:a7:1a:a6:c6:f1:b3:de:b4:d9:8d:02:3f:13:4b:c1:b0:77:
94:99:ed:e8:3d:0b:b1:6c:cb:8d:1a:f0:8b:c9:a7:38:c7:4a:
2f:18:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:09 2026 by rpki-client