This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: D6+uWiq+G/x8ow7c2cC27bQ/egydBvIvsx0FE9dKmbo= Subject key identifier: 29:E4:0F:36:8E:3C:20:AA:F5:B7:B5:2A:5C:83:74:4D:00:88:92:D6 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 2C0D7EDEF3A592E6C1631F9612929C281EAF294D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 038A Signing time: Sat 31 Jan 2026 06:21:19 +0000 Manifest this update: Sat 31 Jan 2026 06:16:19 +0000 Manifest next update: Tue 03 Feb 2026 12:00:19 +0000 Files and hashes: 1: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=) 2: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=) 3: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 4: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) 5: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 6: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=) 7: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: Om5q9fx0G0zdTLMjdRMrfpe2r7Qc/+EC+5gr5ICUf5s=) 8: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=) 9: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) 10: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:7e:de:f3:a5:92:e6:c1:63:1f:96:12:92:9c:28:1e:af:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jan 31 06:16:19 2026 GMT Not After : Feb 3 12:00:19 2026 GMT Subject: CN=29E40F368E3C20AAF5B7B52A5C83744D008892D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:ed:16:d4:6d:90:27:c1:a3:2f:f4:bb:0e: 06:23:be:ab:2e:ad:02:90:e2:b8:3d:98:51:cb:96: 1e:29:21:e4:48:91:b0:6b:74:40:14:33:0c:92:45: 37:c5:a0:a8:26:b8:1d:24:63:f5:a3:b2:bc:7c:26: fe:00:03:84:fd:d8:1e:b4:60:df:32:de:07:c7:e0: c0:97:db:8c:4c:9e:a2:4c:85:f3:53:2b:88:74:de: 11:06:74:4b:3b:4d:fe:94:4e:b8:c2:20:d0:cb:da: 16:c6:d0:0f:bc:97:26:92:2f:13:e5:59:b8:28:e5: a9:42:5e:19:9f:00:bc:0c:92:67:48:5e:aa:1f:ce: 8c:82:cd:4e:f2:45:2f:26:00:5a:2d:86:a8:49:bc: 21:c7:0c:fe:5c:33:ce:0d:f1:d8:b5:e8:4f:43:b7: 7b:d6:12:15:60:ae:35:ea:76:83:cb:21:e9:5f:e4: e5:4c:83:42:65:76:a0:0a:6d:89:b0:86:8d:0d:5c: 3d:08:cd:7d:db:aa:a8:b8:79:c6:f9:d7:ac:90:4c: 9a:33:2e:e9:d0:05:a0:e7:07:2c:c3:26:db:3e:5f: db:b0:5a:68:17:5a:ec:a3:7e:e5:26:d2:73:a7:10: 41:f4:e1:37:4b:93:4d:c1:bb:3f:a3:08:11:ca:9b: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E4:0F:36:8E:3C:20:AA:F5:B7:B5:2A:5C:83:74:4D:00:88:92:D6 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:75:d5:5b:33:d3:dd:b0:e0:6f:4a:7e:26:e4:d1:c8:79:81: 09:81:2a:6c:ed:47:b2:0a:f5:06:79:56:0c:26:04:06:93:a6: 69:53:3c:a9:80:c5:5b:0b:77:28:3d:99:6e:2b:03:57:9e:4d: 04:b6:7b:e7:6e:55:29:f1:88:f0:02:ca:03:15:8a:dd:ac:e7: b9:c5:d5:4f:83:b1:db:01:53:90:97:38:bb:7c:89:26:ea:d9: b9:4d:99:84:fc:fe:5f:66:2c:0f:71:9a:4b:05:b7:14:9f:b4: a8:eb:df:48:3a:95:db:e9:56:2d:cc:42:8b:05:be:99:ea:0f: b6:16:6c:fd:c5:99:b1:02:54:56:b8:11:45:db:69:22:01:9b: b3:e5:94:6d:89:df:eb:62:3b:0a:2d:15:bf:a3:b7:57:20:0b: 25:4e:ea:8a:3d:31:47:db:72:96:95:cc:7b:44:c3:65:d0:7a: 0a:55:ca:ff:7b:90:cc:62:0a:60:a8:13:5d:97:0c:58:2b:bf: 36:81:0d:3c:10:9b:db:fd:57:3f:d6:91:97:52:5b:4a:da:4f: f2:ae:93:5b:7f:fa:25:0e:89:10:78:82:fe:4e:42:4d:f6:68: d1:43:b9:dd:6c:6d:e8:c9:5c:52:cf:a5:43:9e:6e:b9:96:3d: 88:fc:f2:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULA1+3vOlkubBYx+WEpKcKB6vKU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNjAxMzEwNjE2MTlaFw0yNjAyMDMxMjAwMTlaMDMxMTAvBgNV BAMTKDI5RTQwRjM2OEUzQzIwQUFGNUI3QjUyQTVDODM3NDREMDA4ODkyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOe0W1G2QJ8GjL/S7DgYjvqsu rQKQ4rg9mFHLlh4pIeRIkbBrdEAUMwySRTfFoKgmuB0kY/Wjsrx8Jv4AA4T92B60 YN8y3gfH4MCX24xMnqJMhfNTK4h03hEGdEs7Tf6UTrjCINDL2hbG0A+8lyaSLxPl Wbgo5alCXhmfALwMkmdIXqofzoyCzU7yRS8mAFothqhJvCHHDP5cM84N8di16E9D t3vWEhVgrjXqdoPLIelf5OVMg0JldqAKbYmwho0NXD0IzX3bqqi4ecb516yQTJoz LunQBaDnByzDJts+X9uwWmgXWuyjfuUm0nOnEEH04TdLk03Buz+jCBHKm11/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKeQPNo48IKr1t7UqXIN0TQCIktYwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ11Vsz092w4G9Kfibk0ch5gQmBKmztR7IK 9QZ5VgwmBAaTpmlTPKmAxVsLdyg9mW4rA1eeTQS2e+duVSnxiPACygMVit2s57nF 1U+DsdsBU5CXOLt8iSbq2blNmYT8/l9mLA9xmksFtxSftKjr30g6ldvpVi3MQosF vpnqD7YWbP3FmbECVFa4EUXbaSIBm7PllG2J3+tiOwotFb+jt1cgCyVO6oo9MUfb cpaVzHtEw2XQegpVyv97kMxiCmCoE12XDFgrvzaBDTwQm9v9Vz/WkZdSW0raT/Ku k1t/+iUOiRB4gv5OQk32aNFDud1sbejJXFLPpUOebrmWPYj88gg= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:40 2026 by rpki-client