This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: cb9vde2vL6DNQPyoub4EV4vnh6f9cOFour/5MMCndVU= Subject key identifier: 4A:42:F0:B4:DC:9A:B9:8A:33:DA:B0:80:A1:53:13:D9:FF:21:C4:AA Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 4FDB50EF6D1CA0743B76A69D698326B0D0A3FA01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0380 Signing time: Tue 20 Jan 2026 00:11:03 +0000 Manifest this update: Tue 20 Jan 2026 00:06:03 +0000 Manifest next update: Fri 23 Jan 2026 04:03:03 +0000 Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 2: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 3: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: e9+B/fMcjQKqGvh1oK1xlrfcmtfjGpCfuG0xkkdjYHQ=) 4: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 5: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 6: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 7: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 9: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 04:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:db:50:ef:6d:1c:a0:74:3b:76:a6:9d:69:83:26:b0:d0:a3:fa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Jan 20 00:06:03 2026 GMT Not After : Jan 23 04:03:03 2026 GMT Subject: CN=4A42F0B4DC9AB98A33DAB080A15313D9FF21C4AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:22:02:4d:cb:47:53:21:9a:16:2a:ae:38: fb:6a:89:ff:c1:1d:bd:cc:26:47:09:e5:6d:b9:1e: 9a:c5:45:f1:0d:9d:72:4c:a0:f5:5a:32:14:62:62: c2:c8:ba:b6:aa:15:80:62:2f:06:f7:13:66:b3:1c: ce:e9:5d:fe:ca:43:c8:6b:21:f2:e2:af:bc:92:b5: 16:7c:07:5b:cd:24:5f:0f:90:d9:74:4b:bb:7b:e1: 7e:d4:b9:36:51:7e:be:f8:be:d5:cf:ee:1c:46:98: 7f:a6:0f:25:9a:37:20:83:46:3e:94:15:8b:d1:ab: f2:ec:dc:ee:1f:db:58:22:e2:4c:57:3f:e6:eb:37: 24:7a:93:29:12:8b:15:91:05:09:75:65:1b:fd:e5: a9:76:ba:96:80:03:7b:03:82:3f:36:e1:5f:25:de: c1:c8:a1:75:eb:47:f3:af:73:ef:e4:27:cb:4c:09: 7f:d6:4c:7b:2f:05:db:66:46:39:c9:bf:16:53:ab: cc:40:e1:43:d6:7e:38:d0:a8:e2:aa:8c:6f:91:b0: 20:1f:13:b9:e6:13:6f:ac:36:18:7a:b4:4c:20:a1: c2:d7:aa:c1:35:19:68:d4:0b:fc:20:c2:d3:7e:ef: e6:0c:b3:ea:77:8c:2f:77:db:83:f6:71:03:fe:f3: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:42:F0:B4:DC:9A:B9:8A:33:DA:B0:80:A1:53:13:D9:FF:21:C4:AA X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:83:c7:8b:65:47:1f:01:a8:ae:87:c9:75:d5:c2:23:91:9c: 4f:c4:ca:98:bc:de:ff:76:4d:6d:e1:ca:d4:7b:84:68:c2:a1: 05:ff:ad:32:ad:09:3b:a6:3d:d4:07:7a:b3:ce:b2:ed:3c:ba: 27:dd:91:f3:2a:95:47:cd:c4:8f:77:e8:25:85:71:f8:da:fd: 21:b0:ba:3f:84:67:7d:c1:ac:73:6b:b2:82:cd:55:a2:c1:2d: f7:df:b5:e4:96:72:aa:c7:7e:74:b1:84:46:40:bc:49:60:c7: 17:71:da:76:cc:07:fd:75:83:25:9b:2b:03:77:a0:0c:81:4d: 72:e7:d2:ca:25:b0:83:9a:f1:62:27:df:76:69:9f:31:2f:2d: 0d:64:d8:4f:f7:de:cf:8f:c0:09:ff:63:bb:54:70:41:6f:e8: d9:65:de:b2:e7:fe:72:e3:b3:e9:8f:c3:50:84:86:40:4b:3b: d7:f2:02:e8:3c:75:88:52:a9:df:69:12:a3:0e:b0:68:0d:ca: 6e:56:c6:7e:24:c3:a1:db:af:91:98:f9:16:dd:14:95:dc:2e: a8:94:b2:75:aa:87:09:a7:04:1c:b7:8f:e7:ed:fb:d5:32:af: a3:95:ef:12:2c:65:cf:92:21:47:1b:9d:a9:ca:56:e8:c2:e4: b4:26:e0:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9tQ720coHQ7dqadaYMmsNCj+gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNjAxMjAwMDA2MDNaFw0yNjAxMjMwNDAzMDNaMDMxMTAvBgNV BAMTKDRBNDJGMEI0REM5QUI5OEEzM0RBQjA4MEExNTMxM0Q5RkYyMUM0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJSICTctHUyGaFiquOPtqif/B Hb3MJkcJ5W25HprFRfENnXJMoPVaMhRiYsLIuraqFYBiLwb3E2azHM7pXf7KQ8hr IfLir7yStRZ8B1vNJF8PkNl0S7t74X7UuTZRfr74vtXP7hxGmH+mDyWaNyCDRj6U FYvRq/Ls3O4f21gi4kxXP+brNyR6kykSixWRBQl1ZRv95al2upaAA3sDgj824V8l 3sHIoXXrR/Ovc+/kJ8tMCX/WTHsvBdtmRjnJvxZTq8xA4UPWfjjQqOKqjG+RsCAf E7nmE2+sNhh6tEwgocLXqsE1GWjUC/wgwtN+7+YMs+p3jC9324P2cQP+83afAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkLwtNyauYoz2rCAoVMT2f8hxKowHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaDx4tlRx8BqK6HyXXVwiORnE/Eypi83v92 TW3hytR7hGjCoQX/rTKtCTumPdQHerPOsu08uifdkfMqlUfNxI936CWFcfja/SGw uj+EZ33BrHNrsoLNVaLBLfffteSWcqrHfnSxhEZAvElgxxdx2nbMB/11gyWbKwN3 oAyBTXLn0solsIOa8WIn33ZpnzEvLQ1k2E/33s+PwAn/Y7tUcEFv6Nll3rLn/nLj s+mPw1CEhkBLO9fyAug8dYhSqd9pEqMOsGgNym5Wxn4kw6Hbr5GY+RbdFJXcLqiU snWqhwmnBBy3j+ft+9Uyr6OV7xIsZc+SIUcbnanKVujC5LQm4HQ= -----END CERTIFICATE-----Generated at Tue Jan 20 15:57:44 2026 by rpki-client