This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: EMz1BaahczBKNUklcfX5Z4Xes1MpvGYWA8Ix0PrXxK8= Subject key identifier: DB:A9:FB:1C:0D:C0:ED:38:A9:00:39:AF:76:DE:BC:A0:1A:54:9F:89 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 4D14F604423D7438BB0381AF3C57AB927B6E4275 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: 0106 Signing time: Mon 19 Jan 2026 02:51:26 +0000 Manifest this update: Mon 19 Jan 2026 02:46:26 +0000 Manifest next update: Thu 22 Jan 2026 13:01:26 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: X3Js5F1CNLcDDsLF72YZQ3d/ULEOC9QZvn2szVmWuvI=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:14:f6:04:42:3d:74:38:bb:03:81:af:3c:57:ab:92:7b:6e:42:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Jan 19 02:46:26 2026 GMT Not After : Jan 22 13:01:26 2026 GMT Subject: CN=DBA9FB1C0DC0ED38A90039AF76DEBCA01A549F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:0c:de:d4:59:6d:a2:e1:e6:5f:bb:d1:ae: 63:b1:11:f8:c2:4b:2c:03:14:34:d2:d6:99:b4:f6: 4b:1b:60:f3:1e:a9:92:69:ac:76:5e:ad:2e:c5:c6: 09:b3:13:b9:88:25:86:2b:d1:9a:37:ca:11:13:cb: d5:e1:3b:7b:fb:5f:09:47:ce:ab:56:f3:4b:4e:6d: 25:bc:ec:0f:96:b9:1f:19:d2:62:5c:14:72:7f:d2: 3e:44:11:04:b1:61:b9:9e:3d:34:bc:22:6c:77:26: b7:42:35:18:cc:1a:10:f2:43:e3:09:cf:e6:6c:12: 11:2c:68:b1:68:63:04:7d:95:17:73:a0:b9:e6:17: 70:bc:52:21:0c:8e:39:0d:6c:7a:3f:7e:d1:b9:57: d5:49:b0:e9:6f:4b:bd:5f:cd:4c:39:15:22:1d:0b: 7b:a8:2f:9a:8a:12:0f:ea:97:c7:b8:13:d8:90:7e: 24:44:e8:75:54:a9:45:5a:0b:d8:bb:58:ec:56:85: 4c:2d:e6:22:34:43:f9:6f:76:52:4b:9c:d1:4c:0c: 07:ff:44:57:02:ee:85:4a:77:43:d0:03:0f:3b:63: 5a:6f:3e:10:37:e7:d0:d2:0b:ee:76:19:7e:be:4e: 45:e9:3c:2b:4d:e3:0a:ef:a6:f1:8b:72:b3:c2:56: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A9:FB:1C:0D:C0:ED:38:A9:00:39:AF:76:DE:BC:A0:1A:54:9F:89 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1d:9c:08:c4:11:52:c2:1f:15:35:51:96:d5:9e:4c:2f:ea: 7f:6b:94:c6:c8:b5:a0:56:bd:53:2b:5f:77:b3:b4:49:6b:bd: 21:3b:8a:d8:55:d1:a8:d5:db:1f:7f:c3:d2:2e:cc:28:a9:0b: 3a:5f:33:32:ce:50:6b:34:b5:49:35:5c:4b:e9:97:17:83:8f: d1:19:7b:07:2d:77:8d:a9:de:a8:d7:05:3f:ae:48:41:11:e3: 6c:6b:35:9c:ce:64:53:df:bd:ce:53:31:0a:05:10:b3:06:b5: 45:26:1b:76:e5:58:b4:f8:d2:5a:46:48:84:93:d0:15:22:1a: 5f:6b:97:40:74:26:bc:d4:64:18:a7:cc:c5:8f:39:8a:21:18: c6:9b:56:2b:1f:e0:5b:1b:30:14:47:81:ed:47:b9:a4:58:5f: ee:e5:37:71:4d:53:5f:ab:a8:ba:4e:bb:37:de:cf:1d:2a:7f: a0:e8:bc:2a:96:b2:93:9f:3c:12:4e:5f:a9:a9:07:f8:60:7a: 32:3c:8e:40:15:a9:fa:d6:ce:13:8c:fc:93:7d:ab:e6:7b:0a: f6:6b:1b:bf:ce:59:0c:e7:dc:46:3b:dd:8a:56:98:44:8c:39: 69:22:a3:bd:0f:ac:98:ac:82:48:33:93:52:a0:f6:2e:73:de: b2:9a:02:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRT2BEI9dDi7A4GvPFerkntuQnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNjAxMTkwMjQ2MjZaFw0yNjAxMjIxMzAxMjZaMDMxMTAvBgNV BAMTKERCQTlGQjFDMERDMEVEMzhBOTAwMzlBRjc2REVCQ0EwMUE1NDlGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiAze1FltouHmX7vRrmOxEfjC SywDFDTS1pm09ksbYPMeqZJprHZerS7FxgmzE7mIJYYr0Zo3yhETy9XhO3v7XwlH zqtW80tObSW87A+WuR8Z0mJcFHJ/0j5EEQSxYbmePTS8Imx3JrdCNRjMGhDyQ+MJ z+ZsEhEsaLFoYwR9lRdzoLnmF3C8UiEMjjkNbHo/ftG5V9VJsOlvS71fzUw5FSId C3uoL5qKEg/ql8e4E9iQfiRE6HVUqUVaC9i7WOxWhUwt5iI0Q/lvdlJLnNFMDAf/ RFcC7oVKd0PQAw87Y1pvPhA359DSC+52GX6+TkXpPCtN4wrvpvGLcrPCVkrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26n7HA3A7TipADmvdt68oBpUn4kwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0dnAjEEVLCHxU1UZbVnkwv6n9rlMbItaBW vVMrX3eztElrvSE7ithV0ajV2x9/w9IuzCipCzpfMzLOUGs0tUk1XEvplxeDj9EZ ewctd42p3qjXBT+uSEER42xrNZzOZFPfvc5TMQoFELMGtUUmG3blWLT40lpGSIST 0BUiGl9rl0B0JrzUZBinzMWPOYohGMabVisf4FsbMBRHge1HuaRYX+7lN3FNU1+r qLpOuzfezx0qf6DovCqWspOfPBJOX6mpB/hgejI8jkAVqfrWzhOM/JN9q+Z7CvZr G7/OWQzn3EY73YpWmESMOWkio70PrJisgkgzk1Kg9i5z3rKaAjI= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:21 2026 by rpki-client