This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: RKdRPSxzRgBS9dEgWLDGtg53RDJCXt8kwK9DyFgt9Ks= Subject key identifier: AA:21:AA:1E:02:13:A8:05:80:BD:F6:76:3E:55:03:DC:23:76:08:71 Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 7BA9BD49B7B3B7E5971A33EB33342816F73BE061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 01A5 Signing time: Sun 25 Jan 2026 05:22:32 +0000 Manifest this update: Sun 25 Jan 2026 05:17:32 +0000 Manifest next update: Wed 28 Jan 2026 12:03:32 +0000 Files and hashes: 1: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: JLMfwGdPmo7mJFcssT4bRYHEJkdhEzmEc1BSmK7S0Uo=) 3: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) 4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:bd:49:b7:b3:b7:e5:97:1a:33:eb:33:34:28:16:f7:3b:e0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Jan 25 05:17:32 2026 GMT Not After : Jan 28 12:03:32 2026 GMT Subject: CN=AA21AA1E0213A80580BDF6763E5503DC23760871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:16:b5:e1:0e:fb:4a:3c:3c:99:bc:76:35: 51:09:53:c6:e6:fa:d1:b1:16:2e:b5:e0:11:89:d1: e9:4d:92:e0:a7:56:d5:90:5e:22:9a:bb:b9:0f:77: 9b:46:ed:2b:b1:f7:e1:34:4c:ee:ff:07:2a:59:6b: ae:93:1d:9d:6c:96:14:6a:7a:b2:4d:98:fa:97:6c: f9:37:80:76:50:e4:e3:d5:a6:37:0b:99:22:bf:3f: 42:b2:b9:34:93:10:40:e5:9c:ad:17:e0:53:34:14: 43:a4:9e:dc:7f:bd:6f:63:fe:f1:42:0e:d3:13:5f: 8f:86:af:44:ba:98:37:66:73:c2:cd:c1:3b:4c:52: 10:14:fb:60:39:e0:0f:14:71:a8:39:a3:73:4c:c0: 9d:e4:e5:56:91:8d:ef:11:fe:02:88:9e:27:18:6b: 0a:d9:3c:05:db:ac:7f:04:e8:ac:2c:62:ed:9c:01: c6:59:8b:a0:28:04:5e:d1:70:13:c8:0c:70:f3:88: 8e:2d:4f:7b:86:61:f1:2f:31:fb:33:9f:af:7d:5d: 06:62:be:7c:d6:76:e2:c2:4f:61:4a:c2:5e:ef:d2: 64:46:24:c5:03:f7:56:d6:98:35:c7:3b:38:32:c2: fb:7a:57:4a:2c:07:11:1a:18:e5:8c:2b:21:9e:9d: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:21:AA:1E:02:13:A8:05:80:BD:F6:76:3E:55:03:DC:23:76:08:71 X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2b:1f:d6:da:e3:ba:8f:17:ea:97:38:11:c7:cf:5d:fc:a1: 0b:7b:e3:c1:11:c5:e4:3d:ff:7c:bd:35:ed:ab:f6:4b:02:f9: 8f:d9:94:fa:d4:eb:51:82:28:ed:75:dd:d9:1d:3b:ce:12:6e: a2:57:b4:09:55:5c:59:d6:d4:20:f9:36:90:67:ff:99:57:1b: 1e:a1:e6:2a:0f:9f:98:b8:22:ba:7f:bf:6f:70:b2:1c:cb:f1: 35:df:84:14:89:61:cf:90:76:d2:2b:2e:5a:96:f7:02:ba:c4: 00:63:58:9c:6b:80:32:20:11:ed:f5:69:55:29:e5:8c:37:9c: f8:37:45:ad:c0:2d:74:de:2e:e6:40:b7:cc:4f:95:70:b8:09: 1a:3e:19:51:e9:59:7d:2f:14:05:87:64:fa:72:bb:0a:af:5e: 83:86:cf:40:23:8d:7e:f3:d0:27:6c:21:a8:6a:7e:ae:70:06: 8e:27:c9:06:6a:cf:be:12:04:2e:58:b6:78:3e:16:0f:6b:f3: e8:64:6f:8d:6c:2d:7e:b2:ff:22:4d:5a:5c:ef:0c:d6:28:10: 56:25:38:d1:19:a4:ac:aa:36:0d:0b:44:a7:db:59:5c:6d:84: 98:0a:a6:95:be:d4:db:f1:ca:01:ed:53:67:10:22:25:ba:ef: 6c:b9:a8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6m9Sbezt+WXGjPrMzQoFvc74GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNjAxMjUwNTE3MzJaFw0yNjAxMjgxMjAzMzJaMDMxMTAvBgNV BAMTKEFBMjFBQTFFMDIxM0E4MDU4MEJERjY3NjNFNTUwM0RDMjM3NjA4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0xa14Q77Sjw8mbx2NVEJU8bm +tGxFi614BGJ0elNkuCnVtWQXiKau7kPd5tG7Sux9+E0TO7/BypZa66THZ1slhRq erJNmPqXbPk3gHZQ5OPVpjcLmSK/P0KyuTSTEEDlnK0X4FM0FEOkntx/vW9j/vFC DtMTX4+Gr0S6mDdmc8LNwTtMUhAU+2A54A8Ucag5o3NMwJ3k5VaRje8R/gKInicY awrZPAXbrH8E6KwsYu2cAcZZi6AoBF7RcBPIDHDziI4tT3uGYfEvMfszn699XQZi vnzWduLCT2FKwl7v0mRGJMUD91bWmDXHOzgywvt6V0osBxEaGOWMKyGenaSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqiGqHgITqAWAvfZ2PlUD3CN2CHEwHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYrH9ba47qPF+qXOBHHz138oQt748ERxeQ9 /3y9Ne2r9ksC+Y/ZlPrU61GCKO113dkdO84SbqJXtAlVXFnW1CD5NpBn/5lXGx6h 5ioPn5i4Irp/v29wshzL8TXfhBSJYc+QdtIrLlqW9wK6xABjWJxrgDIgEe31aVUp 5Yw3nPg3Ra3ALXTeLuZAt8xPlXC4CRo+GVHpWX0vFAWHZPpyuwqvXoOGz0AjjX7z 0CdsIahqfq5wBo4nyQZqz74SBC5Ytng+Fg9r8+hkb41sLX6y/yJNWlzvDNYoEFYl ONEZpKyqNg0LRKfbWVxthJgKppW+1NvxygHtU2cQIiW672y5qPM= -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:07 2026 by rpki-client