This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: pzdHdLTi57qEYOyixgjFnzYz9kcRC1DUFaO4WlmrMq8= Subject key identifier: 4F:6D:02:E7:E4:08:A5:97:4E:99:F0:E4:5B:D8:53:E2:1F:76:AA:13 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 4ED9E4AA8EF3F116097E89D0B8E2473EB28C60FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01FA Signing time: Mon 02 Feb 2026 01:50:46 +0000 Manifest this update: Mon 02 Feb 2026 01:45:46 +0000 Manifest next update: Thu 05 Feb 2026 02:50:46 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: tYFcXMc/M8y+uxO2l9bwNJbfZYpbfVrbvs7Ud/DFVUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:e4:aa:8e:f3:f1:16:09:7e:89:d0:b8:e2:47:3e:b2:8c:60:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Feb 2 01:45:46 2026 GMT Not After : Feb 5 02:50:46 2026 GMT Subject: CN=4F6D02E7E408A5974E99F0E45BD853E21F76AA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:28:45:93:42:28:e6:00:45:ba:c7:6d:aa: 6c:0f:0e:1d:b5:06:fd:df:a6:70:56:97:0a:b8:22: 93:14:d6:dc:d7:39:3e:43:c0:68:48:94:7d:18:4c: e8:14:aa:13:fc:1e:4c:1e:73:b4:da:e2:22:93:10: 1e:8a:b1:72:9c:31:9c:4c:43:f1:7b:7b:4c:be:8f: 0a:aa:15:5a:cd:9d:68:5c:50:90:01:67:36:9d:b3: 6f:c7:f1:53:21:0b:bc:ae:31:73:38:2c:ea:9e:3d: 55:d6:70:ff:77:ab:f9:34:e8:bd:21:35:00:0c:23: 7f:ea:dd:f0:37:86:62:7d:dc:c7:71:b6:2f:80:50: 32:a5:af:02:f2:36:2d:5b:b7:f2:58:0a:15:13:11: 96:9b:7b:c4:ca:a6:d0:c4:d8:55:cc:e4:56:91:46: cf:b4:35:f2:ea:f1:64:d3:ff:b6:4f:b4:10:78:2c: 89:ec:ff:d5:b3:aa:ad:bf:f6:ee:b0:a7:0f:b0:a0: 72:be:1c:a7:59:6c:a4:7c:2f:e4:af:ff:c7:b6:1c: 00:ee:f5:6f:fd:75:5b:82:39:12:6b:f4:b3:01:1c: 22:28:70:47:6a:9c:63:b3:be:c0:5c:f8:e7:48:b8: 0b:14:b6:36:65:42:7d:e3:39:0f:e9:b2:4d:9d:77: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:02:E7:E4:08:A5:97:4E:99:F0:E4:5B:D8:53:E2:1F:76:AA:13 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2f:e9:c4:57:6e:12:c7:56:da:bd:c2:94:00:f0:bc:2d:b2: 7f:74:5c:9a:01:97:e5:4d:9b:11:82:41:a5:c2:ab:c2:e2:a5: ac:b8:16:c3:e0:1e:3b:fa:0b:49:8e:87:ce:ee:9b:be:57:f3: df:12:99:fd:e7:34:14:cb:65:78:9d:ed:8a:be:54:5b:c3:56: 50:c0:d6:c1:27:19:f6:ef:ab:a8:00:48:d2:d9:bf:95:da:0c: 55:e2:5b:07:b8:3a:bf:37:1d:2e:9a:2d:b2:1e:e4:c3:f4:2b: b6:08:7e:8a:9e:94:79:84:94:99:70:c9:8f:99:87:a5:59:04: 12:1f:79:e7:9f:7f:6a:f1:33:e5:84:75:bd:3e:88:e8:d1:8a: c9:78:17:2c:35:a4:b8:75:1e:2d:d8:2b:c6:8d:f8:84:67:b1: 78:1f:ee:ad:1e:4d:b8:06:85:ba:00:d2:2b:bb:d3:6a:89:f9: 1b:21:eb:df:5b:b3:62:d0:93:f0:b1:00:d5:93:a4:a8:48:4b: e2:11:3a:89:3d:1d:9f:8b:a5:0f:0e:53:7b:19:86:69:44:4a: 98:a7:73:53:eb:77:70:c6:6c:d1:d1:92:02:18:44:94:17:01: fd:15:64:54:62:cf:44:9c:23:c4:f6:1c:e6:46:2a:d2:c6:e3: cb:97:03:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtnkqo7z8RYJfonQuOJHPrKMYP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNjAyMDIwMTQ1NDZaFw0yNjAyMDUwMjUwNDZaMDMxMTAvBgNV BAMTKDRGNkQwMkU3RTQwOEE1OTc0RTk5RjBFNDVCRDg1M0UyMUY3NkFBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PShFk0Io5gBFusdtqmwPDh21 Bv3fpnBWlwq4IpMU1tzXOT5DwGhIlH0YTOgUqhP8Hkwec7Ta4iKTEB6KsXKcMZxM Q/F7e0y+jwqqFVrNnWhcUJABZzads2/H8VMhC7yuMXM4LOqePVXWcP93q/k06L0h NQAMI3/q3fA3hmJ93Mdxti+AUDKlrwLyNi1bt/JYChUTEZabe8TKptDE2FXM5FaR Rs+0NfLq8WTT/7ZPtBB4LIns/9Wzqq2/9u6wpw+woHK+HKdZbKR8L+Sv/8e2HADu 9W/9dVuCORJr9LMBHCIocEdqnGOzvsBc+OdIuAsUtjZlQn3jOQ/psk2dd+J9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT20C5+QIpZdOmfDkW9hT4h92qhMwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcv6cRXbhLHVtq9wpQA8Lwtsn90XJoBl+VN mxGCQaXCq8Lipay4FsPgHjv6C0mOh87um75X898Smf3nNBTLZXid7Yq+VFvDVlDA 1sEnGfbvq6gASNLZv5XaDFXiWwe4Or83HS6aLbIe5MP0K7YIfoqelHmElJlwyY+Z h6VZBBIfeeeff2rxM+WEdb0+iOjRisl4Fyw1pLh1Hi3YK8aN+IRnsXgf7q0eTbgG hboA0iu702qJ+Rsh699bs2LQk/CxANWTpKhIS+IROok9HZ+LpQ8OU3sZhmlESpin c1Prd3DGbNHRkgIYRJQXAf0VZFRiz0ScI8T2HOZGKtLG48uXAxg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:25 2026 by rpki-client