This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: kEbkWwWNkqQqLM5z5qh+vJOB5iTQyHIKjxJX67hwKmk= Subject key identifier: 3E:DB:25:BE:BA:39:B5:5C:96:53:99:55:E9:D2:91:DA:F1:87:FD:2F Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 417F199C5CA60B2877893A192F225D07E2DD7968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 0541 Signing time: Sun 01 Feb 2026 01:51:25 +0000 Manifest this update: Sun 01 Feb 2026 01:46:25 +0000 Manifest next update: Wed 04 Feb 2026 08:05:25 +0000 Files and hashes: 1: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: BlXsQ1QjfVoT6J0SDJFst3KLhMp6LiWyqHWFZlBXj2o=) 2: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=) 3: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 7Q0dwA0Rc1pnpyLnXxos7sM1Wj4t+yMR55gSNZ0dsoU=) 4: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: wnRu8SetauCiPh0c+Gd9zaOdMG3DdvOrJBZWhbUBJ1Y=) 5: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: dkwLIgjutNqyS1fEiwY5jB8EjSSH9/0tY66Lo4b2moY=) 6: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: u7MPei7+iN4f1OLKumfeRBmfOe2wgHqRvP7yaGUByuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:19:9c:5c:a6:0b:28:77:89:3a:19:2f:22:5d:07:e2:dd:79:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Feb 1 01:46:25 2026 GMT Not After : Feb 4 08:05:25 2026 GMT Subject: CN=3EDB25BEBA39B55C96539955E9D291DAF187FD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:3b:7e:38:5c:4e:12:11:96:74:c3:f6:82: 66:ec:6a:cd:a5:33:ea:08:38:24:5d:c6:ff:18:1f: 5c:ee:9d:e0:5a:5b:ca:4e:28:b1:aa:ff:52:6b:d0: af:57:9d:d0:35:8b:e6:31:48:f3:5d:84:67:41:30: 3d:6e:1e:8b:2a:e3:e6:1c:f6:97:14:48:d6:d9:9c: 46:ec:05:9c:18:8c:40:43:3c:2c:fe:31:e0:5e:f1: ab:b2:87:68:71:26:9d:95:a2:86:e5:48:88:45:79: 6e:37:f7:0d:f6:e5:39:05:9f:9b:30:cf:f2:49:20: 73:52:f6:a0:92:5f:36:4d:0f:37:92:8f:8d:8b:62: 3a:c3:16:0a:fa:b8:25:46:a9:c0:7f:36:03:2c:09: fd:18:ce:8e:b5:43:54:f4:b8:72:48:d1:f8:06:74: d1:1b:20:68:51:62:fe:19:dd:31:f6:01:e0:23:bb: e4:c2:66:ed:22:d8:a2:41:51:cb:fc:d4:10:a5:38: 21:4b:22:79:0f:26:09:7c:b4:63:71:aa:b5:b7:5b: fe:5a:9d:24:22:23:82:65:6b:a8:53:a8:22:db:1d: 61:2d:85:f7:34:ab:11:5c:1c:f3:72:13:39:41:9e: b5:39:76:03:30:b4:9c:9a:e5:48:a3:8e:0e:74:e6: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DB:25:BE:BA:39:B5:5C:96:53:99:55:E9:D2:91:DA:F1:87:FD:2F X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e7:08:05:2f:b2:7a:37:22:ff:5a:77:2c:cd:4b:0d:31:79: d9:c5:19:ff:54:af:ca:20:96:8a:70:4b:eb:39:cc:24:b1:06: 0f:1d:08:71:b3:4f:e0:8c:27:40:d3:23:65:cb:f7:58:06:5c: 83:80:97:bf:e3:ac:24:78:f1:6b:3b:9a:ba:12:32:be:53:48: a4:ba:8e:69:95:2d:e8:75:b4:39:f3:b1:34:f5:6d:84:cc:0f: b6:af:dc:bb:ab:eb:10:4b:1c:d4:ab:71:f7:5b:99:36:33:b7: 32:f1:64:2f:30:02:54:9d:31:42:cf:b0:45:52:36:d0:cf:76: 2e:6e:9f:21:36:ee:10:3b:f8:01:69:f1:94:b5:ed:5c:15:f2: 8b:66:fa:46:fd:03:52:3e:7f:6c:84:b3:dc:05:8b:1c:9b:d2: 67:2c:aa:b7:fb:78:d9:34:e8:a4:bc:78:9f:0a:7c:81:2c:ab: 80:70:ea:11:6a:74:48:58:7a:4a:c0:ce:91:00:37:5e:ec:33: c8:23:f1:80:2b:e9:a3:eb:80:63:7c:a7:c4:07:0d:67:ff:5c: a3:ef:69:cf:d2:92:60:d1:01:ad:49:d8:89:90:24:5c:20:3f: dc:1f:08:d6:74:fe:2c:7a:32:d9:c5:d8:ef:e4:83:0d:3f:a5: 81:fa:ca:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX8ZnFymCyh3iToZLyJdB+LdeWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNjAyMDEwMTQ2MjVaFw0yNjAyMDQwODA1MjVaMDMxMTAvBgNV BAMTKDNFREIyNUJFQkEzOUI1NUM5NjUzOTk1NUU5RDI5MURBRjE4N0ZEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qzt+OFxOEhGWdMP2gmbsas2l M+oIOCRdxv8YH1zuneBaW8pOKLGq/1Jr0K9XndA1i+YxSPNdhGdBMD1uHosq4+Yc 9pcUSNbZnEbsBZwYjEBDPCz+MeBe8auyh2hxJp2VooblSIhFeW439w325TkFn5sw z/JJIHNS9qCSXzZNDzeSj42LYjrDFgr6uCVGqcB/NgMsCf0Yzo61Q1T0uHJI0fgG dNEbIGhRYv4Z3TH2AeAju+TCZu0i2KJBUcv81BClOCFLInkPJgl8tGNxqrW3W/5a nSQiI4Jla6hTqCLbHWEthfc0qxFcHPNyEzlBnrU5dgMwtJya5Uijjg505tmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPtslvro5tVyWU5lV6dKR2vGH/S8wHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/nCAUvsno3Iv9adyzNSw0xednFGf9Ur8og lopwS+s5zCSxBg8dCHGzT+CMJ0DTI2XL91gGXIOAl7/jrCR48Ws7mroSMr5TSKS6 jmmVLeh1tDnzsTT1bYTMD7av3Lur6xBLHNSrcfdbmTYztzLxZC8wAlSdMULPsEVS NtDPdi5unyE27hA7+AFp8ZS17VwV8otm+kb9A1I+f2yEs9wFixyb0mcsqrf7eNk0 6KS8eJ8KfIEsq4Bw6hFqdEhYekrAzpEAN17sM8gj8YAr6aPrgGN8p8QHDWf/XKPv ac/SkmDRAa1J2ImQJFwgP9wfCNZ0/ix6MtnF2O/kgw0/pYH6yvU= -----END CERTIFICATE-----Generated at Mon Feb 2 17:31:51 2026 by rpki-client