This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: KSQhB9ezrViocundqhj4yUQ2gQUDFBdGREkTnBUi244= Subject key identifier: 13:2C:5F:94:B7:7C:5D:54:0C:DD:EC:72:26:00:A2:40:03:85:78:7E Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 68B94AEAC0DE1281E6CFF055F622C761502F4508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 014E Signing time: Sat 24 Jan 2026 10:40:00 +0000 Manifest this update: Sat 24 Jan 2026 10:35:00 +0000 Manifest next update: Tue 27 Jan 2026 15:27:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: lk7YlxLa+lOuZvEYVpBKjNRJjCCeGwL2j1O+OqpCW1c=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b9:4a:ea:c0:de:12:81:e6:cf:f0:55:f6:22:c7:61:50:2f:45:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Jan 24 10:35:00 2026 GMT Not After : Jan 27 15:27:00 2026 GMT Subject: CN=132C5F94B77C5D540CDDEC722600A2400385787E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:9e:f4:99:b6:51:8b:34:35:32:6d:98:f6: d7:93:c6:c4:fc:2f:ec:00:19:11:bc:b5:9d:20:d8: 59:10:9d:e7:5d:45:9b:e1:bc:b4:48:65:ed:b5:65: 40:50:04:99:e5:9e:4a:b7:07:3f:fd:47:f7:3a:fd: bc:20:93:7d:b8:3c:0d:27:cf:c1:0b:ab:6d:1a:dd: 72:3b:05:c6:8d:6d:4b:99:18:9c:c0:57:1c:f9:07: 2e:0b:c8:c0:09:be:53:d4:96:e0:b2:d6:79:0c:b8: 63:16:cd:f0:05:26:dc:c9:d6:d8:30:63:20:2a:99: e5:aa:78:4d:46:57:76:4b:c8:b8:1c:4f:ce:76:e0: 8a:06:af:f7:73:ea:eb:7d:8e:e7:51:c4:74:8f:e5: e5:eb:b0:1f:c7:cc:b3:91:d6:8e:1e:06:02:ce:5a: fe:a7:ec:d9:ed:66:51:13:7a:2f:28:8f:6d:69:6a: 4a:69:ea:d3:34:f1:14:e5:8f:d6:9c:fe:f0:98:69: a5:e7:ef:36:a5:7d:97:4a:04:b0:38:72:95:69:ba: 7a:07:f0:f1:54:1a:cf:ef:b3:50:57:c5:b8:bd:ee: 16:7b:0d:52:3e:e0:fd:71:e1:1b:af:bc:75:f6:87: ab:b8:20:94:67:bf:e0:ce:1e:2e:d9:85:eb:26:85: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2C:5F:94:B7:7C:5D:54:0C:DD:EC:72:26:00:A2:40:03:85:78:7E X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:37:27:4c:ae:1a:2b:6a:48:4f:ce:09:5c:72:6b:16:cb:90: 19:4a:fc:5e:ea:ed:fd:ec:ef:8b:99:19:35:dc:52:49:84:f1: cf:21:75:a5:11:f9:d3:71:77:63:86:4b:5e:41:ca:8e:c2:6d: 4c:7f:55:07:e9:41:59:96:45:b3:d1:61:1d:d1:d0:5a:1b:04: d1:46:7a:2b:c9:9e:df:9b:43:d9:0e:92:82:93:c6:15:2a:78: 43:53:32:de:01:65:6a:a9:8f:65:da:57:e0:75:25:54:cf:78: b1:99:33:e7:44:0f:d9:ea:cb:d6:e4:dc:4e:e1:59:47:c3:9f: f7:90:31:a6:cf:45:c1:63:df:2c:01:1b:7a:89:00:fd:0f:4c: 1e:1e:6c:6d:99:38:af:3b:83:ed:47:08:6c:85:1e:7c:96:1f: 6c:96:7b:e8:58:29:ae:82:41:8e:41:67:d4:a7:3e:22:a7:e7: 00:07:bd:9e:4b:63:de:95:0b:e9:7f:2a:2e:f1:21:32:6c:b9: f0:d7:c6:b3:a2:98:c6:13:3f:fe:07:9a:1e:ef:f1:5e:c1:06: 04:a4:d0:6e:01:86:7b:61:3c:b4:ab:63:66:b4:b7:1d:f2:c3: 29:74:9f:a7:28:0a:a2:5e:99:1a:c8:78:f8:c3:a0:16:cf:0a: 9e:0b:6f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLlK6sDeEoHmz/BV9iLHYVAvRQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNjAxMjQxMDM1MDBaFw0yNjAxMjcxNTI3MDBaMDMxMTAvBgNV BAMTKDEzMkM1Rjk0Qjc3QzVENTQwQ0RERUM3MjI2MDBBMjQwMDM4NTc4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gp70mbZRizQ1Mm2Y9teTxsT8 L+wAGRG8tZ0g2FkQneddRZvhvLRIZe21ZUBQBJnlnkq3Bz/9R/c6/bwgk324PA0n z8ELq20a3XI7BcaNbUuZGJzAVxz5By4LyMAJvlPUluCy1nkMuGMWzfAFJtzJ1tgw YyAqmeWqeE1GV3ZLyLgcT8524IoGr/dz6ut9judRxHSP5eXrsB/HzLOR1o4eBgLO Wv6n7NntZlETei8oj21pakpp6tM08RTlj9ac/vCYaaXn7zalfZdKBLA4cpVpunoH 8PFUGs/vs1BXxbi97hZ7DVI+4P1x4RuvvHX2h6u4IJRnv+DOHi7ZhesmhfqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEyxflLd8XVQM3exyJgCiQAOFeH4wHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC43J0yuGitqSE/OCVxyaxbLkBlK/F7q7f3s 74uZGTXcUkmE8c8hdaUR+dNxd2OGS15Byo7CbUx/VQfpQVmWRbPRYR3R0FobBNFG eivJnt+bQ9kOkoKTxhUqeENTMt4BZWqpj2XaV+B1JVTPeLGZM+dED9nqy9bk3E7h WUfDn/eQMabPRcFj3ywBG3qJAP0PTB4ebG2ZOK87g+1HCGyFHnyWH2yWe+hYKa6C QY5BZ9SnPiKn5wAHvZ5LY96VC+l/Ki7xITJsufDXxrOimMYTP/4Hmh7v8V7BBgSk 0G4BhnthPLSrY2a0tx3ywyl0n6coCqJemRrIePjDoBbPCp4Lb4E= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:24 2026 by rpki-client