This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: OKSPA/0+LDlHrbFZSsG8LCpnCRDG3VPtKci+4ZXAcp4= Subject key identifier: 9F:0B:E3:60:6F:EC:E6:D8:1F:BE:51:64:AB:68:9D:F0:12:BA:80:1D Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 386EF968328ADA20728B3026C6C4AC2D163050C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 0548 Signing time: Sun 01 Feb 2026 13:52:22 +0000 Manifest this update: Sun 01 Feb 2026 13:47:22 +0000 Manifest next update: Thu 05 Feb 2026 00:50:22 +0000 Files and hashes: 1: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 2: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: +rrjyZwke3K+Pb/nPuggQBmOVYKRF0TYMdo6WVtSQg8=) 3: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 4: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 5: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 6: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 00:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6e:f9:68:32:8a:da:20:72:8b:30:26:c6:c4:ac:2d:16:30:50:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Feb 1 13:47:22 2026 GMT Not After : Feb 5 00:50:22 2026 GMT Subject: CN=9F0BE3606FECE6D81FBE5164AB689DF012BA801D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:d5:c4:14:11:68:59:7d:8c:53:db:6b:ac: b9:87:c6:58:38:2d:05:24:51:7e:8c:79:eb:f4:77: 28:0d:7c:bd:ee:7e:af:19:2e:1e:e9:56:b9:0d:d3: 24:7e:6d:f0:6b:77:a7:96:f9:c5:90:28:5d:77:ed: bf:40:93:7c:b5:31:eb:02:ea:7f:fe:5a:5b:d9:2c: 95:e1:97:e3:6e:cf:1d:fa:bf:f1:13:53:f0:08:7d: 0e:56:db:38:21:64:7f:f3:3e:06:62:93:2c:66:98: 26:f4:af:b8:fa:76:7e:c5:52:43:a8:11:d4:a8:21: 82:e4:32:d3:a0:d9:2a:d0:dc:2c:2f:7c:78:8e:b1: 85:f3:5d:f4:1a:f1:a8:3c:03:68:77:a7:b9:a3:af: 1e:0c:e5:44:bc:53:fa:9a:db:58:5a:42:54:ce:39: 16:98:42:08:a7:58:0d:d9:d0:07:25:53:25:8d:58: 96:69:4e:88:84:ba:c8:80:62:85:40:c1:8d:4f:7d: 3c:5c:90:95:bd:f6:11:7b:4d:6e:6c:3f:39:53:a0: 3a:6a:e0:b0:f0:6a:34:60:22:4b:37:df:20:e4:a2: aa:9e:ea:7b:36:13:d8:34:65:38:32:b5:2e:b5:72: ce:ed:60:2f:8a:3b:21:69:25:c7:25:a0:3c:39:76: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:E3:60:6F:EC:E6:D8:1F:BE:51:64:AB:68:9D:F0:12:BA:80:1D X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bd:b9:e3:4e:49:e5:f5:b3:b9:48:0c:c3:b2:02:66:23:b4: e7:b0:eb:08:f7:68:c3:54:93:4f:77:4c:7e:cd:f4:cf:36:01: 31:f4:69:f8:00:14:ac:d5:1f:02:6e:28:1b:c8:a6:44:89:8e: 0b:65:76:b1:5d:8f:21:4f:64:05:28:2d:f7:7c:5a:c1:f8:1c: 6a:01:a4:14:ca:c8:35:c0:22:d1:05:70:ed:9f:f5:4d:20:bb: 33:29:1f:32:66:00:96:3c:ed:fe:ec:37:1d:28:60:2d:2c:34: df:93:81:fd:00:f0:a9:02:e4:5d:35:97:66:33:c8:aa:06:63: 06:53:94:87:ed:db:b4:fe:98:39:e7:ef:2a:4d:b4:c2:c6:4e: 27:a4:e2:fc:10:c3:07:1b:a9:69:44:af:d1:07:e7:46:0d:eb: 61:35:38:62:e8:ad:45:4d:e6:30:23:2a:bc:d2:ff:2b:52:46: e8:e7:b3:5e:55:ad:31:f1:c0:fc:24:b6:21:09:42:c3:78:78: 00:34:e5:c0:0f:7b:95:55:18:e9:2b:8b:2a:3a:fc:c0:6d:45: 9c:56:19:dd:6d:f7:59:16:f8:24:52:9c:72:6a:71:c8:15:8f: 76:27:e5:f2:7c:3a:c9:19:3f:51:1c:5f:f4:a1:cf:c7:d0:76: 39:fd:47:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOG75aDKK2iByizAmxsSsLRYwUMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNjAyMDExMzQ3MjJaFw0yNjAyMDUwMDUwMjJaMDMxMTAvBgNV BAMTKDlGMEJFMzYwNkZFQ0U2RDgxRkJFNTE2NEFCNjg5REYwMTJCQTgwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTNXEFBFoWX2MU9trrLmHxlg4 LQUkUX6Meev0dygNfL3ufq8ZLh7pVrkN0yR+bfBrd6eW+cWQKF137b9Ak3y1MesC 6n/+WlvZLJXhl+Nuzx36v/ETU/AIfQ5W2zghZH/zPgZikyxmmCb0r7j6dn7FUkOo EdSoIYLkMtOg2SrQ3CwvfHiOsYXzXfQa8ag8A2h3p7mjrx4M5US8U/qa21haQlTO ORaYQginWA3Z0AclUyWNWJZpToiEusiAYoVAwY1PfTxckJW99hF7TW5sPzlToDpq 4LDwajRgIks33yDkoqqe6ns2E9g0ZTgytS61cs7tYC+KOyFpJccloDw5dmIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnwvjYG/s5tgfvlFkq2id8BK6gB0wHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADS9ueNOSeX1s7lIDMOyAmYjtOew6wj3aMNU k093TH7N9M82ATH0afgAFKzVHwJuKBvIpkSJjgtldrFdjyFPZAUoLfd8WsH4HGoB pBTKyDXAItEFcO2f9U0guzMpHzJmAJY87f7sNx0oYC0sNN+Tgf0A8KkC5F01l2Yz yKoGYwZTlIft27T+mDnn7ypNtMLGTiek4vwQwwcbqWlEr9EH50YN62E1OGLorUVN 5jAjKrzS/ytSRujns15VrTHxwPwktiEJQsN4eAA05cAPe5VVGOkriyo6/MBtRZxW Gd1t91kW+CRSnHJqccgVj3Yn5fJ8OskZP1EcX/Shz8fQdjn9R8M= -----END CERTIFICATE-----Generated at Mon Feb 2 12:56:43 2026 by rpki-client