This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: U/+ds8QgZO/go47upRje/KGRLuQcqf2s3on0ccedDDQ= Subject key identifier: 6A:6F:40:2C:A4:01:43:47:47:5A:62:62:5E:79:35:6A:BD:7C:53:7A Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 7C8E0D2FC122524D8B4FF257F1641B862301AB1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 0205 Signing time: Sun 25 Jan 2026 09:11:40 +0000 Manifest this update: Sun 25 Jan 2026 09:06:40 +0000 Manifest next update: Wed 28 Jan 2026 09:24:40 +0000 Files and hashes: 1: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: rRSfiBjnuqaXmeGlgqyS2swp96y61n2l6ArOam7v/bg=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8e:0d:2f:c1:22:52:4d:8b:4f:f2:57:f1:64:1b:86:23:01:ab:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Jan 25 09:06:40 2026 GMT Not After : Jan 28 09:24:40 2026 GMT Subject: CN=6A6F402CA4014347475A62625E79356ABD7C537A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:58:46:c3:c0:76:99:52:4e:73:4f:ca:a3: dc:6b:ab:57:73:52:ab:45:6b:73:6a:b0:b5:54:96: da:ca:27:d3:2e:d4:0f:eb:9a:58:85:f3:7d:f3:76: fb:43:40:ed:0a:14:90:c9:fd:5d:91:03:67:0a:cc: df:6c:ee:81:c2:fb:9f:17:77:3a:5b:6b:20:17:40: de:6f:ea:4d:2d:ff:a8:57:cd:1a:e1:c3:d6:52:4d: 79:2e:40:f2:73:bb:19:94:68:d6:4c:85:90:7c:3f: fb:72:ea:d3:8f:4b:98:6a:be:0b:ab:f9:79:b3:5a: d8:fc:60:15:fb:55:f4:c7:83:0e:19:5b:26:8d:f6: 92:de:71:7d:04:fc:03:8f:04:3f:bd:0f:f5:7e:c2: 06:b9:8a:22:94:98:1a:7f:72:2a:9b:c9:47:dc:fb: 8d:6f:1b:6e:2d:c8:21:40:ca:96:28:d4:d8:4c:44: 84:02:91:47:f2:7c:ed:0c:d2:38:86:ba:5a:5b:e5: c7:a7:f0:d6:0a:17:90:c4:f3:93:ef:0b:d0:a6:1f: 02:ad:a0:91:35:0a:c5:f3:c5:e7:a2:f9:6f:37:bc: 0c:78:57:bc:2a:03:92:c2:1f:fb:03:8e:d4:7b:c6: ae:9d:c8:50:41:ae:d1:be:cf:23:ab:65:98:34:b5: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:40:2C:A4:01:43:47:47:5A:62:62:5E:79:35:6A:BD:7C:53:7A X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:11:83:43:f0:83:a3:55:83:f8:a8:b9:13:29:08:5c:63:19: f9:bb:54:39:f9:8c:72:f8:d3:cb:f9:ca:97:fa:11:40:d8:0d: d2:00:16:47:fe:4d:a8:68:10:06:74:09:46:08:aa:19:c2:f5: 3b:92:f7:c0:27:f6:77:91:a2:26:4b:d5:92:ef:1b:c6:49:d1: a8:e0:93:b4:60:bd:f1:77:86:3c:52:76:f0:03:65:a4:f4:5e: 4f:8a:3a:e1:bc:1d:bb:ce:80:b5:cf:c8:94:f0:69:28:7f:5b: 95:a1:10:c0:be:47:03:fb:32:c0:07:55:50:95:14:b2:61:43: 7b:92:77:ad:70:1b:61:d5:da:6b:2a:15:12:20:c4:55:94:cc: ba:5e:f9:74:38:b3:d4:ce:8e:6c:fe:28:2d:74:71:24:5b:b5: c5:6a:20:c8:91:7d:03:93:cc:82:5c:d7:1e:b5:09:8e:03:4d: 1b:19:99:98:b9:60:73:3a:ed:b7:d2:8e:c7:4b:89:4d:1b:1f: 64:54:90:4d:a9:4a:cd:a3:e2:c9:34:44:f1:2a:ec:cf:da:2a: 27:eb:c6:51:2c:36:81:4f:5d:63:ee:3e:0c:7c:ee:df:67:b4: 99:02:e9:79:82:e7:c6:9b:65:ef:3c:5f:60:ca:0b:c6:d4:55: 70:e0:a4:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfI4NL8EiUk2LT/JX8WQbhiMBqx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNjAxMjUwOTA2NDBaFw0yNjAxMjgwOTI0NDBaMDMxMTAvBgNV BAMTKDZBNkY0MDJDQTQwMTQzNDc0NzVBNjI2MjVFNzkzNTZBQkQ3QzUzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0VhGw8B2mVJOc0/Ko9xrq1dz UqtFa3NqsLVUltrKJ9Mu1A/rmliF833zdvtDQO0KFJDJ/V2RA2cKzN9s7oHC+58X dzpbayAXQN5v6k0t/6hXzRrhw9ZSTXkuQPJzuxmUaNZMhZB8P/ty6tOPS5hqvgur +XmzWtj8YBX7VfTHgw4ZWyaN9pLecX0E/AOPBD+9D/V+wga5iiKUmBp/ciqbyUfc +41vG24tyCFAypYo1NhMRIQCkUfyfO0M0jiGulpb5cen8NYKF5DE85PvC9CmHwKt oJE1CsXzxeei+W83vAx4V7wqA5LCH/sDjtR7xq6dyFBBrtG+zyOrZZg0tU8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUam9ALKQBQ0dHWmJiXnk1ar18U3owHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcRg0Pwg6NVg/iouRMpCFxjGfm7VDn5jHL4 08v5ypf6EUDYDdIAFkf+TahoEAZ0CUYIqhnC9TuS98An9neRoiZL1ZLvG8ZJ0ajg k7RgvfF3hjxSdvADZaT0Xk+KOuG8HbvOgLXPyJTwaSh/W5WhEMC+RwP7MsAHVVCV FLJhQ3uSd61wG2HV2msqFRIgxFWUzLpe+XQ4s9TOjmz+KC10cSRbtcVqIMiRfQOT zIJc1x61CY4DTRsZmZi5YHM67bfSjsdLiU0bH2RUkE2pSs2j4sk0RPEq7M/aKifr xlEsNoFPXWPuPgx87t9ntJkC6XmC58abZe88X2DKC8bUVXDgpB0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:48 2026 by rpki-client