This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: mkoqG55OGrx1RItJB/fr2UTyeftqu4Mt3FzB6qyM22w= Subject key identifier: 59:DE:B0:51:92:08:56:84:37:59:DA:7B:EF:63:67:53:74:EE:6B:56 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 2311E6BE10BE64B3EE12968637860D936259F9E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: 0125 Signing time: Sun 01 Feb 2026 03:50:37 +0000 Manifest this update: Sun 01 Feb 2026 03:45:37 +0000 Manifest next update: Wed 04 Feb 2026 15:08:37 +0000 Files and hashes: 1: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: FJlMKlporM46mRED9k6dpb0Q8XsPO6IhIBL4XP2BzSg=) 2: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) 3: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: +/N3DsGhdJUZyRGC4N9f9R2ZbeB7qPD2DAQ97WyJYBk=) 4: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:11:e6:be:10:be:64:b3:ee:12:96:86:37:86:0d:93:62:59:f9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Feb 1 03:45:37 2026 GMT Not After : Feb 4 15:08:37 2026 GMT Subject: CN=59DEB051920856843759DA7BEF63675374EE6B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:67:d4:ea:fa:22:92:a0:f4:da:51:15:0a: 85:1c:1b:bd:9b:64:a2:95:8e:79:f6:04:f4:1e:b4: 87:c4:1c:5e:ab:d7:2c:3c:72:a6:a7:31:ad:0b:f7: 91:a1:1a:95:bf:24:0e:51:ab:06:1a:b1:13:99:75: 84:74:00:ae:08:0b:0a:e0:1a:83:75:60:06:c8:fd: d3:6b:19:44:98:e9:4e:83:c6:f6:68:d1:ba:0e:2e: 04:06:0f:b3:05:c6:ae:78:78:ee:e3:db:c4:8b:fa: 93:a2:c4:8c:0e:f6:11:d4:99:b3:c7:d3:cc:6f:22: a0:d6:58:e9:97:e1:0d:f8:fd:23:c7:0b:64:c3:9b: 03:4b:d0:48:10:ca:6c:eb:ba:c7:52:33:fc:5d:ea: a4:be:46:03:7d:cd:05:e7:1e:86:a6:81:c7:80:c8: b1:0b:33:62:62:51:5b:90:17:d6:4d:b4:2f:07:fc: b8:29:12:71:da:21:f9:33:9b:09:cc:17:17:10:bc: 8e:85:5b:81:ee:e4:8a:9f:97:4d:2b:c5:2b:ea:f4: b4:9f:22:79:45:55:97:7f:ae:8f:0e:0e:54:dd:71: ee:97:90:a0:10:0e:64:4b:8c:17:de:92:ee:c1:48: a0:6a:9d:b2:93:00:01:51:33:ec:01:58:51:5f:06: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DE:B0:51:92:08:56:84:37:59:DA:7B:EF:63:67:53:74:EE:6B:56 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:4f:ce:ac:ab:52:da:bc:28:97:b1:ca:5d:02:ba:a3:37:48: 0e:c8:3b:18:c1:39:55:45:27:22:7a:04:08:92:a8:50:18:5e: 59:59:80:05:52:90:00:4f:44:9e:e5:1b:a7:6f:82:2d:b7:2c: 69:2a:32:0c:61:7e:2e:5a:58:d9:18:74:7d:1d:71:e9:31:8a: 8b:97:8b:78:3e:26:ae:fe:af:22:40:95:88:bb:89:1a:a5:b0: 78:89:d4:b1:2a:d6:ea:b8:a9:b4:f6:ef:63:d5:db:6c:99:fe: 3a:ec:3a:62:76:37:1d:8c:d9:a0:f4:d2:2f:c4:b3:39:3b:22: 26:5d:94:00:36:c3:4c:49:b1:87:17:a3:a2:6e:75:35:33:3e: 53:22:b8:ff:fa:2d:27:71:fd:f8:5d:aa:52:f0:5d:fd:db:49: b8:5a:0b:a9:86:16:17:a5:76:92:c3:82:27:59:21:cc:c0:62: 5e:36:20:b9:7b:83:94:ea:4d:b7:b0:6d:e8:29:38:74:19:6b: 43:93:96:28:49:ad:b1:ab:76:c6:fc:e7:ae:05:6f:b7:66:5a: 1e:a3:e9:57:bc:d9:0f:4c:41:01:c2:1b:8b:a5:f4:0f:f4:16: e6:1b:91:bf:05:54:06:e3:bc:e2:2c:f3:48:17:a3:bd:a6:4b: 07:1e:b5:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxHmvhC+ZLPuEpaGN4YNk2JZ+egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNjAyMDEwMzQ1MzdaFw0yNjAyMDQxNTA4MzdaMDMxMTAvBgNV BAMTKDU5REVCMDUxOTIwODU2ODQzNzU5REE3QkVGNjM2NzUzNzRFRTZCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVx2fU6voikqD02lEVCoUcG72b ZKKVjnn2BPQetIfEHF6r1yw8cqanMa0L95GhGpW/JA5RqwYasROZdYR0AK4ICwrg GoN1YAbI/dNrGUSY6U6DxvZo0boOLgQGD7MFxq54eO7j28SL+pOixIwO9hHUmbPH 08xvIqDWWOmX4Q34/SPHC2TDmwNL0EgQymzrusdSM/xd6qS+RgN9zQXnHoamgceA yLELM2JiUVuQF9ZNtC8H/LgpEnHaIfkzmwnMFxcQvI6FW4Hu5Iqfl00rxSvq9LSf InlFVZd/ro8ODlTdce6XkKAQDmRLjBfeku7BSKBqnbKTAAFRM+wBWFFfBmxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWd6wUZIIVoQ3Wdp772NnU3Tua1YwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9PzqyrUtq8KJexyl0CuqM3SA7IOxjBOVVF JyJ6BAiSqFAYXllZgAVSkABPRJ7lG6dvgi23LGkqMgxhfi5aWNkYdH0dcekxiouX i3g+Jq7+ryJAlYi7iRqlsHiJ1LEq1uq4qbT272PV22yZ/jrsOmJ2Nx2M2aD00i/E szk7IiZdlAA2w0xJsYcXo6JudTUzPlMiuP/6LSdx/fhdqlLwXf3bSbhaC6mGFhel dpLDgidZIczAYl42ILl7g5TqTbewbegpOHQZa0OTlihJrbGrdsb8564Fb7dmWh6j 6Ve82Q9MQQHCG4ul9A/0FuYbkb8FVAbjvOIs80gXo72mSwcetSo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:04 2026 by rpki-client