This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: aw9fsZbGZBtvHdM7Y/TQDXAvEK40QOkbd2jX1yG6j+Y= Subject key identifier: 0F:73:74:7D:4D:0A:2F:E1:A2:BD:70:47:21:73:FB:2C:1B:B5:CB:E6 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 2EC12C6A96285089CAFCAE6E62FFB85D53A568E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 01A8 Signing time: Mon 02 Feb 2026 01:10:45 +0000 Manifest this update: Mon 02 Feb 2026 01:05:45 +0000 Manifest next update: Thu 05 Feb 2026 04:57:45 +0000 Files and hashes: 1: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) 2: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: ATOMw5r5ebIzcKBBEtQGtlYpwveXPdEBQOxAwkw8Dis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c1:2c:6a:96:28:50:89:ca:fc:ae:6e:62:ff:b8:5d:53:a5:68:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Feb 2 01:05:45 2026 GMT Not After : Feb 5 04:57:45 2026 GMT Subject: CN=0F73747D4D0A2FE1A2BD70472173FB2C1BB5CBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:9d:ed:2c:b5:05:4e:76:68:8e:16:17:e0: 26:d5:66:3b:b7:3e:3f:3c:f0:6b:e5:9d:70:41:c5: 98:cd:8e:84:75:6e:6e:37:f6:2b:b9:92:d0:0a:5a: a2:d2:da:1b:17:32:ae:94:8d:d1:4e:3b:b6:85:b0: cf:b9:c6:e1:f5:2d:0c:56:84:39:f5:b3:f8:e6:e0: ce:c1:28:3c:10:22:e0:a8:6f:c9:80:fa:f4:f1:6b: 9e:61:a8:58:41:13:b7:57:9d:d2:7a:96:68:ee:6a: 9c:33:e7:4c:ed:3a:b3:2b:b6:3e:9f:9f:a3:3c:3f: 6d:fb:f4:2d:f7:a5:bc:11:18:0a:8f:cf:54:44:ad: e7:64:53:b5:d6:db:f9:5b:13:9f:02:2e:0f:b6:2c: 8b:c6:2d:ff:64:92:18:c1:18:0f:c8:4f:7a:85:da: 76:f8:a2:64:12:66:fb:d6:20:04:f7:20:41:7f:79: 1d:93:df:a3:5f:35:97:a1:5d:b3:d0:da:e3:9b:b1: 71:fe:43:84:44:f7:31:fe:da:d2:6f:78:50:23:e9: ea:e9:ba:2c:b0:4b:31:c4:cf:62:6f:dc:b2:83:9f: 90:87:9b:ed:b3:40:0e:1c:a9:34:8a:45:de:fd:33: 04:3f:58:6e:63:7b:28:eb:cb:5a:62:e4:10:77:ea: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:73:74:7D:4D:0A:2F:E1:A2:BD:70:47:21:73:FB:2C:1B:B5:CB:E6 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0f:d2:1e:7b:c0:88:4b:99:69:0b:5a:11:2e:72:9e:b2:1c: 80:6e:a9:db:45:40:88:bc:ec:a8:66:34:01:b3:15:5b:e2:4a: 8e:3d:09:5d:01:cf:be:a0:9e:7e:d2:c3:a7:36:f9:3c:9c:2c: c0:85:ce:d0:c6:30:db:86:28:e8:fb:9c:99:2d:bc:8e:1b:64: 7b:f0:9c:77:14:da:cc:5c:b7:b5:f1:ce:d4:10:c5:df:71:f4: fe:2a:5d:18:38:65:7a:80:2b:9e:68:b0:1a:64:bb:12:5f:ca: b9:3d:96:e9:e7:12:b9:9d:be:f8:0b:ab:92:2e:95:d1:90:24: a4:1d:f8:41:c0:bb:a4:d2:05:ef:c8:33:b0:ea:50:c7:73:90: c8:d4:a8:9f:ce:60:94:75:4e:6f:2c:28:a2:d8:63:e5:f7:52: 36:6a:8b:c3:93:c0:72:38:03:06:fa:bf:3d:0e:a5:66:e2:a2: 61:db:70:78:3b:63:bd:c7:c1:70:9e:17:85:26:22:96:3b:d8: 36:9e:73:62:c6:19:33:78:9d:d1:41:e6:ac:3e:ea:da:21:63: ba:d5:f3:cd:a9:b8:01:f9:89:20:9e:e5:1e:91:a4:54:83:89: 73:ef:51:b6:40:18:58:30:8f:b6:d2:2b:f9:65:40:39:66:a5: fa:26:ef:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsEsapYoUInK/K5uYv+4XVOlaOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNjAyMDIwMTA1NDVaFw0yNjAyMDUwNDU3NDVaMDMxMTAvBgNV BAMTKDBGNzM3NDdENEQwQTJGRTFBMkJENzA0NzIxNzNGQjJDMUJCNUNCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4J3tLLUFTnZojhYX4CbVZju3 Pj888GvlnXBBxZjNjoR1bm439iu5ktAKWqLS2hsXMq6UjdFOO7aFsM+5xuH1LQxW hDn1s/jm4M7BKDwQIuCob8mA+vTxa55hqFhBE7dXndJ6lmjuapwz50ztOrMrtj6f n6M8P2379C33pbwRGAqPz1REredkU7XW2/lbE58CLg+2LIvGLf9kkhjBGA/IT3qF 2nb4omQSZvvWIAT3IEF/eR2T36NfNZehXbPQ2uObsXH+Q4RE9zH+2tJveFAj6erp uiywSzHEz2Jv3LKDn5CHm+2zQA4cqTSKRd79MwQ/WG5jeyjry1pi5BB36ut7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3N0fU0KL+GivXBHIXP7LBu1y+YwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwP0h57wIhLmWkLWhEucp6yHIBuqdtFQIi8 7KhmNAGzFVviSo49CV0Bz76gnn7Sw6c2+TycLMCFztDGMNuGKOj7nJktvI4bZHvw nHcU2sxct7XxztQQxd9x9P4qXRg4ZXqAK55osBpkuxJfyrk9lunnErmdvvgLq5Iu ldGQJKQd+EHAu6TSBe/IM7DqUMdzkMjUqJ/OYJR1Tm8sKKLYY+X3UjZqi8OTwHI4 Awb6vz0OpWbiomHbcHg7Y73HwXCeF4UmIpY72Daec2LGGTN4ndFB5qw+6tohY7rV 882puAH5iSCe5R6RpFSDiXPvUbZAGFgwj7bSK/llQDlmpfom798= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:18 2026 by rpki-client