This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 0JfK2v0wU2qOL/oRZRyWCzWpiqe5P/gV66V1/19Ch94= Subject key identifier: 7E:A6:EC:90:A6:75:B0:B4:F2:7E:CD:22:21:2C:CE:0F:0D:11:F2:78 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 1118E909745ED3CF3524DDADAB3715E68605C5AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 01AA Signing time: Sat 31 Jan 2026 13:40:39 +0000 Manifest this update: Sat 31 Jan 2026 13:35:39 +0000 Manifest next update: Tue 03 Feb 2026 18:25:39 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: lW+yb/y9RzbcEcMlI0taWlWze8yuEBeUNcVtLmk5fj0=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:18:e9:09:74:5e:d3:cf:35:24:dd:ad:ab:37:15:e6:86:05:c5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Jan 31 13:35:39 2026 GMT Not After : Feb 3 18:25:39 2026 GMT Subject: CN=7EA6EC90A675B0B4F27ECD22212CCE0F0D11F278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:44:bf:01:c8:e9:93:b6:d5:25:7a:11:d3: cf:cf:04:a5:b4:c6:30:56:cf:43:ef:22:2c:84:ef: f6:5d:f0:87:7e:4f:7a:48:22:47:fc:1d:4f:3a:b5: fd:b1:9c:ab:81:b6:98:b7:ff:00:e7:45:8e:fd:58: b7:74:4a:de:4e:b8:87:8b:cf:c0:6d:70:23:d3:6b: 0d:5b:7a:9a:5f:45:f4:eb:2b:3b:00:22:fa:21:52: 87:17:f5:95:1a:8d:ab:27:b7:f0:bc:fb:cb:1b:43: 8e:d9:f0:8d:d7:31:64:6e:dd:07:f3:18:de:b9:a9: 15:9e:53:a0:c2:9e:d6:e8:12:44:5b:2e:54:9d:98: 3e:7a:6f:f8:93:9a:de:8a:66:f9:09:9d:5d:3d:41: ad:46:a6:f1:d3:b4:ab:fa:d8:87:8f:37:24:21:4a: f4:bc:16:fc:fd:69:b7:e0:5c:0f:f6:78:d8:56:7f: 03:b2:4e:68:eb:d5:5e:e3:e6:cf:19:d0:20:e2:88: b3:2a:c6:bf:c1:23:c4:4c:4c:bd:1d:e1:ca:cd:42: 02:9d:92:04:8d:eb:97:50:ce:79:8b:46:6a:7e:a5: 71:47:6b:cb:4b:46:11:2e:17:00:ea:1b:b9:4b:b2: f0:f9:7a:fa:3d:f9:5d:b7:c2:4d:14:06:62:3a:be: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A6:EC:90:A6:75:B0:B4:F2:7E:CD:22:21:2C:CE:0F:0D:11:F2:78 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f9:db:94:bc:c1:57:73:90:a3:44:da:8a:54:95:24:01:b1: 09:91:1d:f8:b7:41:c0:01:8a:1c:ab:ee:31:43:71:16:01:d2: 2a:65:71:4e:a5:2a:a1:15:2b:3d:22:f9:96:e8:63:fa:4a:9b: 4b:f7:60:d5:22:7e:e3:61:70:08:52:56:fd:26:9f:88:b1:02: 6b:df:52:bd:e7:10:4a:81:cc:e3:68:94:90:0a:4b:c4:85:e8: f4:02:ed:91:b2:c2:0c:b7:f9:40:32:6c:2b:40:34:91:8c:69: 30:96:2c:6a:3f:61:7a:e4:ff:fe:50:7e:e0:c4:8c:65:3b:ff: 72:a2:22:21:e6:7c:ba:cb:f7:46:cd:da:cf:45:fb:0f:02:37: 6c:d4:82:56:79:b6:8d:7a:94:66:bc:5a:0c:4b:80:e8:c6:f4: 8a:7d:b5:23:87:de:47:a0:21:dc:a0:0a:d1:fa:8f:bf:82:9c: 00:c6:c3:e3:ea:a3:72:a0:a8:10:89:30:05:63:a9:2c:e3:0c: 0e:93:54:fc:a5:35:d4:30:ae:c0:67:73:e5:ee:4d:69:4b:83: 76:29:89:53:65:7f:76:0e:7f:7d:89:79:9e:bc:3b:3c:42:f4: c9:28:6b:74:dc:00:e0:00:c8:56:43:6e:46:1d:9e:52:9b:f0: 59:fb:be:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERjpCXRe0881JN2tqzcV5oYFxawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNjAxMzExMzM1MzlaFw0yNjAyMDMxODI1MzlaMDMxMTAvBgNV BAMTKDdFQTZFQzkwQTY3NUIwQjRGMjdFQ0QyMjIxMkNDRTBGMEQxMUYyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABkS/Acjpk7bVJXoR08/PBKW0 xjBWz0PvIiyE7/Zd8Id+T3pIIkf8HU86tf2xnKuBtpi3/wDnRY79WLd0St5OuIeL z8BtcCPTaw1beppfRfTrKzsAIvohUocX9ZUajasnt/C8+8sbQ47Z8I3XMWRu3Qfz GN65qRWeU6DCntboEkRbLlSdmD56b/iTmt6KZvkJnV09Qa1GpvHTtKv62IePNyQh SvS8Fvz9abfgXA/2eNhWfwOyTmjr1V7j5s8Z0CDiiLMqxr/BI8RMTL0d4crNQgKd kgSN65dQznmLRmp+pXFHa8tLRhEuFwDqG7lLsvD5evo9+V23wk0UBmI6vuvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqbskKZ1sLTyfs0iISzODw0R8ngwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj525S8wVdzkKNE2opUlSQBsQmRHfi3QcAB ihyr7jFDcRYB0iplcU6lKqEVKz0i+ZboY/pKm0v3YNUifuNhcAhSVv0mn4ixAmvf Ur3nEEqBzONolJAKS8SF6PQC7ZGywgy3+UAybCtANJGMaTCWLGo/YXrk//5QfuDE jGU7/3KiIiHmfLrL90bN2s9F+w8CN2zUglZ5to16lGa8WgxLgOjG9Ip9tSOH3keg IdygCtH6j7+CnADGw+Pqo3KgqBCJMAVjqSzjDA6TVPylNdQwrsBnc+XuTWlLg3Yp iVNlf3YOf32JeZ68OzxC9Mkoa3TcAOAAyFZDbkYdnlKb8Fn7viw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:39 2026 by rpki-client