This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: fv1vmfEUgLaxOvNz4eJ4wVGWNCgHLDq1FxO8qnQUbB0= Subject key identifier: 2B:F0:A3:37:32:27:DD:5D:54:3D:C2:C6:31:89:DC:D6:FE:6D:40:FA Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 2CF764503B108451D06DEBC7158AC7ABBB6FE827 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: 010C Signing time: Sat 24 Jan 2026 12:51:34 +0000 Manifest this update: Sat 24 Jan 2026 12:46:34 +0000 Manifest next update: Tue 27 Jan 2026 20:34:34 +0000 Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) 2: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: kzyz0N3BNevUg1S1rfTLKluHoG9KnqxFY6p53FaJndE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f7:64:50:3b:10:84:51:d0:6d:eb:c7:15:8a:c7:ab:bb:6f:e8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jan 24 12:46:34 2026 GMT Not After : Jan 27 20:34:34 2026 GMT Subject: CN=2BF0A3373227DD5D543DC2C63189DCD6FE6D40FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6d:e8:69:70:6f:5b:39:c5:1b:2f:93:3e:93: e9:39:3e:d8:78:39:48:b2:96:df:fa:b0:93:ab:be: 2b:3a:fe:08:ef:3a:4a:61:cf:c6:c8:38:e5:10:6b: 1c:bc:25:23:04:c2:f3:84:b5:ab:bf:91:9b:77:8e: 3b:95:01:41:c5:86:2e:fa:b2:52:ab:c0:9e:53:7b: a5:7f:84:28:9b:7b:67:31:e0:09:4b:48:c3:60:04: 11:17:dc:a4:05:da:54:5b:11:57:ec:32:ee:92:83: 7e:ca:ac:76:16:28:4a:5a:f8:fd:a9:f1:d9:71:93: 02:89:fa:2a:35:9f:f3:60:63:fe:14:2e:90:fe:95: eb:79:7e:14:33:bd:f0:f3:1b:e6:32:f4:f3:51:88: 71:46:35:ba:ae:8f:c4:20:92:d3:29:81:64:64:71: d2:39:dc:13:72:4b:e4:a3:bb:1e:69:f1:94:15:14: 0f:15:2a:68:57:e7:52:16:af:5f:6e:d2:5b:65:e4: 12:9e:c0:00:5d:ed:cd:9c:20:18:cd:68:b1:5b:81: 4a:09:d6:da:d0:3d:d1:c4:f0:74:60:73:5b:5b:7e: 99:10:b3:f6:26:21:08:40:0d:f8:9d:df:ec:26:1f: 80:60:e0:ac:c4:14:14:d1:63:b0:fa:94:15:a9:41: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:A3:37:32:27:DD:5D:54:3D:C2:C6:31:89:DC:D6:FE:6D:40:FA X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9c:0a:53:e0:85:14:a4:e6:11:64:34:f0:fb:3d:19:30:73: 38:13:28:77:a7:3f:ec:93:df:08:a7:ac:d4:31:5e:2f:53:5c: 35:ad:9c:ea:e0:ad:26:d9:31:17:ef:e0:60:e8:33:6d:b7:93: bc:b9:98:5b:6b:e2:6a:9b:6d:78:75:e1:82:a3:d3:0b:99:5b: 7b:ba:12:c3:d3:5e:2e:09:cb:bd:19:26:f3:58:a9:36:33:aa: b0:5a:c6:f4:53:0f:73:63:37:7e:ad:5b:45:38:bb:92:2a:f7: 7c:0f:09:69:b6:a3:cf:f1:fa:d3:96:a6:bf:b7:f8:a8:fe:41: 2b:8f:5c:af:63:f3:5a:67:56:ce:31:aa:de:bc:ee:b7:59:7c: 6d:a9:9d:b0:4f:7a:39:7f:dd:d1:03:3b:c2:f8:ce:42:9f:8f: bd:a5:71:ab:35:ef:ba:85:5a:f4:69:31:d9:01:5e:09:57:ec: b2:20:4b:48:44:92:50:87:4c:bb:eb:76:ad:ba:88:4b:03:ea: 6e:de:e6:41:fb:58:90:f6:2d:9b:f5:fb:e5:b5:90:92:42:31: 29:5e:62:dd:74:b1:59:89:48:6b:96:a8:15:06:4a:b4:12:d1: 86:64:f2:3a:22:8f:ab:dd:e9:8d:d5:c2:a6:67:db:b0:85:79: e5:9d:44:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPdkUDsQhFHQbevHFYrHq7tv6CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNjAxMjQxMjQ2MzRaFw0yNjAxMjcyMDM0MzRaMDMxMTAvBgNV BAMTKDJCRjBBMzM3MzIyN0RENUQ1NDNEQzJDNjMxODlEQ0Q2RkU2RDQwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0behpcG9bOcUbL5M+k+k5Pth4 OUiylt/6sJOrvis6/gjvOkphz8bIOOUQaxy8JSMEwvOEtau/kZt3jjuVAUHFhi76 slKrwJ5Te6V/hCibe2cx4AlLSMNgBBEX3KQF2lRbEVfsMu6Sg37KrHYWKEpa+P2p 8dlxkwKJ+io1n/NgY/4ULpD+let5fhQzvfDzG+Yy9PNRiHFGNbquj8QgktMpgWRk cdI53BNyS+Sjux5p8ZQVFA8VKmhX51IWr19u0ltl5BKewABd7c2cIBjNaLFbgUoJ 1trQPdHE8HRgc1tbfpkQs/YmIQhADfid3+wmH4Bg4KzEFBTRY7D6lBWpQdUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/CjNzIn3V1UPcLGMYnc1v5tQPowHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWcClPghRSk5hFkNPD7PRkwczgTKHenP+yT 3winrNQxXi9TXDWtnOrgrSbZMRfv4GDoM223k7y5mFtr4mqbbXh14YKj0wuZW3u6 EsPTXi4Jy70ZJvNYqTYzqrBaxvRTD3NjN36tW0U4u5Iq93wPCWm2o8/x+tOWpr+3 +Kj+QSuPXK9j81pnVs4xqt687rdZfG2pnbBPejl/3dEDO8L4zkKfj72lcas177qF WvRpMdkBXglX7LIgS0hEklCHTLvrdq26iEsD6m7e5kH7WJD2LZv1++W1kJJCMSle Yt10sVmJSGuWqBUGSrQS0YZk8joij6vd6Y3VwqZn27CFeeWdRMM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:20 2026 by rpki-client