This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: ALN4KSgmfmP6Ityr0abXRgcLtk+IY6ZwVdYrB0ahAZo= Subject key identifier: D1:24:02:FF:AB:81:93:B1:27:03:C9:6B:62:FF:86:4E:14:E4:9D:79 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 32148063B035455B6D872C2052C6FECCA6B538D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 01C6 Signing time: Sun 01 Feb 2026 14:31:46 +0000 Manifest this update: Sun 01 Feb 2026 14:26:46 +0000 Manifest next update: Thu 05 Feb 2026 00:15:46 +0000 Files and hashes: 1: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: InrImlNizXyRaZ5OSZAbKYKNMEMqIX4WAQ1A/9whx7w=) 2: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: Di9huRCeWBnA52gHxPiLVJ6USXc54eHx478OlzDZBiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 00:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:14:80:63:b0:35:45:5b:6d:87:2c:20:52:c6:fe:cc:a6:b5:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Feb 1 14:26:46 2026 GMT Not After : Feb 5 00:15:46 2026 GMT Subject: CN=D12402FFAB8193B12703C96B62FF864E14E49D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:f8:9c:d6:b6:91:82:c7:74:a0:7d:49:d5: 91:15:cc:04:ec:60:3b:8b:66:d8:0b:b4:5a:67:d3: d4:fb:77:09:13:c6:38:b5:00:98:40:3e:24:10:13: be:fa:85:fe:99:96:73:a6:9e:7d:66:54:3a:2d:7c: e1:97:08:6c:f7:84:af:d8:1a:a2:a0:f0:61:ae:61: 6d:e0:f9:eb:ba:07:9a:bb:60:53:45:54:5e:a7:ab: 65:47:cb:e0:1b:12:a7:05:a3:29:12:68:e5:14:20: b0:a5:16:80:28:97:6b:b1:bb:c9:57:c3:62:b2:8d: ef:fe:90:25:7e:4d:00:2b:d3:4a:95:34:e9:b9:96: 41:a0:1d:51:6c:14:63:4a:61:4c:87:f9:6c:a0:18: 76:92:a6:52:1e:f1:b8:6f:8f:4e:ba:7f:3e:e9:0e: 14:ac:6a:e1:1d:a8:bf:36:31:08:d9:a6:57:3f:66: 5f:f0:50:5a:90:a1:5e:51:9c:fb:c3:26:c6:e7:7c: 05:2b:98:6d:eb:30:06:b6:79:00:ad:d6:8b:76:a4: 13:90:21:b5:dc:15:64:96:f7:93:82:a1:09:6e:71: 27:4a:c8:bd:ef:6e:bb:44:f4:1e:c9:71:8a:87:39: ce:2f:65:bb:ba:c2:7c:a5:de:56:86:8f:b3:b6:a2: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:02:FF:AB:81:93:B1:27:03:C9:6B:62:FF:86:4E:14:E4:9D:79 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:10:60:8c:3c:14:f1:0f:09:93:b7:9b:78:2a:76:ff:85:e3: db:74:1c:bc:99:e6:26:3a:be:7d:65:55:3a:5c:d3:c3:d1:71: 1f:90:2a:ce:77:6f:22:2f:50:3a:d7:40:08:bb:82:02:f6:88: 80:9e:57:6a:da:f6:c3:ce:6e:6f:10:bc:fa:d9:59:ab:dd:b5: 30:cb:58:28:34:c1:a3:dc:c6:c4:48:90:e8:95:bf:ca:12:26: b3:f0:eb:f1:5c:61:19:c2:6e:b4:f8:47:e3:f3:18:c1:c1:e6: 5b:48:0a:a6:ab:d6:dd:ce:71:32:2f:2e:ad:2e:78:52:38:1b: 8f:b0:51:b2:3d:01:de:4e:fc:63:37:cf:8f:39:80:37:f3:40: 7d:d4:b5:f7:e4:b7:cc:30:b0:b3:f7:b4:66:0a:a7:76:4f:62: 33:f6:12:8b:d8:02:37:af:84:f8:5e:cb:51:03:8e:dc:b2:d7: 2c:b1:ac:0d:22:fa:0e:95:66:10:53:d3:ee:19:fa:28:96:49: 9e:9c:ae:a8:8f:72:02:bc:4b:24:c2:d3:f5:bb:43:e2:c1:82: 34:d6:e9:cc:d7:13:35:a6:03:89:19:fc:15:07:6b:79:26:ea: d6:26:6e:44:b4:ba:60:94:e8:f9:c0:06:f2:1a:b8:f9:ad:61: 56:f3:b2:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhSAY7A1RVtthywgUsb+zKa1ONQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNjAyMDExNDI2NDZaFw0yNjAyMDUwMDE1NDZaMDMxMTAvBgNV BAMTKEQxMjQwMkZGQUI4MTkzQjEyNzAzQzk2QjYyRkY4NjRFMTRFNDlENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZPic1raRgsd0oH1J1ZEVzATs YDuLZtgLtFpn09T7dwkTxji1AJhAPiQQE776hf6ZlnOmnn1mVDotfOGXCGz3hK/Y GqKg8GGuYW3g+eu6B5q7YFNFVF6nq2VHy+AbEqcFoykSaOUUILClFoAol2uxu8lX w2Kyje/+kCV+TQAr00qVNOm5lkGgHVFsFGNKYUyH+WygGHaSplIe8bhvj066fz7p DhSsauEdqL82MQjZplc/Zl/wUFqQoV5RnPvDJsbnfAUrmG3rMAa2eQCt1ot2pBOQ IbXcFWSW95OCoQlucSdKyL3vbrtE9B7JcYqHOc4vZbu6wnyl3laGj7O2ossZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SQC/6uBk7EnA8lrYv+GThTknXkwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEQYIw8FPEPCZO3m3gqdv+F49t0HLyZ5iY6 vn1lVTpc08PRcR+QKs53byIvUDrXQAi7ggL2iICeV2ra9sPObm8QvPrZWavdtTDL WCg0waPcxsRIkOiVv8oSJrPw6/FcYRnCbrT4R+PzGMHB5ltICqar1t3OcTIvLq0u eFI4G4+wUbI9Ad5O/GM3z485gDfzQH3Utffkt8wwsLP3tGYKp3ZPYjP2EovYAjev hPhey1EDjtyy1yyxrA0i+g6VZhBT0+4Z+iiWSZ6crqiPcgK8SyTC0/W7Q+LBgjTW 6czXEzWmA4kZ/BUHa3km6tYmbkS0umCU6PnABvIauPmtYVbzssE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:22 2026 by rpki-client