This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: B/bID9u2bicQHHUiHzLR4gMM7Wi/yd3CWFknuDcc42o= Subject key identifier: E9:A4:4D:45:ED:38:26:B4:95:35:27:F1:78:C0:4E:25:C5:66:C8:C1 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 5F456D14D6DCBC19CE9698C75A9EC87606F87C7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: 0134 Signing time: Sat 24 Jan 2026 12:10:02 +0000 Manifest this update: Sat 24 Jan 2026 12:05:02 +0000 Manifest next update: Tue 27 Jan 2026 16:58:02 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: nRBlIqwYXob/oYKswh6G4394N7ssEKCORew/z/9Ka8w=) 2: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: 7Rk0T0rgoDNtM7Iem3qxLyKOW072iqbTqIt4D3TVz+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:45:6d:14:d6:dc:bc:19:ce:96:98:c7:5a:9e:c8:76:06:f8:7c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Jan 24 12:05:02 2026 GMT Not After : Jan 27 16:58:02 2026 GMT Subject: CN=E9A44D45ED3826B4953527F178C04E25C566C8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:65:3d:f3:78:3c:a2:f9:7d:c3:74:d1:d7: 9c:99:f2:96:58:0a:51:8e:b4:cd:3f:70:53:8e:4d: 8f:3f:90:d8:64:5e:d6:b3:b8:6e:62:75:cd:7d:f9: ab:24:38:2d:5a:1a:dd:55:a3:88:9a:4a:3f:a5:fa: 36:fc:f6:eb:f0:26:d8:02:17:f2:06:2a:d3:ce:f0: 57:82:8f:c3:ac:e5:15:82:00:ba:1f:c5:e8:71:28: d9:b1:b1:10:67:ed:51:36:ff:f3:8f:32:00:65:27: 62:a7:43:9d:11:40:9b:21:f4:59:e6:fa:8d:0e:92: e4:92:34:69:18:84:d9:1b:08:aa:f7:62:ec:00:0c: eb:20:06:a8:75:e9:91:d2:3b:48:83:23:b7:c4:86: 8a:af:e8:53:7f:fd:b5:71:b2:10:49:95:9d:bb:18: f2:9f:c4:22:12:1e:17:a8:49:44:28:84:ef:8c:4f: 47:89:db:06:eb:3e:4d:7e:a0:58:6c:13:93:ed:4d: fc:9c:65:27:cd:9f:26:04:89:a0:5d:95:71:d6:2a: ea:24:fd:af:5f:13:0b:ee:62:71:73:5e:48:60:70: 3a:bb:70:7e:0a:e8:5b:06:36:44:a9:17:08:1e:d3: d9:ba:63:44:89:34:90:2f:b0:8c:8a:cb:7f:9e:07: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A4:4D:45:ED:38:26:B4:95:35:27:F1:78:C0:4E:25:C5:66:C8:C1 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f2:5a:ac:8f:dd:7a:9b:cb:94:33:79:81:71:f9:ba:3b:6e: a1:e9:d2:b3:bd:45:8e:c6:0f:7a:8a:9a:e1:d7:51:bf:5d:2a: 8f:a0:8b:f4:cf:1b:a3:05:66:46:fe:a4:a3:98:39:99:47:f8: 00:5f:c6:13:84:bc:75:7d:77:71:e7:88:b5:0d:54:84:97:2c: 37:b9:4d:f2:a8:27:e0:19:d7:59:a9:30:9a:c8:1a:82:a4:b5: 4f:58:07:e6:4f:cd:05:53:4c:00:7e:5c:75:89:42:ab:4b:76: 3e:0d:ac:53:45:c6:6f:7d:07:d2:e3:2a:a3:27:0b:2d:f2:fd: b8:e4:dc:3e:34:56:c7:90:2c:c0:14:78:a0:ea:e5:ef:be:4c: 38:77:e3:29:d4:09:4f:56:77:f3:f0:4b:25:ce:b3:ed:b1:3a: b3:5b:19:e6:a0:b7:01:cf:ce:ce:28:94:13:1f:3b:3b:15:95: ab:11:da:0e:36:78:15:55:2c:a0:79:03:52:5d:b8:4f:77:03: 77:7c:25:e3:38:1d:40:b4:da:80:a8:a6:78:00:77:47:37:cf: 9e:04:a2:ac:cb:2c:57:aa:7d:5a:8a:54:bd:66:26:f1:40:a6: 59:12:39:d6:c6:3c:f2:77:14:73:9a:a4:55:21:a8:b5:28:99: 7a:fe:2c:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0VtFNbcvBnOlpjHWp7Idgb4fHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNjAxMjQxMjA1MDJaFw0yNjAxMjcxNjU4MDJaMDMxMTAvBgNV BAMTKEU5QTQ0RDQ1RUQzODI2QjQ5NTM1MjdGMTc4QzA0RTI1QzU2NkM4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIb2U983g8ovl9w3TR15yZ8pZY ClGOtM0/cFOOTY8/kNhkXtazuG5idc19+askOC1aGt1Vo4iaSj+l+jb89uvwJtgC F/IGKtPO8FeCj8Os5RWCALofxehxKNmxsRBn7VE2//OPMgBlJ2KnQ50RQJsh9Fnm +o0OkuSSNGkYhNkbCKr3YuwADOsgBqh16ZHSO0iDI7fEhoqv6FN//bVxshBJlZ27 GPKfxCISHheoSUQohO+MT0eJ2wbrPk1+oFhsE5PtTfycZSfNnyYEiaBdlXHWKuok /a9fEwvuYnFzXkhgcDq7cH4K6FsGNkSpFwge09m6Y0SJNJAvsIyKy3+eBzlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6aRNRe04JrSVNSfxeMBOJcVmyMEwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnyWqyP3Xqby5QzeYFx+bo7bqHp0rO9RY7G D3qKmuHXUb9dKo+gi/TPG6MFZkb+pKOYOZlH+ABfxhOEvHV9d3HniLUNVISXLDe5 TfKoJ+AZ11mpMJrIGoKktU9YB+ZPzQVTTAB+XHWJQqtLdj4NrFNFxm99B9LjKqMn Cy3y/bjk3D40VseQLMAUeKDq5e++TDh34ynUCU9Wd/PwSyXOs+2xOrNbGeagtwHP zs4olBMfOzsVlasR2g42eBVVLKB5A1JduE93A3d8JeM4HUC02oCopngAd0c3z54E oqzLLFeqfVqKVL1mJvFAplkSOdbGPPJ3FHOapFUhqLUomXr+LB0= -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:50 2026 by rpki-client