This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: mhXk58D6YegUy4hes+3WANK/00Y9fhr7RVp7v9NBsoA= Subject key identifier: 16:52:B2:91:59:EC:E6:90:3B:D0:B2:A9:C4:75:FE:96:E5:6A:D7:F8 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 281B8690CAE5BC7C5E0A82180B78F34FB055E699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 0530 Signing time: Fri 23 Jan 2026 18:22:15 +0000 Manifest this update: Fri 23 Jan 2026 18:17:15 +0000 Manifest next update: Tue 27 Jan 2026 03:13:15 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: 9IWx3rbedvm8YiHyJf6eL5UynI0GVC3DhCQpgqH0Qms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1b:86:90:ca:e5:bc:7c:5e:0a:82:18:0b:78:f3:4f:b0:55:e6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Jan 23 18:17:15 2026 GMT Not After : Jan 27 03:13:15 2026 GMT Subject: CN=1652B29159ECE6903BD0B2A9C475FE96E56AD7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:43:e1:4a:b6:6b:91:15:8b:9a:27:97:cf: b9:3f:d9:97:97:2b:3c:ad:2f:4a:e8:b8:f4:50:10: df:19:e7:25:a9:5e:3c:0a:9d:6c:ff:cc:63:20:38: 5b:6a:db:82:fe:63:a9:de:01:4a:f3:30:00:ff:8e: 08:d5:26:90:b2:21:d6:e0:fc:09:b1:f6:62:84:49: 25:b7:44:a0:85:01:25:26:07:11:a5:ec:97:30:80: f1:c6:94:28:60:c9:a7:43:f4:c0:88:49:0e:0d:ce: da:be:3f:c2:05:4f:54:6d:b5:5b:ee:25:9d:8b:7c: 05:33:95:8a:e2:24:47:74:13:bd:66:6e:91:2e:1a: 74:5b:43:b4:19:91:8b:69:ed:e3:61:27:25:d1:1c: c8:bb:c4:2d:68:62:e9:0e:e2:b1:c5:4d:19:a7:16: 26:28:1d:cb:4a:5d:07:c9:a9:ef:cb:06:7c:f9:9d: 61:e7:29:e3:cd:92:e4:88:e5:16:6a:6e:f9:1a:c5: 49:2b:94:32:0a:d5:a0:2f:52:de:a6:2f:11:42:3d: f6:8b:98:5a:3b:0c:87:27:5f:8a:af:57:1e:5d:89: e9:38:02:3b:88:d4:3e:79:94:ae:81:e7:f9:3a:93: 7b:73:b4:30:1f:0a:c6:dd:da:90:eb:9d:81:df:f5: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:52:B2:91:59:EC:E6:90:3B:D0:B2:A9:C4:75:FE:96:E5:6A:D7:F8 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d6:5e:8a:13:6f:07:55:30:10:11:df:4a:99:94:38:8f:55: c1:c1:e7:08:a5:db:b2:d7:8d:87:0d:41:d6:37:11:b0:ed:0a: bd:9b:87:97:40:fa:5d:11:67:38:7d:0f:c7:b5:71:75:bd:f6: a2:33:8b:37:09:aa:d9:db:81:43:39:32:d0:8f:70:56:36:38: ee:09:d1:4e:8c:f3:e1:f8:80:d8:4d:fd:11:d4:33:92:3c:1d: 98:4e:8c:18:81:b0:c4:c7:ef:63:f4:5d:8c:21:1c:65:a6:93: 97:b8:5a:05:df:47:22:5e:1e:f7:7c:9e:67:ac:f3:76:b3:f5: f1:55:c7:6e:95:2c:65:f1:c5:dd:0e:61:76:e9:22:62:4e:94: 1f:0c:11:66:f3:1c:69:a3:7f:35:a2:5c:b3:76:44:f0:ed:75: 89:81:1b:06:ca:0b:0d:4f:a5:8f:06:2f:df:01:85:a1:a1:f7: b4:cf:2d:48:bb:6f:fb:41:18:15:86:5c:20:1f:16:82:a7:8a: 4c:a0:9d:87:7b:15:3c:35:44:5f:d4:b6:a7:f3:d5:90:78:87: ce:c1:1b:02:01:99:c1:89:d0:7e:29:93:03:7e:ab:2f:78:f0: 2b:f3:ed:c8:eb:e1:eb:e8:ac:d4:ba:53:70:c4:a1:81:dc:2e: 24:1f:73:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBuGkMrlvHxeCoIYC3jzT7BV5pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNjAxMjMxODE3MTVaFw0yNjAxMjcwMzEzMTVaMDMxMTAvBgNV BAMTKDE2NTJCMjkxNTlFQ0U2OTAzQkQwQjJBOUM0NzVGRTk2RTU2QUQ3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbakPhSrZrkRWLmieXz7k/2ZeX KzytL0rouPRQEN8Z5yWpXjwKnWz/zGMgOFtq24L+Y6neAUrzMAD/jgjVJpCyIdbg /Amx9mKESSW3RKCFASUmBxGl7JcwgPHGlChgyadD9MCISQ4Nztq+P8IFT1RttVvu JZ2LfAUzlYriJEd0E71mbpEuGnRbQ7QZkYtp7eNhJyXRHMi7xC1oYukO4rHFTRmn FiYoHctKXQfJqe/LBnz5nWHnKePNkuSI5RZqbvkaxUkrlDIK1aAvUt6mLxFCPfaL mFo7DIcnX4qvVx5diek4AjuI1D55lK6B5/k6k3tztDAfCsbd2pDrnYHf9dP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFlKykVns5pA70LKpxHX+luVq1/gwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjWXooTbwdVMBAR30qZlDiPVcHB5wil27LX jYcNQdY3EbDtCr2bh5dA+l0RZzh9D8e1cXW99qIzizcJqtnbgUM5MtCPcFY2OO4J 0U6M8+H4gNhN/RHUM5I8HZhOjBiBsMTH72P0XYwhHGWmk5e4WgXfRyJeHvd8nmes 83az9fFVx26VLGXxxd0OYXbpImJOlB8MEWbzHGmjfzWiXLN2RPDtdYmBGwbKCw1P pY8GL98BhaGh97TPLUi7b/tBGBWGXCAfFoKnikygnYd7FTw1RF/Utqfz1ZB4h87B GwIBmcGJ0H4pkwN+qy948Cvz7cjr4evorNS6U3DEoYHcLiQfc54= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:49 2026 by rpki-client