This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: fEfRhBjMKY/i2fOUwXq1fg5WBDhVSatboQuFkEILzfU= Subject key identifier: BC:3C:FD:68:4A:67:23:07:79:FA:D3:9B:EB:D3:ED:54:60:C8:A1:A9 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 667044C0764236D141871DB033051A5099594C39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01C6 Signing time: Wed 21 Jan 2026 05:51:40 +0000 Manifest this update: Wed 21 Jan 2026 05:46:40 +0000 Manifest next update: Sat 24 Jan 2026 12:46:40 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: IY7jZg7KqW/4HLIaRV5swI0/IIfUBv4Xuzv74oRIONg=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 12:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:70:44:c0:76:42:36:d1:41:87:1d:b0:33:05:1a:50:99:59:4c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Jan 21 05:46:40 2026 GMT Not After : Jan 24 12:46:40 2026 GMT Subject: CN=BC3CFD684A67230779FAD39BEBD3ED5460C8A1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:52:71:17:40:8e:5e:a9:4b:1a:a7:71:f8: c8:c0:52:71:40:0d:82:79:b5:99:70:98:03:82:d0: 26:cc:ed:03:32:30:b7:7a:c9:cc:76:3c:6d:2c:9c: a0:ec:36:63:fe:89:e8:50:d4:6f:d3:1e:50:51:f8: af:2e:e2:9b:27:1a:f1:4d:0f:76:66:c2:0c:7d:a1: a4:b4:79:4f:ac:3a:2a:9e:3b:28:22:18:d7:ce:01: e5:04:de:a3:39:1b:00:65:7b:83:08:44:2d:e1:78: f9:d5:1f:c5:4b:16:cd:2c:71:4e:1c:8c:95:24:72: 44:9a:10:ab:4a:94:b7:b2:f6:52:98:12:7a:25:02: 7c:46:dd:02:53:c0:81:8d:37:97:e2:8f:ba:05:82: 40:3e:66:c5:46:3d:98:86:e3:0d:d7:5e:33:8f:b2: 29:93:3a:ff:03:5e:ab:52:29:5a:8f:83:2b:66:d5: 54:db:6f:fb:f4:a0:2a:14:61:90:c2:34:cb:2b:eb: f4:1c:ab:ed:9b:8a:70:12:91:5c:db:db:3d:d9:09: 66:73:93:fb:0a:fa:0c:40:dd:f7:f9:91:a4:60:f6: 43:b6:79:60:01:58:9e:b7:3f:88:d1:86:72:57:8b: db:e0:9c:7c:dd:b6:a8:54:d8:9a:ab:05:e2:61:df: 55:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3C:FD:68:4A:67:23:07:79:FA:D3:9B:EB:D3:ED:54:60:C8:A1:A9 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bb:0c:2d:80:00:99:76:2d:42:4c:b9:74:78:25:97:12:15: a5:f5:75:4f:73:c2:c5:ce:be:67:b0:0a:79:03:bf:34:a1:18: 31:e2:54:54:d6:58:46:af:01:51:d6:ec:55:0b:25:5a:6e:0a: b6:46:13:46:44:ca:76:cd:be:96:6a:47:01:a8:d7:7c:ed:bc: 1c:dc:e4:07:44:d7:1b:65:dc:5e:1f:4e:27:8c:a8:53:8d:bd: 52:af:98:b9:b7:4f:33:57:0b:e4:58:15:0e:07:9b:41:39:22: 94:90:ae:69:bc:55:37:55:52:50:6f:e2:22:67:7d:91:22:8b: ad:3a:59:ed:bd:8a:17:d8:11:7c:e7:09:ea:ab:26:6c:66:da: 6a:8b:ad:61:4d:92:65:0b:be:71:f8:df:ea:37:7f:2f:ac:bf: 3e:83:5e:ea:85:c0:08:a7:66:89:48:11:1a:27:6d:0a:af:aa: 69:3c:8d:8f:32:d0:d3:72:51:56:62:15:56:cb:a3:a6:bd:08: 6a:f3:23:66:85:0d:db:b0:d9:fa:8b:6a:a3:3f:6e:82:32:12: c4:8e:7c:db:9d:13:69:cd:a6:c8:9c:0d:8c:0f:58:b5:f1:15: cd:28:65:7a:e2:12:85:d8:ec:53:68:d1:ea:0a:a1:41:58:e1: b3:f6:40:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnBEwHZCNtFBhx2wMwUaUJlZTDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNjAxMjEwNTQ2NDBaFw0yNjAxMjQxMjQ2NDBaMDMxMTAvBgNV BAMTKEJDM0NGRDY4NEE2NzIzMDc3OUZBRDM5QkVCRDNFRDU0NjBDOEExQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYlJxF0COXqlLGqdx+MjAUnFA DYJ5tZlwmAOC0CbM7QMyMLd6ycx2PG0snKDsNmP+iehQ1G/THlBR+K8u4psnGvFN D3Zmwgx9oaS0eU+sOiqeOygiGNfOAeUE3qM5GwBle4MIRC3hePnVH8VLFs0scU4c jJUkckSaEKtKlLey9lKYEnolAnxG3QJTwIGNN5fij7oFgkA+ZsVGPZiG4w3XXjOP simTOv8DXqtSKVqPgytm1VTbb/v0oCoUYZDCNMsr6/Qcq+2binASkVzb2z3ZCWZz k/sK+gxA3ff5kaRg9kO2eWABWJ63P4jRhnJXi9vgnHzdtqhU2JqrBeJh31W1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDz9aEpnIwd5+tOb69PtVGDIoakwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm7DC2AAJl2LUJMuXR4JZcSFaX1dU9zwsXO vmewCnkDvzShGDHiVFTWWEavAVHW7FULJVpuCrZGE0ZEynbNvpZqRwGo13ztvBzc 5AdE1xtl3F4fTieMqFONvVKvmLm3TzNXC+RYFQ4Hm0E5IpSQrmm8VTdVUlBv4iJn fZEii606We29ihfYEXznCeqrJmxm2mqLrWFNkmULvnH43+o3fy+svz6DXuqFwAin ZolIERonbQqvqmk8jY8y0NNyUVZiFVbLo6a9CGrzI2aFDduw2fqLaqM/boIyEsSO fNudE2nNpsicDYwPWLXxFc0oZXriEoXY7FNo0eoKoUFY4bP2QDQ= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:50 2026 by rpki-client