This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: G8BB9/OafPFsP14V8aO+kR4euZ8fB19QZ/lUCP4dnqo= Subject key identifier: 07:CD:0B:5B:F2:46:CA:F4:17:E0:2D:A6:36:BE:AB:0B:67:D3:B6:B9 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 1643CD0D12C400C0DDC153B03A38CD45BCFB5315 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0129 Signing time: Tue 20 Jan 2026 16:21:59 +0000 Manifest this update: Tue 20 Jan 2026 16:16:59 +0000 Manifest next update: Fri 23 Jan 2026 17:31:59 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: Rp1QKTv5wCIVnXrOMGk2DoZ/A2kQhJevAY1HMcNgGAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 17:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:43:cd:0d:12:c4:00:c0:dd:c1:53:b0:3a:38:cd:45:bc:fb:53:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Jan 20 16:16:59 2026 GMT Not After : Jan 23 17:31:59 2026 GMT Subject: CN=07CD0B5BF246CAF417E02DA636BEAB0B67D3B6B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:29:c4:dc:2d:ec:b1:9c:59:cd:9c:32:58: 9b:e3:f7:5e:9f:95:93:e4:ee:06:a8:14:48:7a:3f: d9:1f:e7:7f:a2:90:0d:a7:b0:ea:55:78:c3:b1:ae: d2:80:98:13:79:ac:38:78:b6:2f:6b:72:5d:eb:c8: d7:b8:68:27:13:c6:37:55:14:c8:64:77:7f:81:08: ca:05:c8:34:b9:55:2c:1c:a4:34:7d:d8:84:a6:05: cc:af:57:4a:11:9b:f5:b9:58:91:87:73:6d:19:f9: 07:c1:03:57:c8:9f:43:8f:13:08:bf:cc:84:a9:07: 56:a2:7b:2c:5b:b2:e1:8a:bf:27:8e:b8:db:1d:41: fd:93:3c:f4:fb:27:19:f3:05:e4:05:85:c3:6d:9b: 4e:2a:cb:9a:64:e4:49:f3:34:ad:ca:ba:8c:3b:3d: a3:10:db:87:80:ce:48:93:95:97:f0:97:de:77:4e: 96:90:c7:18:f2:cb:74:4e:b7:d1:7f:ee:88:a5:a8: 42:e9:a3:88:f2:25:87:a9:12:86:6c:8e:ea:57:f2: d8:c4:6c:92:d9:bd:ba:00:09:db:c1:0b:5e:a8:2e: a3:ff:ba:e7:18:5d:ab:94:b4:c2:25:0b:91:7f:91: 2b:3a:0a:2a:2a:d2:d4:b2:da:54:82:20:97:66:39: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CD:0B:5B:F2:46:CA:F4:17:E0:2D:A6:36:BE:AB:0B:67:D3:B6:B9 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e2:43:59:eb:18:3e:b8:a3:51:38:1d:f6:a4:b6:79:dc:cf: 0e:f6:8a:a7:ce:02:ff:d8:b1:37:ff:9a:cc:55:00:81:24:d5: e4:98:56:15:e4:3d:f3:75:2d:f8:eb:79:e9:67:f8:2a:d7:93: b5:5c:ec:c3:7d:2e:8b:db:1c:b4:36:7d:6a:f3:5a:41:e4:38: a8:de:97:73:f4:47:bb:4b:db:35:99:dd:fa:73:75:2c:3f:21: bb:04:01:34:9f:72:35:bb:d0:d2:f6:99:b3:9b:68:ed:57:6e: 19:69:f6:a9:95:0b:fc:c1:40:b9:84:b2:c8:0f:fa:90:d4:74: 7a:0f:47:39:21:fd:0b:56:52:15:1c:47:d5:1f:89:6f:38:95: df:49:47:b3:64:a8:54:c1:e5:b5:58:b8:1f:77:5b:58:af:63: 52:11:b9:0b:3e:15:f0:c4:ca:4c:18:17:52:8b:a5:5c:2f:3b: 22:00:df:92:f4:e4:ac:c5:5e:e2:90:7c:90:b3:64:cd:a1:78: ca:5c:cd:b0:8b:5a:0f:63:91:39:f5:4f:46:fe:1b:90:48:d9: 38:43:bc:3f:21:80:a2:16:a3:20:2b:3d:e0:21:9a:f7:57:0a: 81:7e:dd:3f:77:e3:dc:bf:a4:94:cc:c1:d5:b8:92:90:00:27: 44:00:89:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkPNDRLEAMDdwVOwOjjNRbz7UxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNjAxMjAxNjE2NTlaFw0yNjAxMjMxNzMxNTlaMDMxMTAvBgNV BAMTKDA3Q0QwQjVCRjI0NkNBRjQxN0UwMkRBNjM2QkVBQjBCNjdEM0I2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbginE3C3ssZxZzZwyWJvj916f lZPk7gaoFEh6P9kf53+ikA2nsOpVeMOxrtKAmBN5rDh4ti9rcl3ryNe4aCcTxjdV FMhkd3+BCMoFyDS5VSwcpDR92ISmBcyvV0oRm/W5WJGHc20Z+QfBA1fIn0OPEwi/ zISpB1aieyxbsuGKvyeOuNsdQf2TPPT7JxnzBeQFhcNtm04qy5pk5EnzNK3Kuow7 PaMQ24eAzkiTlZfwl953TpaQxxjyy3ROt9F/7oilqELpo4jyJYepEoZsjupX8tjE bJLZvboACdvBC16oLqP/uucYXauUtMIlC5F/kSs6Cioq0tSy2lSCIJdmObRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB80LW/JGyvQX4C2mNr6rC2fTtrkwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIziQ1nrGD64o1E4Hfaktnnczw72iqfOAv/Y sTf/msxVAIEk1eSYVhXkPfN1Lfjreeln+CrXk7Vc7MN9LovbHLQ2fWrzWkHkOKje l3P0R7tL2zWZ3fpzdSw/IbsEATSfcjW70NL2mbObaO1Xbhlp9qmVC/zBQLmEssgP +pDUdHoPRzkh/QtWUhUcR9UfiW84ld9JR7NkqFTB5bVYuB93W1ivY1IRuQs+FfDE ykwYF1KLpVwvOyIA35L05KzFXuKQfJCzZM2heMpczbCLWg9jkTn1T0b+G5BI2ThD vD8hgKIWoyArPeAhmvdXCoF+3T9349y/pJTMwdW4kpAAJ0QAiYQ= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:51 2026 by rpki-client