This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: A7cyvNM7OVpXqOyLpZIyykMQLJLMcUJ4AZRrRiK3OLA= Subject key identifier: 01:5B:AB:8C:B8:F7:48:9A:D8:3C:57:96:70:E6:87:A3:65:8B:07:FE Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 2E147860C58CCBA1676B663CF3271672A6A66C66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 02A8 Signing time: Sat 24 Jan 2026 23:41:13 +0000 Manifest this update: Sat 24 Jan 2026 23:36:13 +0000 Manifest next update: Wed 28 Jan 2026 04:10:13 +0000 Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: 7YmC9oGA1IAYQbOJwiVYVy3xwtndNoktjCPkGvuMY1Q=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:14:78:60:c5:8c:cb:a1:67:6b:66:3c:f3:27:16:72:a6:a6:6c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Jan 24 23:36:13 2026 GMT Not After : Jan 28 04:10:13 2026 GMT Subject: CN=015BAB8CB8F7489AD83C579670E687A3658B07FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:72:c7:0d:d1:55:5f:b0:58:6d:a1:b3:a4: ca:8b:f2:de:4f:0e:e2:52:cc:00:9e:7a:d3:5e:4b: b8:6e:a1:41:60:23:76:ec:48:53:5b:f4:0e:77:cb: 06:97:c0:56:a6:a7:de:a5:08:20:dc:85:dd:f8:ae: d9:43:76:22:f0:b2:16:d7:b6:45:24:53:8b:da:75: 72:56:c1:a0:31:6f:4a:b8:2e:be:9b:50:df:4d:cc: 56:39:09:15:d6:f7:64:06:e6:9e:b1:3f:16:14:6f: 45:c8:af:a4:95:a9:75:ce:2e:6c:d4:d5:50:bb:00: a3:32:57:e7:32:5c:24:53:5f:bd:c9:a4:9d:28:11: 2e:59:85:37:c7:18:4a:7c:3c:86:b1:3b:5c:75:e6: ec:2b:be:59:78:c7:2b:53:e3:36:f4:f7:14:68:93: d2:82:cc:94:7f:a0:54:69:81:a9:13:de:35:82:90: 28:9c:d1:a0:4b:70:71:bd:c8:f3:c7:f7:12:db:1b: c9:85:d2:21:fc:49:e6:e9:af:38:76:39:dd:67:ce: b0:0a:f3:d0:5c:3a:1a:15:f0:8e:35:0e:e4:d0:e3: bf:c6:cc:28:3c:5a:bb:a1:ce:b3:45:c5:ae:fb:d0: 66:6d:90:00:bb:02:d7:1f:95:a3:90:00:4d:c8:7a: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:AB:8C:B8:F7:48:9A:D8:3C:57:96:70:E6:87:A3:65:8B:07:FE X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1d:24:0f:45:1a:2c:a6:c4:a6:4a:13:12:21:76:52:5c:67: ac:12:a5:a2:8b:14:46:4d:d6:a1:38:fa:94:6a:b3:1d:89:42: fb:3a:77:2c:b8:b6:07:91:46:55:8e:cb:55:75:81:e6:fa:ce: fe:71:cb:8f:ee:a3:28:a1:8b:08:6f:2e:c5:dc:40:ed:20:86: eb:74:70:61:e5:7c:d0:57:4e:c8:3c:a2:6d:4a:ca:4c:ba:23: 26:19:49:b2:1e:1f:bb:3c:f9:a4:d1:3d:44:94:ba:d7:80:0b: 1c:8c:68:58:a0:89:67:14:27:0a:31:92:76:a2:39:b6:f0:0c: 94:98:40:6a:a2:50:35:72:44:3a:7a:ec:61:37:6b:02:0c:01: 0c:36:6e:8f:bc:b6:5d:12:3b:58:6f:b1:ad:e0:e0:7b:94:2e: 77:1a:20:bb:a1:10:ca:7e:a6:b4:9e:00:c0:4a:49:c4:58:f2: 24:fb:72:78:58:f1:63:27:83:79:68:28:7d:3d:ab:38:65:e6: 69:89:23:7d:ec:d9:ff:b3:a0:ac:9f:d1:2e:91:96:43:1f:40: cd:8b:1c:eb:3f:87:b6:82:66:f7:fd:19:e5:ea:9e:93:1b:52: f3:06:75:00:4a:23:67:36:ea:f4:91:cd:77:e2:e4:f7:e1:b5: 39:49:7a:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhR4YMWMy6Fna2Y88ycWcqambGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNjAxMjQyMzM2MTNaFw0yNjAxMjgwNDEwMTNaMDMxMTAvBgNV BAMTKDAxNUJBQjhDQjhGNzQ4OUFEODNDNTc5NjcwRTY4N0EzNjU4QjA3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGXLHDdFVX7BYbaGzpMqL8t5P DuJSzACeetNeS7huoUFgI3bsSFNb9A53ywaXwFamp96lCCDchd34rtlDdiLwshbX tkUkU4vadXJWwaAxb0q4Lr6bUN9NzFY5CRXW92QG5p6xPxYUb0XIr6SVqXXOLmzU 1VC7AKMyV+cyXCRTX73JpJ0oES5ZhTfHGEp8PIaxO1x15uwrvll4xytT4zb09xRo k9KCzJR/oFRpgakT3jWCkCic0aBLcHG9yPPH9xLbG8mF0iH8Sebprzh2Od1nzrAK 89BcOhoV8I41DuTQ47/GzCg8WruhzrNFxa770GZtkAC7AtcflaOQAE3IevHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVurjLj3SJrYPFeWcOaHo2WLB/4wHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAdJA9FGiymxKZKExIhdlJcZ6wSpaKLFEZN 1qE4+pRqsx2JQvs6dyy4tgeRRlWOy1V1geb6zv5xy4/uoyihiwhvLsXcQO0ghut0 cGHlfNBXTsg8om1Kyky6IyYZSbIeH7s8+aTRPUSUuteACxyMaFigiWcUJwoxknai ObbwDJSYQGqiUDVyRDp67GE3awIMAQw2bo+8tl0SO1hvsa3g4HuULncaILuhEMp+ prSeAMBKScRY8iT7cnhY8WMng3loKH09qzhl5mmJI33s2f+zoKyf0S6RlkMfQM2L HOs/h7aCZvf9GeXqnpMbUvMGdQBKI2c26vSRzXfi5PfhtTlJem4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:19:43 2026 by rpki-client