This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: S3TvycdHDqmFfYB/eThMNsX1/IALmpQH3TNy0iLtwSg= Subject key identifier: 57:C1:92:B1:CB:71:BD:2D:49:3A:56:44:78:89:40:87:7D:81:33:37 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 504D2999790808811B1FBCD6A7C7834AE28FB33A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: AD Signing time: Sun 25 Jan 2026 02:21:54 +0000 Manifest this update: Sun 25 Jan 2026 02:16:54 +0000 Manifest next update: Wed 28 Jan 2026 09:47:54 +0000 Files and hashes: 1: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 9p0fRZPTZcBitKDv/Ff3qr0g0F27xt5vAwhxIzmdswY=) 2: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: djDKwjKoZOlgslhAw2eO2Q/WeA5PTwNOqzL2xmzQZus=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: GqPoKCikWixpTyaRkrl7PIpso4FRMb2kN+4gyGItvwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4d:29:99:79:08:08:81:1b:1f:bc:d6:a7:c7:83:4a:e2:8f:b3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Jan 25 02:16:54 2026 GMT Not After : Jan 28 09:47:54 2026 GMT Subject: CN=57C192B1CB71BD2D493A5644788940877D813337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:4d:29:77:28:15:7d:87:6a:09:bc:70:f6: a8:82:6b:fe:87:4c:86:fe:ec:41:7d:f3:b0:1a:29: b6:e6:42:a0:a9:83:44:f6:94:3c:fb:f0:e2:50:15: 56:76:1e:37:f0:cf:9e:bc:c2:d8:0f:a7:cd:c8:78: 3b:11:cd:6a:a5:91:5a:dc:7d:b4:07:2e:47:6c:9f: 77:04:bb:40:71:04:28:20:6a:95:d2:01:48:47:66: 47:ff:e3:c6:6d:9f:2e:8f:41:bc:32:2e:c0:fb:6d: f4:42:b2:cd:12:81:f9:a0:6f:ea:ab:c1:48:63:de: cb:12:30:a3:30:b6:45:a4:ad:8f:42:91:53:2f:2e: 51:a9:c3:b2:0b:e5:c5:3f:d3:8f:98:ce:16:63:04: 84:d5:70:c6:68:2a:39:0e:c1:e5:a9:75:a1:c0:06: 88:4a:01:02:e4:15:b9:28:bf:a1:62:fd:47:5b:c0: c9:37:df:81:ea:f1:d5:b6:de:22:33:65:17:0f:52: 23:11:3b:d0:c4:03:59:c8:e2:db:1a:9f:10:e7:d9: 25:1f:bd:fa:a9:45:26:a0:c7:5a:01:23:57:2c:84: 54:1a:63:60:0f:40:1c:c0:4f:39:b2:26:a4:5c:1d: 1e:12:07:58:1e:10:f9:c6:d9:74:12:79:8e:fb:04: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C1:92:B1:CB:71:BD:2D:49:3A:56:44:78:89:40:87:7D:81:33:37 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3f:fa:9d:48:3d:ae:53:85:be:9b:a7:6c:4e:e0:be:bc:f0: 7b:40:5a:ec:ac:bb:4d:cf:fc:5d:01:9a:86:74:f9:8f:f6:ba: 2a:72:56:59:50:57:6a:80:40:ab:e9:ae:77:be:68:6a:f0:e0: 91:32:b5:81:0e:9a:77:b0:4b:e6:46:aa:82:53:52:1e:d2:93: 66:9a:d6:5f:e2:dd:e9:99:20:b4:72:c9:b5:1d:de:ee:ad:ce: c3:4a:33:6e:dc:0e:91:df:a0:75:ab:dd:bd:de:26:08:d7:31: 36:f5:e3:5a:dd:aa:d0:70:f2:03:96:d5:f7:73:20:14:86:e4: 27:e6:e0:ce:b3:14:38:23:6d:c2:93:b2:0e:fe:d9:62:4f:96: da:55:db:d8:ed:2a:af:61:e7:00:73:7e:f9:94:8b:20:86:16: b0:d1:b0:15:9d:9a:96:f0:97:94:4a:6a:92:35:86:96:51:d9: 02:4a:f7:80:8b:c2:00:4b:93:4a:3c:3e:2a:da:12:c7:da:86: cd:67:68:6d:08:d5:2f:9a:be:71:a4:34:eb:03:dc:03:ec:ac: 7a:a9:42:f6:98:24:37:82:f4:dc:71:d5:b0:9e:76:7c:ac:2f: b5:5c:5b:a4:11:72:63:b1:99:2e:cd:c8:89:57:1f:5c:bc:3e: 7a:c6:8f:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE0pmXkICIEbH7zWp8eDSuKPszowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNjAxMjUwMjE2NTRaFw0yNjAxMjgwOTQ3NTRaMDMxMTAvBgNV BAMTKDU3QzE5MkIxQ0I3MUJEMkQ0OTNBNTY0NDc4ODk0MDg3N0Q4MTMzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvU0pdygVfYdqCbxw9qiCa/6H TIb+7EF987AaKbbmQqCpg0T2lDz78OJQFVZ2Hjfwz568wtgPp83IeDsRzWqlkVrc fbQHLkdsn3cEu0BxBCggapXSAUhHZkf/48Ztny6PQbwyLsD7bfRCss0Sgfmgb+qr wUhj3ssSMKMwtkWkrY9CkVMvLlGpw7IL5cU/04+YzhZjBITVcMZoKjkOweWpdaHA BohKAQLkFbkov6Fi/UdbwMk334Hq8dW23iIzZRcPUiMRO9DEA1nI4tsanxDn2SUf vfqpRSagx1oBI1cshFQaY2APQBzATzmyJqRcHR4SB1geEPnG2XQSeY77BM+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV8GSsctxvS1JOlZEeIlAh32BMzcwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo/+p1IPa5Thb6bp2xO4L688HtAWuysu03P /F0BmoZ0+Y/2uipyVllQV2qAQKvprne+aGrw4JEytYEOmnewS+ZGqoJTUh7Sk2aa 1l/i3emZILRyybUd3u6tzsNKM27cDpHfoHWr3b3eJgjXMTb141rdqtBw8gOW1fdz IBSG5Cfm4M6zFDgjbcKTsg7+2WJPltpV29jtKq9h5wBzfvmUiyCGFrDRsBWdmpbw l5RKapI1hpZR2QJK94CLwgBLk0o8PiraEsfahs1naG0I1S+avnGkNOsD3APsrHqp QvaYJDeC9Nxx1bCednysL7VcW6QRcmOxmS7NyIlXH1y8PnrGjzE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:05 2026 by rpki-client