This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: 0HvX9D874lB4Vx4GPsXd+F6D83aV3ixoR8UDw/HIZSo= Subject key identifier: 2C:39:50:51:A6:43:D2:6E:1D:07:FA:47:A5:8D:D0:F9:DB:75:C6:E0 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 4BB58E3C51512125D79EBE09E99D5AC1922B6F62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: 010F Signing time: Sat 31 Jan 2026 05:11:34 +0000 Manifest this update: Sat 31 Jan 2026 05:06:34 +0000 Manifest next update: Tue 03 Feb 2026 14:06:34 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: vQEh5RzZOash2fTgsoHfVlJvHf0Z1aVHOVyKBGOXoMU=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b5:8e:3c:51:51:21:25:d7:9e:be:09:e9:9d:5a:c1:92:2b:6f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jan 31 05:06:34 2026 GMT Not After : Feb 3 14:06:34 2026 GMT Subject: CN=2C395051A643D26E1D07FA47A58DD0F9DB75C6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:83:84:c2:06:53:df:f0:3a:07:b6:eb:5c: 66:ae:65:15:0e:56:45:31:19:d4:8e:8c:8c:f5:25: 50:cb:e0:f2:65:de:96:fe:9a:83:da:4a:6a:bf:33: 60:41:c1:7e:8c:81:84:81:84:bc:cd:9a:3f:8b:1d: 82:00:50:f8:0f:f9:b6:2f:a0:05:39:e0:b0:b1:9d: 06:d7:a9:06:ec:85:f7:a3:21:b6:a9:01:24:4d:54: 46:ee:96:7b:a3:39:7a:34:5e:07:9e:fa:2e:1b:19: 67:16:6c:f9:55:52:e7:9a:f7:75:9e:65:9c:d6:9e: 6d:59:36:d5:e7:04:01:56:8b:5c:67:c0:38:53:18: f9:e6:48:e4:fe:9c:00:6f:32:2a:21:8d:91:8f:b0: 97:b0:cd:58:90:05:ce:37:c8:e6:09:9f:55:d4:77: ef:58:17:08:37:08:20:9e:d0:04:c8:54:32:34:51: 5f:26:77:cc:11:1b:08:49:e3:73:6c:8c:8c:6e:86: 18:d5:31:61:73:26:16:f1:b3:81:b3:d2:dd:f0:32: d9:fc:5f:5f:0b:54:3a:85:a2:69:42:d5:83:ac:39: 3d:c2:ae:b8:b6:ba:88:bc:b3:ab:0c:f3:59:08:75: ef:c1:a8:ce:bc:a2:d6:5e:4f:a9:0a:53:c9:76:63: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:50:51:A6:43:D2:6E:1D:07:FA:47:A5:8D:D0:F9:DB:75:C6:E0 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7a:1a:51:13:0f:04:28:e1:5f:54:3c:40:1c:20:c2:b4:ab: 25:7d:89:5e:c9:ee:30:4d:79:f8:bd:64:af:6d:d7:b3:91:d9: 40:a1:a1:25:10:bf:b5:4d:5f:f3:4c:70:65:00:b6:12:c1:ec: 2b:72:55:65:e3:bd:9c:95:77:c6:79:27:83:cf:06:47:ae:a3: 02:f9:e3:36:4d:41:b4:34:d0:75:4c:2d:76:d2:6e:6e:72:90: 4d:60:9b:50:95:1f:7c:cb:a0:6c:03:70:b0:0a:50:b5:a9:b7: e5:db:4b:0d:5e:55:b0:9b:81:4a:3c:3e:a7:e3:27:e8:33:40: 35:c8:61:4b:52:ba:51:d7:36:c9:1b:42:fb:fc:be:68:60:5a: 85:f2:a7:33:03:04:ff:10:f8:a4:c2:4d:3a:45:54:b3:d1:1b: d0:16:52:94:f4:d4:db:9c:23:c8:c3:1a:5a:8b:a9:a3:c7:e5: d1:39:db:83:b2:b0:86:9b:6c:7b:8e:57:f6:fd:b6:fa:30:ff: 68:0c:a9:47:7b:20:2c:f2:0f:49:02:2f:7f:99:9b:e8:5c:3f: 38:df:a2:c0:dc:56:69:01:9a:ce:8d:be:97:64:54:24:d4:0b: 8f:ff:dd:37:9f:05:77:72:15:47:7e:cb:3e:09:ae:9f:f5:db: e6:55:93:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7WOPFFRISXXnr4J6Z1awZIrb2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNjAxMzEwNTA2MzRaFw0yNjAyMDMxNDA2MzRaMDMxMTAvBgNV BAMTKDJDMzk1MDUxQTY0M0QyNkUxRDA3RkE0N0E1OEREMEY5REI3NUM2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xYOEwgZT3/A6B7brXGauZRUO VkUxGdSOjIz1JVDL4PJl3pb+moPaSmq/M2BBwX6MgYSBhLzNmj+LHYIAUPgP+bYv oAU54LCxnQbXqQbshfejIbapASRNVEbulnujOXo0Xgee+i4bGWcWbPlVUuea93We ZZzWnm1ZNtXnBAFWi1xnwDhTGPnmSOT+nABvMiohjZGPsJewzViQBc43yOYJn1XU d+9YFwg3CCCe0ATIVDI0UV8md8wRGwhJ43NsjIxuhhjVMWFzJhbxs4Gz0t3wMtn8 X18LVDqFomlC1YOsOT3Crri2uoi8s6sM81kIde/BqM68otZeT6kKU8l2Y6mhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULDlQUaZD0m4dB/pHpY3Q+dt1xuAwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD56GlETDwQo4V9UPEAcIMK0qyV9iV7J7jBN efi9ZK9t17OR2UChoSUQv7VNX/NMcGUAthLB7CtyVWXjvZyVd8Z5J4PPBkeuowL5 4zZNQbQ00HVMLXbSbm5ykE1gm1CVH3zLoGwDcLAKULWpt+XbSw1eVbCbgUo8Pqfj J+gzQDXIYUtSulHXNskbQvv8vmhgWoXypzMDBP8Q+KTCTTpFVLPRG9AWUpT01Nuc I8jDGlqLqaPH5dE524OysIabbHuOV/b9tvow/2gMqUd7ICzyD0kCL3+Zm+hcPzjf osDcVmkBms6NvpdkVCTUC4//3TefBXdyFUd+yz4Jrp/12+ZVk2c= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:55 2026 by rpki-client