This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: 7TpEV7+nm/MNrEmnGrHhmNk4F3xih9Zi7NmBy+ihYe4= Subject key identifier: 0E:0B:96:29:BA:50:39:75:17:BD:4D:DF:9C:77:6D:48:31:90:F2:32 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 75D98FB305D58F604850585323E0B2B1E45E3999 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 0219 Signing time: Sat 31 Jan 2026 21:02:29 +0000 Manifest this update: Sat 31 Jan 2026 20:57:29 +0000 Manifest next update: Wed 04 Feb 2026 07:52:29 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: sIzS4JGhC1V0is1aFGX8AxYD9Czx5fAknZ1BhTYtJbQ=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 07:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d9:8f:b3:05:d5:8f:60:48:50:58:53:23:e0:b2:b1:e4:5e:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Jan 31 20:57:29 2026 GMT Not After : Feb 4 07:52:29 2026 GMT Subject: CN=0E0B9629BA50397517BD4DDF9C776D483190F232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:cc:e8:2e:8f:40:d2:07:81:1e:6a:04:54: ad:53:ed:37:19:ec:54:cf:4e:46:75:b6:6c:c9:98: af:92:aa:b2:56:93:7c:b5:cf:47:cf:6a:3c:f4:ed: 0d:21:9c:2c:63:e1:e2:c0:53:46:32:8d:fb:18:fd: 2d:d4:0c:28:1e:e9:dc:b9:f9:70:97:17:fe:4b:4c: 61:ee:5f:31:11:de:12:9c:60:2e:1c:22:b8:00:2d: 28:2d:38:2d:6b:52:e5:d8:26:80:28:ef:95:b1:4c: 90:cd:23:9b:05:fb:be:10:c3:4e:2d:0a:8e:bd:c2: e1:09:a2:61:1a:1c:57:bd:70:ff:69:b5:4d:c6:8a: 98:17:7d:fd:ec:f9:bb:1d:d6:35:a6:fc:27:65:cf: e4:bb:35:4d:58:88:c5:ba:95:a9:7a:88:7e:1d:35: 44:3a:57:b9:4f:e6:9f:e6:24:65:59:0e:49:f4:31: c3:2d:a4:5d:50:47:9d:83:0b:ca:d8:92:b4:11:37: 19:b1:5d:6f:84:8c:d9:32:8c:f9:b6:c1:be:47:4b: f6:b2:53:79:18:ed:06:e4:cd:85:c2:91:a9:31:71: 89:a7:67:99:40:37:c4:d2:2a:db:44:4a:63:9f:93: 98:3c:75:82:f1:5a:69:33:44:72:09:40:4c:d2:93: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:96:29:BA:50:39:75:17:BD:4D:DF:9C:77:6D:48:31:90:F2:32 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2b:6e:f6:90:b9:f8:9d:8c:b1:4b:5c:36:44:57:bf:b8:dd: bf:bd:1f:de:48:8c:d0:1a:21:68:95:d2:69:74:7a:e5:35:d3: c9:78:8b:7d:40:98:fd:29:c5:f5:a2:6d:9e:08:ce:ec:ec:90: 99:28:86:a4:65:14:51:20:94:0b:64:2c:1f:05:d9:0a:66:ce: a9:41:44:00:e7:52:55:dc:35:1d:f3:c8:d7:86:f6:90:71:10: 74:c4:0e:99:ba:0c:c6:8e:aa:7d:14:72:0b:cd:b5:d2:a0:51: 14:c4:28:72:f3:24:a7:4f:54:23:e8:50:57:c3:84:8c:05:28: 56:c8:61:a4:c7:ac:44:c2:63:f2:67:5d:40:08:b4:08:d0:2f: c4:5b:60:cd:41:1f:2d:67:be:18:21:77:3e:1b:02:8c:79:ae: 03:55:fa:94:cf:34:a3:a8:3c:07:88:16:ac:71:20:d2:65:ef: c8:5e:f3:7b:8a:c2:d3:19:cc:07:3f:d4:a5:5a:e3:b1:2e:12: 71:51:ee:64:ee:a9:c3:28:3a:dc:96:f4:f2:37:31:b7:f2:dd: e4:ec:2c:f9:71:f4:66:02:a3:c1:d8:7a:60:31:ec:f1:30:73: 77:77:a3:fe:a9:fc:d1:35:ee:c9:8d:89:15:54:6a:f4:06:9a: 50:3f:e8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddmPswXVj2BIUFhTI+CyseReOZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNjAxMzEyMDU3MjlaFw0yNjAyMDQwNzUyMjlaMDMxMTAvBgNV BAMTKDBFMEI5NjI5QkE1MDM5NzUxN0JENERERjlDNzc2RDQ4MzE5MEYyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1w8zoLo9A0geBHmoEVK1T7TcZ 7FTPTkZ1tmzJmK+SqrJWk3y1z0fPajz07Q0hnCxj4eLAU0YyjfsY/S3UDCge6dy5 +XCXF/5LTGHuXzER3hKcYC4cIrgALSgtOC1rUuXYJoAo75WxTJDNI5sF+74Qw04t Co69wuEJomEaHFe9cP9ptU3GipgXff3s+bsd1jWm/Cdlz+S7NU1YiMW6lal6iH4d NUQ6V7lP5p/mJGVZDkn0McMtpF1QR52DC8rYkrQRNxmxXW+EjNkyjPm2wb5HS/ay U3kY7QbkzYXCkakxcYmnZ5lAN8TSKttESmOfk5g8dYLxWmkzRHIJQEzSkyufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDguWKbpQOXUXvU3fnHdtSDGQ8jIwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAErbvaQufidjLFLXDZEV7+43b+9H95IjNAa IWiV0ml0euU108l4i31AmP0pxfWibZ4IzuzskJkohqRlFFEglAtkLB8F2QpmzqlB RADnUlXcNR3zyNeG9pBxEHTEDpm6DMaOqn0UcgvNtdKgURTEKHLzJKdPVCPoUFfD hIwFKFbIYaTHrETCY/JnXUAItAjQL8RbYM1BHy1nvhghdz4bAox5rgNV+pTPNKOo PAeIFqxxINJl78he83uKwtMZzAc/1KVa47EuEnFR7mTuqcMoOtyW9PI3Mbfy3eTs LPlx9GYCo8HYemAx7PEwc3d3o/6p/NE17smNiRVUavQGmlA/6Cg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:29 2026 by rpki-client