This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: KxSV9WRRRS7yjzdhf7PInFAHtNzJqb97MKs4sabhmuA= Subject key identifier: 89:8A:2C:AD:3B:B8:72:85:28:31:92:88:A2:60:EB:8F:E4:42:02:A5 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 6A1080F0E9C1523D617CBF48965F4F976A48DD92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: ED Signing time: Sat 24 Jan 2026 02:40:48 +0000 Manifest this update: Sat 24 Jan 2026 02:35:48 +0000 Manifest next update: Tue 27 Jan 2026 11:35:48 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: lkeXGR7RVuld5caPP76zkALABe0hNT92d6MqjzdueGc=) 2: 3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (hash: XacJ1PvQ+Qq6w95SUtj58pV5mUVjGwreZNIi5mtgsCE=) 3: 3130332e3137342e36342e302f32342d3234203d3e20313437313236.roa (hash: jeWguCwm76CmsJXg1ZgYbmX+MUCuiZr0yr59XcYu9Ow=) 4: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:10:80:f0:e9:c1:52:3d:61:7c:bf:48:96:5f:4f:97:6a:48:dd:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Jan 24 02:35:48 2026 GMT Not After : Jan 27 11:35:48 2026 GMT Subject: CN=898A2CAD3BB8728528319288A260EB8FE44202A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:c1:62:db:22:d6:48:bb:73:d9:37:f4:0f: 35:dd:a3:b9:97:97:c9:62:7f:dc:8e:09:a1:13:eb: 14:62:74:6d:68:98:86:d9:49:e1:9a:4e:47:16:ba: 9c:8e:33:47:88:47:0d:4b:58:75:d4:c5:d9:f2:9f: c5:f6:b1:13:73:43:f6:b4:75:97:ad:30:78:79:c1: bc:1d:3b:8f:47:f6:9a:71:89:7c:57:fc:c1:8d:9d: 61:ac:43:a0:3b:13:6c:c8:aa:b6:4e:7e:71:20:32: 3a:02:8a:05:93:7a:16:f7:19:8c:d1:df:c2:6e:b2: 02:db:88:3b:51:66:71:99:b5:22:9a:6d:8b:2d:8e: 0f:c0:3d:b5:6d:0c:63:d2:b9:44:ee:bc:1b:0a:6f: cf:8d:e9:e1:b6:e7:3b:91:9c:e6:2f:51:b4:cb:98: 4a:1c:69:29:fb:cc:53:0c:b5:bf:3b:d5:97:95:ce: 7c:1d:9d:bc:45:42:4f:87:22:d6:71:e6:7e:5c:e2: a7:ce:4b:d0:95:7f:c5:b3:86:37:f3:5c:5e:17:7a: f2:bb:04:92:a2:4b:04:1c:f8:67:81:62:2b:c4:95: 72:e6:dc:02:5b:73:fb:69:9d:a0:ef:44:9f:09:eb: df:39:a3:e1:00:0c:a7:0b:47:09:33:62:32:72:2e: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:2C:AD:3B:B8:72:85:28:31:92:88:A2:60:EB:8F:E4:42:02:A5 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:19:95:fa:a3:3b:9a:4c:2e:43:cd:f5:b9:3c:aa:15:5d:13: 33:38:c5:7b:a2:c1:d1:c3:55:0f:5b:f2:17:cb:ea:3e:ad:e5: 07:1d:8d:00:e7:03:0c:9a:1d:0f:68:8e:4a:eb:53:ae:25:68: b0:d9:bf:6c:4d:46:de:8f:4f:8a:c2:91:64:96:0d:8e:b2:a3: f3:07:ef:cc:57:03:13:2d:9c:a1:f3:97:ba:ea:da:0f:1e:6e: 8a:9b:ec:39:61:2a:77:ed:34:2f:6b:59:e4:b9:35:04:00:0c: d1:5d:f0:d5:c9:65:de:18:43:a7:69:08:1e:32:4c:31:18:f5: 6f:3b:57:dd:71:b8:72:1a:47:29:a6:a4:2f:6d:56:a6:2b:f5: ca:de:d0:78:51:0f:66:f6:58:e7:e1:29:56:90:d3:42:b8:ce: 8c:0d:8d:61:5d:2c:34:60:f1:be:57:a7:9e:2d:ab:b9:11:a7: 51:ec:d9:58:0d:99:b1:89:9b:77:59:da:be:5b:54:9a:2e:02: 58:ba:57:14:66:dc:d9:7c:48:9b:e5:9d:b7:fc:ef:5c:ce:b0: 1d:d1:60:45:83:b6:48:3e:2e:41:40:f4:05:d7:8c:58:69:9c: 00:b9:13:9f:0d:3b:e2:d4:31:ec:e8:aa:71:62:fc:61:b9:e4: e6:ce:bc:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahCA8OnBUj1hfL9Ill9Pl2pI3ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNjAxMjQwMjM1NDhaFw0yNjAxMjcxMTM1NDhaMDMxMTAvBgNV BAMTKDg5OEEyQ0FEM0JCODcyODUyODMxOTI4OEEyNjBFQjhGRTQ0MjAyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwcFi2yLWSLtz2Tf0DzXdo7mX l8lif9yOCaET6xRidG1omIbZSeGaTkcWupyOM0eIRw1LWHXUxdnyn8X2sRNzQ/a0 dZetMHh5wbwdO49H9ppxiXxX/MGNnWGsQ6A7E2zIqrZOfnEgMjoCigWTehb3GYzR 38JusgLbiDtRZnGZtSKabYstjg/APbVtDGPSuUTuvBsKb8+N6eG25zuRnOYvUbTL mEocaSn7zFMMtb871ZeVznwdnbxFQk+HItZx5n5c4qfOS9CVf8WzhjfzXF4XevK7 BJKiSwQc+GeBYivElXLm3AJbc/tpnaDvRJ8J6985o+EADKcLRwkzYjJyLgvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYosrTu4coUoMZKIomDrj+RCAqUwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4ZlfqjO5pMLkPN9bk8qhVdEzM4xXuiwdHD VQ9b8hfL6j6t5QcdjQDnAwyaHQ9ojkrrU64laLDZv2xNRt6PT4rCkWSWDY6yo/MH 78xXAxMtnKHzl7rq2g8eboqb7DlhKnftNC9rWeS5NQQADNFd8NXJZd4YQ6dpCB4y TDEY9W87V91xuHIaRymmpC9tVqYr9cre0HhRD2b2WOfhKVaQ00K4zowNjWFdLDRg 8b5Xp54tq7kRp1Hs2VgNmbGJm3dZ2r5bVJouAli6VxRm3Nl8SJvlnbf871zOsB3R YEWDtkg+LkFA9AXXjFhpnAC5E58NO+LUMezoqnFi/GG55ObOvM4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:26 2026 by rpki-client