This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: LMRmZ8UoDadNpcQ0eSbUWonLa0TQgKCqRCkRfq6L2a0= Subject key identifier: CA:98:48:43:E6:23:AA:C5:74:B6:5A:92:E3:A5:54:86:C9:04:81:FF Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 3A1A7FF3ECF67328BD91ADC0C462110467ADC1B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 01BA Signing time: Sat 31 Jan 2026 18:41:44 +0000 Manifest this update: Sat 31 Jan 2026 18:36:44 +0000 Manifest next update: Tue 03 Feb 2026 19:48:44 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: d9eDrSMrXvuh7EbUTPYSlUqADzTKYhB9qZlULEcdAGM=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1a:7f:f3:ec:f6:73:28:bd:91:ad:c0:c4:62:11:04:67:ad:c1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Jan 31 18:36:44 2026 GMT Not After : Feb 3 19:48:44 2026 GMT Subject: CN=CA984843E623AAC574B65A92E3A55486C90481FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:a2:2b:e6:d3:0f:65:1a:12:72:51:48:cb: 7f:1d:c0:44:c2:d4:23:4b:81:a7:ba:52:ca:1d:e9: bb:41:53:a5:9c:be:e4:d3:ad:07:18:7c:e5:28:51: 48:e3:0c:4e:51:e9:ec:4b:17:72:bb:39:8d:02:65: b8:d8:0a:a0:dd:cf:87:04:b6:0b:98:d3:38:5c:00: 35:5d:19:2e:e8:c6:61:1b:c1:bb:a5:18:56:a4:66: 04:82:5f:1d:91:16:0b:1e:db:bf:f8:9f:d3:54:ae: fa:04:72:08:a0:20:2c:ea:73:94:8e:6d:11:20:ab: cc:b7:df:5e:36:6e:f9:01:43:62:1f:1e:5d:10:51: be:05:23:2f:ca:66:72:28:24:e0:10:57:5e:bc:aa: c7:77:61:52:34:cc:6e:88:bf:97:b9:c7:4a:ca:a3: b2:33:11:46:f6:55:86:0d:7c:40:b3:f5:68:6a:fa: ce:fe:dc:26:df:ee:a7:52:c1:da:c8:f3:73:a7:58: 49:1f:16:66:40:34:e8:4b:42:bb:c0:ab:86:78:02: 0c:da:a6:8c:5e:c3:29:6a:45:da:c3:09:f0:bc:b8: ee:64:94:54:8b:cb:91:59:65:dc:a2:5c:6f:35:30: 38:be:94:c1:fe:44:34:ba:ab:8d:ef:00:db:52:b6: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:48:43:E6:23:AA:C5:74:B6:5A:92:E3:A5:54:86:C9:04:81:FF X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:66:2d:16:88:5a:0d:13:f9:2b:f4:25:14:99:b8:24:69: b8:fa:fd:25:24:92:0f:e3:a9:e8:4f:fa:2e:51:8a:a4:bb:51: bb:ad:21:87:41:ec:c2:0f:fa:58:ce:80:3c:a4:7b:95:1e:4e: 8f:aa:83:78:c6:bf:7b:c8:47:96:9a:2f:40:3d:d7:cb:7b:3c: ef:a0:b4:40:b0:71:88:30:7a:55:2e:cf:d0:15:32:80:5d:fd: 6b:d6:91:66:72:0a:c1:16:67:e1:b3:94:2b:c0:2e:55:e6:1c: 0a:e8:53:eb:d0:0c:88:af:cf:77:1f:e0:84:17:34:ff:b0:b8: a1:23:da:7b:61:9f:ef:19:eb:28:34:a8:a6:63:68:0d:07:8b: 63:23:99:1e:db:43:28:c3:5a:1a:85:4c:99:98:c0:56:0b:25: a3:10:cf:4c:e0:bc:f5:b9:c7:73:ce:50:4e:59:e0:50:fe:f8: f4:38:cc:84:87:41:96:a2:6f:6e:35:6b:8a:fa:7e:28:18:4a: d6:41:56:ba:af:c0:6b:3a:0c:cf:49:7c:59:85:09:2c:8b:c4: 56:f5:5f:37:04:dd:92:96:85:37:94:41:12:4a:a8:e6:0c:7a: b9:0a:d5:02:b5:d7:69:5d:e1:54:0b:43:5c:49:1e:50:61:ae: c3:a1:4b:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhp/8+z2cyi9ka3AxGIRBGetwbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNjAxMzExODM2NDRaFw0yNjAyMDMxOTQ4NDRaMDMxMTAvBgNV BAMTKENBOTg0ODQzRTYyM0FBQzU3NEI2NUE5MkUzQTU1NDg2QzkwNDgxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91aIr5tMPZRoSclFIy38dwETC 1CNLgae6Usod6btBU6WcvuTTrQcYfOUoUUjjDE5R6exLF3K7OY0CZbjYCqDdz4cE tguY0zhcADVdGS7oxmEbwbulGFakZgSCXx2RFgse27/4n9NUrvoEcgigICzqc5SO bREgq8y33142bvkBQ2IfHl0QUb4FIy/KZnIoJOAQV168qsd3YVI0zG6Iv5e5x0rK o7IzEUb2VYYNfECz9Whq+s7+3Cbf7qdSwdrI83OnWEkfFmZANOhLQrvAq4Z4Agza poxewylqRdrDCfC8uO5klFSLy5FZZdyiXG81MDi+lMH+RDS6q43vANtStkXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyphIQ+YjqsV0tlqS46VUhskEgf8wHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTXZi0WiFoNE/kr9CUUmbgkabj6/SUkkg/j qehP+i5RiqS7UbutIYdB7MIP+ljOgDyke5UeTo+qg3jGv3vIR5aaL0A918t7PO+g tECwcYgwelUuz9AVMoBd/WvWkWZyCsEWZ+GzlCvALlXmHAroU+vQDIivz3cf4IQX NP+wuKEj2nthn+8Z6yg0qKZjaA0Hi2MjmR7bQyjDWhqFTJmYwFYLJaMQz0zgvPW5 x3POUE5Z4FD++PQ4zISHQZaib241a4r6figYStZBVrqvwGs6DM9JfFmFCSyLxFb1 XzcE3ZKWhTeUQRJKqOYMerkK1QK112ld4VQLQ1xJHlBhrsOhS5U= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:23 2026 by rpki-client