This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: kpi4DHwItirHwNne8fraSrSpxwM/IYl8WbsvLeoo3eI= Subject key identifier: C9:1D:6F:E5:17:AA:49:23:5B:A5:30:63:25:97:4E:78:01:03:7F:23 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 3B6CB391E8D4BEADE5D1E0028FB5D0AABC580044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: FE Signing time: Sat 31 Jan 2026 21:32:10 +0000 Manifest this update: Sat 31 Jan 2026 21:27:10 +0000 Manifest next update: Wed 04 Feb 2026 00:42:10 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: Q94ur/bnC7mSwCbNZqz7U+tF2YgjS0dn2WWn5LLxAKM=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 00:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6c:b3:91:e8:d4:be:ad:e5:d1:e0:02:8f:b5:d0:aa:bc:58:00:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Jan 31 21:27:10 2026 GMT Not After : Feb 4 00:42:10 2026 GMT Subject: CN=C91D6FE517AA49235BA5306325974E7801037F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:2a:2d:7d:aa:34:49:d3:90:e7:78:74:19: 7d:2e:89:04:12:19:5e:f2:9a:ce:12:db:f3:22:e0: d3:db:b9:b4:8b:c0:28:5a:01:68:8e:28:cf:f7:e9: e4:be:2b:e1:2d:9c:24:5e:f5:55:c3:b1:68:2d:bb: 60:1f:33:bc:be:cd:dc:dd:19:55:ab:7a:30:f5:e6: 9f:50:93:7b:57:4b:b9:f7:ef:1c:74:84:29:f6:52: 69:d7:20:16:1a:42:e8:fc:a8:e0:b4:db:1f:e2:b6: 52:fe:3b:61:21:72:51:69:f4:3b:be:4d:94:6e:13: 75:17:34:ad:8c:4d:01:3b:74:bc:3e:12:b9:80:1b: c3:00:ca:9e:a4:19:0c:fb:5a:42:b8:52:c7:20:08: be:56:5f:f2:0e:ff:73:35:68:9a:10:3c:ed:f2:cd: 55:59:f2:39:19:c9:1d:0b:74:58:b2:f1:ff:39:18: 6a:45:a2:c5:eb:74:2a:3f:3c:bc:c6:fa:de:ad:f5: 28:73:43:b9:d6:e2:a6:03:1e:2a:6c:22:1e:bb:79: 2f:b6:85:5c:5e:d8:33:f8:4f:64:1a:e9:2a:7c:c6: 64:fd:d6:b2:6a:bf:f1:c1:56:30:cb:f1:52:46:52: 53:5d:ff:9b:21:3a:38:77:57:cd:f0:06:37:e7:48: d7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1D:6F:E5:17:AA:49:23:5B:A5:30:63:25:97:4E:78:01:03:7F:23 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:b6:cd:09:19:9d:4a:56:c3:0a:b3:9c:8e:46:57:24:03:81: 35:5b:fd:52:4d:3b:fa:80:c4:4e:1f:21:c6:29:70:41:96:35: 42:e3:00:33:67:4d:89:cf:9c:a0:fb:9e:e8:4f:0e:db:f5:0c: 4a:d6:79:09:e6:3f:92:d6:56:ba:b3:2e:c4:86:f2:f3:10:43: be:b0:be:4c:31:01:df:b8:13:fe:7d:44:60:81:57:96:3a:fe: fe:76:53:14:7f:76:17:de:a6:45:79:1a:8c:6a:4d:99:36:db: 6f:6a:2c:05:dc:2a:2d:fe:41:a0:6f:1f:b5:48:83:ab:82:f3: c5:33:e6:f6:91:d3:c7:ee:26:bc:24:3a:75:68:2f:27:95:71: a2:19:da:20:e8:1c:95:d5:82:c4:b5:40:0b:4e:c3:2d:89:6e: 33:41:b0:9d:08:64:e8:66:88:60:cf:8d:1d:c7:17:3d:12:e8: 00:0e:19:c0:0e:92:9c:fa:9b:1c:40:ef:46:cd:16:39:4e:5c: 70:9a:97:6b:90:10:96:f0:3f:6b:f8:a3:b7:c9:60:3a:44:e7: 4c:c1:a6:d7:d2:53:a9:0f:67:7b:a3:14:76:f5:22:91:82:43: c6:f6:d4:56:d5:7a:b4:bb:54:0d:2f:3d:87:d4:b7:2f:9a:70: b3:46:fe:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2yzkejUvq3l0eACj7XQqrxYAEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNjAxMzEyMTI3MTBaFw0yNjAyMDQwMDQyMTBaMDMxMTAvBgNV BAMTKEM5MUQ2RkU1MTdBQTQ5MjM1QkE1MzA2MzI1OTc0RTc4MDEwMzdGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWiotfao0SdOQ53h0GX0uiQQS GV7yms4S2/Mi4NPbubSLwChaAWiOKM/36eS+K+EtnCRe9VXDsWgtu2AfM7y+zdzd GVWrejD15p9Qk3tXS7n37xx0hCn2UmnXIBYaQuj8qOC02x/itlL+O2EhclFp9Du+ TZRuE3UXNK2MTQE7dLw+ErmAG8MAyp6kGQz7WkK4UscgCL5WX/IO/3M1aJoQPO3y zVVZ8jkZyR0LdFiy8f85GGpFosXrdCo/PLzG+t6t9ShzQ7nW4qYDHipsIh67eS+2 hVxe2DP4T2Qa6Sp8xmT91rJqv/HBVjDL8VJGUlNd/5shOjh3V83wBjfnSNfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyR1v5ReqSSNbpTBjJZdOeAEDfyMwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANy2zQkZnUpWwwqznI5GVyQDgTVb/VJNO/qA xE4fIcYpcEGWNULjADNnTYnPnKD7nuhPDtv1DErWeQnmP5LWVrqzLsSG8vMQQ76w vkwxAd+4E/59RGCBV5Y6/v52UxR/dhfepkV5GoxqTZk2229qLAXcKi3+QaBvH7VI g6uC88Uz5vaR08fuJrwkOnVoLyeVcaIZ2iDoHJXVgsS1QAtOwy2JbjNBsJ0IZOhm iGDPjR3HFz0S6AAOGcAOkpz6mxxA70bNFjlOXHCal2uQEJbwP2v4o7fJYDpE50zB ptfSU6kPZ3ujFHb1IpGCQ8b21FbVerS7VA0vPYfUty+acLNG/lw= -----END CERTIFICATE-----Generated at Mon Feb 2 12:51:39 2026 by rpki-client