This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: S5uiUNXsajcH9SeYOF+22/L9v73qsWsXVIvrAqBi5G4= Subject key identifier: 3C:FC:18:07:21:A8:D3:7F:A8:45:26:5F:5C:72:0F:B7:69:51:36:7D Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 141E0FD6A4B87E53E9BE26130DCB765C9A471F79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 0260 Signing time: Sun 01 Feb 2026 15:22:16 +0000 Manifest this update: Sun 01 Feb 2026 15:17:16 +0000 Manifest next update: Wed 04 Feb 2026 18:08:16 +0000 Files and hashes: 1: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: 7diAvPnYbhFXs54kG1Z2sjZ7odYRE5IM0N3xo8BxSjw=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: J4k4RdB2cM1E1T6rzDg02YfTq6FIMpH6pD8r2mvujP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 18:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1e:0f:d6:a4:b8:7e:53:e9:be:26:13:0d:cb:76:5c:9a:47:1f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Feb 1 15:17:16 2026 GMT Not After : Feb 4 18:08:16 2026 GMT Subject: CN=3CFC180721A8D37FA845265F5C720FB76951367D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:a9:bf:20:95:a4:aa:f1:c1:22:90:27:a4: 5f:d2:a7:78:0e:28:45:2a:53:39:2d:bc:0e:5d:f8: 6b:1a:ee:82:f3:f9:1f:7f:2d:a5:2c:aa:7f:04:0d: 95:34:f5:82:92:0b:1e:07:ea:06:9d:1b:ef:f1:02: ea:9e:8b:b3:73:0a:a5:d8:62:c8:20:1f:2b:01:e9: a2:7f:ae:9d:b1:f0:92:15:8d:8f:06:52:db:e0:a1: b9:5e:de:a0:f9:f2:35:e5:fc:71:44:86:5f:59:81: b0:8e:24:e5:d1:72:37:c4:74:d0:ec:cb:86:e4:8a: 27:2a:84:d9:b5:04:45:12:77:04:d4:21:07:00:2e: 54:db:03:c0:dc:19:88:2f:6f:df:97:d5:59:69:c5: 75:17:f0:81:ab:9b:77:1c:1e:84:bc:8e:18:40:3e: a5:e7:a0:16:ed:bf:e9:1c:7a:b5:82:20:ab:ea:f7: d9:0e:42:bc:f8:85:17:8f:8f:80:2d:8c:d8:74:71: 6a:f4:7c:f5:0e:e6:47:56:f6:06:13:6f:51:11:b3: a5:56:c6:ef:7d:a2:c9:b9:6a:2d:74:6c:75:cd:89: dc:f4:21:5f:73:62:87:15:2e:39:81:6d:60:67:3e: 93:c7:d9:37:b6:ec:91:ca:8d:4f:33:c8:b1:73:52: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:18:07:21:A8:D3:7F:A8:45:26:5F:5C:72:0F:B7:69:51:36:7D X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:76:7a:f9:3b:74:bc:ee:bb:ac:24:e5:a0:07:a8:43:ed:73: bc:10:9f:f4:9d:bb:93:2d:20:a0:83:bf:5a:17:b4:51:77:45: be:da:7d:c1:ab:dd:61:1a:ec:80:22:ac:5c:91:66:c0:09:29: fc:87:6b:fa:7b:42:e8:25:e9:c3:a6:96:7c:9d:49:0d:4f:f8: c1:b3:32:40:23:d5:26:81:0c:31:91:b7:c3:e8:74:94:3e:55: 58:1a:27:75:ae:a5:67:b6:2a:c9:15:21:68:2f:13:cc:c8:75: 22:4b:46:02:2e:a8:e6:9f:ba:31:e2:5f:d9:88:7b:7e:e0:46: b8:05:10:6c:48:bd:ae:36:d3:45:88:17:0e:ae:9d:fa:67:15: 25:ab:ee:4e:d8:ad:de:06:d7:34:bb:a0:36:73:b4:45:f0:ac: a1:fb:45:83:40:67:35:68:57:ff:26:cf:77:33:39:6d:2a:f8: bb:59:f3:c2:29:69:ae:56:36:b3:ca:67:ad:49:64:b9:22:34: a1:46:82:ed:a2:18:11:3e:cb:52:ff:a5:74:89:24:da:75:95: 59:6e:6e:70:55:43:37:cf:b4:23:6b:d7:43:c8:b9:4c:44:8a: fe:9b:48:39:7f:8b:b0:93:35:5c:99:a2:35:de:61:4c:f4:f0: 65:7c:69:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFB4P1qS4flPpviYTDct2XJpHH3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNjAyMDExNTE3MTZaFw0yNjAyMDQxODA4MTZaMDMxMTAvBgNV BAMTKDNDRkMxODA3MjFBOEQzN0ZBODQ1MjY1RjVDNzIwRkI3Njk1MTM2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZTam/IJWkqvHBIpAnpF/Sp3gO KEUqUzktvA5d+Gsa7oLz+R9/LaUsqn8EDZU09YKSCx4H6gadG+/xAuqei7NzCqXY YsggHysB6aJ/rp2x8JIVjY8GUtvgoble3qD58jXl/HFEhl9ZgbCOJOXRcjfEdNDs y4bkiicqhNm1BEUSdwTUIQcALlTbA8DcGYgvb9+X1VlpxXUX8IGrm3ccHoS8jhhA PqXnoBbtv+kcerWCIKvq99kOQrz4hRePj4AtjNh0cWr0fPUO5kdW9gYTb1ERs6VW xu99osm5ai10bHXNidz0IV9zYocVLjmBbWBnPpPH2Te27JHKjU8zyLFzUno1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPwYByGo03+oRSZfXHIPt2lRNn0wHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp2evk7dLzuu6wk5aAHqEPtc7wQn/Sdu5Mt IKCDv1oXtFF3Rb7afcGr3WEa7IAirFyRZsAJKfyHa/p7Qugl6cOmlnydSQ1P+MGz MkAj1SaBDDGRt8PodJQ+VVgaJ3WupWe2KskVIWgvE8zIdSJLRgIuqOafujHiX9mI e37gRrgFEGxIva4200WIFw6unfpnFSWr7k7Yrd4G1zS7oDZztEXwrKH7RYNAZzVo V/8mz3czOW0q+LtZ88Ipaa5WNrPKZ61JZLkiNKFGgu2iGBE+y1L/pXSJJNp1lVlu bnBVQzfPtCNr10PIuUxEiv6bSDl/i7CTNVyZojXeYUz08GV8aXY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:15 2026 by rpki-client