This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: nxaX2ENlIGReoUyEjriqXdc97VOz+4h3zWDGI3jciDg= Subject key identifier: 13:92:5F:0A:37:85:31:E9:A4:54:D6:97:CE:65:99:DC:F0:4A:90:5D Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 6A27518FB461DF41D3A37432343A717940D8E49A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 0543 Signing time: Sun 01 Feb 2026 00:31:17 +0000 Manifest this update: Sun 01 Feb 2026 00:26:17 +0000 Manifest next update: Wed 04 Feb 2026 03:12:17 +0000 Files and hashes: 1: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) 2: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: umNdsc207QJ3Wy2Xia9ZJaAELzqdOlp1m+FigATE3FU=) 3: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) 4: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 5: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 6: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:27:51:8f:b4:61:df:41:d3:a3:74:32:34:3a:71:79:40:d8:e4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Feb 1 00:26:17 2026 GMT Not After : Feb 4 03:12:17 2026 GMT Subject: CN=13925F0A378531E9A454D697CE6599DCF04A905D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:a1:c1:02:99:be:fc:7f:e5:40:8a:07:a1: e7:c5:8b:5a:20:5a:71:4a:43:37:14:5f:01:fa:ac: f3:6a:62:b8:8e:3e:31:9a:44:90:2c:b4:79:a2:e3: ac:54:be:ef:03:10:f8:60:17:87:7a:53:e2:c8:e5: 9e:1d:83:5e:6a:0c:59:4d:d0:aa:7d:14:b4:9f:ab: a8:e8:5e:31:89:7e:d0:6f:8c:b4:77:b9:9d:4b:7c: 78:73:6d:9b:06:d9:9d:65:b1:37:49:ed:8e:1d:f5: 81:af:2f:24:6c:1b:44:dc:64:65:a2:0b:dd:7a:ad: 79:60:c3:23:5c:df:14:76:3e:c9:4f:b3:fc:54:2b: 44:80:3c:18:1b:e4:fb:d2:9e:3c:b2:76:5f:8e:35: 33:f0:8a:39:24:3d:00:7f:b7:45:93:a7:95:39:45: d1:c6:5a:42:fd:91:5c:2d:45:63:7e:3d:f1:38:df: 4f:e1:58:bb:97:9f:34:e6:30:96:33:15:5d:ae:0f: 44:d0:42:6f:21:5d:26:cb:57:89:68:0b:37:b4:f4: 34:d7:f6:50:e3:a6:cc:05:9f:0c:eb:52:6b:e7:2f: 3c:04:97:7a:3f:0a:32:92:63:11:b3:6f:f7:e4:30: 39:a7:7e:c5:3a:b2:0c:b5:66:b4:59:3d:ec:bd:84: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:92:5F:0A:37:85:31:E9:A4:54:D6:97:CE:65:99:DC:F0:4A:90:5D X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ba:72:72:26:7b:75:33:b6:bc:45:40:2a:1e:86:b4:db:c4: af:03:75:a0:70:f2:c6:99:ff:74:27:54:4c:d4:19:2d:5b:89: 10:8d:bd:c7:43:21:9a:3d:11:b9:56:d7:92:d5:ab:70:07:13: 87:57:83:1b:8d:5e:5e:86:60:12:20:60:06:f2:99:8f:4b:e0: 88:f4:ea:e4:88:d7:1d:3a:28:21:d5:e7:8e:99:a5:c3:04:53: 8a:e0:0c:36:3e:6d:00:f6:77:04:70:8e:61:c6:67:fe:66:29: 9d:a6:f1:20:86:e8:6f:11:16:5e:db:3e:da:19:cd:97:5a:c2: c0:48:87:68:5c:2b:2c:44:b8:f8:c6:b5:ad:49:e8:22:bf:65: 18:49:73:43:96:35:31:07:b5:80:6b:c8:c1:3a:3a:f2:ac:10: 67:35:14:93:d3:d3:c2:1e:08:52:f8:a5:5c:be:2a:d9:48:0c: bb:58:05:03:79:fd:9c:02:78:f3:0f:9d:88:82:3c:97:ac:47: ad:e9:72:af:98:84:c7:a5:6c:8b:27:d7:12:15:2f:3b:38:30: 2b:8f:59:ab:e2:d6:07:4a:c9:5a:f6:ea:a7:6e:3b:35:fe:9c: 4f:14:32:d1:23:29:e4:d6:0f:ff:65:70:fa:36:db:0f:f1:c4: 88:f5:9a:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaidRj7Rh30HTo3QyNDpxeUDY5JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNjAyMDEwMDI2MTdaFw0yNjAyMDQwMzEyMTdaMDMxMTAvBgNV BAMTKDEzOTI1RjBBMzc4NTMxRTlBNDU0RDY5N0NFNjU5OURDRjA0QTkwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRKHBApm+/H/lQIoHoefFi1og WnFKQzcUXwH6rPNqYriOPjGaRJAstHmi46xUvu8DEPhgF4d6U+LI5Z4dg15qDFlN 0Kp9FLSfq6joXjGJftBvjLR3uZ1LfHhzbZsG2Z1lsTdJ7Y4d9YGvLyRsG0TcZGWi C916rXlgwyNc3xR2PslPs/xUK0SAPBgb5PvSnjyydl+ONTPwijkkPQB/t0WTp5U5 RdHGWkL9kVwtRWN+PfE430/hWLuXnzTmMJYzFV2uD0TQQm8hXSbLV4loCze09DTX 9lDjpswFnwzrUmvnLzwEl3o/CjKSYxGzb/fkMDmnfsU6sgy1ZrRZPey9hFoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5JfCjeFMemkVNaXzmWZ3PBKkF0wHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi6cnIme3UztrxFQCoehrTbxK8DdaBw8saZ /3QnVEzUGS1biRCNvcdDIZo9EblW15LVq3AHE4dXgxuNXl6GYBIgYAbymY9L4Ij0 6uSI1x06KCHV546ZpcMEU4rgDDY+bQD2dwRwjmHGZ/5mKZ2m8SCG6G8RFl7bPtoZ zZdawsBIh2hcKyxEuPjGta1J6CK/ZRhJc0OWNTEHtYBryME6OvKsEGc1FJPT08Ie CFL4pVy+KtlIDLtYBQN5/ZwCePMPnYiCPJesR63pcq+YhMelbIsn1xIVLzs4MCuP Wavi1gdKyVr26qduOzX+nE8UMtEjKeTWD/9lcPo22w/xxIj1ms4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:39 2026 by rpki-client