This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: YSp4Uw8ZJ0L+FyAI38UUdy1xnAkFIqyRmmJHylsraM4= Subject key identifier: B6:D4:5A:D1:16:AC:A8:A3:4F:04:A0:7A:13:13:AC:C9:26:8D:1D:6A Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 7C307BFC93447D112755D2E0D5EF39D8AFBDA36D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 0109 Signing time: Sat 24 Jan 2026 09:32:06 +0000 Manifest this update: Sat 24 Jan 2026 09:27:06 +0000 Manifest next update: Tue 27 Jan 2026 18:00:06 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) 2: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) 3: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: n3pjM1yp7WBYIQs/8Z9h2ZfwVmsWXGsMhynPRgQmkNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:30:7b:fc:93:44:7d:11:27:55:d2:e0:d5:ef:39:d8:af:bd:a3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Jan 24 09:27:06 2026 GMT Not After : Jan 27 18:00:06 2026 GMT Subject: CN=B6D45AD116ACA8A34F04A07A1313ACC9268D1D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:9e:73:ec:ae:e0:52:b7:b5:c0:3d:67:1e: 2e:e4:59:3f:08:73:7b:35:f7:9c:43:0e:fa:8c:29: 26:f6:36:8c:10:8f:c8:01:f5:c0:b4:78:60:e0:a4: d8:7e:f1:ff:b9:2d:38:9f:2c:29:6c:96:67:99:e5: 22:4a:db:6e:6d:cb:6e:07:d8:df:8a:31:cc:66:53: 88:dd:14:df:1d:b6:c3:97:5e:dd:2c:b0:76:47:7d: 00:a7:01:79:7a:3c:b8:d2:ff:9f:97:03:43:2e:a6: 63:6b:36:1f:99:48:3b:4f:59:46:c9:72:5b:cb:18: 97:30:08:a6:34:ab:71:66:eb:df:af:45:f8:7c:74: 1c:b4:1a:04:a9:89:fc:01:05:38:be:e2:16:a8:62: 4f:36:f4:54:ef:9a:31:f7:0f:33:39:a6:94:34:21: ae:fe:ac:c7:1b:c2:a4:c9:1b:84:77:65:ce:a4:18: a3:08:9e:b4:04:97:b7:04:d5:af:c6:e8:5a:72:fd: 1a:6c:d3:e7:67:c5:23:be:e0:1e:79:19:04:60:db: 5a:c1:b4:93:7b:e3:44:43:0c:e6:89:33:f7:4b:29: 7c:cb:be:db:12:04:a9:2c:8d:6b:a9:69:f7:03:18: d0:99:b2:2b:ba:66:96:c7:3a:46:61:0f:03:de:b1: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D4:5A:D1:16:AC:A8:A3:4F:04:A0:7A:13:13:AC:C9:26:8D:1D:6A X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:a4:ae:09:fd:9b:a3:71:b3:7d:1d:68:13:7c:2a:4d:a0: 8a:94:f1:46:7d:fe:99:0b:a7:43:13:d4:ca:38:cd:df:36:9f: 28:ab:33:96:f4:16:12:c1:ec:66:1c:51:8a:a0:f1:75:b9:7b: 5c:cf:f9:78:6c:83:66:41:47:b0:32:75:2c:29:fe:67:7c:f0: 87:c8:39:c9:ed:4c:ba:c3:3f:d0:87:d1:4b:70:0a:04:fd:3d: 7e:cd:f4:9d:f6:d4:46:dd:84:e8:d4:30:6b:3f:e8:f8:b2:bb: b9:de:c3:75:dd:cf:4e:8b:c1:ea:81:c5:fe:0e:48:b5:73:a6: db:3e:8e:4a:18:a7:9a:65:87:82:7c:07:96:ec:da:27:e6:62: 1b:d6:96:f7:da:7f:10:2e:98:6e:9e:5e:1b:60:13:7e:a7:3e: 30:c2:97:e2:08:a4:ad:52:a9:d2:e3:45:de:10:95:f9:cc:c3: b6:cd:0d:55:ee:67:cb:5c:15:64:e3:66:45:0c:e5:53:38:3d: d8:0d:19:0e:f7:95:2c:ec:77:d6:e0:00:72:eb:f3:39:38:63: f8:87:16:6a:6e:8f:ae:79:52:3f:14:45:de:22:12:a0:0b:2e: fe:d9:6c:f7:a8:9e:45:bc:07:60:e2:22:73:88:f5:35:6d:fd: 98:4e:0c:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDB7/JNEfREnVdLg1e852K+9o20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNjAxMjQwOTI3MDZaFw0yNjAxMjcxODAwMDZaMDMxMTAvBgNV BAMTKEI2RDQ1QUQxMTZBQ0E4QTM0RjA0QTA3QTEzMTNBQ0M5MjY4RDFENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5Z5z7K7gUre1wD1nHi7kWT8I c3s195xDDvqMKSb2NowQj8gB9cC0eGDgpNh+8f+5LTifLClslmeZ5SJK225ty24H 2N+KMcxmU4jdFN8dtsOXXt0ssHZHfQCnAXl6PLjS/5+XA0MupmNrNh+ZSDtPWUbJ clvLGJcwCKY0q3Fm69+vRfh8dBy0GgSpifwBBTi+4haoYk829FTvmjH3DzM5ppQ0 Ia7+rMcbwqTJG4R3Zc6kGKMInrQEl7cE1a/G6Fpy/Rps0+dnxSO+4B55GQRg21rB tJN740RDDOaJM/dLKXzLvtsSBKksjWupafcDGNCZsiu6ZpbHOkZhDwPesQJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttRa0RasqKNPBKB6ExOsySaNHWowHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAEpK4J/ZujcbN9HWgTfCpNoIqU8UZ9/pkL p0MT1Mo4zd82nyirM5b0FhLB7GYcUYqg8XW5e1zP+Xhsg2ZBR7AydSwp/md88IfI OcntTLrDP9CH0UtwCgT9PX7N9J321EbdhOjUMGs/6Piyu7new3Xdz06LweqBxf4O SLVzpts+jkoYp5plh4J8B5bs2ifmYhvWlvfafxAumG6eXhtgE36nPjDCl+IIpK1S qdLjRd4QlfnMw7bNDVXuZ8tcFWTjZkUM5VM4PdgNGQ73lSzsd9bgAHLr8zk4Y/iH Fmpuj655Uj8URd4iEqALLv7ZbPeonkW8B2DiInOI9TVt/ZhODMk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:20 2026 by rpki-client