This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: T/ysOOyyFmQBstdQeAO8HcC4J7sngYAc0j/STF0ipBs= Subject key identifier: 43:4C:E2:36:7F:AD:3B:EF:70:FA:73:F1:71:85:2F:20:CB:E2:54:20 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 42E86F929DB941E91E803434B38597DCFB377B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 0208 Signing time: Sat 31 Jan 2026 21:31:41 +0000 Manifest this update: Sat 31 Jan 2026 21:26:41 +0000 Manifest next update: Tue 03 Feb 2026 21:56:41 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: +nVgjfJQk4NKS4zaoi/gW2Yu/xEYJu3Lk+cPhhErNsc=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 21:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e8:6f:92:9d:b9:41:e9:1e:80:34:34:b3:85:97:dc:fb:37:7b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Jan 31 21:26:41 2026 GMT Not After : Feb 3 21:56:41 2026 GMT Subject: CN=434CE2367FAD3BEF70FA73F171852F20CBE25420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:ae:da:5d:d0:d1:14:9c:8d:de:1d:b3:36: 82:db:9d:88:8d:29:10:6d:46:3f:70:42:52:5d:f7: 9a:bb:44:08:e1:ed:99:d8:62:2b:5f:85:e3:69:da: 21:22:2f:70:d8:0b:90:a8:9e:6b:36:4d:a6:39:71: 46:eb:7f:1b:7e:23:4f:fe:09:d9:a7:51:2b:31:09: c0:18:4c:4b:9e:0f:f2:bd:35:58:30:82:f1:d4:40: b1:d7:2d:53:27:72:d0:a5:8e:12:3c:c3:6f:ed:ac: 2f:92:fa:50:38:fe:a8:d6:ec:ca:69:a1:1c:16:a8: 8c:22:cc:a3:09:6e:76:0a:bf:e9:db:b4:54:59:c3: 4e:a6:5f:f0:d9:de:c7:90:5e:61:e5:c3:e5:23:15: 57:cb:95:bc:05:dd:03:93:79:52:27:d8:31:99:9e: 80:49:cb:8b:24:49:a3:18:47:cf:f3:de:36:6a:52: 48:62:b9:64:76:fd:0a:42:2d:32:21:7e:3f:1f:9c: 3d:c0:b3:e0:45:98:e8:59:6a:e7:28:24:84:c2:38: ac:e9:0f:8e:0b:e0:2c:6b:f9:ce:1b:14:ef:0a:ae: 76:0d:93:3e:41:f7:aa:22:0e:5c:76:2d:83:29:09: fc:31:b1:d8:d0:43:7f:41:4d:c4:7d:39:0d:64:c7: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:E2:36:7F:AD:3B:EF:70:FA:73:F1:71:85:2F:20:CB:E2:54:20 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:12:2b:f7:dd:28:70:d9:93:c9:dc:49:2c:9c:cd:48:13: 49:7b:30:7a:89:9f:40:05:0c:58:27:28:f7:cc:22:87:2b:9d: 7a:76:36:30:be:b1:aa:b3:c8:5b:f6:0b:13:35:34:e9:eb:90: 6b:68:8b:f8:34:ed:5c:94:0a:f8:26:7e:7f:69:5f:70:da:ce: b6:98:66:ad:bf:bf:6e:28:42:22:ca:62:8e:df:ad:70:e0:bb: f9:af:4b:ff:ac:6e:85:15:8d:f7:fc:5b:2a:f3:26:1a:24:66: 4b:52:79:b1:65:64:de:b8:b6:bc:80:41:ba:0f:70:2a:43:81: ef:2a:d4:b9:1e:31:19:4d:97:5b:70:85:3e:23:f4:d3:8d:10: 7e:eb:29:d9:a2:15:d3:19:d5:36:4b:36:0c:9c:df:68:0b:41: 9c:3a:66:15:15:8e:17:54:0c:b5:fa:11:f7:3e:73:a1:a4:df: 57:57:a2:1f:c9:73:27:17:db:19:e9:a3:35:d2:81:c9:5a:58: 53:38:3e:e0:ea:84:fd:e1:63:ed:d4:32:66:5e:63:1f:05:e6: db:2d:4d:55:69:37:c6:01:b6:5f:5c:27:fc:91:47:91:23:e0: ef:bc:95:fa:fa:a6:9c:93:00:74:c1:7b:ab:0d:a0:7b:02:0b: 1d:54:84:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuhvkp25QekegDQ0s4WX3Ps3e3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNjAxMzEyMTI2NDFaFw0yNjAyMDMyMTU2NDFaMDMxMTAvBgNV BAMTKDQzNENFMjM2N0ZBRDNCRUY3MEZBNzNGMTcxODUyRjIwQ0JFMjU0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDara7aXdDRFJyN3h2zNoLbnYiN KRBtRj9wQlJd95q7RAjh7ZnYYitfheNp2iEiL3DYC5Conms2TaY5cUbrfxt+I0/+ CdmnUSsxCcAYTEueD/K9NVgwgvHUQLHXLVMnctCljhI8w2/trC+S+lA4/qjW7Mpp oRwWqIwizKMJbnYKv+nbtFRZw06mX/DZ3seQXmHlw+UjFVfLlbwF3QOTeVIn2DGZ noBJy4skSaMYR8/z3jZqUkhiuWR2/QpCLTIhfj8fnD3As+BFmOhZaucoJITCOKzp D44L4Cxr+c4bFO8KrnYNkz5B96oiDlx2LYMpCfwxsdjQQ39BTcR9OQ1kx4NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0ziNn+tO+9w+nPxcYUvIMviVCAwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQPEiv33Shw2ZPJ3EksnM1IE0l7MHqJn0AF DFgnKPfMIocrnXp2NjC+saqzyFv2CxM1NOnrkGtoi/g07VyUCvgmfn9pX3DazraY Zq2/v24oQiLKYo7frXDgu/mvS/+sboUVjff8WyrzJhokZktSebFlZN64tryAQboP cCpDge8q1LkeMRlNl1twhT4j9NONEH7rKdmiFdMZ1TZLNgyc32gLQZw6ZhUVjhdU DLX6Efc+c6Gk31dXoh/JcycX2xnpozXSgclaWFM4PuDqhP3hY+3UMmZeYx8F5tst TVVpN8YBtl9cJ/yRR5Ej4O+8lfr6ppyTAHTBe6sNoHsCCx1UhPk= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:41 2026 by rpki-client