This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json)
Hash identifier: l4T5MGhRNq0GdH2VJYvqsxrc/bFmZeUx9sLgBiJjVYg=
Subject key identifier: DB:BE:C8:A4:87:E9:F2:63:BA:FA:08:7E:64:21:9B:19:98:A6:54:6A
Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9
Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9
Certificate serial: 1AB2FC23A336818F6ACA250CC39BE30BE5804B3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
Manifest number: F9
Signing time: Mon 26 Jan 2026 01:30:53 +0000
Manifest this update: Mon 26 Jan 2026 01:25:53 +0000
Manifest next update: Thu 29 Jan 2026 03:30:53 +0000
Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: bfio5gy1vVeYQ7foHH47v2r7JGyTSLaxhhc4aFdDwpQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl
rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b2:fc:23:a3:36:81:8f:6a:ca:25:0c:c3:9b:e3:0b:e5:80:4b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9
Validity
Not Before: Jan 26 01:25:53 2026 GMT
Not After : Jan 29 03:30:53 2026 GMT
Subject: CN=DBBEC8A487E9F263BAFA087E64219B1998A6546A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:eb:05:3b:cb:1a:e4:e1:09:d9:e2:9a:5b:
05:7d:9d:10:f4:ff:7d:aa:99:29:a1:90:dd:d5:02:
59:6e:cb:ac:d8:73:81:e0:94:cf:00:f7:a8:c1:34:
28:7f:52:ae:a3:e9:12:29:4e:c6:f7:48:1c:c1:52:
64:a1:78:75:fa:07:62:71:0b:89:cd:67:2a:a5:48:
10:e3:ca:f9:17:91:9f:0b:1a:b9:31:9e:11:f4:e7:
40:29:8b:21:07:9f:53:46:b4:80:69:83:fd:90:a7:
a9:2d:af:14:8b:32:75:71:ec:b7:97:0a:e0:31:74:
a1:e7:38:71:f4:98:20:f4:28:9a:11:19:ec:08:a0:
41:c2:df:3d:3a:15:8b:47:e9:d1:ea:bf:01:8f:86:
f8:7e:5c:13:01:59:01:5c:cf:34:4d:46:fb:8a:b9:
8c:51:3b:9f:7e:51:58:84:3c:16:2a:3e:39:9a:ae:
c6:68:7d:89:3e:98:07:5a:2f:10:16:3b:d7:9b:9a:
71:f5:cc:74:60:25:98:d5:60:84:85:fb:2b:68:35:
91:20:c6:30:0c:63:d9:f5:bb:cd:16:e5:3a:a7:0a:
8e:68:8c:12:be:01:a0:17:03:45:a1:f8:68:e6:b6:
8b:66:d3:75:a2:7c:71:0e:1f:84:b8:85:f3:0e:76:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:C8:A4:87:E9:F2:63:BA:FA:08:7E:64:21:9B:19:98:A6:54:6A
X509v3 Authority Key Identifier:
keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6f:d6:99:6f:4d:32:53:b0:04:77:8f:c9:7e:d3:bd:57:53:
5c:67:c4:69:60:2f:03:c0:1d:05:a4:57:4b:dc:aa:6b:3e:a0:
c1:31:50:e8:4f:5a:80:59:6c:64:c2:13:37:aa:08:3f:69:e6:
47:3c:09:75:03:60:c9:28:d6:51:0c:78:e8:b1:0c:b2:19:ca:
60:1d:2a:ac:93:3d:48:3a:4e:89:19:f0:d8:72:f5:22:54:5e:
5f:48:b3:ce:91:e4:55:a4:79:c9:39:9b:fa:6e:8a:3f:43:35:
c6:61:e7:55:47:9a:d1:d9:4f:c8:40:a2:38:1a:89:e6:b5:37:
83:d7:cb:6f:3e:71:d5:83:bb:5b:cc:20:b8:74:28:f1:72:e3:
a0:3a:cc:1d:5b:80:1f:98:ff:99:e4:b3:a9:38:f4:3c:70:e4:
c6:28:d2:5a:a2:57:66:26:b2:2f:cd:ac:60:b0:3d:d2:c7:89:
88:9c:05:1d:1c:51:68:0f:e0:e6:08:10:d3:a8:2a:df:38:17:
d6:a4:a8:68:92:5f:5b:14:2a:16:e8:60:b4:85:5b:2c:fe:4a:
4c:86:cd:76:3e:dd:16:d0:6e:cd:dd:80:d3:61:ba:66:06:8f:
d7:0c:75:0f:8b:c9:e1:55:f4:aa:a3:e9:ed:42:85:1f:a4:5e:
4f:d2:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:35 2026 by rpki-client