This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: kEVZUQhKWjn3TZhHkGPjJZDqKtAbymmRdCPjZQ9tEzo= Subject key identifier: 3A:43:45:7A:DD:3D:47:9D:FE:5F:B1:98:F3:B7:B0:E0:68:83:BC:EA Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 6F196C6693FEA658468E0381219CBCB8DEE4D276 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 020E Signing time: Sat 24 Jan 2026 07:51:42 +0000 Manifest this update: Sat 24 Jan 2026 07:46:42 +0000 Manifest next update: Tue 27 Jan 2026 13:25:42 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) 2: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: bCBO5V7r99Llc28JDZCizqiPr673GHCm4JecmRmj55c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:19:6c:66:93:fe:a6:58:46:8e:03:81:21:9c:bc:b8:de:e4:d2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Jan 24 07:46:42 2026 GMT Not After : Jan 27 13:25:42 2026 GMT Subject: CN=3A43457ADD3D479DFE5FB198F3B7B0E06883BCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:66:cc:63:a2:ca:5f:c8:9d:05:dd:f4:f9: 60:b3:b5:03:17:2e:ea:34:2e:de:fc:3d:80:c2:c1: c2:aa:3f:5c:d2:63:3d:7e:97:6d:f1:a8:2e:6f:29: 88:70:fe:7d:b8:40:5e:19:9d:67:21:86:99:e0:0e: 62:65:51:1e:d6:59:51:38:56:1c:55:7e:f2:1a:42: 92:11:03:4d:62:19:e9:14:19:a3:33:eb:5b:f8:cd: 43:d1:68:b0:d7:23:30:28:25:8a:ec:29:42:4d:d8: f0:19:23:61:43:f6:15:5a:79:92:f5:45:e0:3a:76: 1f:6f:dc:ad:02:ef:8b:8c:bc:e2:22:7c:f5:43:a1: 17:97:89:29:57:b3:ce:dc:dd:4f:4a:2c:78:e2:64: 62:ad:28:30:43:f5:6c:c4:76:8f:f0:9a:33:6a:a6: 3e:b4:8e:ad:18:a5:77:ac:50:b1:29:fb:49:77:75: c5:a7:f6:6d:ae:88:29:8a:b6:7f:42:df:56:42:34: cd:fa:15:ff:39:69:4f:29:c3:1a:44:20:52:8c:a5: 1a:20:17:cc:27:af:3e:69:c1:8d:3a:8a:06:e7:75: dc:53:96:59:d8:95:7b:2d:03:b8:65:83:6e:ad:1f: d6:82:e3:c2:65:b1:77:d7:fc:ea:d7:d9:ef:76:b8: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:43:45:7A:DD:3D:47:9D:FE:5F:B1:98:F3:B7:B0:E0:68:83:BC:EA X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:98:59:63:3a:b0:b4:6a:3b:75:45:d5:74:eb:db:4d:a0:77: f5:45:b2:9d:0f:69:84:f1:ae:3c:a8:7a:64:e0:a9:51:4e:08: 9e:27:a0:16:9e:03:72:f4:e5:00:3e:40:61:a1:0e:32:ae:13: 56:73:57:b8:a4:3e:ec:2d:29:b9:79:de:99:a0:c1:9d:1a:13: 06:64:e4:be:1d:c0:a3:78:3d:ec:f8:34:00:a9:2f:74:c5:b3: 2a:96:01:9d:fe:d2:7e:a0:ef:89:11:a9:e4:49:1e:3c:f3:d2: 0d:00:75:93:4e:3c:ff:13:ba:de:3c:56:52:ec:96:52:35:ba: ee:8d:50:0c:40:51:8a:14:7f:e4:4f:9a:39:dd:03:19:15:de: 79:00:b8:0f:1f:ac:e8:87:37:8d:28:1e:80:4b:f1:97:ef:83: e0:b8:16:eb:9d:ab:6b:f3:9a:98:80:f2:63:9e:cc:3d:2d:c0: 81:84:2b:0b:df:e5:2a:5b:87:bf:48:2f:87:e9:2a:16:4e:dc: f0:21:7b:0c:ed:cf:1e:a6:2b:02:3e:f8:4f:e6:86:31:57:53: fa:98:93:ee:00:04:73:e7:f0:6f:0d:27:98:ea:32:68:85:d2: c5:e0:c3:8b:1b:ca:a3:71:72:27:99:39:78:47:b8:d8:e5:32: f6:95:41:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxlsZpP+plhGjgOBIZy8uN7k0nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNjAxMjQwNzQ2NDJaFw0yNjAxMjcxMzI1NDJaMDMxMTAvBgNV BAMTKDNBNDM0NTdBREQzRDQ3OURGRTVGQjE5OEYzQjdCMEUwNjg4M0JDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzGbMY6LKX8idBd30+WCztQMX Luo0Lt78PYDCwcKqP1zSYz1+l23xqC5vKYhw/n24QF4ZnWchhpngDmJlUR7WWVE4 VhxVfvIaQpIRA01iGekUGaMz61v4zUPRaLDXIzAoJYrsKUJN2PAZI2FD9hVaeZL1 ReA6dh9v3K0C74uMvOIifPVDoReXiSlXs87c3U9KLHjiZGKtKDBD9WzEdo/wmjNq pj60jq0YpXesULEp+0l3dcWn9m2uiCmKtn9C31ZCNM36Ff85aU8pwxpEIFKMpRog F8wnrz5pwY06igbnddxTllnYlXstA7hlg26tH9aC48JlsXfX/OrX2e92uLOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkNFet09R53+X7GY87ew4GiDvOowHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmYWWM6sLRqO3VF1XTr202gd/VFsp0PaYTx rjyoemTgqVFOCJ4noBaeA3L05QA+QGGhDjKuE1ZzV7ikPuwtKbl53pmgwZ0aEwZk 5L4dwKN4Pez4NACpL3TFsyqWAZ3+0n6g74kRqeRJHjzz0g0AdZNOPP8Tut48VlLs llI1uu6NUAxAUYoUf+RPmjndAxkV3nkAuA8frOiHN40oHoBL8Zfvg+C4Fuudq2vz mpiA8mOezD0twIGEKwvf5Spbh79IL4fpKhZO3PAhewztzx6mKwI++E/mhjFXU/qY k+4ABHPn8G8NJ5jqMmiF0sXgw4sbyqNxcieZOXhHuNjlMvaVQRE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:40 2026 by rpki-client