This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: 47jX5G8EdfW5StdcGehiCT2YKp0taIXmZV9WD1/lz3A= Subject key identifier: 1A:B1:B9:5A:81:96:AB:32:C9:71:B7:CE:8C:ED:0F:17:A3:CB:8A:6E Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 3C6E4D70A57603D0BD14E1E04663AC9A03832BD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 0241 Signing time: Fri 23 Jan 2026 23:12:20 +0000 Manifest this update: Fri 23 Jan 2026 23:07:20 +0000 Manifest next update: Tue 27 Jan 2026 08:22:20 +0000 Files and hashes: 1: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 2: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: PDJzZ9+wO3aph5tpZN5ITJZ6sSvgcW2cmmtxVf6kSZ8=) 3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6e:4d:70:a5:76:03:d0:bd:14:e1:e0:46:63:ac:9a:03:83:2b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Jan 23 23:07:20 2026 GMT Not After : Jan 27 08:22:20 2026 GMT Subject: CN=1AB1B95A8196AB32C971B7CE8CED0F17A3CB8A6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:43:20:c6:17:bc:3e:ca:41:48:8d:46:52: 37:18:72:aa:78:63:d8:0e:87:6e:ef:73:18:01:80: 1c:8a:79:12:43:43:96:a2:a4:1d:e4:5b:f9:e7:7c: 9e:7d:8e:d5:56:b9:8e:d8:ed:f2:ed:02:3e:16:52: 51:c5:6e:aa:04:ad:05:75:04:3c:6a:10:c6:02:8d: 35:71:1f:49:dd:35:7e:10:a6:d9:01:56:ad:fb:4d: b1:cd:2f:e0:18:2e:e3:9d:08:b8:c3:cb:62:ab:ab: 37:03:b4:3a:c0:27:67:ba:9e:52:e7:7a:0f:3d:8c: 63:47:c8:c4:75:b6:ea:4b:5b:92:0b:9c:c5:b7:70: 00:e2:84:32:b8:ea:09:1a:bc:e3:3d:79:a7:71:43: 5c:f2:a2:44:d2:7c:31:7b:e6:cf:92:fd:0f:87:60: 38:cf:34:d1:d8:c1:f3:d2:8b:cd:5d:b2:16:b6:c7: 26:68:af:0c:5a:0f:4c:3b:9b:f1:60:18:02:76:5f: 1f:a9:11:74:20:6b:82:0c:71:bf:e4:1e:d3:c3:43: 46:4c:0f:d2:a2:c6:4e:6c:cb:6d:9b:9a:8e:09:da: ae:d3:c1:5d:e8:9d:30:ad:81:dd:f4:95:08:60:cf: a5:5a:32:71:b1:8c:71:5f:64:96:78:df:5d:e9:8d: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:B9:5A:81:96:AB:32:C9:71:B7:CE:8C:ED:0F:17:A3:CB:8A:6E X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:65:e9:11:1c:57:a3:48:5f:35:87:50:31:3c:f6:de:d8:2f: 64:05:8e:02:8a:fb:01:3b:52:b3:19:90:12:70:0f:37:cd:d5: b8:34:f5:43:66:5b:6e:bd:75:b3:bf:b2:f0:13:c1:1e:fb:fd: fc:a1:4d:a3:b2:01:68:a5:02:2f:19:a9:90:cb:6c:52:5e:43: 74:c1:f3:5b:3c:1b:34:be:f8:a4:75:58:ef:84:ab:e8:9b:87: c0:f9:f3:25:bc:15:16:7a:8c:0c:31:d6:7b:83:ed:bb:0f:e9: 41:a1:36:f6:ba:b1:7a:41:4e:7e:c1:26:dc:03:19:a5:2b:61: 6b:9f:6b:e3:5c:78:09:54:ba:ae:0a:ea:45:b8:01:46:23:c4: 30:8c:c2:0c:5b:27:96:4f:d5:0b:67:ab:1a:43:e9:7b:af:d7: cf:33:66:cc:f3:fc:2b:62:18:26:61:6f:5e:f6:5f:81:8f:07: 97:ef:24:21:a5:3d:f7:2b:38:32:30:ea:fb:b2:7e:56:7a:12: 67:1c:bb:84:97:33:8b:31:5e:96:a6:64:ec:d1:66:30:2d:e8: 34:5a:8b:80:7e:ec:27:01:81:2e:b8:49:5b:46:53:7d:4b:b6: a2:d0:d0:49:0d:30:76:f2:a6:4b:3e:c7:73:25:82:32:20:69: 42:3c:bd:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPG5NcKV2A9C9FOHgRmOsmgODK9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNjAxMjMyMzA3MjBaFw0yNjAxMjcwODIyMjBaMDMxMTAvBgNV BAMTKDFBQjFCOTVBODE5NkFCMzJDOTcxQjdDRThDRUQwRjE3QTNDQjhBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEkMgxhe8PspBSI1GUjcYcqp4 Y9gOh27vcxgBgByKeRJDQ5aipB3kW/nnfJ59jtVWuY7Y7fLtAj4WUlHFbqoErQV1 BDxqEMYCjTVxH0ndNX4QptkBVq37TbHNL+AYLuOdCLjDy2KrqzcDtDrAJ2e6nlLn eg89jGNHyMR1tupLW5ILnMW3cADihDK46gkavOM9eadxQ1zyokTSfDF75s+S/Q+H YDjPNNHYwfPSi81dsha2xyZorwxaD0w7m/FgGAJ2Xx+pEXQga4IMcb/kHtPDQ0ZM D9Kixk5sy22bmo4J2q7TwV3onTCtgd30lQhgz6VaMnGxjHFfZJZ4313pjaxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrG5WoGWqzLJcbfOjO0PF6PLim4wHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZl6REcV6NIXzWHUDE89t7YL2QFjgKK+wE7 UrMZkBJwDzfN1bg09UNmW269dbO/svATwR77/fyhTaOyAWilAi8ZqZDLbFJeQ3TB 81s8GzS++KR1WO+Eq+ibh8D58yW8FRZ6jAwx1nuD7bsP6UGhNva6sXpBTn7BJtwD GaUrYWufa+NceAlUuq4K6kW4AUYjxDCMwgxbJ5ZP1QtnqxpD6Xuv188zZszz/Cti GCZhb172X4GPB5fvJCGlPfcrODIw6vuyflZ6Emccu4SXM4sxXpamZOzRZjAt6DRa i4B+7CcBgS64SVtGU31LtqLQ0EkNMHbypks+x3MlgjIgaUI8vbg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:20 2026 by rpki-client