This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: M7O0rejzbCAoaBySbXJ4c/FXtcnK+VUgbDb+GNj2l9o= Subject key identifier: 9E:30:9C:F0:74:00:1B:55:A3:C0:92:B0:F1:8A:FE:DD:51:3E:B2:01 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 239C536CF2766A5D774FC3F920AB6B6749628D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0391 Signing time: Sun 01 Feb 2026 01:00:41 +0000 Manifest this update: Sun 01 Feb 2026 00:55:41 +0000 Manifest next update: Wed 04 Feb 2026 12:02:41 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=) 2: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 4: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: 8gkejDozb7kQ3gohVRYTRbwE8eXrbnbh1v9+TF4Xmh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 12:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9c:53:6c:f2:76:6a:5d:77:4f:c3:f9:20:ab:6b:67:49:62:8d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Feb 1 00:55:41 2026 GMT Not After : Feb 4 12:02:41 2026 GMT Subject: CN=9E309CF074001B55A3C092B0F18AFEDD513EB201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:e1:e2:0c:11:04:fd:06:3a:66:eb:24:cd: c2:6b:c1:94:fc:be:25:fb:f9:ca:98:fc:bb:21:1a: 2a:5e:23:5c:02:7d:87:44:e0:e5:bd:a9:1c:a4:ff: f4:33:5e:fc:e0:43:c4:12:0b:da:73:c7:80:89:48: 1f:09:ff:02:d1:bb:57:85:70:6f:60:f8:e7:34:be: ca:46:60:2b:dd:1b:21:85:a2:41:f9:8e:15:56:19: 66:23:d1:ae:3a:d0:74:d9:95:97:0c:41:29:a4:3a: 6d:2a:a8:17:45:33:4d:6a:ef:78:b1:65:a0:b0:98: 2b:ce:13:c7:d7:59:1f:59:8d:20:9b:d6:59:f2:11: 8f:c4:7d:a0:c8:d5:23:9f:3e:29:3b:52:79:15:0c: 2b:08:ec:b8:e8:e4:c2:d4:f8:69:b8:55:9d:e1:f8: a4:dd:d4:48:c9:ca:14:1e:72:06:dc:b7:e6:24:65: bf:e0:c2:75:ba:25:8e:00:bc:7c:18:4f:a3:64:8e: e6:d5:3a:f1:3f:61:22:a7:b7:fd:88:38:ab:44:00: 6d:f0:a6:33:1a:62:13:2d:31:17:75:a0:1e:b6:0f: a6:2b:df:fa:23:8c:aa:47:f9:36:30:13:ef:82:aa: 5e:1e:45:98:e8:ba:78:52:00:da:81:7a:5f:5c:3d: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:30:9C:F0:74:00:1B:55:A3:C0:92:B0:F1:8A:FE:DD:51:3E:B2:01 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a6:d7:5f:26:b0:72:63:21:d6:96:9d:92:c3:e9:ce:01:36: 13:58:4b:a3:21:cf:de:e7:dd:48:94:58:bf:ea:fd:57:41:d4: ea:1b:7e:14:31:86:03:4c:e7:64:67:2c:a0:ab:cf:66:e1:e3: 26:c0:00:87:f6:77:a8:de:b9:df:1c:84:78:33:18:75:5f:9d: 4f:4a:c4:a6:84:fb:5f:8d:4d:de:51:30:ff:d9:2c:9e:a9:45: 7a:3d:06:ae:b4:87:3d:c0:3a:5a:86:38:b3:99:fa:d3:76:46: 4e:9f:bd:2d:39:0b:b6:29:b3:11:7f:f9:78:4f:6b:2c:92:6f: 57:49:65:5a:ed:e4:fa:a7:b3:53:65:52:27:66:8b:74:ca:8e: fc:5f:27:43:a0:17:07:60:93:ff:5c:7a:8f:47:72:4f:b6:1e: e1:8b:78:54:ce:24:d0:a8:11:a5:46:e9:31:66:8f:41:6e:f6: e0:64:02:d9:89:e4:55:2b:03:30:e7:a6:43:49:02:ee:84:83: 26:04:22:e7:da:0a:5a:81:32:82:f4:9b:69:d6:43:19:d6:3d: 80:67:11:f5:bc:20:36:70:f0:7b:5a:45:9e:aa:d7:b2:0d:a1: 74:67:3c:91:f2:27:fa:08:57:96:1c:3e:5b:b1:47:a1:0f:6b: 73:d4:e8:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5xTbPJ2al13T8P5IKtrZ0lijQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNjAyMDEwMDU1NDFaFw0yNjAyMDQxMjAyNDFaMDMxMTAvBgNV BAMTKDlFMzA5Q0YwNzQwMDFCNTVBM0MwOTJCMEYxOEFGRURENTEzRUIyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KeHiDBEE/QY6ZuskzcJrwZT8 viX7+cqY/LshGipeI1wCfYdE4OW9qRyk//QzXvzgQ8QSC9pzx4CJSB8J/wLRu1eF cG9g+Oc0vspGYCvdGyGFokH5jhVWGWYj0a460HTZlZcMQSmkOm0qqBdFM01q73ix ZaCwmCvOE8fXWR9ZjSCb1lnyEY/EfaDI1SOfPik7UnkVDCsI7Ljo5MLU+Gm4VZ3h +KTd1EjJyhQecgbct+YkZb/gwnW6JY4AvHwYT6NkjubVOvE/YSKnt/2IOKtEAG3w pjMaYhMtMRd1oB62D6Yr3/ojjKpH+TYwE++Cql4eRZjounhSANqBel9cParZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjCc8HQAG1WjwJKw8Yr+3VE+sgEwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIem118msHJjIdaWnZLD6c4BNhNYS6Mhz97n 3UiUWL/q/VdB1OobfhQxhgNM52RnLKCrz2bh4ybAAIf2d6jeud8chHgzGHVfnU9K xKaE+1+NTd5RMP/ZLJ6pRXo9Bq60hz3AOlqGOLOZ+tN2Rk6fvS05C7YpsxF/+XhP ayySb1dJZVrt5Pqns1NlUidmi3TKjvxfJ0OgFwdgk/9ceo9Hck+2HuGLeFTOJNCo EaVG6TFmj0Fu9uBkAtmJ5FUrAzDnpkNJAu6EgyYEIufaClqBMoL0m2nWQxnWPYBn EfW8IDZw8HtaRZ6q17INoXRnPJHyJ/oIV5YcPluxR6EPa3PU6Cc= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:07 2026 by rpki-client