This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: z3/h09v+vnQggBHIozCWpbo/aBEnv31YQvbXT7Oi9jI= Subject key identifier: 42:87:F4:E0:75:07:76:90:F5:31:71:EB:BF:CB:BB:5B:00:AA:FD:88 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 36D3CB733A3A481FAD8A03210EF771C172254E86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 041D Signing time: Sat 24 Jan 2026 09:01:25 +0000 Manifest this update: Sat 24 Jan 2026 08:56:25 +0000 Manifest next update: Tue 27 Jan 2026 10:47:25 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: HOwwdKR3O7c8/kyMjxVZJkAdz+1G7QmLEi+h8X1E5h4=) 2: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: /PPJ/zznxp0qUoAFI0D3yhZyIhTNz4IgMRS9m7VQY3w=) 3: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=) 4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: hsPYSfqnXcrLebXt6EBLTQfNTkLnhJb4Z1Vtv7TkCII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d3:cb:73:3a:3a:48:1f:ad:8a:03:21:0e:f7:71:c1:72:25:4e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Jan 24 08:56:25 2026 GMT Not After : Jan 27 10:47:25 2026 GMT Subject: CN=4287F4E075077690F53171EBBFCBBB5B00AAFD88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:70:13:c3:d7:46:f3:dd:39:df:02:05:ba: 4e:20:00:bc:a6:35:79:7d:2b:f9:c4:c9:6e:ae:bf: 3e:39:97:ba:31:36:b4:e5:15:94:32:83:b4:73:0a: 82:ea:a9:c1:dc:21:3b:76:00:27:bd:3d:81:bb:f8: 8e:25:48:73:73:65:62:1e:db:f8:dd:6d:df:87:d0: aa:57:b1:16:39:42:df:7b:9c:ab:26:74:ea:0b:93: cb:1c:3a:13:f8:92:3c:7f:5b:de:50:5c:25:11:77: 0a:a1:f5:02:e4:66:8b:f1:b8:56:5e:14:03:6f:c1: 3c:e4:9d:ee:ba:b4:38:7d:a6:03:fe:cd:ea:aa:3a: 14:73:db:3d:75:8b:1c:76:00:bb:58:38:27:26:7e: 3f:6a:28:cb:f1:5b:0c:8a:bd:38:cc:c3:1d:b6:ce: 88:fd:18:df:af:2c:6c:d1:6b:ff:bb:e2:03:28:98: a8:de:0a:58:9b:da:aa:93:10:d9:d6:e6:60:98:1a: c2:8e:77:eb:ec:9c:9f:b2:0d:5a:99:7d:dc:6d:32: 69:fc:c1:1c:13:9c:1d:2d:b0:5a:05:7e:0c:72:ec: a5:80:86:c9:b2:bf:ac:80:95:e0:5d:6d:26:13:ec: 7d:21:15:0c:c7:19:80:1d:f4:a0:ab:ac:a2:5f:d6: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:87:F4:E0:75:07:76:90:F5:31:71:EB:BF:CB:BB:5B:00:AA:FD:88 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ff:b0:d9:9f:75:c7:80:dc:8a:ac:a5:20:6e:0c:15:68:05: 0d:93:91:5b:ea:90:58:3a:55:58:0a:9d:70:1a:53:cb:7b:3b: 47:11:fe:a2:b3:ca:66:bc:07:71:97:92:1c:0c:b5:8c:e0:28: 69:b8:e5:8c:6c:7c:a2:5f:69:4b:83:96:b3:b2:24:d1:ad:9f: cb:bc:27:31:9f:f6:2a:0d:91:aa:a6:bf:d7:a7:b1:54:76:86: b2:e4:6e:30:2b:ec:a5:c8:c3:16:22:6f:51:c1:8f:dd:ce:cb: 6e:93:f7:8f:4c:a9:f0:31:5a:9a:ed:02:6d:5d:0b:0a:a1:db: 65:56:28:a1:b1:cb:ba:60:cf:86:c4:f3:0c:5f:9d:2c:a0:fb: 6e:0f:1f:6e:ac:26:70:97:56:cd:a5:25:0a:41:ca:80:29:b7: f0:4c:7c:70:0b:79:db:70:a7:70:dc:17:14:09:42:be:c7:3b: 88:33:79:32:90:20:8d:a5:e2:fc:c7:20:bc:04:f4:e7:26:45: c6:78:a4:ca:2b:46:73:7f:63:45:f6:2a:29:84:b6:a1:da:7f: f6:40:ad:3d:18:f6:bd:70:fe:c3:2c:3f:fe:ca:88:7c:96:bb: 8a:2c:c2:a4:4d:ee:e4:09:fb:a4:0b:a1:c6:4a:cd:36:92:6c: 2d:f8:25:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtPLczo6SB+tigMhDvdxwXIlToYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNjAxMjQwODU2MjVaFw0yNjAxMjcxMDQ3MjVaMDMxMTAvBgNV BAMTKDQyODdGNEUwNzUwNzc2OTBGNTMxNzFFQkJGQ0JCQjVCMDBBQUZEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzXATw9dG89053wIFuk4gALym NXl9K/nEyW6uvz45l7oxNrTlFZQyg7RzCoLqqcHcITt2ACe9PYG7+I4lSHNzZWIe 2/jdbd+H0KpXsRY5Qt97nKsmdOoLk8scOhP4kjx/W95QXCURdwqh9QLkZovxuFZe FANvwTzkne66tDh9pgP+zeqqOhRz2z11ixx2ALtYOCcmfj9qKMvxWwyKvTjMwx22 zoj9GN+vLGzRa/+74gMomKjeClib2qqTENnW5mCYGsKOd+vsnJ+yDVqZfdxtMmn8 wRwTnB0tsFoFfgxy7KWAhsmyv6yAleBdbSYT7H0hFQzHGYAd9KCrrKJf1nfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQof04HUHdpD1MXHrv8u7WwCq/YgwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb/sNmfdceA3IqspSBuDBVoBQ2TkVvqkFg6 VVgKnXAaU8t7O0cR/qKzyma8B3GXkhwMtYzgKGm45YxsfKJfaUuDlrOyJNGtn8u8 JzGf9ioNkaqmv9ensVR2hrLkbjAr7KXIwxYib1HBj93Oy26T949MqfAxWprtAm1d Cwqh22VWKKGxy7pgz4bE8wxfnSyg+24PH26sJnCXVs2lJQpByoApt/BMfHALedtw p3DcFxQJQr7HO4gzeTKQII2l4vzHILwE9OcmRcZ4pMorRnN/Y0X2KimEtqHaf/ZA rT0Y9r1w/sMsP/7KiHyWu4oswqRN7uQJ+6QLocZKzTaSbC34Jf0= -----END CERTIFICATE-----Generated at Mon Jan 26 07:35:48 2026 by rpki-client