This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: hQ0bwi/sqTeAu0vzxdCZbE9xhj5UdcHh+w4+jnJOnYI= Subject key identifier: 41:EF:2A:3F:D0:EA:84:99:93:C1:83:33:37:3C:37:D6:18:30:DF:B9 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 20EE538DC0E53581318FA9927EC31D5E562AA9F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 0542 Signing time: Sun 25 Jan 2026 05:21:51 +0000 Manifest this update: Sun 25 Jan 2026 05:16:51 +0000 Manifest next update: Wed 28 Jan 2026 07:13:51 +0000 Files and hashes: 1: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) 2: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: 2lDEeJLu7VZ6XAxzhVp6E+GFxRJHOLiVirLdDGUWBsM=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ee:53:8d:c0:e5:35:81:31:8f:a9:92:7e:c3:1d:5e:56:2a:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Jan 25 05:16:51 2026 GMT Not After : Jan 28 07:13:51 2026 GMT Subject: CN=41EF2A3FD0EA849993C18333373C37D61830DFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:0d:88:09:75:bc:ff:b8:0e:c5:60:e6:67: cb:c5:cc:85:51:0b:b5:06:c0:59:72:e7:33:91:16: 96:3e:d1:f0:34:89:dd:a6:e9:65:9a:07:e8:92:62: f3:b8:a7:4f:02:9b:a8:67:b4:12:26:dd:0a:d7:80: e7:dd:4f:80:f6:26:59:d3:5e:ce:00:5c:1a:77:19: 17:65:1c:df:ce:50:c9:cd:70:77:a8:1b:c1:a6:9b: 08:b7:de:22:51:37:25:34:65:f9:a3:be:8d:67:f4: a0:a6:c0:e7:78:37:05:db:19:d8:8b:dd:53:9b:92: f8:c9:31:6b:f5:dc:05:5e:b3:8c:d8:21:3d:f4:80: 90:56:80:69:da:9a:44:03:f0:7d:9c:ff:58:aa:10: 59:3c:99:97:a0:df:ae:13:cc:16:6a:68:02:3c:68: d2:d3:b0:c1:22:39:e5:fc:e6:b6:e3:12:d4:fc:ad: c3:71:37:9a:c6:9b:6d:3b:b8:82:44:be:5d:4c:1d: e5:55:fc:5a:5b:44:69:f6:40:6b:6a:50:6e:dc:b6: ba:3f:4f:e9:d4:70:f8:35:43:0e:66:56:28:b5:6d: 48:c1:9b:11:df:50:7a:05:87:6d:e2:fa:24:11:cb: b6:fc:4f:6d:e8:c9:df:34:ee:1a:66:31:12:77:92: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:2A:3F:D0:EA:84:99:93:C1:83:33:37:3C:37:D6:18:30:DF:B9 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:91:ed:87:49:e0:f5:9a:f8:e2:4e:6e:0b:f6:be:fa:1e:c4: b8:ea:2b:69:68:52:9d:03:74:d2:dc:3c:55:b6:5a:77:b4:a2: dd:7e:02:e3:28:e8:2d:32:ab:e0:05:11:3b:75:f5:e3:ff:72: 61:3f:bb:4f:2b:42:e5:a8:29:2d:9f:ff:21:05:21:9f:f6:21: 06:6d:e4:59:22:6d:6e:e7:d5:7a:75:26:27:1b:02:c0:b8:b0: db:08:b8:3b:7b:5a:bf:11:31:49:bc:bb:e3:19:24:1b:b4:b7: a6:e6:7c:82:6c:b4:dd:c0:40:27:e5:b1:43:0d:62:d1:1e:bb: 31:30:90:29:d4:cc:b7:17:33:55:c6:38:8c:f7:50:52:85:cd: 8b:a7:7b:a7:2b:af:66:dc:d2:d0:56:7d:e7:f2:b3:7d:af:7c: 28:ca:ca:97:52:37:c5:e1:57:6b:02:1c:82:cc:b1:b2:65:c1: 76:b3:32:e2:8c:48:6b:02:77:d8:4a:e7:d9:8a:76:64:3c:36: 86:08:ea:82:6e:9b:50:b4:c6:96:d8:9f:96:2c:9b:e2:86:fd: 2d:d6:be:b4:c4:76:0b:36:f9:d3:56:6f:e1:b6:69:98:c3:c0: 84:99:07:bf:ee:5f:cc:ff:b1:88:34:81:e0:8c:37:0c:3f:29: ae:4b:13:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIO5TjcDlNYExj6mSfsMdXlYqqfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNjAxMjUwNTE2NTFaFw0yNjAxMjgwNzEzNTFaMDMxMTAvBgNV BAMTKDQxRUYyQTNGRDBFQTg0OTk5M0MxODMzMzM3M0MzN0Q2MTgzMERGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8w2ICXW8/7gOxWDmZ8vFzIVR C7UGwFly5zORFpY+0fA0id2m6WWaB+iSYvO4p08Cm6hntBIm3QrXgOfdT4D2JlnT Xs4AXBp3GRdlHN/OUMnNcHeoG8Gmmwi33iJRNyU0Zfmjvo1n9KCmwOd4NwXbGdiL 3VObkvjJMWv13AVes4zYIT30gJBWgGnamkQD8H2c/1iqEFk8mZeg364TzBZqaAI8 aNLTsMEiOeX85rbjEtT8rcNxN5rGm207uIJEvl1MHeVV/FpbRGn2QGtqUG7ctro/ T+nUcPg1Qw5mVii1bUjBmxHfUHoFh23i+iQRy7b8T23oyd807hpmMRJ3ksrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQe8qP9DqhJmTwYMzNzw31hgw37kwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqR7YdJ4PWa+OJObgv2vvoexLjqK2loUp0D dNLcPFW2Wne0ot1+AuMo6C0yq+AFETt19eP/cmE/u08rQuWoKS2f/yEFIZ/2IQZt 5FkibW7n1Xp1JicbAsC4sNsIuDt7Wr8RMUm8u+MZJBu0t6bmfIJstN3AQCflsUMN YtEeuzEwkCnUzLcXM1XGOIz3UFKFzYune6crr2bc0tBWfefys32vfCjKypdSN8Xh V2sCHILMsbJlwXazMuKMSGsCd9hK59mKdmQ8NoYI6oJum1C0xpbYn5Ysm+KG/S3W vrTEdgs2+dNWb+G2aZjDwISZB7/uX8z/sYg0geCMNww/Ka5LE0g= -----END CERTIFICATE-----Generated at Mon Jan 26 07:35:04 2026 by rpki-client