This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: muesR08ZCyco6nEv+6aavxQ2NQ+JzHpD4M1L0WtnMkM= Subject key identifier: CF:DA:C2:9C:BF:92:9C:E6:03:E8:28:0F:FA:6B:54:84:ED:F6:88:6F Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 50C7FB521CB96844AA6F68F1BF6E2CF03B53BA52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 013D Signing time: Fri 23 Jan 2026 18:41:23 +0000 Manifest this update: Fri 23 Jan 2026 18:36:23 +0000 Manifest next update: Mon 26 Jan 2026 21:36:23 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: J+OM6/lv4SegtOxpDNAvN7S/NpzTqwueDcO/v2rk71I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c7:fb:52:1c:b9:68:44:aa:6f:68:f1:bf:6e:2c:f0:3b:53:ba:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Jan 23 18:36:23 2026 GMT Not After : Jan 26 21:36:23 2026 GMT Subject: CN=CFDAC29CBF929CE603E8280FFA6B5484EDF6886F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:8f:6b:88:41:5c:2f:c4:8d:a2:c8:b2:32: 37:bd:2f:3b:32:7e:41:e0:dd:16:5f:b2:1d:00:dc: e1:37:24:c4:e7:31:52:09:f5:b4:0f:94:39:11:a1: d3:2d:36:11:f1:94:be:3d:81:62:ca:56:83:84:30: db:57:10:b5:10:15:21:2a:8a:b6:04:23:26:82:9b: 26:55:59:17:5f:65:6f:39:08:08:25:48:bc:16:02: 0f:de:2b:a7:0a:f5:fa:2a:3f:27:f8:b9:9c:46:97: b7:9c:62:2c:52:62:ce:d9:f8:ae:4b:66:81:46:fe: 8c:ee:c5:5a:a5:f9:46:c0:68:9e:1d:c1:1e:c2:54: d5:ea:f3:44:79:ec:40:1e:06:6f:72:38:d7:03:63: ba:fe:fa:db:37:de:5f:cf:ff:31:b6:2e:34:7a:44: 5e:5b:01:c9:66:ab:44:4c:28:ca:46:e1:07:11:77: 1f:6c:91:7e:e7:04:26:d0:d5:51:b0:2c:42:3f:33: 35:e4:dd:44:18:6b:5a:3e:4c:17:e7:b7:60:78:75: 11:3b:42:2c:4d:60:c1:ec:f9:f6:b8:38:97:78:1a: 94:47:a1:c8:4a:18:c1:80:ad:ea:a3:73:47:c3:37: bd:e9:a5:59:68:37:0a:bc:55:f4:aa:86:cc:6c:8d: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:C2:9C:BF:92:9C:E6:03:E8:28:0F:FA:6B:54:84:ED:F6:88:6F X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:92:c4:78:c0:53:c5:e6:00:7a:52:29:5c:45:90:32:72:ed: 11:14:a4:b0:f6:00:fb:28:f4:db:ec:ee:99:c6:7b:78:94:70: 1e:17:b0:1e:4c:6c:89:a9:05:fe:b2:b8:39:46:b4:ee:f7:6b: 54:58:3e:4c:93:5b:86:3d:6e:46:56:cd:3a:44:34:17:e6:11: 80:e9:40:03:10:4f:44:f7:f3:3c:be:ab:48:7b:f0:0d:fd:2d: c3:35:3d:fd:56:df:88:9f:c5:45:a3:7a:94:a7:4f:cc:f9:33: e9:17:b1:31:f4:32:47:92:28:07:54:d8:87:f3:cb:a4:1e:09: 06:28:b6:50:c8:1a:a2:0e:e2:06:3c:47:80:8e:79:0a:1b:2d: b3:0b:1a:d9:87:2e:7e:e1:c8:95:92:7f:3a:7c:b7:6f:71:3d: 50:3b:6d:c5:fd:35:30:e9:6c:0c:07:ed:5c:a3:26:12:b2:d9: 49:b9:db:b7:c8:58:91:b7:34:be:3b:17:59:80:77:ff:bf:92: 03:b1:71:fd:80:f9:77:28:f2:91:2e:c9:9e:60:8c:9d:80:20: a0:84:c6:37:24:06:16:0e:55:86:43:56:a4:7d:52:54:7e:8a: b1:21:4d:31:68:de:b0:f6:de:61:2d:6c:52:b5:ce:14:9f:2c: 9b:72:24:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMf7Uhy5aESqb2jxv24s8DtTulIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNjAxMjMxODM2MjNaFw0yNjAxMjYyMTM2MjNaMDMxMTAvBgNV BAMTKENGREFDMjlDQkY5MjlDRTYwM0U4MjgwRkZBNkI1NDg0RURGNjg4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGY9riEFcL8SNosiyMje9Lzsy fkHg3RZfsh0A3OE3JMTnMVIJ9bQPlDkRodMtNhHxlL49gWLKVoOEMNtXELUQFSEq irYEIyaCmyZVWRdfZW85CAglSLwWAg/eK6cK9foqPyf4uZxGl7ecYixSYs7Z+K5L ZoFG/ozuxVql+UbAaJ4dwR7CVNXq80R57EAeBm9yONcDY7r++ts33l/P/zG2LjR6 RF5bAclmq0RMKMpG4QcRdx9skX7nBCbQ1VGwLEI/MzXk3UQYa1o+TBfnt2B4dRE7 QixNYMHs+fa4OJd4GpRHochKGMGAreqjc0fDN73ppVloNwq8VfSqhsxsjUj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9rCnL+SnOYD6CgP+mtUhO32iG8wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2SxHjAU8XmAHpSKVxFkDJy7REUpLD2APso 9Nvs7pnGe3iUcB4XsB5MbImpBf6yuDlGtO73a1RYPkyTW4Y9bkZWzTpENBfmEYDp QAMQT0T38zy+q0h78A39LcM1Pf1W34ifxUWjepSnT8z5M+kXsTH0MkeSKAdU2Ifz y6QeCQYotlDIGqIO4gY8R4COeQobLbMLGtmHLn7hyJWSfzp8t29xPVA7bcX9NTDp bAwH7VyjJhKy2Um527fIWJG3NL47F1mAd/+/kgOxcf2A+Xco8pEuyZ5gjJ2AIKCE xjckBhYOVYZDVqR9UlR+irEhTTFo3rD23mEtbFK1zhSfLJtyJLY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:31 2026 by rpki-client