This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: 04ZBW/NZvOFTqv8InT1ANVmgHweuXwEd+H5fX/7CyHM= Subject key identifier: 37:6B:D0:9F:94:B3:61:4C:90:6E:3E:C0:9C:84:F6:1C:07:28:7A:0F Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 0E38A859E0BCEA1F959D407D2D0EAB95520093FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 0174 Signing time: Sat 24 Jan 2026 09:51:09 +0000 Manifest this update: Sat 24 Jan 2026 09:46:09 +0000 Manifest next update: Tue 27 Jan 2026 10:48:09 +0000 Files and hashes: 1: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 2: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: GA/NGkrcrF5qqowtDAgb1GOcqWSE7BELMzD/s9CRAF4=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) 4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:38:a8:59:e0:bc:ea:1f:95:9d:40:7d:2d:0e:ab:95:52:00:93:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Jan 24 09:46:09 2026 GMT Not After : Jan 27 10:48:09 2026 GMT Subject: CN=376BD09F94B3614C906E3EC09C84F61C07287A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:ae:f5:39:6d:5b:7f:16:ea:c0:b6:01:4b: 59:b0:97:74:00:ee:66:a7:9c:66:b3:73:dc:0a:b4: 86:a0:5b:7c:2f:ee:8f:2f:a5:bd:3a:8b:e1:02:d4: 68:7c:4f:cf:97:67:ab:36:8c:da:29:36:32:be:40: b4:fa:32:38:2a:e3:9b:14:67:58:a4:35:9a:4c:c2: 1b:ef:ff:3e:f6:37:72:8c:4a:45:ca:1e:f3:73:d9: de:67:cc:34:99:1d:b2:c3:31:d0:63:0e:22:41:1c: 61:88:12:ad:f4:17:d2:c7:c6:9a:81:46:83:33:38: bf:96:1a:07:4c:ef:b4:47:08:a9:ed:41:47:38:14: eb:6b:f1:78:a7:57:e8:dc:20:c5:64:2f:e5:a9:c0: 8d:4e:6f:45:70:cf:9f:2c:e5:98:0d:e4:60:6a:b6: ba:dc:65:8c:b3:c5:02:25:09:97:d3:29:42:a6:97: e8:ae:6f:e6:a9:2b:03:f0:78:4a:e3:30:f1:2e:d6: d1:8c:d0:70:82:94:65:b0:87:d9:07:19:d4:dc:7f: f4:01:93:16:73:7e:75:6e:f5:74:01:8f:4c:03:86: 03:65:e0:6f:1a:31:0b:c4:22:7f:09:b3:09:e0:70: 2e:ad:74:83:e0:7e:92:57:b5:60:6a:3e:e2:9c:83: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:D0:9F:94:B3:61:4C:90:6E:3E:C0:9C:84:F6:1C:07:28:7A:0F X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7a:76:47:bb:27:a2:a7:ec:61:2e:cb:55:c0:e8:46:fa:95: 86:16:77:bd:fb:1e:45:3d:6e:40:79:ed:fb:e6:f2:e7:6f:de: 76:dd:58:e4:ad:8b:f5:b8:ec:93:fc:f8:11:a8:b9:ab:0c:17: 71:fc:90:24:5b:f6:60:9f:d4:ec:dd:45:d7:94:29:29:17:3c: 2d:29:7b:86:fa:e9:54:ea:22:c3:f9:86:52:04:78:29:87:26: 48:08:fd:57:e7:07:c4:78:c8:09:76:ca:50:b5:a9:32:da:cf: a2:a4:0f:d1:6c:60:15:83:e7:9e:20:1b:7f:80:0a:bd:47:ad: e1:9b:16:eb:3a:62:b2:33:1b:09:30:ea:c1:59:ae:88:d7:c4: e2:71:12:28:b0:e7:86:95:06:c9:c3:01:45:9b:98:8e:a2:87: a5:f2:86:96:1b:21:60:4c:a9:18:f9:20:47:b2:62:33:ad:58: 86:1f:ca:2a:0e:c6:bf:61:b7:fc:09:73:d1:c2:19:d5:de:33: 1c:30:ca:9b:cc:3c:ed:f7:4e:60:f0:bc:4d:53:a3:fd:ed:14: f9:1f:7b:e3:9b:2e:88:43:4b:25:50:e9:10:10:8e:6b:48:99: ef:b4:44:af:c5:36:81:03:17:ec:e2:04:d1:4f:c6:2f:d1:22: 41:b3:fe:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjioWeC86h+VnUB9LQ6rlVIAk/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNjAxMjQwOTQ2MDlaFw0yNjAxMjcxMDQ4MDlaMDMxMTAvBgNV BAMTKDM3NkJEMDlGOTRCMzYxNEM5MDZFM0VDMDlDODRGNjFDMDcyODdBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1K71OW1bfxbqwLYBS1mwl3QA 7mannGazc9wKtIagW3wv7o8vpb06i+EC1Gh8T8+XZ6s2jNopNjK+QLT6Mjgq45sU Z1ikNZpMwhvv/z72N3KMSkXKHvNz2d5nzDSZHbLDMdBjDiJBHGGIEq30F9LHxpqB RoMzOL+WGgdM77RHCKntQUc4FOtr8XinV+jcIMVkL+WpwI1Ob0Vwz58s5ZgN5GBq trrcZYyzxQIlCZfTKUKml+iub+apKwPweErjMPEu1tGM0HCClGWwh9kHGdTcf/QB kxZzfnVu9XQBj0wDhgNl4G8aMQvEIn8JswngcC6tdIPgfpJXtWBqPuKcgzPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2vQn5SzYUyQbj7AnIT2HAcoeg8wHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt6dke7J6Kn7GEuy1XA6Eb6lYYWd737HkU9 bkB57fvm8udv3nbdWOSti/W47JP8+BGouasMF3H8kCRb9mCf1OzdRdeUKSkXPC0p e4b66VTqIsP5hlIEeCmHJkgI/VfnB8R4yAl2ylC1qTLaz6KkD9FsYBWD554gG3+A Cr1HreGbFus6YrIzGwkw6sFZrojXxOJxEiiw54aVBsnDAUWbmI6ih6XyhpYbIWBM qRj5IEeyYjOtWIYfyioOxr9ht/wJc9HCGdXeMxwwypvMPO33TmDwvE1To/3tFPkf e+ObLohDSyVQ6RAQjmtIme+0RK/FNoEDF+ziBNFPxi/RIkGz/qY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:18 2026 by rpki-client