This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: X1tWXljHWtCQfP6dy0/GUJJK2jjWTkfwQYkorcElgMg= Subject key identifier: 44:A0:2A:B8:94:67:8C:DB:5D:93:03:4F:CD:65:8A:25:F4:BE:CF:12 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 56D66B736BC8131D1BD82D364A811BEA65E955BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 0282 Signing time: Fri 09 Jan 2026 01:40:56 +0000 Manifest this update: Fri 09 Jan 2026 01:35:56 +0000 Manifest next update: Mon 12 Jan 2026 11:44:56 +0000 Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: vuTTJNURLP5vgJImsWTQOQLshtByIl8yIWAQC+TExAY=) 2: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 3: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 4: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac=) 5: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: gV2Q8xF8XiWikE1+w9yu7jENKeKHaDELW9P6oOlSzDE=) 6: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 7: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: mGzGPy6pha0dkY++GctneYNXIAHK2PRsgIty6nF831U=) 8: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: xpJYN2koDz6242yH404bncg8zalibRwq73KpJsJcVB8=) 9: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 11:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d6:6b:73:6b:c8:13:1d:1b:d8:2d:36:4a:81:1b:ea:65:e9:55:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Jan 9 01:35:56 2026 GMT Not After : Jan 12 11:44:56 2026 GMT Subject: CN=44A02AB894678CDB5D93034FCD658A25F4BECF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a5:36:ad:10:b5:58:07:4b:c4:e3:6c:52:6d: a7:43:83:6c:62:14:d2:ae:7c:f2:e6:b0:78:7e:ee: e3:b4:ce:be:63:09:11:1c:c8:11:bb:6e:d1:dc:13: 9f:e7:13:85:74:5b:c1:8f:4b:94:e4:73:6e:b4:20: 66:8b:b6:75:93:d6:d4:ff:3c:be:e5:50:bb:29:5d: a5:d8:1c:15:7e:2b:2a:86:52:a3:6f:e8:ad:a9:38: 65:6d:dc:18:85:91:0f:67:68:6c:e0:31:e2:3f:95: b3:99:74:ae:46:95:b6:b2:21:fa:95:0f:83:d7:37: 1f:90:aa:51:bd:19:fa:21:a5:0c:85:dc:b2:0c:86: 01:a1:02:64:a4:ed:de:f5:46:ec:01:90:e3:77:87: 7a:88:e1:b0:b2:7a:88:cc:53:ed:6f:c0:20:f4:aa: ff:96:fd:a9:ff:c7:30:bc:36:fe:ab:0f:81:a0:82: 70:da:23:b0:f0:34:80:6b:87:79:79:c9:a7:3f:4d: 19:8e:2d:52:ba:0f:ce:38:41:12:3c:70:71:e3:c0: d0:49:2c:ac:e0:80:06:d0:33:66:44:05:84:0a:97: 6f:60:58:00:d5:8a:6c:3d:94:38:6d:9d:2b:56:6f: e4:74:40:87:df:0d:09:43:86:42:62:b8:11:51:93: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A0:2A:B8:94:67:8C:DB:5D:93:03:4F:CD:65:8A:25:F4:BE:CF:12 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:86:8e:00:82:fa:dc:b2:1d:93:39:93:2f:e1:a9:7e:bc:82: 67:79:48:b8:38:b9:5e:5d:31:81:a7:3e:e1:ee:78:64:34:35: 2d:6f:df:98:dd:33:e6:e1:18:c3:9b:3e:fc:23:f2:4d:93:8e: bd:ac:ef:07:c1:28:da:73:0e:cc:4a:fa:13:a3:65:c5:70:8e: 2c:69:30:0d:ab:59:46:a6:a9:02:34:b5:0c:4e:ca:cb:96:ef: fe:8b:ea:1e:be:69:fc:b4:dc:7a:f0:c6:2f:7e:63:53:04:e8: 0f:96:92:b5:ea:75:ab:04:dc:36:18:6d:a9:01:ff:ea:04:ef: 8b:7f:21:c0:cb:51:09:b3:f7:a2:cc:73:95:6c:99:e9:2a:99: 39:71:63:52:2d:58:c2:bd:0c:45:76:4b:37:9b:6c:03:8a:22: 4f:34:89:02:0f:83:8c:c0:69:a8:d9:3d:a3:ff:05:39:2e:fa: d0:b9:5d:d7:69:7d:16:d2:29:24:9d:87:5e:3b:fa:e0:1a:9a: 03:bf:a0:96:74:65:7d:a0:50:19:be:c4:9f:37:b8:54:69:5f: f9:ec:d1:f2:ac:96:6d:49:0c:b1:ae:29:b3:09:c7:b2:0a:13: de:5c:e1:f7:80:6e:a3:95:6e:cb:e6:00:b6:e9:fa:39:bc:4e: 82:d6:d3:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtZrc2vIEx0b2C02SoEb6mXpVbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNjAxMDkwMTM1NTZaFw0yNjAxMTIxMTQ0NTZaMDMxMTAvBgNV BAMTKDQ0QTAyQUI4OTQ2NzhDREI1RDkzMDM0RkNENjU4QTI1RjRCRUNGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlpTatELVYB0vE42xSbadDg2xi FNKufPLmsHh+7uO0zr5jCREcyBG7btHcE5/nE4V0W8GPS5Tkc260IGaLtnWT1tT/ PL7lULspXaXYHBV+KyqGUqNv6K2pOGVt3BiFkQ9naGzgMeI/lbOZdK5GlbayIfqV D4PXNx+QqlG9GfohpQyF3LIMhgGhAmSk7d71RuwBkON3h3qI4bCyeojMU+1vwCD0 qv+W/an/xzC8Nv6rD4GggnDaI7DwNIBrh3l5yac/TRmOLVK6D844QRI8cHHjwNBJ LKzggAbQM2ZEBYQKl29gWADVimw9lDhtnStWb+R0QIffDQlDhkJiuBFRk+UpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKAquJRnjNtdkwNPzWWKJfS+zxIwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiGjgCC+tyyHZM5ky/hqX68gmd5SLg4uV5d MYGnPuHueGQ0NS1v35jdM+bhGMObPvwj8k2Tjr2s7wfBKNpzDsxK+hOjZcVwjixp MA2rWUamqQI0tQxOysuW7/6L6h6+afy03Hrwxi9+Y1ME6A+WkrXqdasE3DYYbakB /+oE74t/IcDLUQmz96LMc5VsmekqmTlxY1ItWMK9DEV2SzebbAOKIk80iQIPg4zA aajZPaP/BTku+tC5XddpfRbSKSSdh147+uAamgO/oJZ0ZX2gUBm+xJ83uFRpX/ns 0fKslm1JDLGuKbMJx7IKE95c4feAbqOVbsvmALbp+jm8ToLW07k= -----END CERTIFICATE-----Generated at Fri Jan 9 18:33:01 2026 by rpki-client