This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft File: DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json) Hash identifier: e8o5vokByDqb1KWNO+dZ7epb+OF/5B8JL2ZxyEiubW0= Subject key identifier: FD:38:D4:BD:3A:04:05:3B:9C:92:BC:05:E7:B9:45:21:0C:4C:AC:85 Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Certificate serial: 4B93B7E5F7AA920A9A3DE601BD42DF7A9F1CB200 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft Manifest number: 020F Signing time: Sat 31 Jan 2026 19:21:55 +0000 Manifest this update: Sat 31 Jan 2026 19:16:55 +0000 Manifest next update: Wed 04 Feb 2026 06:23:55 +0000 Files and hashes: 1: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: 9XabV5C+bxTzwQpxWRFJ2J0ODxVlFWpwxY4ZIRRll5s=) 2: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: bH93AUce8D1aYLvs7jKLNx157hiV8YRjTu/wvKWkkHY=) 3: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: 4vYKKc9gCQNLGbY6CdycYfIML4Cvt54/Y7bjgPLGEYU=) 4: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: avxCSiDbdDW7kOsh1a+dBlMPbboYpQF+S49u7QzrJXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 06:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:93:b7:e5:f7:aa:92:0a:9a:3d:e6:01:bd:42:df:7a:9f:1c:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Validity Not Before: Jan 31 19:16:55 2026 GMT Not After : Feb 4 06:23:55 2026 GMT Subject: CN=FD38D4BD3A04053B9C92BC05E7B945210C4CAC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7a:b2:b3:56:31:a3:54:99:64:1f:b1:0e:66: 43:37:e7:5c:88:47:90:03:de:06:79:f6:ed:60:de: 87:aa:47:b0:32:27:d4:d6:29:15:ac:6f:a9:07:a4: 75:13:74:1b:aa:91:25:ac:51:14:51:d1:70:55:ce: 21:7c:82:a2:42:e5:ab:9e:2b:f1:30:53:1c:cb:07: 67:a3:2c:c2:19:2d:73:b1:d0:93:e5:15:fb:6b:64: 3c:00:53:73:8a:71:7c:71:56:2b:e8:2d:c8:d2:8a: 8a:a2:ac:04:8d:6f:39:e5:94:11:50:8d:d5:3d:c8: 34:6d:c9:df:68:a0:9f:eb:8d:cc:2f:fc:34:d2:03: 56:e5:fd:f1:08:45:96:d0:af:dd:63:5a:ef:d2:6e: c9:85:fa:9b:4e:36:03:51:05:e8:e2:1a:8f:fd:24: 47:12:30:27:ba:8c:1b:53:75:c5:f6:ce:07:1b:d3: 77:59:c0:cc:44:1d:f2:61:6b:ff:71:cf:14:a8:fa: b9:78:a1:7a:0c:0d:2e:c7:8b:06:16:8e:67:94:4f: 6f:09:48:7f:2d:7a:02:8f:6e:d9:a6:91:7a:d9:67: ae:26:65:4a:03:33:96:d3:e4:a9:50:37:4f:ee:78: 08:f6:ee:ab:8b:97:08:06:72:7b:7e:95:28:aa:7f: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:D4:BD:3A:04:05:3B:9C:92:BC:05:E7:B9:45:21:0C:4C:AC:85 X509v3 Authority Key Identifier: keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2a:29:b2:2b:d6:56:ee:fe:66:8f:d8:81:34:ee:17:b7:3a: b5:cd:01:26:83:f4:3a:d0:c4:95:80:f7:d4:9c:07:a0:6d:d5: 92:5a:b4:3c:07:44:eb:2e:51:70:2b:c1:a7:e0:71:c8:cc:c6: df:05:6b:59:74:a3:50:28:b4:5c:16:65:bb:7c:7b:9a:f7:15: 54:ed:4e:ae:39:22:ad:ea:c1:fa:c6:d6:95:85:33:26:f7:1d: e0:a2:a3:57:0e:76:06:f9:1d:51:06:ce:b2:e9:64:2b:2c:23: 11:77:d3:71:76:de:49:21:28:55:73:d8:6e:ac:5c:bb:14:3e: 9f:67:08:ec:91:60:20:44:a6:26:98:a6:53:f0:42:4f:ee:35: 85:b4:bd:c9:d1:b7:be:cf:da:8d:68:57:76:10:2c:f0:93:f5: 59:90:25:7a:ef:1c:63:92:7f:de:34:30:99:f7:91:03:b5:5e: 20:83:06:f8:08:90:7b:2c:8d:6b:e3:a8:57:62:5e:ee:82:29: 18:8c:fb:57:0c:bf:98:c5:6a:73:67:17:e8:e0:4d:e3:86:99: a9:08:3c:da:d8:d5:37:58:53:92:f4:86:e7:40:37:41:ea:d3: ff:16:0c:26:31:a6:a5:5e:27:42:87:ef:97:69:78:ef:8d:ca: 23:ba:43:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5O35feqkgqaPeYBvULfep8csgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4 OUVFODE5QzAeFw0yNjAxMzExOTE2NTVaFw0yNjAyMDQwNjIzNTVaMDMxMTAvBgNV BAMTKEZEMzhENEJEM0EwNDA1M0I5QzkyQkMwNUU3Qjk0NTIxMEM0Q0FDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5erKzVjGjVJlkH7EOZkM351yI R5AD3gZ59u1g3oeqR7AyJ9TWKRWsb6kHpHUTdBuqkSWsURRR0XBVziF8gqJC5aue K/EwUxzLB2ejLMIZLXOx0JPlFftrZDwAU3OKcXxxVivoLcjSioqirASNbznllBFQ jdU9yDRtyd9ooJ/rjcwv/DTSA1bl/fEIRZbQr91jWu/SbsmF+ptONgNRBejiGo/9 JEcSMCe6jBtTdcX2zgcb03dZwMxEHfJha/9xzxSo+rl4oXoMDS7HiwYWjmeUT28J SH8tegKPbtmmkXrZZ64mZUoDM5bT5KlQN0/ueAj27quLlwgGcnt+lSiqf8MdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/TjUvToEBTuckrwF57lFIQxMrIUwHwYDVR0j BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF ODE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5 QjI4OUVFODE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwqKbIr1lbu/maP2IE07he3OrXNASaD9DrQ xJWA99ScB6Bt1ZJatDwHROsuUXArwafgccjMxt8Fa1l0o1AotFwWZbt8e5r3FVTt Tq45Iq3qwfrG1pWFMyb3HeCio1cOdgb5HVEGzrLpZCssIxF303F23kkhKFVz2G6s XLsUPp9nCOyRYCBEpiaYplPwQk/uNYW0vcnRt77P2o1oV3YQLPCT9VmQJXrvHGOS f940MJn3kQO1XiCDBvgIkHssjWvjqFdiXu6CKRiM+1cMv5jFanNnF+jgTeOGmakI PNrY1TdYU5L0hudAN0Hq0/8WDCYxpqVeJ0KH75dpeO+NyiO6Q20= -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:42 2026 by rpki-client