This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: hf526WV9DKlrhyK2LYRJ0wfxFhsTdTuaTpmCv1aPMB0= Subject key identifier: D1:B3:20:6A:49:25:6D:03:3D:57:06:F3:10:6E:6D:4D:F6:30:48:8E Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 1561EA49C9E0021778DAF308FA9398C9D7C58CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01CB Signing time: Sun 25 Jan 2026 12:42:22 +0000 Manifest this update: Sun 25 Jan 2026 12:37:22 +0000 Manifest next update: Wed 28 Jan 2026 17:57:22 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: JaUrvzsC48sGgo6t/8V56h/3RhAryL32k2OarONQk4Y=) 2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 3: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: RAmd+01hE5AEdymwmTjOWj0img9osBbMmXBBiPx3i88=) 4: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: Zv8fuUsXlNcSMomK2OEOO59UGappsLZu9bjdvi4DOP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:61:ea:49:c9:e0:02:17:78:da:f3:08:fa:93:98:c9:d7:c5:8c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Jan 25 12:37:22 2026 GMT Not After : Jan 28 17:57:22 2026 GMT Subject: CN=D1B3206A49256D033D5706F3106E6D4DF630488E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:33:8d:3d:47:d0:44:eb:8b:fb:19:9c:a7: fd:63:46:7e:80:2b:dd:22:18:52:83:11:b5:7d:15: e2:64:f9:4a:42:39:91:13:a3:d1:08:92:71:91:eb: 02:29:af:17:4e:f2:06:dd:12:6f:ca:f4:ce:cd:58: ed:18:6f:62:d9:a1:42:2d:90:a5:3e:3f:8f:75:a1: 63:c0:da:6c:e4:56:da:ab:69:e5:b2:17:d2:28:a4: dc:44:61:f8:5f:2f:4a:4e:b8:2a:68:56:2b:db:ab: f8:49:7d:55:0d:9f:90:78:11:4f:cc:81:64:d7:f6: f3:07:4d:ae:cd:57:e8:26:0f:3f:c3:6b:aa:44:ea: c1:1c:52:91:6d:ce:0f:26:a8:2d:7c:b7:b7:3b:e9: ea:15:92:4d:71:04:44:b2:bb:c6:ba:8d:c2:65:24: fb:40:f2:e6:93:c2:74:43:0e:8c:6d:67:1d:59:78: fc:39:c8:f9:58:72:09:0e:51:e0:33:f8:3d:d9:ca: 87:62:87:b8:09:5e:b5:31:ef:c2:d6:04:38:d3:3b: 03:d8:1c:1d:af:16:91:68:1c:18:b8:36:47:ab:f8: 07:53:6d:df:3c:c4:bb:75:1b:92:ed:1c:59:b3:c2: 3b:b4:15:d4:27:84:02:fd:29:d1:c6:68:3f:95:27: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:20:6A:49:25:6D:03:3D:57:06:F3:10:6E:6D:4D:F6:30:48:8E X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e5:cc:72:1d:98:d4:dd:ad:13:a5:5c:3b:76:8a:7d:bf:43: b0:ca:43:5c:49:5f:02:37:6a:f4:42:ff:82:cf:51:f2:5a:1b: df:f9:b0:98:5f:4f:7d:a2:11:fc:85:dc:1c:5c:a7:86:74:27: 19:6c:34:1c:17:97:c1:e9:38:65:72:2c:bf:0a:08:39:1b:c7: a0:69:07:8d:8a:1d:42:e2:2c:73:49:f4:c7:34:d1:49:a8:eb: e1:ad:1d:d9:01:78:6f:2a:22:dd:db:97:fc:d2:c2:db:3c:4e: 08:40:19:dc:2f:c7:4f:b5:dc:1a:18:68:48:2e:78:50:7c:24: b6:f1:3e:0b:42:9d:65:2f:20:1c:a6:74:6e:45:46:5a:d7:6e: ce:d2:2c:7c:eb:18:a6:5d:d6:82:cb:44:c3:1b:0b:1d:d7:72: 75:23:c1:cb:25:05:cc:e1:f2:e9:13:c6:04:e5:63:4a:54:51: bd:e7:09:99:4e:f5:a8:fb:4a:b3:fc:d0:0d:cd:f1:40:e6:f6: f9:77:38:50:23:a9:be:59:f8:f0:0e:4a:61:82:14:98:17:23: 36:97:7a:a9:08:cf:2a:b5:84:bf:29:5b:a3:9c:5e:0c:0f:c3: b6:69:a5:7d:95:32:05:c6:5c:17:06:85:00:09:10:ac:b4:85: 81:1e:3b:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWHqScngAhd42vMI+pOYydfFjKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNjAxMjUxMjM3MjJaFw0yNjAxMjgxNzU3MjJaMDMxMTAvBgNV BAMTKEQxQjMyMDZBNDkyNTZEMDMzRDU3MDZGMzEwNkU2RDRERjYzMDQ4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6TONPUfQROuL+xmcp/1jRn6A K90iGFKDEbV9FeJk+UpCOZETo9EIknGR6wIprxdO8gbdEm/K9M7NWO0Yb2LZoUIt kKU+P491oWPA2mzkVtqraeWyF9IopNxEYfhfL0pOuCpoVivbq/hJfVUNn5B4EU/M gWTX9vMHTa7NV+gmDz/Da6pE6sEcUpFtzg8mqC18t7c76eoVkk1xBESyu8a6jcJl JPtA8uaTwnRDDoxtZx1ZePw5yPlYcgkOUeAz+D3Zyodih7gJXrUx78LWBDjTOwPY HB2vFpFoHBi4Nker+AdTbd88xLt1G5LtHFmzwju0FdQnhAL9KdHGaD+VJ1EtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0bMgakklbQM9VwbzEG5tTfYwSI4wHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHlzHIdmNTdrROlXDt2in2/Q7DKQ1xJXwI3 avRC/4LPUfJaG9/5sJhfT32iEfyF3Bxcp4Z0JxlsNBwXl8HpOGVyLL8KCDkbx6Bp B42KHULiLHNJ9Mc00Umo6+GtHdkBeG8qIt3bl/zSwts8TghAGdwvx0+13BoYaEgu eFB8JLbxPgtCnWUvIBymdG5FRlrXbs7SLHzrGKZd1oLLRMMbCx3XcnUjwcslBczh 8ukTxgTlY0pUUb3nCZlO9aj7SrP80A3N8UDm9vl3OFAjqb5Z+PAOSmGCFJgXIzaX eqkIzyq1hL8pW6OcXgwPw7ZppX2VMgXGXBcGhQAJEKy0hYEeO4w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:39 2026 by rpki-client