This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: MxFbSfQ0FJ7sdflX7LTJ+cOC+47Hi5BYYJqTHssDoBI= Subject key identifier: C3:CB:69:99:F1:A2:5A:AB:A2:ED:07:15:92:FA:E7:76:11:7A:A8:6A Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 02DD2B5472B64D56AC6B7F6A502C88C96CE55637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01CE Signing time: Fri 30 Jan 2026 23:12:20 +0000 Manifest this update: Fri 30 Jan 2026 23:07:20 +0000 Manifest next update: Tue 03 Feb 2026 10:17:20 +0000 Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: B5yJ9xoVUUkBKOWIFFCAU70s3XFhUz96BtRULEmOrv0=) 2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: uV29AX6H5ZcI/OEQMA+byDIZQreCcj6pdlz/yG4C4X8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 10:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dd:2b:54:72:b6:4d:56:ac:6b:7f:6a:50:2c:88:c9:6c:e5:56:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Jan 30 23:07:20 2026 GMT Not After : Feb 3 10:17:20 2026 GMT Subject: CN=C3CB6999F1A25AABA2ED071592FAE776117AA86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:49:d7:ba:2a:de:17:ef:a7:c1:b0:ac:19: 7c:1b:b3:72:c3:70:1b:96:04:50:60:89:19:2d:c8: 8d:fe:27:44:af:a8:2e:82:9e:09:bc:2b:70:73:9f: f7:c7:4a:17:20:97:37:1a:02:21:83:ac:59:f1:88: 9d:29:7e:c3:29:81:f3:e9:27:eb:f3:39:df:a7:c4: 8f:e4:36:90:a2:ae:cb:0c:8e:97:26:04:28:a9:56: 13:16:76:b0:d1:3e:ec:8f:fe:76:0d:a9:23:c6:a7: e4:b6:a2:3b:81:89:81:3d:32:83:26:af:9c:a2:f1: a1:c0:68:14:31:5c:72:ab:ce:1d:04:d1:fc:e2:75: 5f:d3:e7:d6:c6:54:bc:5f:e3:f3:ba:1b:86:7f:61: 60:1c:1b:3c:7d:d2:b6:1a:75:3e:01:27:26:81:4c: 01:40:28:b4:42:de:31:20:39:0f:01:f9:a5:1c:34: 1d:71:81:88:a2:77:3c:bb:be:c6:50:53:cb:85:52: a4:20:ea:53:2f:14:c4:68:13:ae:1e:c6:53:af:35: b1:be:4b:75:42:ea:3d:cb:81:c2:21:ad:a0:f4:68: d6:ef:c2:6b:94:b3:07:4e:21:e7:68:35:9f:a8:85: 60:f8:24:47:be:9f:7b:9e:1c:fc:3f:09:92:d5:11: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:69:99:F1:A2:5A:AB:A2:ED:07:15:92:FA:E7:76:11:7A:A8:6A X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3e:33:ea:9e:b6:9a:8e:b5:63:72:6e:ed:af:6e:b0:40:c1: 30:ff:38:05:98:11:6e:46:f3:42:f6:98:37:bd:ff:60:cc:bd: b2:c5:1c:64:87:21:22:87:fc:d4:a9:24:0d:1e:01:2e:6a:78: a7:4b:70:43:d2:4e:4f:bc:d4:17:8f:63:cc:92:71:08:72:cc: 06:05:81:69:5c:7a:25:dc:f0:0e:e5:e5:69:d8:e6:b9:0e:63: 19:e5:ef:bb:ca:08:85:97:cb:28:0b:f4:de:49:5b:7c:d2:b9: cb:99:80:84:26:08:f2:b1:39:8e:34:1d:c7:9d:24:c4:3e:eb: 6c:45:7f:1e:6b:21:5a:51:a5:19:0b:12:24:51:ef:09:53:e4: a4:f4:39:8d:28:e7:7d:3e:5b:08:95:25:24:90:2a:bd:fe:2a: 07:e9:95:78:8f:fd:0f:a9:7e:43:79:8e:9a:6c:93:a2:07:69: 8d:13:36:86:2c:b0:6e:6f:a6:79:a7:db:fa:42:96:d6:aa:71: e8:e7:fa:ab:2a:95:d3:3d:a9:2d:5b:7f:6f:51:88:7b:fd:b7: d3:12:df:a0:85:c5:5b:e2:b9:54:47:55:17:1b:d8:fd:06:e3: 20:52:d0:c9:44:8b:67:eb:fa:84:d6:10:cf:eb:01:22:0b:69: 83:bb:c7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAt0rVHK2TVasa39qUCyIyWzlVjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNjAxMzAyMzA3MjBaFw0yNjAyMDMxMDE3MjBaMDMxMTAvBgNV BAMTKEMzQ0I2OTk5RjFBMjVBQUJBMkVEMDcxNTkyRkFFNzc2MTE3QUE4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8knXuireF++nwbCsGXwbs3LD cBuWBFBgiRktyI3+J0SvqC6Cngm8K3Bzn/fHShcglzcaAiGDrFnxiJ0pfsMpgfPp J+vzOd+nxI/kNpCirssMjpcmBCipVhMWdrDRPuyP/nYNqSPGp+S2ojuBiYE9MoMm r5yi8aHAaBQxXHKrzh0E0fzidV/T59bGVLxf4/O6G4Z/YWAcGzx90rYadT4BJyaB TAFAKLRC3jEgOQ8B+aUcNB1xgYiidzy7vsZQU8uFUqQg6lMvFMRoE64exlOvNbG+ S3VC6j3LgcIhraD0aNbvwmuUswdOIedoNZ+ohWD4JEe+n3ueHPw/CZLVEQsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw8tpmfGiWqui7QcVkvrndhF6qGowHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs+M+qetpqOtWNybu2vbrBAwTD/OAWYEW5G 80L2mDe9/2DMvbLFHGSHISKH/NSpJA0eAS5qeKdLcEPSTk+81BePY8yScQhyzAYF gWlceiXc8A7l5WnY5rkOYxnl77vKCIWXyygL9N5JW3zSucuZgIQmCPKxOY40Hced JMQ+62xFfx5rIVpRpRkLEiRR7wlT5KT0OY0o530+WwiVJSSQKr3+KgfplXiP/Q+p fkN5jppsk6IHaY0TNoYssG5vpnmn2/pCltaqcejn+qsqldM9qS1bf29RiHv9t9MS 36CFxVviuVRHVRcb2P0G4yBS0MlEi2fr+oTWEM/rASILaYO7xyU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:51 2026 by rpki-client