This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: 8zW+2eKGMCNpMIhOtCU2vkPb+59fxWdQBnZop6gn/JE= Subject key identifier: 20:9A:F4:7D:C8:34:CA:FD:EF:AD:A0:25:EF:DB:E9:E9:20:8C:1A:F4 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 2870AA1DF686C8868642C448EC3F3A969D3ED1B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 0540 Signing time: Fri 23 Jan 2026 09:31:29 +0000 Manifest this update: Fri 23 Jan 2026 09:26:29 +0000 Manifest next update: Mon 26 Jan 2026 16:32:29 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) 2: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: J1ssWvoufEWxApvrfnT6X07BgQY85B51UjIqBL6ZCN0=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 16:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:70:aa:1d:f6:86:c8:86:86:42:c4:48:ec:3f:3a:96:9d:3e:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Jan 23 09:26:29 2026 GMT Not After : Jan 26 16:32:29 2026 GMT Subject: CN=209AF47DC834CAFDEFADA025EFDBE9E9208C1AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:21:3e:96:29:e1:19:df:d1:e6:cd:14:63: bf:1f:4e:98:e4:13:96:b6:cb:d6:c6:9c:41:db:bc: d2:30:c3:91:3a:59:4d:5a:c5:32:ea:9e:fb:ed:9d: a8:a6:79:bf:6b:f6:5d:8c:5b:4b:eb:c2:6a:b0:ef: c1:d4:86:33:e3:df:c8:01:e8:82:4f:ff:1f:16:54: 78:c2:28:3d:2a:ee:75:0c:ee:6e:ef:cb:16:ff:fb: 00:56:f2:57:bb:92:b7:0e:7c:84:83:a5:f1:c2:ea: 58:76:f5:1c:84:45:52:cb:77:fb:de:a1:c8:56:e7: 24:f6:ae:85:9b:00:f2:72:3a:8f:c1:20:ce:a7:de: 80:55:9a:b1:c2:de:3b:b4:d4:6d:27:ab:26:45:71: ae:c5:a2:ab:34:41:28:cc:9d:7b:64:a5:60:76:31: cf:31:f4:34:42:3f:e2:7b:a1:97:6c:a9:d0:25:23: 2c:d8:f4:e9:83:0d:72:6d:24:c8:92:9e:64:d9:c9: 53:8a:2c:93:5c:3b:3a:cf:4e:22:9a:b6:af:fe:15: 88:8b:69:8d:53:b8:02:33:44:a6:ba:1f:a7:a5:cc: e7:af:b3:e3:c3:af:35:d0:b4:b6:66:b2:7b:cc:d5: 8f:0e:b8:e5:93:b5:79:6c:b9:50:fe:f1:c0:a2:5a: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9A:F4:7D:C8:34:CA:FD:EF:AD:A0:25:EF:DB:E9:E9:20:8C:1A:F4 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b9:df:3f:14:53:2f:46:c7:4b:f5:bd:01:6a:47:6d:8a:60: db:36:62:85:3e:50:bf:5f:b7:6d:fe:0d:b9:9c:27:e1:40:3f: bf:82:67:89:1b:29:f9:57:50:a1:83:ca:75:c1:e2:14:60:49: 2a:78:c2:de:c8:3f:dc:da:bc:5f:d7:2b:d2:ae:15:f9:ae:18: 46:4c:63:e5:09:93:fd:82:d0:c1:29:05:8f:a7:b6:99:c8:82: c3:a3:d1:13:31:b2:39:39:63:63:e8:bc:1f:ff:11:16:73:da: b5:f6:2e:88:0c:81:98:5a:0e:a7:99:05:43:70:0f:a4:ee:84: 55:11:22:06:0e:e3:ac:64:aa:0b:5a:ef:d5:dc:c2:88:58:ff: b1:a2:09:56:11:be:cf:08:a0:df:95:61:cb:58:00:a4:fb:5c: 46:2c:49:76:6d:1b:22:5f:3e:6c:2b:fd:ec:d5:15:f4:a8:02: dc:f5:05:5f:50:f7:99:8b:a9:92:2d:a3:8d:12:6f:e0:55:e5: 9b:91:fc:a3:01:7a:8a:b3:b6:8c:47:3d:f9:60:af:29:2e:7f: 34:15:92:90:e8:24:13:cd:15:dc:96:eb:31:a0:72:95:ad:bf: fe:ef:9d:ba:a9:aa:d1:15:73:f2:4e:a5:d5:88:ab:a9:ef:68: 9e:fe:b4:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHCqHfaGyIaGQsRI7D86lp0+0bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNjAxMjMwOTI2MjlaFw0yNjAxMjYxNjMyMjlaMDMxMTAvBgNV BAMTKDIwOUFGNDdEQzgzNENBRkRFRkFEQTAyNUVGREJFOUU5MjA4QzFBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDCE+linhGd/R5s0UY78fTpjk E5a2y9bGnEHbvNIww5E6WU1axTLqnvvtnaimeb9r9l2MW0vrwmqw78HUhjPj38gB 6IJP/x8WVHjCKD0q7nUM7m7vyxb/+wBW8le7krcOfISDpfHC6lh29RyERVLLd/ve ochW5yT2roWbAPJyOo/BIM6n3oBVmrHC3ju01G0nqyZFca7Foqs0QSjMnXtkpWB2 Mc8x9DRCP+J7oZdsqdAlIyzY9OmDDXJtJMiSnmTZyVOKLJNcOzrPTiKatq/+FYiL aY1TuAIzRKa6H6elzOevs+PDrzXQtLZmsnvM1Y8OuOWTtXlsuVD+8cCiWmfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJr0fcg0yv3vraAl79vp6SCMGvQwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq53z8UUy9Gx0v1vQFqR22KYNs2YoU+UL9f t23+DbmcJ+FAP7+CZ4kbKflXUKGDynXB4hRgSSp4wt7IP9zavF/XK9KuFfmuGEZM Y+UJk/2C0MEpBY+ntpnIgsOj0RMxsjk5Y2PovB//ERZz2rX2LogMgZhaDqeZBUNw D6TuhFURIgYO46xkqgta79XcwohY/7GiCVYRvs8IoN+VYctYAKT7XEYsSXZtGyJf Pmwr/ezVFfSoAtz1BV9Q95mLqZIto40Sb+BV5ZuR/KMBeoqztoxHPflgrykufzQV kpDoJBPNFdyW6zGgcpWtv/7vnbqpqtEVc/JOpdWIq6nvaJ7+tDQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:44 2026 by rpki-client