This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: bT8rP7+fChG8LQ2nVIOj/4i6jA/a+P+o/y18xFHNHCI= Subject key identifier: DD:D3:A6:85:DD:10:9A:62:71:7B:AE:F8:E0:0B:D4:92:88:CE:A9:DB Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 48DF0DF20EA2589E8E3D1741241133D04582111E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 01A7 Signing time: Sat 24 Jan 2026 09:50:39 +0000 Manifest this update: Sat 24 Jan 2026 09:45:39 +0000 Manifest next update: Tue 27 Jan 2026 15:40:39 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: IAOQbU6y2iYkh5h9HkXx9CpP9UNLWuYEu3Q0G8pR9Ew=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:df:0d:f2:0e:a2:58:9e:8e:3d:17:41:24:11:33:d0:45:82:11:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Jan 24 09:45:39 2026 GMT Not After : Jan 27 15:40:39 2026 GMT Subject: CN=DDD3A685DD109A62717BAEF8E00BD49288CEA9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:71:a8:5f:c9:4a:08:01:db:1f:c1:f6:da: 9e:d7:2c:b4:fd:a4:e4:b4:2b:f6:33:d1:c1:f8:25: 70:65:81:39:2d:24:ed:64:34:7a:40:a6:7a:53:1c: 84:e0:4d:a7:bd:62:2d:e5:8f:0e:55:e7:33:42:e9: d2:73:9a:23:9d:ab:a9:94:ec:cb:1b:47:f7:bb:78: 64:0a:30:17:40:2e:94:d1:ff:68:34:36:e9:35:f8: 36:dc:59:79:41:58:5d:39:8c:7b:b3:20:0e:6d:99: cd:04:ed:ab:05:6b:b9:20:db:43:2e:6b:f7:63:c6: de:9f:bb:48:b3:40:55:54:6a:ed:b9:e5:bb:8c:a1: 7f:bb:13:5f:29:0b:51:30:f0:2e:a7:46:3d:c0:20: 1b:28:47:a4:f8:5a:94:3d:01:f5:ab:6d:6a:bc:bc: f1:de:c9:22:0a:9d:b3:bb:4c:b6:26:9e:82:05:d2: f7:3c:20:c3:05:78:86:e9:be:61:f2:56:b5:63:12: 3c:2f:9e:5e:e2:26:57:1b:22:f9:ae:d9:b5:03:53: 28:c2:bf:be:b3:09:b2:3b:04:14:ab:5e:ff:44:61: f9:fb:e3:8e:10:96:b9:06:13:e5:7f:f7:dd:1c:e6: cd:e2:a5:62:4d:b5:6c:74:bd:69:18:1b:56:ec:bb: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D3:A6:85:DD:10:9A:62:71:7B:AE:F8:E0:0B:D4:92:88:CE:A9:DB X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:64:6a:b6:ff:f6:0f:32:35:96:b3:8f:44:b6:e6:0c:c8:51: 21:d6:73:4d:ad:09:3a:5f:e9:56:5a:e8:e2:32:14:9e:cf:fd: d9:f7:53:4e:d1:da:4b:21:04:a0:85:df:9f:a1:3b:fe:c6:f2: 46:79:b4:40:bc:4b:c1:17:0f:26:2d:8b:ea:8a:7c:aa:c3:d3: db:fd:60:84:83:66:1b:20:a7:d7:58:cd:28:6f:21:26:4b:f6: 2c:56:3c:0d:3c:da:30:9e:89:34:93:95:b9:a9:c8:c4:22:ca: 72:a8:8a:a4:75:e4:8e:61:8b:ca:68:54:20:00:ac:8d:2f:ad: 8c:a0:bb:2f:a3:b2:f8:87:9e:2b:25:33:21:21:0d:77:e7:e1: 37:0e:1a:92:a0:1c:91:cd:24:e9:91:85:65:1c:63:35:5f:e6: 0a:1e:1f:25:05:3d:c7:70:e9:66:12:5f:c6:99:2a:03:f1:c2: 81:d4:b1:06:3f:81:42:26:ba:b3:d0:c4:bf:3b:51:a4:43:c9: ab:ca:21:43:78:50:6e:4d:5c:e6:2f:7e:cc:a3:c6:bc:67:de: 05:60:b0:25:4f:dc:21:c3:79:e6:5c:0d:59:63:14:fd:44:6c: 37:42:4a:fe:c0:ba:1d:67:52:ef:2f:90:fe:7f:da:22:3b:d6: 8c:b4:35:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSN8N8g6iWJ6OPRdBJBEz0EWCER4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNjAxMjQwOTQ1MzlaFw0yNjAxMjcxNTQwMzlaMDMxMTAvBgNV BAMTKERERDNBNjg1REQxMDlBNjI3MTdCQUVGOEUwMEJENDkyODhDRUE5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKHGoX8lKCAHbH8H22p7XLLT9 pOS0K/Yz0cH4JXBlgTktJO1kNHpApnpTHITgTae9Yi3ljw5V5zNC6dJzmiOdq6mU 7MsbR/e7eGQKMBdALpTR/2g0Nuk1+DbcWXlBWF05jHuzIA5tmc0E7asFa7kg20Mu a/djxt6fu0izQFVUau255buMoX+7E18pC1Ew8C6nRj3AIBsoR6T4WpQ9AfWrbWq8 vPHeySIKnbO7TLYmnoIF0vc8IMMFeIbpvmHyVrVjEjwvnl7iJlcbIvmu2bUDUyjC v76zCbI7BBSrXv9EYfn7444QlrkGE+V/990c5s3ipWJNtWx0vWkYG1bsu29BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dOmhd0QmmJxe6744AvUkojOqdswHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxkarb/9g8yNZazj0S25gzIUSHWc02tCTpf 6VZa6OIyFJ7P/dn3U07R2kshBKCF35+hO/7G8kZ5tEC8S8EXDyYti+qKfKrD09v9 YISDZhsgp9dYzShvISZL9ixWPA082jCeiTSTlbmpyMQiynKoiqR15I5hi8poVCAA rI0vrYyguy+jsviHnislMyEhDXfn4TcOGpKgHJHNJOmRhWUcYzVf5goeHyUFPcdw 6WYSX8aZKgPxwoHUsQY/gUImurPQxL87UaRDyavKIUN4UG5NXOYvfsyjxrxn3gVg sCVP3CHDeeZcDVljFP1EbDdCSv7Auh1nUu8vkP5/2iI71oy0NQk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:16 2026 by rpki-client