This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: 8URj8eD1Ql3XzRPtxXGV1rZkUtPgSIbaVtdVDrjfG3Q= Subject key identifier: E6:7B:B3:C8:EF:FC:28:C4:05:95:50:D3:40:67:69:A6:09:95:8A:AC Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 4AB15B4C1BFCA259FE5FBFB49F68FE6722021D11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01BD Signing time: Sat 24 Jan 2026 02:42:05 +0000 Manifest this update: Sat 24 Jan 2026 02:37:05 +0000 Manifest next update: Tue 27 Jan 2026 14:36:05 +0000 Files and hashes: 1: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: xYoNQ9QrEWde6LcxMCakZrxguK8lRAGNPWJ4tu3j2mc=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 3: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 5: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b1:5b:4c:1b:fc:a2:59:fe:5f:bf:b4:9f:68:fe:67:22:02:1d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Jan 24 02:37:05 2026 GMT Not After : Jan 27 14:36:05 2026 GMT Subject: CN=E67BB3C8EFFC28C4059550D3406769A609958AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:dc:5b:ca:f8:10:70:c4:2c:3b:92:75:fd: 5f:70:d1:eb:6a:9c:d1:ac:45:b9:e5:6c:c1:ff:78: d3:b0:ae:9a:1d:0d:1f:16:8a:e6:13:ab:fc:ef:cb: ab:80:86:57:c9:6d:67:71:af:6c:1d:ca:b6:04:91: b8:f2:cb:fc:78:3c:f6:d4:7d:13:6a:b0:3f:33:51: 29:03:15:68:6d:b4:ef:35:94:19:57:d2:f2:48:ab: 4c:88:e0:e9:58:cd:6e:db:0b:3f:57:b8:d8:3e:8e: 96:86:4c:f9:55:46:e4:50:38:cc:17:c5:eb:f9:6c: 7a:9a:46:24:43:69:3b:7c:26:66:4e:af:31:af:91: 6a:90:f7:8f:dc:58:f7:1f:3f:03:fb:3b:40:1e:8e: f3:aa:7d:33:4c:f1:64:03:ec:c2:b2:e9:13:92:6b: 6a:d9:c1:20:5e:1d:54:f6:45:16:76:87:8d:be:04: d9:4c:79:a4:98:bb:05:d1:04:e1:a0:04:51:db:ec: 77:fc:1c:e7:9c:48:94:c4:52:d9:ad:bb:81:d3:ad: a1:ff:be:e3:05:d3:56:8b:0f:d5:9a:88:2f:0c:e1: b6:ec:2a:66:e7:99:30:da:61:1b:e5:9c:b9:2f:6b: 42:a6:70:d4:7f:00:07:a6:50:2e:8e:56:79:39:70: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7B:B3:C8:EF:FC:28:C4:05:95:50:D3:40:67:69:A6:09:95:8A:AC X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1e:db:a4:42:70:84:46:f9:36:ac:19:50:84:c2:0b:2d:41: 20:fe:e9:41:24:75:bc:45:00:17:3f:a1:5f:60:fb:a5:e3:41: 68:43:df:d1:6b:7e:b1:66:57:a5:e8:58:4e:ff:69:6f:d4:6f: 1c:5c:ab:0e:c9:e3:c1:a5:18:d4:a1:46:c0:5c:95:0c:1b:18: 2e:65:51:a4:7e:d6:d8:5f:d2:d5:3b:c7:64:0f:85:a9:b0:a9: b2:6b:1b:0f:37:be:0c:ab:d9:33:ba:95:68:a7:08:25:1d:64: f5:42:f6:99:2b:6b:ac:02:64:ea:50:e6:85:64:53:9a:18:af: 76:ea:14:79:d5:f5:de:bf:ac:d2:57:7f:a4:fc:8a:ed:0c:d1: 3e:2e:e5:ca:85:2c:ba:e6:e2:dc:d3:25:da:61:c1:2b:9c:82: eb:5e:c0:2d:8b:f8:90:29:3a:96:6c:51:2e:4c:a8:51:f2:30: 89:0f:b6:36:76:f8:8a:dd:58:e5:70:81:8b:c2:3b:e3:c0:23: fa:35:23:e4:98:3e:96:a7:0d:0b:d9:24:8e:4f:a2:6a:7c:08: 23:0e:ac:af:ba:6e:6b:08:73:53:f2:56:79:1d:2c:6d:3c:48: b1:d2:96:8a:60:1f:c3:62:6b:79:19:73:15:2b:fa:a8:7e:3d: 9f:56:8e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrFbTBv8oln+X7+0n2j+ZyICHREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNjAxMjQwMjM3MDVaFw0yNjAxMjcxNDM2MDVaMDMxMTAvBgNV BAMTKEU2N0JCM0M4RUZGQzI4QzQwNTk1NTBEMzQwNjc2OUE2MDk5NThBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFdxbyvgQcMQsO5J1/V9w0etq nNGsRbnlbMH/eNOwrpodDR8WiuYTq/zvy6uAhlfJbWdxr2wdyrYEkbjyy/x4PPbU fRNqsD8zUSkDFWhttO81lBlX0vJIq0yI4OlYzW7bCz9XuNg+jpaGTPlVRuRQOMwX xev5bHqaRiRDaTt8JmZOrzGvkWqQ94/cWPcfPwP7O0AejvOqfTNM8WQD7MKy6ROS a2rZwSBeHVT2RRZ2h42+BNlMeaSYuwXRBOGgBFHb7Hf8HOecSJTEUtmtu4HTraH/ vuMF01aLD9WaiC8M4bbsKmbnmTDaYRvlnLkva0KmcNR/AAemUC6OVnk5cCIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5nuzyO/8KMQFlVDTQGdppgmViqwwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4e26RCcIRG+TasGVCEwgstQSD+6UEkdbxF ABc/oV9g+6XjQWhD39FrfrFmV6XoWE7/aW/Ubxxcqw7J48GlGNShRsBclQwbGC5l UaR+1thf0tU7x2QPhamwqbJrGw83vgyr2TO6lWinCCUdZPVC9pkra6wCZOpQ5oVk U5oYr3bqFHnV9d6/rNJXf6T8iu0M0T4u5cqFLLrm4tzTJdphwSucgutewC2L+JAp OpZsUS5MqFHyMIkPtjZ2+IrdWOVwgYvCO+PAI/o1I+SYPpanDQvZJI5Pomp8CCMO rK+6bmsIc1PyVnkdLG08SLHSlopgH8Nia3kZcxUr+qh+PZ9WjuI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:37 2026 by rpki-client