This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: hUhV45OYOIRj1Izq+NlA7IIdXNudit0p08zSuf0Piig= Subject key identifier: 1A:21:C5:09:57:1C:34:45:08:F7:39:3D:0E:87:E4:4B:C9:79:B6:F1 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 67667163A5B2AF842F79FEF1D9965BD5A8AEA61E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 0255 Signing time: Sun 01 Feb 2026 00:12:05 +0000 Manifest this update: Sun 01 Feb 2026 00:07:05 +0000 Manifest next update: Wed 04 Feb 2026 02:27:05 +0000 Files and hashes: 1: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: dEsOxE+GnuklDDCnoMFUhZBlDE7jdQ7bRfDwrsXIJNA=) 2: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 4: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:66:71:63:a5:b2:af:84:2f:79:fe:f1:d9:96:5b:d5:a8:ae:a6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Feb 1 00:07:05 2026 GMT Not After : Feb 4 02:27:05 2026 GMT Subject: CN=1A21C509571C344508F7393D0E87E44BC979B6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:51:77:cc:a3:35:0a:f0:da:97:af:15:aa: fc:87:0c:0e:a1:7b:49:34:e4:79:93:32:bb:94:0b: 60:4a:40:7d:9f:61:e1:d4:ba:f6:6e:85:6e:72:3a: 7d:38:c9:a7:28:93:1f:c0:e0:62:3b:e0:7d:91:26: 54:02:da:6b:f3:78:0c:63:1c:19:e0:2d:3a:92:02: 43:9d:7b:93:49:e3:d4:91:a6:a6:bb:96:61:23:db: 70:f8:92:fc:93:ac:fc:26:1e:da:6d:3d:90:c7:1a: ff:67:81:77:00:77:7c:10:80:81:54:58:ad:7f:d5: 80:9d:01:1f:01:ba:28:dd:ab:4b:da:19:98:09:29: 8b:74:64:50:b1:04:85:49:10:f4:49:71:a3:73:88: 94:bc:84:25:86:26:7d:31:fb:a0:a3:c1:ae:9e:ad: 1b:93:f6:2f:24:4a:50:ca:70:14:00:90:09:70:d5: f7:48:2f:1a:db:2e:a0:65:d4:6f:8a:ec:76:ed:04: 61:4d:37:bb:55:88:5c:58:71:5d:16:eb:63:36:f1: 50:8f:ff:02:44:23:62:5c:3c:c5:df:16:9a:98:1c: 08:35:bf:a0:b4:95:a0:68:e0:28:72:04:6e:23:da: c1:12:23:c2:c9:c2:b4:ff:97:7d:c8:81:df:44:0b: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:C5:09:57:1C:34:45:08:F7:39:3D:0E:87:E4:4B:C9:79:B6:F1 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:86:e6:c0:3c:8e:1f:e3:6c:9b:cf:2d:c7:85:6c:34:e4:4d: 38:e4:19:f2:1a:02:3a:12:c1:fd:c5:ed:40:87:34:d0:62:d3: 0d:a2:81:4f:1c:04:5f:fe:42:58:63:83:f5:69:93:b8:a6:ef: 29:f6:c2:bf:53:7f:8f:77:34:9b:14:b1:1c:bf:fd:f8:5b:1c: 3f:71:83:df:7e:45:83:a2:37:57:24:3c:fe:62:9c:e6:50:a2: f3:bc:02:ff:51:ed:1d:57:ed:47:54:df:e9:06:51:5a:87:0e: 7d:55:d0:7b:dc:70:8d:d8:5a:5f:fd:9d:a2:7c:8c:d8:99:74: 3c:99:cc:8a:69:fa:10:50:de:b7:cb:46:cf:c3:e3:d2:b0:9f: e7:8c:ff:3a:65:b2:30:46:e6:a5:64:09:99:95:5a:97:ee:ac: 3f:49:7a:42:69:66:52:04:f2:93:a4:d1:f0:8f:ae:0b:36:15: 74:e1:ab:cb:ee:1b:c1:59:f8:11:c4:95:9d:22:ef:d3:0d:07: 2e:e5:50:92:21:18:c8:08:08:09:c4:5e:97:ba:a7:1f:9a:39: 20:6a:6f:a6:f2:e4:80:09:a4:81:40:e6:3f:ac:84:21:e0:0a: 84:a0:47:e4:2f:da:10:cc:c4:9a:97:2e:f0:7e:01:bb:15:a8: 3a:84:99:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2ZxY6Wyr4Qvef7x2ZZb1aiuph4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNjAyMDEwMDA3MDVaFw0yNjAyMDQwMjI3MDVaMDMxMTAvBgNV BAMTKDFBMjFDNTA5NTcxQzM0NDUwOEY3MzkzRDBFODdFNDRCQzk3OUI2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNV1F3zKM1CvDal68VqvyHDA6h e0k05HmTMruUC2BKQH2fYeHUuvZuhW5yOn04yacokx/A4GI74H2RJlQC2mvzeAxj HBngLTqSAkOde5NJ49SRpqa7lmEj23D4kvyTrPwmHtptPZDHGv9ngXcAd3wQgIFU WK1/1YCdAR8Buijdq0vaGZgJKYt0ZFCxBIVJEPRJcaNziJS8hCWGJn0x+6Cjwa6e rRuT9i8kSlDKcBQAkAlw1fdILxrbLqBl1G+K7HbtBGFNN7tViFxYcV0W62M28VCP /wJEI2JcPMXfFpqYHAg1v6C0laBo4ChyBG4j2sESI8LJwrT/l33Igd9EC8KDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGiHFCVccNEUI9zk9DofkS8l5tvEwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeG5sA8jh/jbJvPLceFbDTkTTjkGfIaAjoS wf3F7UCHNNBi0w2igU8cBF/+Qlhjg/Vpk7im7yn2wr9Tf493NJsUsRy//fhbHD9x g99+RYOiN1ckPP5inOZQovO8Av9R7R1X7UdU3+kGUVqHDn1V0HvccI3YWl/9naJ8 jNiZdDyZzIpp+hBQ3rfLRs/D49Kwn+eM/zplsjBG5qVkCZmVWpfurD9JekJpZlIE 8pOk0fCPrgs2FXThq8vuG8FZ+BHElZ0i79MNBy7lUJIhGMgICAnEXpe6px+aOSBq b6by5IAJpIFA5j+shCHgCoSgR+Qv2hDMxJqXLvB+AbsVqDqEmUE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:15 2026 by rpki-client