This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: L22yMQ52MrG397OhiKDodIh2LSNFTogRvp8BrNVx/vg= Subject key identifier: BC:97:2F:C1:06:F3:B6:7D:EC:16:BC:96:8B:45:AC:E4:73:E2:4D:3D Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 5C437045D5C7E634F3C97633570571E99C5D8CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01FF Signing time: Sun 01 Feb 2026 08:51:33 +0000 Manifest this update: Sun 01 Feb 2026 08:46:33 +0000 Manifest next update: Wed 04 Feb 2026 11:32:33 +0000 Files and hashes: 1: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: QkQTgE+ij4RcU1UGrqrJ0k+GgbtIaHLd5KgmVsmoBY0=) 2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=) 3: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 11:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:43:70:45:d5:c7:e6:34:f3:c9:76:33:57:05:71:e9:9c:5d:8c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Feb 1 08:46:33 2026 GMT Not After : Feb 4 11:32:33 2026 GMT Subject: CN=BC972FC106F3B67DEC16BC968B45ACE473E24D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:8d:f3:79:f1:28:19:c2:8f:77:ec:f1:88: 65:e2:30:82:b5:ce:2d:22:a5:ca:20:84:0c:40:20: f6:f5:32:e1:d9:1a:38:7a:85:35:bc:43:ff:09:46: 82:f6:49:79:c6:5e:43:49:c9:8b:cb:d1:57:64:02: 86:9a:81:5a:ce:16:ba:0e:f3:5e:7d:6c:65:57:f6: d3:27:00:81:4a:85:78:7b:d9:5b:b7:1f:4c:f8:e2: 95:54:03:77:d0:88:74:f0:39:4a:6a:31:8a:1c:3c: c5:08:e1:80:c6:ea:d6:e1:d1:35:b5:fe:74:b1:f1: f5:7f:07:4d:ab:1a:04:b8:90:aa:1d:24:4d:ce:2e: 29:8d:19:f3:ef:66:5f:2b:a1:ed:e2:3e:36:df:4c: 95:5c:76:6b:09:5e:20:91:f2:80:62:81:42:52:0e: 8a:a6:3a:9a:81:cc:9b:64:f0:7f:7f:b2:9e:10:92: 72:23:18:e4:63:33:b8:26:ed:43:4c:17:03:e4:f6: 0a:f6:cf:57:c1:ff:e3:82:04:f1:48:2b:5b:49:43: 9d:3b:5f:ad:c9:90:74:90:90:c3:61:e0:ef:aa:6d: b3:9b:b7:3d:9b:24:9a:b0:dd:4c:18:7d:cc:bc:de: 3d:ed:32:a6:aa:15:9f:f6:d5:de:37:fd:79:c2:38: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:97:2F:C1:06:F3:B6:7D:EC:16:BC:96:8B:45:AC:E4:73:E2:4D:3D X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:30:a1:fa:84:54:c1:37:9d:7a:8b:ef:3a:09:9f:79:bd:a1: 4b:90:2b:f6:e8:e8:ae:96:d9:6f:67:e0:73:04:18:c7:23:6d: a4:aa:78:e1:62:77:28:f9:49:be:a2:a2:d3:60:52:c9:28:fe: 4a:37:10:e4:e1:f3:f9:ca:bc:0e:83:5c:1a:d9:e6:9b:06:8c: 37:df:d9:cc:8d:ee:d4:2c:3f:bb:d7:7a:c4:2c:96:a4:5b:41: d8:ca:49:04:94:76:f6:c2:cd:0b:1c:c0:9c:b8:e9:3f:ae:50: 21:a6:f9:96:3d:ab:e4:98:3d:57:54:78:dc:9b:0c:2e:16:6c: 1b:73:1a:da:d5:01:cd:2d:42:7f:83:c7:5d:47:0b:bb:66:42: 7c:36:3f:22:2e:95:f9:0e:2b:ab:b4:84:5f:3f:05:f7:10:57: 87:8f:9f:09:44:e1:61:10:60:66:8c:52:28:13:77:1a:e6:4c: 02:2b:de:da:e5:07:08:77:e1:69:fb:9f:15:5d:21:94:94:16: f9:95:87:2e:26:8b:c9:67:f3:ed:ec:87:59:dc:17:5d:d9:ba: c4:e8:15:54:99:f6:c4:d6:3e:c4:0f:c8:79:4d:23:d0:bc:5e: 98:a0:50:3c:80:57:fc:47:08:d4:00:cf:40:81:aa:d6:ee:03: 70:b2:90:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXENwRdXH5jTzyXYzVwVx6ZxdjPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNjAyMDEwODQ2MzNaFw0yNjAyMDQxMTMyMzNaMDMxMTAvBgNV BAMTKEJDOTcyRkMxMDZGM0I2N0RFQzE2QkM5NjhCNDVBQ0U0NzNFMjREM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsI3zefEoGcKPd+zxiGXiMIK1 zi0ipcoghAxAIPb1MuHZGjh6hTW8Q/8JRoL2SXnGXkNJyYvL0VdkAoaagVrOFroO 8159bGVX9tMnAIFKhXh72Vu3H0z44pVUA3fQiHTwOUpqMYocPMUI4YDG6tbh0TW1 /nSx8fV/B02rGgS4kKodJE3OLimNGfPvZl8roe3iPjbfTJVcdmsJXiCR8oBigUJS DoqmOpqBzJtk8H9/sp4QknIjGORjM7gm7UNMFwPk9gr2z1fB/+OCBPFIK1tJQ507 X63JkHSQkMNh4O+qbbObtz2bJJqw3UwYfcy83j3tMqaqFZ/21d43/XnCONgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJcvwQbztn3sFryWi0Ws5HPiTT0wHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIwofqEVME3nXqL7zoJn3m9oUuQK/bo6K6W 2W9n4HMEGMcjbaSqeOFidyj5Sb6iotNgUsko/ko3EOTh8/nKvA6DXBrZ5psGjDff 2cyN7tQsP7vXesQslqRbQdjKSQSUdvbCzQscwJy46T+uUCGm+ZY9q+SYPVdUeNyb DC4WbBtzGtrVAc0tQn+Dx11HC7tmQnw2PyIulfkOK6u0hF8/BfcQV4ePnwlE4WEQ YGaMUigTdxrmTAIr3trlBwh34Wn7nxVdIZSUFvmVhy4mi8ln8+3sh1ncF13ZusTo FVSZ9sTWPsQPyHlNI9C8XpigUDyAV/xHCNQAz0CBqtbuA3CykGo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:04 2026 by rpki-client