This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: hxjuSQLo9uvrHygCjsDXjV2wgxq3hAxIUECphtP2n4c= Subject key identifier: 9C:6F:D3:92:94:F1:D8:2F:58:F5:EA:CC:3D:61:44:4A:4C:D0:E1:78 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 3FF5FB1CE00D0708903545EA94D6286CA8B84BB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 0420 Signing time: Sat 31 Jan 2026 04:11:25 +0000 Manifest this update: Sat 31 Jan 2026 04:06:25 +0000 Manifest next update: Tue 03 Feb 2026 11:54:25 +0000 Files and hashes: 1: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=) 2: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: hsPYSfqnXcrLebXt6EBLTQfNTkLnhJb4Z1Vtv7TkCII=) 3: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: HOwwdKR3O7c8/kyMjxVZJkAdz+1G7QmLEi+h8X1E5h4=) 4: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: 7wB3ZqS6kKnP8srjLnz8mQclGzqHhOJZqzweYZlycZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f5:fb:1c:e0:0d:07:08:90:35:45:ea:94:d6:28:6c:a8:b8:4b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Jan 31 04:06:25 2026 GMT Not After : Feb 3 11:54:25 2026 GMT Subject: CN=9C6FD39294F1D82F58F5EACC3D61444A4CD0E178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:06:18:8e:6c:4c:08:32:54:cf:9a:09:a6: 95:3b:08:30:5d:bd:3b:02:6d:5e:6c:ba:3b:a9:98: f8:50:32:0e:59:fd:1f:c8:14:d3:d8:d0:7b:86:72: a8:7e:6f:30:98:2f:22:09:68:cc:60:e6:de:e8:e3: 99:19:69:c6:37:8d:5a:b1:9e:a4:86:87:d5:fa:9e: 8b:26:83:a2:a1:ec:06:28:6a:0f:12:5d:2a:7e:3d: 43:fe:b3:dd:30:e4:a8:de:b3:94:4d:17:29:40:5e: 98:d7:4f:7b:01:31:df:3d:e3:b4:b5:a3:2d:b3:43: ab:cc:5f:dd:69:d4:e1:f7:98:de:50:dc:15:18:3f: 27:8f:e5:9f:dc:b6:a7:68:e3:4e:29:6e:ec:3d:28: 9c:11:f0:46:26:c8:15:ca:22:b3:f7:94:f2:8f:a4: d7:d1:41:e6:a7:2f:ef:86:30:de:d3:9c:2f:8e:39: e8:5c:e2:97:2c:25:0b:f5:f3:43:62:ed:e4:19:1b: b7:ea:7b:5b:45:85:40:ec:ea:34:61:8e:e0:e4:8f: cb:9e:20:64:40:8d:19:d2:2e:9e:56:89:21:55:85: ab:ba:1b:86:b3:b4:af:e7:d6:10:f6:53:db:a8:a3: 62:8f:40:3a:c8:f6:9d:0f:c7:76:8f:a1:77:35:f8: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6F:D3:92:94:F1:D8:2F:58:F5:EA:CC:3D:61:44:4A:4C:D0:E1:78 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e7:1c:76:50:09:3b:d9:d4:d0:89:5d:40:0d:1f:04:ae:48: f0:9c:b1:e0:ed:e6:0e:5a:1b:0a:a2:88:20:c9:69:e5:d0:75: 06:33:fb:1f:87:75:c0:55:d6:17:f6:b9:bd:b3:e3:cf:5b:60: 58:8b:3e:fc:77:47:eb:b0:77:dd:5d:0e:72:fc:4f:5b:b9:a7: 7a:d2:09:54:fd:7e:1b:c8:7c:8e:27:eb:cd:3a:4e:85:38:56: 6d:d2:51:d3:b6:ee:ce:12:8d:9c:6a:73:01:ff:5a:57:7a:f6: 94:b1:c4:44:8c:bb:d0:91:14:1d:0d:d5:1a:55:03:53:a7:9c: ab:86:36:cf:c8:7b:b2:d4:26:e0:28:7b:2d:72:45:f8:4c:31: 98:81:28:e5:d8:04:e7:a3:23:63:07:2b:79:bb:67:a2:2e:d7: 92:77:59:b4:67:18:f2:9e:d5:1a:8a:0b:e5:be:c5:83:25:ea: 3b:9c:f9:20:85:71:6f:bf:45:04:42:5f:39:fa:14:a6:a7:c1: 31:7b:40:bd:13:63:cd:cf:0d:e0:81:3c:20:5b:49:a1:82:24: b7:21:a4:e5:f9:8e:74:4e:30:f2:ed:f4:b8:6f:ce:31:62:d8: 99:09:11:f0:8f:84:d6:e7:71:2a:5e:e7:f0:56:f5:55:d2:9a: 3e:71:4e:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/X7HOANBwiQNUXqlNYobKi4S7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNjAxMzEwNDA2MjVaFw0yNjAyMDMxMTU0MjVaMDMxMTAvBgNV BAMTKDlDNkZEMzkyOTRGMUQ4MkY1OEY1RUFDQzNENjE0NDRBNENEMEUxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RQYYjmxMCDJUz5oJppU7CDBd vTsCbV5sujupmPhQMg5Z/R/IFNPY0HuGcqh+bzCYLyIJaMxg5t7o45kZacY3jVqx nqSGh9X6nosmg6Kh7AYoag8SXSp+PUP+s90w5Kjes5RNFylAXpjXT3sBMd8947S1 oy2zQ6vMX91p1OH3mN5Q3BUYPyeP5Z/ctqdo404pbuw9KJwR8EYmyBXKIrP3lPKP pNfRQeanL++GMN7TnC+OOehc4pcsJQv180Ni7eQZG7fqe1tFhUDs6jRhjuDkj8ue IGRAjRnSLp5WiSFVhau6G4aztK/n1hD2U9uoo2KPQDrI9p0Px3aPoXc1+CGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnG/TkpTx2C9Y9erMPWFESkzQ4XgwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJznHHZQCTvZ1NCJXUANHwSuSPCcseDt5g5a GwqiiCDJaeXQdQYz+x+HdcBV1hf2ub2z489bYFiLPvx3R+uwd91dDnL8T1u5p3rS CVT9fhvIfI4n6806ToU4Vm3SUdO27s4SjZxqcwH/Wld69pSxxESMu9CRFB0N1RpV A1OnnKuGNs/Ie7LUJuAoey1yRfhMMZiBKOXYBOejI2MHK3m7Z6Iu15J3WbRnGPKe 1RqKC+W+xYMl6juc+SCFcW+/RQRCXzn6FKanwTF7QL0TY83PDeCBPCBbSaGCJLch pOX5jnROMPLt9LhvzjFi2JkJEfCPhNbncSpe5/BW9VXSmj5xThE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:07 2026 by rpki-client