This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: P1fY7a+KZNihwexYWEHOng1JecOJ1pO+Xwq72iLjUcw= Subject key identifier: E1:62:29:A2:0E:B6:AE:B8:FE:A3:1E:1B:C1:9F:A4:72:CB:D3:8B:1B Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 4447993A56D579ECB75C00F77796FB8D765D5FCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 0270 Signing time: Sun 25 Jan 2026 12:02:29 +0000 Manifest this update: Sun 25 Jan 2026 11:57:29 +0000 Manifest next update: Wed 28 Jan 2026 20:07:29 +0000 Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: 4FTwfM/e+E4EK73QzoGTnDXFAH82PUpATM0AEXt75L8=) 2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:47:99:3a:56:d5:79:ec:b7:5c:00:f7:77:96:fb:8d:76:5d:5f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Jan 25 11:57:29 2026 GMT Not After : Jan 28 20:07:29 2026 GMT Subject: CN=E16229A20EB6AEB8FEA31E1BC19FA472CBD38B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:d0:f2:6f:17:ac:93:41:cd:57:72:45:52: 4a:b8:22:66:44:d6:7e:7e:d5:e4:b5:a6:df:23:1f: b1:0d:85:c0:8c:a1:11:c0:f4:87:14:87:88:50:f4: 30:b2:9e:73:a2:74:a7:c0:56:8c:dd:4a:63:5a:c9: 8d:71:1d:8d:2e:b9:db:42:19:02:9a:a5:92:ed:1d: 37:66:bd:f2:3e:09:1f:0d:77:ce:7c:36:40:c6:a7: b6:e2:8c:8f:68:99:56:15:9e:63:ca:db:6b:9c:45: 02:df:66:ed:a4:db:69:5e:8c:b9:94:74:8f:51:1e: 8d:63:10:67:f8:75:7f:5f:74:69:8a:02:ab:d1:99: 11:2b:08:18:bf:76:8a:48:14:0d:1b:87:7e:db:41: ed:73:90:34:a8:cb:ed:8f:e0:60:ed:9e:c3:e6:9c: 6f:1b:cb:64:f4:1a:8b:75:bc:17:9d:41:80:73:e6: c1:d7:24:ea:ce:e1:d2:8a:12:b3:3a:dc:50:ba:b4: 76:f3:92:59:2d:2d:1e:0f:6c:5d:8f:46:3e:ec:71: 64:8d:a7:7d:94:74:4a:2c:f2:bc:f2:d5:cd:94:0c: ce:69:c8:2f:39:ac:84:74:8a:32:37:f4:2f:65:a1: ad:07:a8:c9:cc:e1:55:72:4a:d3:d5:3d:89:6e:56: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:62:29:A2:0E:B6:AE:B8:FE:A3:1E:1B:C1:9F:A4:72:CB:D3:8B:1B X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:7c:50:6c:62:2f:80:6d:d1:36:d2:6f:88:21:a0:7a:cb: c3:5a:a5:66:ee:ce:b0:53:86:28:05:65:cc:ff:90:d8:28:ba: d7:51:09:a5:aa:1b:91:59:2d:b6:23:1c:0a:fb:68:cb:69:fc: 8b:70:47:9f:65:0b:61:dd:e4:1b:29:ae:52:59:81:e7:40:37: 9f:8c:80:92:9b:1b:29:2e:db:6f:e1:12:08:ab:4d:ef:18:db: ab:50:63:98:1c:d3:22:38:6e:12:db:b9:27:42:af:68:f4:3e: 61:0b:27:e8:a6:73:89:a9:42:6f:64:a0:b7:50:f7:39:54:9b: 0d:cb:8c:a9:7c:a0:05:42:82:67:93:32:a3:78:18:40:b3:1a: 43:4d:32:7a:6c:ab:67:eb:0e:e6:d7:83:de:82:14:44:01:37: b7:8a:ed:70:54:bb:25:d4:1f:80:9d:71:57:d2:45:23:6e:26: 0c:ed:f4:8b:e7:37:5c:d4:c8:3d:6c:36:a4:bf:ba:ec:91:5d: da:26:38:67:68:33:37:71:39:70:95:50:52:c0:f6:4d:a9:d1: bd:3b:1f:ff:78:9b:81:06:65:9a:d1:39:f9:2d:f8:01:5c:1f: d4:4e:d2:3a:5a:58:d7:fa:ab:1d:f1:f4:1a:cc:5a:b8:9b:cb: 61:1a:8c:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREeZOlbVeey3XAD3d5b7jXZdX80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNjAxMjUxMTU3MjlaFw0yNjAxMjgyMDA3MjlaMDMxMTAvBgNV BAMTKEUxNjIyOUEyMEVCNkFFQjhGRUEzMUUxQkMxOUZBNDcyQ0JEMzhCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHtDybxesk0HNV3JFUkq4ImZE 1n5+1eS1pt8jH7ENhcCMoRHA9IcUh4hQ9DCynnOidKfAVozdSmNayY1xHY0uudtC GQKapZLtHTdmvfI+CR8Nd858NkDGp7bijI9omVYVnmPK22ucRQLfZu2k22lejLmU dI9RHo1jEGf4dX9fdGmKAqvRmRErCBi/dopIFA0bh37bQe1zkDSoy+2P4GDtnsPm nG8by2T0Got1vBedQYBz5sHXJOrO4dKKErM63FC6tHbzklktLR4PbF2PRj7scWSN p32UdEos8rzy1c2UDM5pyC85rIR0ijI39C9loa0HqMnM4VVyStPVPYluVq81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WIpog62rrj+ox4bwZ+kcsvTixswHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+yfFBsYi+AbdE20m+IIaB6y8NapWbuzrBT higFZcz/kNgoutdRCaWqG5FZLbYjHAr7aMtp/ItwR59lC2Hd5BsprlJZgedAN5+M gJKbGyku22/hEgirTe8Y26tQY5gc0yI4bhLbuSdCr2j0PmELJ+imc4mpQm9koLdQ 9zlUmw3LjKl8oAVCgmeTMqN4GECzGkNNMnpsq2frDubXg96CFEQBN7eK7XBUuyXU H4CdcVfSRSNuJgzt9IvnN1zUyD1sNqS/uuyRXdomOGdoMzdxOXCVUFLA9k2p0b07 H/94m4EGZZrROfkt+AFcH9RO0jpaWNf6qx3x9BrMWriby2EajKg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:43 2026 by rpki-client