This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: m1wI7IMoPjCgn2HOtb/5/XvsmKC5vMnJmDj+q4idrzM= Subject key identifier: 49:F6:7E:6C:FB:90:48:EE:70:08:5D:B7:9A:AE:1F:E5:F7:B6:D9:89 Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 1901F31DB4BD25DCE8D7B80D76B3D2EF557749ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: FC Signing time: Sat 24 Jan 2026 00:42:02 +0000 Manifest this update: Sat 24 Jan 2026 00:37:02 +0000 Manifest next update: Tue 27 Jan 2026 10:59:02 +0000 Files and hashes: 1: 3130332e38312e3131302e302f32342d3234203d3e20313530393538.roa (hash: l+woQG8NGXwscppt3BLv8pY3gFICf9F1+Mc2HYpLxj0=) 2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: yOguTTJn/ofmmFRzNxB5PQD5Wur97XppCIr80azCbnE=) 3: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: BIDljILBNKsrSwzyZxnTSaIaANst4K6p4IMi96hI1tI=) 4: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: Iv86FgbbEQbMpN/EigmzfWUyrv6MKSWRfc+A9mBbZtM=) 5: 3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (hash: CSEyFnNOQdFjnYqiU1M0FD+ncVnXGi/YiRfm0U9hHlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:01:f3:1d:b4:bd:25:dc:e8:d7:b8:0d:76:b3:d2:ef:55:77:49:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: Jan 24 00:37:02 2026 GMT Not After : Jan 27 10:59:02 2026 GMT Subject: CN=49F67E6CFB9048EE70085DB79AAE1FE5F7B6D989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:08:4f:e4:41:a0:6b:31:d9:1d:ed:2f:cf: 8b:43:6b:84:24:0f:ec:2e:67:59:16:d0:b5:7e:aa: fc:d3:91:4c:34:8a:55:56:20:98:2f:2c:ee:5c:1f: 68:b8:49:40:e2:8a:ac:ed:d1:5d:d4:60:d1:a0:e9: bb:95:db:58:40:9c:36:1f:34:9d:cd:dc:c0:b7:ce: f1:d3:63:26:28:cf:08:ec:e7:f8:9c:5a:3c:40:23: 8b:5d:6d:70:f5:47:37:82:1e:b7:c3:9b:fd:53:7b: 55:45:8b:1c:2c:cf:11:2d:30:38:a6:66:5b:d8:e8: f3:85:a0:8c:4d:45:4b:9d:93:1a:9d:e5:60:09:4c: e8:ff:ad:0e:d8:5b:d2:e5:e3:22:04:f9:90:c6:ac: 55:e7:e1:26:67:48:f6:6c:e5:30:32:cf:8c:a4:64: 87:1e:c0:03:fe:8e:29:a6:b7:4d:8e:81:01:a2:ce: 4d:ca:58:4a:c7:08:39:af:a6:4f:74:b5:2d:5c:c8: 23:31:bb:4d:b9:a1:34:12:82:ad:8f:4f:4a:e6:f4: 71:b1:95:61:ae:df:4a:c0:3a:d1:30:2e:e5:6c:17: a8:44:e3:1d:25:82:19:26:43:26:a6:cb:35:b9:96: c0:5f:1a:b7:57:da:24:5c:07:b6:3d:02:22:b2:90: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F6:7E:6C:FB:90:48:EE:70:08:5D:B7:9A:AE:1F:E5:F7:B6:D9:89 X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3a:d1:bd:d2:52:76:dc:f3:2f:c9:4f:a5:be:2b:a3:ec:03: 25:7d:56:69:ff:8f:fc:22:bb:75:82:a2:eb:c4:6a:1d:5f:1a: d7:0d:8f:b8:fd:a8:13:19:b7:de:20:bc:68:f8:af:46:17:4b: b0:90:d7:05:68:af:c9:0a:24:2c:34:19:26:41:9f:d8:61:f7: 56:d9:58:88:b5:c9:f1:08:ae:d3:a2:90:e5:e9:30:2d:7c:94: 39:b7:d4:4c:4f:20:62:55:1c:4a:f6:40:71:a6:1f:35:7d:32: 7f:fd:f6:12:86:15:df:d7:fd:ae:33:73:68:12:bf:a3:3b:45: 1f:bf:ee:85:d3:ec:d7:f4:8b:4b:da:0b:f1:d1:fe:ff:90:c7: bf:80:85:4f:b3:a7:1f:19:7e:c7:3f:a6:ba:f9:7a:ea:0a:12: 49:34:96:16:6e:12:82:80:eb:87:7f:a6:09:ac:f8:2d:bf:78: 35:d1:b8:c4:00:c1:ef:4e:20:8b:0c:ca:d6:14:ac:3f:ac:7d: c6:c2:ab:c6:f5:f0:ed:47:0d:1c:f6:61:95:5d:3e:cf:cd:b5: a9:2d:9d:af:21:f3:08:0f:cf:e2:9a:a9:10:c4:30:90:84:67: 54:46:79:28:7d:63:b7:48:32:c0:19:54:88:10:1c:4e:02:cb: 4e:f0:72:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQHzHbS9Jdzo17gNdrPS71V3Se0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNjAxMjQwMDM3MDJaFw0yNjAxMjcxMDU5MDJaMDMxMTAvBgNV BAMTKDQ5RjY3RTZDRkI5MDQ4RUU3MDA4NURCNzlBQUUxRkU1RjdCNkQ5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhwhP5EGgazHZHe0vz4tDa4Qk D+wuZ1kW0LV+qvzTkUw0ilVWIJgvLO5cH2i4SUDiiqzt0V3UYNGg6buV21hAnDYf NJ3N3MC3zvHTYyYozwjs5/icWjxAI4tdbXD1RzeCHrfDm/1Te1VFixwszxEtMDim ZlvY6POFoIxNRUudkxqd5WAJTOj/rQ7YW9Ll4yIE+ZDGrFXn4SZnSPZs5TAyz4yk ZIcewAP+jimmt02OgQGizk3KWErHCDmvpk90tS1cyCMxu025oTQSgq2PT0rm9HGx lWGu30rAOtEwLuVsF6hE4x0lghkmQyamyzW5lsBfGrdX2iRcB7Y9AiKykOkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSfZ+bPuQSO5wCF23mq4f5fe22YkwHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY60b3SUnbc8y/JT6W+K6PsAyV9Vmn/j/wi u3WCouvEah1fGtcNj7j9qBMZt94gvGj4r0YXS7CQ1wVor8kKJCw0GSZBn9hh91bZ WIi1yfEIrtOikOXpMC18lDm31ExPIGJVHEr2QHGmHzV9Mn/99hKGFd/X/a4zc2gS v6M7RR+/7oXT7Nf0i0vaC/HR/v+Qx7+AhU+zpx8Zfsc/prr5euoKEkk0lhZuEoKA 64d/pgms+C2/eDXRuMQAwe9OIIsMytYUrD+sfcbCq8b18O1HDRz2YZVdPs/Ntakt na8h8wgPz+KaqRDEMJCEZ1RGeSh9Y7dIMsAZVIgQHE4Cy07wcio= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:23 2026 by rpki-client