This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: kvUPhjYCcTkzTbZbqizkQRm9DqavwcM9JOmaJfUO3xQ= Subject key identifier: 19:A8:84:D7:06:F4:4D:C5:AF:FF:BF:89:17:C3:FA:2B:4A:7E:54:3A Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 391979D460FE87E3AE9A5DF07E6BDA1C67314E72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: B4 Signing time: Sun 25 Jan 2026 08:42:27 +0000 Manifest this update: Sun 25 Jan 2026 08:37:27 +0000 Manifest next update: Wed 28 Jan 2026 16:14:27 +0000 Files and hashes: 1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: m7l4zq2rZbYlf9NM1JxI2w1C12z/ybEYMxFQc/aOFWM=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) 3: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:19:79:d4:60:fe:87:e3:ae:9a:5d:f0:7e:6b:da:1c:67:31:4e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Jan 25 08:37:27 2026 GMT Not After : Jan 28 16:14:27 2026 GMT Subject: CN=19A884D706F44DC5AFFFBF8917C3FA2B4A7E543A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:22:14:d6:30:09:ea:e7:64:9a:6f:72:25: 41:13:57:a1:da:0a:38:0c:bb:52:af:2e:14:5a:9d: 36:ce:71:42:55:b4:55:0b:32:5e:50:fe:b2:53:85: c7:27:b6:24:c8:db:72:35:2e:e1:12:c6:a1:13:88: 6c:a4:0f:dc:88:da:67:4e:fe:97:33:39:f3:2c:51: c7:fe:f0:03:ef:01:3a:72:19:cf:ba:a3:02:96:c9: 85:6a:6d:bf:7c:a7:1a:21:58:82:63:97:1d:56:1e: d6:2a:51:f2:b0:f7:43:fb:e5:ae:45:8d:fe:7f:e2: 01:53:31:7e:6b:e1:f6:db:0b:1f:83:e5:0b:a5:f5: 69:2e:96:37:cf:cf:b6:87:d1:b9:9a:e2:89:db:3f: b8:db:c7:5d:1c:ad:f6:4f:f1:c9:4d:2c:32:fc:5e: 11:f7:f8:75:95:69:50:d9:d6:b6:de:c4:c6:59:dc: 49:8f:da:2a:26:f5:52:f7:26:29:3f:8f:aa:84:f3: f5:8e:ad:71:c8:f3:6d:df:57:97:ef:09:8f:07:02: 86:c6:83:19:f2:1d:5d:91:0b:c5:ab:20:22:1c:e3: cf:92:c0:ce:86:33:e0:16:42:f8:ec:12:24:09:4f: 28:f4:b9:1a:98:b5:37:05:76:46:69:12:ea:6e:e5: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A8:84:D7:06:F4:4D:C5:AF:FF:BF:89:17:C3:FA:2B:4A:7E:54:3A X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:56:f9:3c:4b:09:82:f9:b1:22:99:13:88:ef:26:6e:5b:ac: ba:65:b2:cd:10:17:eb:be:49:fa:a0:1c:94:8b:46:0f:ae:d8: 51:26:50:f1:ad:b9:e5:45:de:fa:f3:fb:de:0b:32:d5:d5:85: 75:5c:35:9c:3f:4c:70:44:54:6f:3c:91:21:39:33:8d:21:d1: e7:4b:b1:45:a1:fc:b4:39:99:cb:ad:f1:05:66:4f:2d:3d:90: dd:ab:93:6b:f9:c2:ca:f4:77:5e:ee:e6:c9:9d:cb:50:27:fd: de:20:94:10:76:c9:bb:12:64:ae:8c:cf:d4:ff:20:f0:03:d9: c2:2f:00:ea:94:58:67:74:17:40:fd:0a:2d:23:26:31:74:25: 1b:f7:c2:ed:6a:5c:8a:41:8d:4d:08:1b:6e:b9:58:2b:57:50: db:85:c0:1d:5f:00:48:48:56:94:ee:de:24:20:2b:39:cf:c2: dc:4a:2c:23:1e:01:08:88:ad:62:8b:7c:74:37:2a:71:e4:09: 41:38:81:e1:40:ee:93:df:b3:64:18:0b:98:80:9a:c5:3c:8a: 7a:ef:2b:fe:cb:09:51:00:82:8f:7c:3f:01:44:e3:e0:0c:d0: d6:4d:68:89:21:ca:b3:57:44:cb:8f:f7:cb:ba:22:fa:1a:44: bd:b2:87:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORl51GD+h+Ouml3wfmvaHGcxTnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNjAxMjUwODM3MjdaFw0yNjAxMjgxNjE0MjdaMDMxMTAvBgNV BAMTKDE5QTg4NEQ3MDZGNDREQzVBRkZGQkY4OTE3QzNGQTJCNEE3RTU0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROyIU1jAJ6udkmm9yJUETV6Ha CjgMu1KvLhRanTbOcUJVtFULMl5Q/rJThccntiTI23I1LuESxqETiGykD9yI2mdO /pczOfMsUcf+8APvATpyGc+6owKWyYVqbb98pxohWIJjlx1WHtYqUfKw90P75a5F jf5/4gFTMX5r4fbbCx+D5Qul9WkuljfPz7aH0bma4onbP7jbx10crfZP8clNLDL8 XhH3+HWVaVDZ1rbexMZZ3EmP2iom9VL3Jik/j6qE8/WOrXHI823fV5fvCY8HAobG gxnyHV2RC8WrICIc48+SwM6GM+AWQvjsEiQJTyj0uRqYtTcFdkZpEupu5XcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGaiE1wb0TcWv/7+JF8P6K0p+VDowHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1W+TxLCYL5sSKZE4jvJm5brLplss0QF+u+ SfqgHJSLRg+u2FEmUPGtueVF3vrz+94LMtXVhXVcNZw/THBEVG88kSE5M40h0edL sUWh/LQ5mcut8QVmTy09kN2rk2v5wsr0d17u5smdy1An/d4glBB2ybsSZK6Mz9T/ IPAD2cIvAOqUWGd0F0D9Ci0jJjF0JRv3wu1qXIpBjU0IG265WCtXUNuFwB1fAEhI VpTu3iQgKznPwtxKLCMeAQiIrWKLfHQ3KnHkCUE4geFA7pPfs2QYC5iAmsU8inrv K/7LCVEAgo98PwFE4+AM0NZNaIkhyrNXRMuP98u6IvoaRL2yh84= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:43 2026 by rpki-client