This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: 7tzMnZRM+YY6ORJCgE/oZ0pHuvZvonO5ax5Oodsk8T4= Subject key identifier: D9:61:14:0C:A0:CD:D1:4F:67:34:67:F5:6A:B6:78:CA:72:EF:B5:39 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 351A4BEDEAB8C4C0EB4863AFC864A1AA18CFB6C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 038E Signing time: Sun 25 Jan 2026 07:30:39 +0000 Manifest this update: Sun 25 Jan 2026 07:25:39 +0000 Manifest next update: Wed 28 Jan 2026 11:52:39 +0000 Files and hashes: 1: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 2: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=) 4: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: /Q1rBR8eISA2gPS2HowwJb+DLOtTocqeCDY6CnmyFb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1a:4b:ed:ea:b8:c4:c0:eb:48:63:af:c8:64:a1:aa:18:cf:b6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Jan 25 07:25:39 2026 GMT Not After : Jan 28 11:52:39 2026 GMT Subject: CN=D961140CA0CDD14F673467F56AB678CA72EFB539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:51:85:7c:00:94:17:62:fe:ff:4b:62:49: 3e:8e:36:bd:04:c6:05:17:09:97:2a:92:f9:f1:f9: 44:66:14:d7:26:02:fe:6a:b2:ba:72:b7:1f:49:cd: 18:65:70:1c:e2:eb:07:3d:73:07:90:39:d5:2c:32: 10:56:9f:4d:ce:b2:33:3e:0b:ce:6f:a5:97:ef:16: a9:53:30:85:03:57:a3:ec:83:12:d2:97:f5:f1:d4: f3:35:e0:57:1c:86:ff:d2:8e:7c:d7:a9:bd:89:80: 15:5d:6a:d1:0c:50:57:ad:aa:47:51:0c:2b:47:de: dc:80:b6:3c:84:94:cb:cd:9b:d2:c7:cd:52:f2:2b: 5d:d8:af:62:ee:cf:88:08:5b:93:57:d3:83:13:e3: 79:0d:24:73:03:af:bd:3d:df:bf:37:87:b7:09:3c: d4:e5:2a:c7:9a:75:9f:5c:b2:f1:a5:a8:ac:ab:f8: cf:c9:a4:a2:27:75:c8:c8:1d:db:57:1b:09:66:6b: 9f:9d:bc:0e:a3:7e:94:d1:8d:ae:dd:28:e8:a0:ac: a3:8c:6e:9c:a8:9a:d7:2f:25:dc:c8:b9:c2:68:89: 35:aa:34:bb:90:00:a6:61:2e:e4:f3:84:be:2b:b5: f9:72:07:de:f3:97:95:7c:f7:cd:7a:91:59:f7:89: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:14:0C:A0:CD:D1:4F:67:34:67:F5:6A:B6:78:CA:72:EF:B5:39 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:95:8b:6f:e2:9c:ed:a8:98:ce:57:01:27:fd:3a:a5:d8: 3d:ee:4f:fa:17:e4:36:06:75:dc:47:95:59:47:88:b9:07:cc: 32:3e:db:45:9e:cd:88:95:96:ea:13:9e:6b:d8:33:58:d2:f6: 76:dd:ac:50:53:4f:8a:bf:d4:84:55:36:cb:89:a3:3a:fe:42: 16:90:6a:a0:c0:1e:95:2a:1c:1e:fe:32:fc:81:65:36:22:82: 3b:65:4e:60:25:49:cd:12:4e:5b:f8:e2:27:f0:39:99:06:70: f9:82:59:71:97:93:bf:83:e4:3b:01:c9:70:f7:69:4b:3b:ae: 4f:f2:fc:d7:5b:8f:39:55:66:a9:88:ae:fc:fe:89:11:e2:55: 91:2b:fc:7c:95:b3:ea:fe:29:55:06:38:5c:c8:26:cc:d6:a0: 85:19:db:d2:da:77:fa:21:b6:2e:a3:91:95:d8:a5:3c:6e:89: 13:fd:7b:fb:52:64:82:ff:f6:8c:25:f6:4a:ec:3a:2e:da:c0: 56:31:0b:e9:6e:1a:53:b5:34:3d:ec:0b:93:aa:c0:2f:d7:70: 75:67:3c:00:eb:36:dc:44:d8:f6:fc:54:f9:82:ce:81:d0:8c: 46:06:85:da:c6:66:88:bb:af:c2:d3:75:13:11:b3:cd:5f:b5: 31:8b:43:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRpL7eq4xMDrSGOvyGShqhjPtsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNjAxMjUwNzI1MzlaFw0yNjAxMjgxMTUyMzlaMDMxMTAvBgNV BAMTKEQ5NjExNDBDQTBDREQxNEY2NzM0NjdGNTZBQjY3OENBNzJFRkI1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQlGFfACUF2L+/0tiST6ONr0E xgUXCZcqkvnx+URmFNcmAv5qsrpytx9JzRhlcBzi6wc9cweQOdUsMhBWn03OsjM+ C85vpZfvFqlTMIUDV6PsgxLSl/Xx1PM14Fcchv/SjnzXqb2JgBVdatEMUFetqkdR DCtH3tyAtjyElMvNm9LHzVLyK13Yr2Luz4gIW5NX04MT43kNJHMDr7093783h7cJ PNTlKseadZ9csvGlqKyr+M/JpKIndcjIHdtXGwlma5+dvA6jfpTRja7dKOigrKOM bpyomtcvJdzIucJoiTWqNLuQAKZhLuTzhL4rtflyB97zl5V89816kVn3iZwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WEUDKDN0U9nNGf1arZ4ynLvtTkwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiklYtv4pztqJjOVwEn/Tql2D3uT/oX5DYG ddxHlVlHiLkHzDI+20WezYiVluoTnmvYM1jS9nbdrFBTT4q/1IRVNsuJozr+QhaQ aqDAHpUqHB7+MvyBZTYigjtlTmAlSc0STlv44ifwOZkGcPmCWXGXk7+D5DsByXD3 aUs7rk/y/NdbjzlVZqmIrvz+iRHiVZEr/HyVs+r+KVUGOFzIJszWoIUZ29Lad/oh ti6jkZXYpTxuiRP9e/tSZIL/9owl9krsOi7awFYxC+luGlO1ND3sC5OqwC/XcHVn PADrNtxE2Pb8VPmCzoHQjEYGhdrGZoi7r8LTdRMRs81ftTGLQzo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:42 2026 by rpki-client