This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: K6PFLZmkWi3E3wnXNdsYp8cT9qYggCGyyvWoKXbXtI4= Subject key identifier: 42:4F:1C:8F:EE:84:28:9A:15:97:24:1B:13:9A:23:60:6A:85:96:A5 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 014DB89C41547A432109A9775A1A262D1B1E478F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 01B7 Signing time: Sun 25 Jan 2026 04:21:44 +0000 Manifest this update: Sun 25 Jan 2026 04:16:44 +0000 Manifest next update: Wed 28 Jan 2026 05:38:44 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: jI1p/OHabhOeOLM7z8m8/G63bgBLbK+g6GnZax82d4s=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 05:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4d:b8:9c:41:54:7a:43:21:09:a9:77:5a:1a:26:2d:1b:1e:47:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Jan 25 04:16:44 2026 GMT Not After : Jan 28 05:38:44 2026 GMT Subject: CN=424F1C8FEE84289A1597241B139A23606A8596A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:ee:a9:1d:1c:3a:ac:42:f5:eb:51:e7:19: 1f:89:60:87:fd:d9:09:fc:e1:85:52:b5:e3:7f:b5: a6:e3:c1:59:4b:62:27:f0:40:c9:01:3e:52:05:08: 3d:da:42:08:bc:42:b6:b7:ac:91:3d:24:dc:31:7b: 20:a9:aa:8c:82:d5:a4:ab:24:46:1f:0b:3a:72:93: 24:7a:b6:ba:b3:24:a8:30:83:66:8c:70:6b:70:3d: 9e:11:b5:b0:a4:14:71:ec:d0:aa:a8:16:54:dc:3d: b2:14:f0:f9:44:25:5d:f4:4d:85:6a:5c:50:ea:b2: c0:7b:d3:3f:05:8c:d4:5e:cf:dd:5f:10:26:14:f7: d9:49:ed:54:b2:fd:ad:55:6a:60:f1:49:06:ab:7c: cf:45:78:05:48:7c:4d:d5:cf:97:63:da:03:9c:ab: 4b:c2:f3:0b:7c:a6:34:4c:7d:70:3a:6e:25:da:6c: f5:8e:12:ac:cf:18:eb:58:be:4b:52:60:9a:e5:4a: d4:bd:5a:60:70:33:ff:1c:54:05:48:fd:70:ad:01: c9:fd:2f:fb:6d:ac:4e:d3:10:6c:48:85:26:0b:de: 7f:83:2d:47:04:5c:21:87:57:05:3a:36:c1:10:95: 99:6b:67:b6:04:f2:43:3e:24:8c:78:30:6f:40:c2: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:1C:8F:EE:84:28:9A:15:97:24:1B:13:9A:23:60:6A:85:96:A5 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:f8:86:38:83:5e:10:fb:07:a9:96:47:88:e6:09:17:d5: 3d:2e:fe:ee:f4:b2:92:52:50:a4:39:2b:47:d8:22:2f:0d:59: e2:4e:e7:85:85:04:56:2a:10:7e:a4:7c:dc:75:ae:48:4f:e6: 8c:53:95:09:4f:df:6a:6a:ad:b7:7b:d5:2d:fa:0d:50:16:80: 8a:92:1d:79:a8:d5:18:ce:02:55:cd:3a:b5:36:2f:e7:66:88: 78:bc:a9:04:c9:af:31:46:ed:97:2d:ee:22:45:22:cd:17:d9: f7:f8:c5:eb:ff:c8:22:10:5b:62:f8:ab:0b:ff:5e:72:ee:3f: 7f:04:15:06:b0:9c:8b:9d:40:f3:a7:42:96:dc:e5:85:a3:7b: 9e:77:c9:5e:8e:25:30:15:03:57:46:c2:5d:0e:ee:0f:23:d8: 05:de:4d:ae:cb:cc:c0:6b:c9:c8:02:4b:d4:12:57:12:ac:a6: ad:97:ec:bb:6a:32:11:99:a2:b8:a0:cd:b2:53:b3:81:c2:6c: 3c:79:da:21:89:f9:37:0f:a3:99:0c:1f:88:78:8f:b4:b1:9b: 2c:41:d2:86:4a:78:5d:3a:4e:ba:13:7d:e0:34:35:45:cb:2d: 85:40:97:7f:92:9b:77:99:61:a5:3d:d7:47:9a:02:69:f6:43: f0:d0:02:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAU24nEFUekMhCal3WhomLRseR48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNjAxMjUwNDE2NDRaFw0yNjAxMjgwNTM4NDRaMDMxMTAvBgNV BAMTKDQyNEYxQzhGRUU4NDI4OUExNTk3MjQxQjEzOUEyMzYwNkE4NTk2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRO6pHRw6rEL161HnGR+JYIf9 2Qn84YVSteN/tabjwVlLYifwQMkBPlIFCD3aQgi8Qra3rJE9JNwxeyCpqoyC1aSr JEYfCzpykyR6trqzJKgwg2aMcGtwPZ4RtbCkFHHs0KqoFlTcPbIU8PlEJV30TYVq XFDqssB70z8FjNRez91fECYU99lJ7VSy/a1VamDxSQarfM9FeAVIfE3Vz5dj2gOc q0vC8wt8pjRMfXA6biXabPWOEqzPGOtYvktSYJrlStS9WmBwM/8cVAVI/XCtAcn9 L/ttrE7TEGxIhSYL3n+DLUcEXCGHVwU6NsEQlZlrZ7YE8kM+JIx4MG9AwosXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQk8cj+6EKJoVlyQbE5ojYGqFlqUwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO1+IY4g14Q+weplkeI5gkX1T0u/u70spJS UKQ5K0fYIi8NWeJO54WFBFYqEH6kfNx1rkhP5oxTlQlP32pqrbd71S36DVAWgIqS HXmo1RjOAlXNOrU2L+dmiHi8qQTJrzFG7Zct7iJFIs0X2ff4xev/yCIQW2L4qwv/ XnLuP38EFQawnIudQPOnQpbc5YWje553yV6OJTAVA1dGwl0O7g8j2AXeTa7LzMBr ycgCS9QSVxKspq2X7LtqMhGZorigzbJTs4HCbDx52iGJ+TcPo5kMH4h4j7SxmyxB 0oZKeF06TroTfeA0NUXLLYVAl3+Sm3eZYaU910eaAmn2Q/DQAh4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:34 2026 by rpki-client