This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: bq0hTZG1as+8uv8IuiFqB6XtW1lD6b6pIxDGCLtkKKE= Subject key identifier: 4C:92:1B:A2:1B:46:E9:D6:F1:27:A9:85:BF:AC:1B:14:D0:B0:A2:D5 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 64426E19AB3010D1386F24E1A38384D2D5583D4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: B0 Signing time: Sat 31 Jan 2026 20:41:51 +0000 Manifest this update: Sat 31 Jan 2026 20:36:51 +0000 Manifest next update: Wed 04 Feb 2026 05:15:51 +0000 Files and hashes: 1: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: /aVPPwwjajN9xIn63OMeox35yw9N91dKOYbTrVzHJqs=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 9p0fRZPTZcBitKDv/Ff3qr0g0F27xt5vAwhxIzmdswY=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: GqPoKCikWixpTyaRkrl7PIpso4FRMb2kN+4gyGItvwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 05:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:42:6e:19:ab:30:10:d1:38:6f:24:e1:a3:83:84:d2:d5:58:3d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Jan 31 20:36:51 2026 GMT Not After : Feb 4 05:15:51 2026 GMT Subject: CN=4C921BA21B46E9D6F127A985BFAC1B14D0B0A2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:0e:d0:9d:68:25:de:15:01:2c:d5:fc:2f: 74:bf:8d:02:fc:13:99:67:4b:1e:40:50:77:40:a9: bb:e0:14:ea:c1:d0:44:62:8c:38:76:f3:e6:41:c4: ad:a8:e0:3d:7e:e3:cf:90:53:8a:96:20:dc:c8:2c: b6:c0:8c:88:98:e2:b0:18:42:f4:06:f6:a0:7f:33: 1c:d8:f2:7e:9b:d8:f7:3b:b7:b8:7e:68:b2:f6:2e: a9:e3:c8:e6:45:d6:7a:4d:8c:e1:eb:8e:0e:bd:61: c4:1f:74:1f:ac:f3:c0:e9:77:e9:3c:99:1d:8c:e1: 28:29:0a:f9:ae:6b:80:02:cf:96:e8:96:d3:bd:5d: 59:ff:35:ee:48:92:d6:ae:63:e7:06:73:0e:74:6b: 6a:af:47:f7:8c:5f:d4:f1:80:d2:a2:e6:f2:19:13: 79:ed:8f:b1:d5:6f:cb:ce:a0:bd:43:69:48:66:e5: 03:1a:ff:64:7e:2d:1f:d8:61:85:d0:01:b9:45:d0: 6e:72:d7:89:b8:ae:d6:78:54:96:0a:6e:b3:a5:68: f9:a7:c9:de:66:a3:ee:34:3b:6c:29:6f:f0:1a:b5: 4a:a1:af:83:0b:f7:97:e2:a5:34:9b:95:d9:a4:92: a8:b1:d8:80:30:85:f2:06:02:21:09:00:b2:85:24: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:1B:A2:1B:46:E9:D6:F1:27:A9:85:BF:AC:1B:14:D0:B0:A2:D5 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:43:51:cc:45:bc:3d:df:dc:c7:45:e7:58:a0:3c:e5:85:5a: 2c:bd:e1:a1:8f:f6:b9:16:08:8f:a0:9c:21:0d:70:9b:0d:30: 11:6c:e2:1e:b8:bc:5b:92:77:3f:9e:ec:e1:ec:1c:47:17:18: 24:d1:fa:96:ea:4c:a6:96:17:87:e8:6d:f4:f4:b2:3f:ae:05: 0e:d0:7f:83:0c:f1:87:06:a6:55:b3:fb:f0:99:93:99:af:0c: 0d:f5:34:01:8d:9c:5f:22:94:36:cc:a2:ce:2e:27:65:57:9f: c5:bc:95:e8:fc:0c:a5:54:44:d2:74:c0:55:42:c7:25:a9:3a: 58:d5:91:d7:9b:89:bf:b5:7f:0b:e7:e9:78:64:2a:d4:72:d3: 33:5c:57:29:82:b0:9e:04:13:e2:09:d0:a1:4b:53:9c:80:6b: 5b:e2:de:2e:a0:ba:fe:1e:57:61:26:0c:ef:50:6b:f6:97:90: d8:22:87:1c:76:b0:65:24:b2:63:c8:74:8f:09:98:63:f1:41: c3:8b:3c:6a:b8:cc:41:6e:4c:9e:16:b5:b1:ab:d1:7f:6c:ad: 7f:ba:e4:76:09:f0:70:08:bd:88:a8:ef:0a:8d:fc:ad:cb:cd: d5:20:ee:12:dc:b3:f2:01:ee:62:1b:8f:5f:f2:1c:c8:6c:d0: 61:80:12:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEJuGaswENE4byTho4OE0tVYPU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNjAxMzEyMDM2NTFaFw0yNjAyMDQwNTE1NTFaMDMxMTAvBgNV BAMTKDRDOTIxQkEyMUI0NkU5RDZGMTI3QTk4NUJGQUMxQjE0RDBCMEEyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChww7QnWgl3hUBLNX8L3S/jQL8 E5lnSx5AUHdAqbvgFOrB0ERijDh28+ZBxK2o4D1+48+QU4qWINzILLbAjIiY4rAY QvQG9qB/MxzY8n6b2Pc7t7h+aLL2LqnjyOZF1npNjOHrjg69YcQfdB+s88Dpd+k8 mR2M4SgpCvmua4ACz5boltO9XVn/Ne5IktauY+cGcw50a2qvR/eMX9TxgNKi5vIZ E3ntj7HVb8vOoL1DaUhm5QMa/2R+LR/YYYXQAblF0G5y14m4rtZ4VJYKbrOlaPmn yd5mo+40O2wpb/AatUqhr4ML95fipTSbldmkkqix2IAwhfIGAiEJALKFJGzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJIbohtG6dbxJ6mFv6wbFNCwotUwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVDUcxFvD3f3MdF51igPOWFWiy94aGP9rkW CI+gnCENcJsNMBFs4h64vFuSdz+e7OHsHEcXGCTR+pbqTKaWF4fobfT0sj+uBQ7Q f4MM8YcGplWz+/CZk5mvDA31NAGNnF8ilDbMos4uJ2VXn8W8lej8DKVURNJ0wFVC xyWpOljVkdebib+1fwvn6XhkKtRy0zNcVymCsJ4EE+IJ0KFLU5yAa1vi3i6guv4e V2EmDO9Qa/aXkNgihxx2sGUksmPIdI8JmGPxQcOLPGq4zEFuTJ4WtbGr0X9srX+6 5HYJ8HAIvYio7wqN/K3LzdUg7hLcs/IB7mIbj1/yHMhs0GGAEm8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:20 2026 by rpki-client